GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration
Search

Find a vulnerability

Search criteria

    46 vulnerabilities found for Red Hat Quay 3.17 by Red Hat

    CVE-2026-15927 (GCVE-0-2026-15927)

    Vulnerability from nvd – Published: 2026-07-21 04:45 – Updated: 2026-09-09 22:05
    VLAI
    Title
    Quay: mirror-registry: ssrf: repo-level mirror accepts external_reference without url validation
    Summary
    A flaw was found in Red Hat Quay's repository-level mirror configuration feature. The POST and PUT handlers in endpoints/api/mirror.py accept an external_reference parameter without SSRF validation, unlike the organization-level mirror handlers which apply validate_external_registry_url(). A repository administrator can supply a crafted hostname that causes the Quay mirror worker to make requests via Skopeo to internal network services, cloud metadata endpoints, or other resources not intended to be reachable from the Quay application.
    SSVC
    Exploitation: none Automatable: no Technical Impact: partial
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-07-21 13:12 UTC
    CWE
    • CWE-918 - Server-Side Request Forgery (SSRF)
    References
    URL Tags
    https://access.redhat.com/errata/RHSA-2026:50931 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:52968 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:53520 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:54395 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:63307 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/security/cve/CVE-2026-15927 vdb-entryx_refsource_REDHAT
    https://bugzilla.redhat.com/show_bug.cgi?id=2501256 issue-trackingx_refsource_REDHAT
    Impacted products
    Vendor Product Version
    Red Hat Red Hat Quay 3.10 Unaffected: 1786395065 , < * (rpm)
        cpe:/a:redhat:quay:3.10::el8
    Create a notification for this product.
    Red Hat Red Hat Quay 3.12 Unaffected: 1786170635 , < * (rpm)
        cpe:/a:redhat:quay:3.12::el8
    Create a notification for this product.
    Red Hat Red Hat Quay 3.15 Unaffected: 1788191755 , < * (rpm)
        cpe:/a:redhat:quay:3.15::el8
    Create a notification for this product.
    Red Hat Red Hat Quay 3.17 Unaffected: 1786181981 , < * (rpm)
        cpe:/a:redhat:quay:3.17::el9
    Create a notification for this product.
    Red Hat Red Hat Quay 3.9 Unaffected: 1785950004 , < * (rpm)
        cpe:/a:redhat:quay:3.9::el8
    Create a notification for this product.
    Red Hat mirror registry for Red Hat OpenShift 2     cpe:/a:redhat:mirror_registry:2
    Create a notification for this product.
    Date Public
    2026-07-16 00:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-15927",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "partial"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-07-21T13:12:11.259508Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-07-21T14:55:42.159Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:quay:3.10::el8"
              ],
              "defaultStatus": "affected",
              "packageName": "quay/quay-rhel8",
              "product": "Red Hat Quay 3.10",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "1786395065",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:quay:3.12::el8"
              ],
              "defaultStatus": "affected",
              "packageName": "quay/quay-rhel8",
              "product": "Red Hat Quay 3.12",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "1786170635",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:quay:3.15::el8"
              ],
              "defaultStatus": "affected",
              "packageName": "quay/quay-rhel8",
              "product": "Red Hat Quay 3.15",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "1788191755",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:quay:3.17::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "quay/quay-rhel9",
              "product": "Red Hat Quay 3.17",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "1786181981",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:quay:3.9::el8"
              ],
              "defaultStatus": "affected",
              "packageName": "quay/quay-rhel8",
              "product": "Red Hat Quay 3.9",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "1785950004",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:mirror_registry:2"
              ],
              "defaultStatus": "affected",
              "packageName": "openshift/mirror-registry-rhel8",
              "product": "mirror registry for Red Hat OpenShift 2",
              "vendor": "Red Hat"
            }
          ],
          "credits": [
            {
              "lang": "en",
              "value": "This issue was discovered by Martin Brodeur and Shaon Hossain (Red Hat)."
            }
          ],
          "datePublic": "2026-07-16T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "A flaw was found in Red Hat Quay\u0027s repository-level mirror configuration\nfeature. The POST and PUT handlers in endpoints/api/mirror.py accept an\nexternal_reference parameter without SSRF validation, unlike the\norganization-level mirror handlers which apply validate_external_registry_url().\nA repository administrator can supply a crafted hostname that causes the Quay\nmirror worker to make requests via Skopeo to internal network services, cloud\nmetadata endpoints, or other resources not intended to be reachable from the\nQuay application."
            }
          ],
          "metrics": [
            {
              "other": {
                "content": {
                  "namespace": "https://access.redhat.com/security/updates/classification/",
                  "value": "Important"
                },
                "type": "Red Hat severity rating"
              }
            },
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "NONE",
                "baseScore": 6.8,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "NONE",
                "privilegesRequired": "HIGH",
                "scope": "CHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N",
                "version": "3.1"
              },
              "format": "CVSS"
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-918",
                  "description": "Server-Side Request Forgery (SSRF)",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-09-09T22:05:45.812Z",
            "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
            "shortName": "redhat"
          },
          "references": [
            {
              "name": "RHSA-2026:50931",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2026:50931"
            },
            {
              "name": "RHSA-2026:52968",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2026:52968"
            },
            {
              "name": "RHSA-2026:53520",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2026:53520"
            },
            {
              "name": "RHSA-2026:54395",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2026:54395"
            },
            {
              "name": "RHSA-2026:63307",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2026:63307"
            },
            {
              "tags": [
                "vdb-entry",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/security/cve/CVE-2026-15927"
            },
            {
              "name": "RHBZ#2501256",
              "tags": [
                "issue-tracking",
                "x_refsource_REDHAT"
              ],
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2501256"
            }
          ],
          "timeline": [
            {
              "lang": "en",
              "time": "2026-02-13T00:00:00.000Z",
              "value": "Reported to Red Hat."
            },
            {
              "lang": "en",
              "time": "2026-07-16T00:00:00.000Z",
              "value": "Made public."
            }
          ],
          "title": "Quay: mirror-registry: ssrf: repo-level mirror accepts external_reference without url validation",
          "workarounds": [
            {
              "lang": "en",
              "value": "Restrict network egress from Quay mirror worker pods/containers using network\npolicies or firewall rules to block access to internal network ranges\n(10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16) and cloud metadata endpoints\n(169.254.169.254, metadata.google.internal). Limit repository creation and\nadmin privileges to trusted users via Quay\u0027s RBAC configuration. If\nrepository-level mirroring is not required, disable the feature or restrict\naccess to the mirror API endpoints through a reverse proxy."
            }
          ],
          "x_generator": {
            "engine": "cvelib 1.8.0"
          },
          "x_redhatCweChain": "CWE-918: Server-Side Request Forgery (SSRF)"
        }
      },
      "cveMetadata": {
        "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "assignerShortName": "redhat",
        "cveId": "CVE-2026-15927",
        "datePublished": "2026-07-21T04:45:27.751Z",
        "dateReserved": "2026-07-16T06:31:41.405Z",
        "dateUpdated": "2026-09-09T22:05:45.812Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2026-39821 (GCVE-0-2026-39821)

    Vulnerability from nvd – Published: 2026-05-22 15:01 – Updated: 2026-09-10 12:05
    VLAI
    Title
    Invoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna
    Summary
    The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. For example, ToUnicode("xn--example-.com") incorrectly returns the name "example.com" rather than an error. This behavior can lead to privilege escalation in programs using the idna package. For example, a program which performs privilege checks on the ASCII hostname may reject "example.com" but permit "xn--example-.com". If that program subsequently converts the ASCII hostname to Unicode, it will inadvertently permits access to the Unicode name "example.com".
    SSVC
    Exploitation: none Automatable: no Technical Impact: total
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-05-23 03:55 UTC
    CWE
    • CWE-1289 - Improper Validation of Unsafe Equivalence in Input
    Assigner
    References
    URL Tags
    https://go.dev/cl/767220
    https://go.dev/issue/78760
    https://groups.google.com/g/golang-announce/c/iI-…
    https://groups.google.com/g/golang-announce/c/94p…
    https://pkg.go.dev/vuln/GO-2026-5026
    https://access.redhat.com/security/cve/CVE-2026-39821 vdb-entryx_refsource_REDHAT
    https://bugzilla.redhat.com/show_bug.cgi?id=2480756 issue-trackingx_refsource_REDHAT
    https://security.access.redhat.com/data/csaf/v2/v… x_sadp-csaf-vex
    https://access.redhat.com/errata/RHSA-2026:42079 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:42080 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:41019 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:54191 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:42078 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:54757 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:54580 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:34789 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:42082 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:36796 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:57845 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:62549 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:42150 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:42151 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:42240 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:49702 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:56143 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:59546 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:53413 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:63134 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:53374 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:51187 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:30855 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:46395 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:37436 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:35827 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:35826 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:65534 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:34357 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:39005 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:39573 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:38995 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:30853 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:35830 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:35831 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:66016 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:41930 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:61253 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:65359 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:61245 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:60354 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:57649 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:59549 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:53412 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:59562 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:60315 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:49712 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:51112 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:56223 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:52826 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:53415 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:57541 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:54401 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:30854 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:37435 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:35828 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:35829 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:65886 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:34359 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:65153 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:39879 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:54531 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:34342 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:36808 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:34364 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:56340 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:47952 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:50843 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:41030 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:44622 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:47149 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:53530 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:51033 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:43692 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:60387 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:30651 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:47737 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:26546 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:26547 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:36207 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:42132 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:42142 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:36651 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:40945 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:40118 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:33531 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:33524 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:23262 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:23264 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:54441 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:41928 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:50300 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:43038 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:42644 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:65126 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:60520 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:36648 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:41036 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:36820 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:35994 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:35993 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:33155 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:33160 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:33163 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:33173 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:33183 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:54287 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:54284 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:54286 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:54285 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:54274 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:54283 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:44624 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:56431 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:37387 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:41031 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:42146 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:43052 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:42796 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:41066 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:54395 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:40262 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:51341 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:51194 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:36797 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:42043 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:42047 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:42050 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:42051 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:42049 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:42048 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:42852 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:54435 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:57194 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:36105 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:36167 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:41055 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:47735 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:30650 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:36883 vendor-advisoryx_refsource_REDHAT
    Impacted products
    Vendor Product Version
    Go standard library net/http Affected: 0 , < 1.25.13 (semver)
    Affected: 1.26.0-0 , < 1.26.6 (semver)
    Affected: 1.27.0-0 , < 1.27.0-rc.3 (semver)
    Create a notification for this product.
    Go standard library net/http/internal/http2 Affected: 0 , < 1.25.13 (semver)
    Affected: 1.26.0-0 , < 1.26.6 (semver)
    Affected: 1.27.0-0 , < 1.27.0-rc.3 (semver)
    Create a notification for this product.
    golang.org/x/net golang.org/x/net/idna Affected: 0 , < 0.55.0 (semver)
    Create a notification for this product.
    Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 8 Unaffected: 0:1.6.6-1.el8ap , < * (rpm)
        cpe:/a:redhat:ansible_automation_platform:2.5::el8
    Create a notification for this product.
    Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 9 Unaffected: 0:1.6.6-1.el9ap , < * (rpm)
        cpe:/a:redhat:ansible_automation_platform:2.5::el9
    Create a notification for this product.
    Red Hat Red Hat Ansible Automation Platform 2.6 for RHEL 10 Unaffected: 0:1.6.6-1.el10ap , < * (rpm)
        cpe:/a:redhat:ansible_automation_platform:2.6::el10
    Create a notification for this product.
    Red Hat Red Hat Ansible Automation Platform 2.6 for RHEL 9 Unaffected: 0:1.6.6-1.el9ap , < * (rpm)
        cpe:/a:redhat:ansible_automation_platform:2.6::el9
    Create a notification for this product.
    Red Hat Red Hat Ansible Automation Platform 2.7 for RHEL 10 Unaffected: 0:1.6.6-1.el10ap , < * (rpm)
        cpe:/a:redhat:ansible_automation_platform:2.7::el10
    Create a notification for this product.
    Red Hat Red Hat Ansible Automation Platform 2.7 for RHEL 9 Unaffected: 0:1.6.6-1.el9ap , < * (rpm)
        cpe:/a:redhat:ansible_automation_platform:2.7::el9
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 10 Unaffected: 0:3.7.1-5.el10_2.5 , < * (rpm)
        cpe:/o:redhat:enterprise_linux:10.2
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 10 Unaffected: 0:0.152.1-1.el10_2 , < * (rpm)
        cpe:/o:redhat:enterprise_linux:10.2
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 10 Unaffected: 0:5.3.0-7.el10_2 , < * (rpm)
        cpe:/o:redhat:enterprise_linux:10.2
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 10 Unaffected: 0:10.2.6-27.el10_2 , < * (rpm)
        cpe:/o:redhat:enterprise_linux:10.2
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 10 Unaffected: 0:1.26.5-1.el10_2 , < * (rpm)
        cpe:/o:redhat:enterprise_linux:10.2
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 10 Unaffected: 1:0.3.8-6.el10_2 , < * (rpm)
        cpe:/o:redhat:enterprise_linux:10.2
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 10 Unaffected: 0:0.4.9.2-1.el10_2 , < * (rpm)
        cpe:/o:redhat:enterprise_linux:10.2
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 10 Unaffected: 0:1.0.1-2.el10_2.3 , < * (rpm)
        cpe:/o:redhat:enterprise_linux:10.2
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 10 Unaffected: 0:52.1-1.el10_2.2 , < * (rpm)
        cpe:/o:redhat:enterprise_linux:10.2
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 10.0 Extended Update Support Unaffected: 0:1.26.5-1.el10_0 , < * (rpm)
        cpe:/o:redhat:enterprise_linux_eus:10.0
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 10.0 Extended Update Support Unaffected: 0:0.4.7-5.el10_0 , < * (rpm)
        cpe:/o:redhat:enterprise_linux_eus:10.0
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 10.0 Extended Update Support Unaffected: 1:0.3.2-5.el10_0 , < * (rpm)
        cpe:/o:redhat:enterprise_linux_eus:10.0
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 10.0 Extended Update Support Unaffected: 0:0.152.1-1.el10_0 , < * (rpm)
        cpe:/o:redhat:enterprise_linux_eus:10.0
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 10.0 Extended Update Support Unaffected: 0:5.3.0-1.el10_0 , < * (rpm)
        cpe:/o:redhat:enterprise_linux_eus:10.0
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 10.0 Extended Update Support Unaffected: 0:2.21.0-2.el10_0.3 , < * (rpm)
        cpe:/o:redhat:enterprise_linux_eus:10.0
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 10.0 Extended Update Support Unaffected: 0:134.1-10.el10_0 , < * (rpm)
        cpe:/o:redhat:enterprise_linux_eus:10.0
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 7 Extended Lifecycle Support Unaffected: 0:0.11-1.el7_9 , < * (rpm)
        cpe:/o:redhat:rhel_els:7
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 8 Unaffected: 0:3.4.1-11.el8_10 , < * (rpm)
        cpe:/a:redhat:enterprise_linux:8
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 8 Unaffected: 0:9.2.10-31.el8_10 , < * (rpm)
        cpe:/a:redhat:enterprise_linux:8
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 8 Unaffected: 0:5.1.1-16.el8_10 , < * (rpm)
        cpe:/a:redhat:enterprise_linux:8
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 8 Unaffected: 8100020260710105056.a3795dee , < * (rpm)
        cpe:/a:redhat:enterprise_linux:8
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 8 Unaffected: 1:0.2.5-9.el8_10 , < * (rpm)
        cpe:/a:redhat:enterprise_linux:8
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 8 Unaffected: 0:101.5-2.el8_10 , < * (rpm)
        cpe:/a:redhat:enterprise_linux:8
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 9 Unaffected: 0:3.7.1-4.el9_8.1 , < * (rpm)
        cpe:/a:redhat:enterprise_linux:9
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 9 Unaffected: 0:0.152.1-1.el9_8 , < * (rpm)
        cpe:/a:redhat:enterprise_linux:9
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 9 Unaffected: 0:10.2.6-23.el9_8 , < * (rpm)
        cpe:/a:redhat:enterprise_linux:9
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 9 Unaffected: 0:5.1.1-17.el9_8 , < * (rpm)
        cpe:/a:redhat:enterprise_linux:9
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 9 Unaffected: 0:1.26.5-1.el9_8 , < * (rpm)
        cpe:/a:redhat:enterprise_linux:9
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 9 Unaffected: 1:0.2.7-8.el9_8 , < * (rpm)
        cpe:/a:redhat:enterprise_linux:9
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 9 Unaffected: 0:165.1-4.el9_8.1 , < * (rpm)
        cpe:/a:redhat:enterprise_linux:9
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 9 Unaffected: 0:52.1-1.el9_8.2 , < * (rpm)
        cpe:/a:redhat:enterprise_linux:9
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions Unaffected: 1:0.2.2-1.el9_2.4 , < * (rpm)
        cpe:/a:redhat:rhel_e4s:9.2
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions Unaffected: 0:76.1-7.el9_2 , < * (rpm)
        cpe:/a:redhat:rhel_e4s:9.2
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions Unaffected: 0:1.26.5-1.el9_2 , < * (rpm)
        cpe:/a:redhat:rhel_e4s:9.2
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions Unaffected: 0:2.15.0-2.el9_2.1 , < * (rpm)
        cpe:/a:redhat:rhel_e4s:9.2
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions Unaffected: 0:0.152.1-1.el9_4 , < * (rpm)
        cpe:/a:redhat:rhel_e4s:9.4
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions Unaffected: 0:1.26.5-1.el9_4 , < * (rpm)
        cpe:/a:redhat:rhel_e4s:9.4
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions Unaffected: 0:2.17.0-2.el9_4.1 , < * (rpm)
        cpe:/a:redhat:rhel_e4s:9.4
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions Unaffected: 0:101.3-4.el9_4.5 , < * (rpm)
        cpe:/a:redhat:rhel_e4s:9.4
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions Unaffected: 1:0.2.4-9.el9_4 , < * (rpm)
        cpe:/a:redhat:rhel_e4s:9.4
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 9.6 Extended Update Support Unaffected: 0:1.26.5-1.el9_6 , < * (rpm)
        cpe:/a:redhat:rhel_eus:9.6
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 9.6 Extended Update Support Unaffected: 0:10.2.6-22.el9_6 , < * (rpm)
        cpe:/a:redhat:rhel_eus:9.6
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 9.6 Extended Update Support Unaffected: 0:2.21.0-7.el9_6 , < * (rpm)
        cpe:/a:redhat:rhel_eus:9.6
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 9.6 Extended Update Support Unaffected: 0:0.152.1-1.el9_6 , < * (rpm)
        cpe:/a:redhat:rhel_eus:9.6
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 9.6 Extended Update Support Unaffected: 1:0.2.7-1.el9_6.5 , < * (rpm)
        cpe:/a:redhat:rhel_eus:9.6
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 9.6 Extended Update Support Unaffected: 0:5.1.1-15.el9_6 , < * (rpm)
        cpe:/a:redhat:rhel_eus:9.6
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 9.6 Extended Update Support Unaffected: 0:132.2-10.el9_6 , < * (rpm)
        cpe:/a:redhat:rhel_eus:9.6
    Create a notification for this product.
    Red Hat Red Hat OpenShift Container Platform 4.16 Unaffected: 0:4.16.69-202608202336.p0.g763478c.assembly.4.16.69.el9 , < * (rpm)
        cpe:/a:redhat:openshift:4.16::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Container Platform 4.16 Unaffected: 416.94.202609011112-0 , < * (rpm)
        cpe:/a:redhat:openshift:4.16::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Container Platform 4.20 Unaffected: 0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el8 , < * (rpm)
        cpe:/a:redhat:openshift:4.20::el8
    Create a notification for this product.
    Red Hat Red Hat OpenShift Container Platform 4.22 Unaffected: 0:4.22.0-202606291123.p2.ga17a3e3.assembly.stream.el8 , < * (rpm)
        cpe:/a:redhat:openshift:4.22::el8
    Create a notification for this product.
    Red Hat Red Hat OpenStack Platform 16.2 Unaffected: 0:3.3.23-22.el8ost , < * (rpm)
        cpe:/a:redhat:openstack:16.2::el8
    Create a notification for this product.
    Red Hat Red Hat Satellite 6.16 for RHEL 8 Unaffected: 0:0.0.4-1.el8sat , < * (rpm)
        cpe:/a:redhat:satellite:6.16::el8
    Create a notification for this product.
    Red Hat Red Hat Satellite 6.16 for RHEL 9 Unaffected: 0:0.0.4-1.el9sat , < * (rpm)
        cpe:/a:redhat:satellite:6.16::el9
    Create a notification for this product.
    Red Hat Red Hat Satellite 6.17 for RHEL 9 Unaffected: 0:0.0.4-1.el9sat , < * (rpm)
        cpe:/a:redhat:satellite:6.17::el9
    Create a notification for this product.
    Red Hat Red Hat Satellite 6.18 for RHEL 9 Unaffected: 0:0.0.4-1.el9sat , < * (rpm)
        cpe:/a:redhat:satellite:6.18::el9
    Create a notification for this product.
    Red Hat Red Hat Satellite 6.19 for RHEL 9 Unaffected: 0:0.0.4-1.el9sat , < * (rpm)
        cpe:/a:redhat:satellite:6.19::el9
    Create a notification for this product.
    Red Hat RHEM 1.0 for RHEL 9 Unaffected: 0:1.0.3-1.el9em , < * (rpm)
        cpe:/a:redhat:edge_manager:1.0::el9
    Create a notification for this product.
    Red Hat RHEM 1.1 for RHEL 10 Unaffected: 0:1.1.3-1.el10em , < * (rpm)
        cpe:/a:redhat:edge_manager:1.1::el10
    Create a notification for this product.
    Red Hat RHEM 1.1 for RHEL 9 Unaffected: 0:1.1.3-1.el9em , < * (rpm)
        cpe:/a:redhat:edge_manager:1.1::el9
    Create a notification for this product.
    Red Hat Streams for Apache Kafka 3.2.1 Unaffected: danielqsj-kafka_exporter , < * (rpm)
        cpe:/a:redhat:amq_streams:3.2::el9
    Create a notification for this product.
    Red Hat Cert Manager support for Red Hat OpenShift release 1.19 Unaffected: 1786613805 , < * (rpm)
        cpe:/a:redhat:cert_manager:1.19::el9
    Create a notification for this product.
    Red Hat Cluster Observability Operator 1.5.0 Unaffected: 1782840519 , < * (rpm)
        cpe:/a:redhat:cluster_observability_operator:1.5::el9
    Create a notification for this product.
    Red Hat Cluster Observability Operator 1.5.0 Unaffected: 1782839981 , < * (rpm)
        cpe:/a:redhat:cluster_observability_operator:1.5::el9
    Create a notification for this product.
    Red Hat Cluster Observability Operator 1.5.0 Unaffected: 1782839193 , < * (rpm)
        cpe:/a:redhat:cluster_observability_operator:1.5::el9
    Create a notification for this product.
    Red Hat Cluster Observability Operator 1.5.0 Unaffected: 1782838753 , < * (rpm)
        cpe:/a:redhat:cluster_observability_operator:1.5::el9
    Create a notification for this product.
    Red Hat Cluster Observability Operator 1.5.0 Unaffected: 1782839279 , < * (rpm)
        cpe:/a:redhat:cluster_observability_operator:1.5::el9
    Create a notification for this product.
    Red Hat Cluster Observability Operator 1.5.0 Unaffected: 1782840539 , < * (rpm)
        cpe:/a:redhat:cluster_observability_operator:1.5::el9
    Create a notification for this product.
    Red Hat Cluster Observability Operator 1.5.0 Unaffected: 1782844225 , < * (rpm)
        cpe:/a:redhat:cluster_observability_operator:1.5::el9
    Create a notification for this product.
    Red Hat Cluster Observability Operator 1.5.0 Unaffected: 1782839658 , < * (rpm)
        cpe:/a:redhat:cluster_observability_operator:1.5::el9
    Create a notification for this product.
    Red Hat Cluster Observability Operator 1.5.0 Unaffected: 1782838476 , < * (rpm)
        cpe:/a:redhat:cluster_observability_operator:1.5::el9
    Create a notification for this product.
    Red Hat DevWorkspace Operator 0.42 Unaffected: 1782401674 , < * (rpm)
        cpe:/a:redhat:devworkspace:0.42::el9
    Create a notification for this product.
    Red Hat Logging for Red Hat OpenShift 6 Unaffected: 1785418851 , < * (rpm)
        cpe:/a:redhat:logging:6.0::el9
    Create a notification for this product.
    Red Hat Logging for Red Hat OpenShift 6.2 Unaffected: 1784747813 , < * (rpm)
        cpe:/a:redhat:logging:6.2::el9
    Create a notification for this product.
    Red Hat Logging Subsystem for Red Hat OpenShift 6.4 Unaffected: 1782408807 , < * (rpm)
        cpe:/a:redhat:logging:6.4::el9
    Create a notification for this product.
    Red Hat Logging Subsystem for Red Hat OpenShift 6.5 Unaffected: 1786645107 , < * (rpm)
        cpe:/a:redhat:logging:6.5::el9
    Create a notification for this product.
    Red Hat multicluster engine for Kubernetes 2.11 Unaffected: 1786912006 , < * (rpm)
        cpe:/a:redhat:multicluster_engine:2.11::el9
    Create a notification for this product.
    Red Hat multicluster engine for Kubernetes 2.6 Unaffected: 1783332008 , < * (rpm)
        cpe:/a:redhat:multicluster_engine:2.6::el8
    Create a notification for this product.
    Red Hat multicluster engine for Kubernetes 2.6 Unaffected: 1783333268 , < * (rpm)
        cpe:/a:redhat:multicluster_engine:2.6::el9
    Create a notification for this product.
    Red Hat multicluster engine for Kubernetes 2.6 Unaffected: 1783985999 , < * (rpm)
        cpe:/a:redhat:multicluster_engine:2.6::el9
    Create a notification for this product.
    Red Hat multicluster engine for Kubernetes 2.8 Unaffected: 1782477094 , < * (rpm)
        cpe:/a:redhat:multicluster_engine:2.8::el9
    Create a notification for this product.
    Red Hat multicluster engine for Kubernetes 2.8 Unaffected: 1782308518 , < * (rpm)
        cpe:/a:redhat:multicluster_engine:2.8::el9
    Create a notification for this product.
    Red Hat multicluster engine for Kubernetes 2.8 Unaffected: 1784737366 , < * (rpm)
        cpe:/a:redhat:multicluster_engine:2.8::el9
    Create a notification for this product.
    Red Hat multicluster engine for Kubernetes 2.8 Unaffected: 1784306906 , < * (rpm)
        cpe:/a:redhat:multicluster_engine:2.8::el9
    Create a notification for this product.
    Red Hat multicluster engine for Kubernetes 2.9 Unaffected: 1783260894 , < * (rpm)
        cpe:/a:redhat:multicluster_engine:2.9::el9
    Create a notification for this product.
    Red Hat Multicluster Global Hub 1.4.5 Unaffected: 1784061472 , < * (rpm)
        cpe:/a:redhat:multicluster_globalhub:1.4::el9
    Create a notification for this product.
    Red Hat Multicluster Global Hub 1.6.5 Unaffected: 1784152046 , < * (rpm)
        cpe:/a:redhat:multicluster_globalhub:1.6::el9
    Create a notification for this product.
    Red Hat Multicluster Global Hub 1.7.0 Unaffected: 1784768332 , < * (rpm)
    Unaffected: 1785775948 , < * (rpm)
        cpe:/a:redhat:multicluster_globalhub:1.7::el9
    Create a notification for this product.
    Red Hat OpenShift API for Data Protection 1.3 Unaffected: 1785180878 , < * (rpm)
        cpe:/a:redhat:openshift_api_data_protection:1.3::el9
    Create a notification for this product.
    Red Hat OpenShift API for Data Protection 1.6 Unaffected: 1784058822 , < * (rpm)
        cpe:/a:redhat:openshift_api_data_protection:1.6::el9
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.11 Unaffected: 1787685239 , < * (rpm)
        cpe:/a:redhat:acm:2.11::el9
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.13 Unaffected: 1782383730 , < * (rpm)
        cpe:/a:redhat:acm:2.13::el9
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.13 Unaffected: 1782156698 , < * (rpm)
        cpe:/a:redhat:acm:2.13::el9
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.13 Unaffected: 1782157632 , < * (rpm)
        cpe:/a:redhat:acm:2.13::el9
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.13 Unaffected: 1782157829 , < * (rpm)
        cpe:/a:redhat:acm:2.13::el9
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.13 Unaffected: 1782157630 , < * (rpm)
        cpe:/a:redhat:acm:2.13::el9
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.13 Unaffected: 1782382580 , < * (rpm)
        cpe:/a:redhat:acm:2.13::el9
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.13 Unaffected: 1782383255 , < * (rpm)
        cpe:/a:redhat:acm:2.13::el9
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.13 Unaffected: 1782488873 , < * (rpm)
        cpe:/a:redhat:acm:2.13::el9
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.13 Unaffected: 1782157507 , < * (rpm)
        cpe:/a:redhat:acm:2.13::el9
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.13 Unaffected: 1782396604 , < * (rpm)
        cpe:/a:redhat:acm:2.13::el9
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.13 Unaffected: 1782382711 , < * (rpm)
        cpe:/a:redhat:acm:2.13::el9
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.13 Unaffected: 1782157546 , < * (rpm)
        cpe:/a:redhat:acm:2.13::el9
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.13 Unaffected: 1782157471 , < * (rpm)
        cpe:/a:redhat:acm:2.13::el9
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.13 Unaffected: 1782157018 , < * (rpm)
        cpe:/a:redhat:acm:2.13::el9
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.13 Unaffected: 1782156920 , < * (rpm)
        cpe:/a:redhat:acm:2.13::el9
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.13 Unaffected: 1782374537 , < * (rpm)
        cpe:/a:redhat:acm:2.13::el9
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.13 Unaffected: 1782383676 , < * (rpm)
        cpe:/a:redhat:acm:2.13::el9
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.13 Unaffected: 1782156860 , < * (rpm)
        cpe:/a:redhat:acm:2.13::el9
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.13 Unaffected: 1782465412 , < * (rpm)
        cpe:/a:redhat:acm:2.13::el9
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.13 Unaffected: 1784652040 , < * (rpm)
        cpe:/a:redhat:acm:2.13::el9
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.13 Unaffected: 1784638644 , < * (rpm)
        cpe:/a:redhat:acm:2.13::el9
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.13 Unaffected: 1784740143 , < * (rpm)
        cpe:/a:redhat:acm:2.13::el9
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Security 4.9 Unaffected: 1781686446 , < * (rpm)
        cpe:/a:redhat:advanced_cluster_security:4.9::el8
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Security for Kubernetes 4.10 Unaffected: 1781686458 , < * (rpm)
        cpe:/a:redhat:advanced_cluster_security:4.10::el8
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Security for Kubernetes 4.11 Unaffected: 1783352589 , < * (rpm)
        cpe:/a:redhat:advanced_cluster_security:4.11::el9
    Create a notification for this product.
    Red Hat Red Hat Ansible Automation Platform 2.6 Unaffected: 1783962464 , < * (rpm)
        cpe:/a:redhat:ansible_automation_platform:2.6::el9
    Create a notification for this product.
    Red Hat Red Hat Ansible Automation Platform 2.7 Unaffected: 1783917963 , < * (rpm)
        cpe:/a:redhat:ansible_automation_platform:2.7::el9
    Create a notification for this product.
    Red Hat Red Hat Edge Manager 1.0 Unaffected: 1783502438 , < * (rpm)
        cpe:/a:redhat:edge_manager:1.0::el9
    Create a notification for this product.
    Red Hat Red Hat Edge Manager 1.1 Unaffected: 1784194574 , < * (rpm)
        cpe:/a:redhat:edge_manager:1.1::el10
    Create a notification for this product.
    Red Hat Red Hat Edge Manager 1.1 Unaffected: 1784127736 , < * (rpm)
        cpe:/a:redhat:edge_manager:1.1::el9
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux AI 3.4 Unaffected: 1782804957 , < * (rpm)
        cpe:/a:redhat:enterprise_linux_ai:3.4::el9
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux AI 3.4 Unaffected: 1782758407 , < * (rpm)
        cpe:/a:redhat:enterprise_linux_ai:3.4::el9
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux AI 3.4 Unaffected: 1782758410 , < * (rpm)
        cpe:/a:redhat:enterprise_linux_ai:3.4::el9
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux AI 3.4 Unaffected: 1782754093 , < * (rpm)
        cpe:/a:redhat:enterprise_linux_ai:3.4::el9
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux AI 3.4 Unaffected: 1782744816 , < * (rpm)
        cpe:/a:redhat:enterprise_linux_ai:3.4::el9
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux AI 3.4 Unaffected: 1782758409 , < * (rpm)
        cpe:/a:redhat:enterprise_linux_ai:3.4::el9
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux AI 3.4 Unaffected: 1782744830 , < * (rpm)
        cpe:/a:redhat:enterprise_linux_ai:3.4::el9
    Create a notification for this product.
    Red Hat Red Hat Hardened Images Unaffected: 1.25.11-2.hum1 , < * (rpm)
        cpe:/a:redhat:hummingbird:1
    Create a notification for this product.
    Red Hat Red Hat Hardened Images Unaffected: 1.26.4-2.hum1 , < * (rpm)
        cpe:/a:redhat:hummingbird:1
    Create a notification for this product.
    Red Hat Red Hat Lightspeed (formerly Insights) for Runtimes 1.0 Unaffected: 1786483782 , < * (rpm)
        cpe:/a:redhat:lightspeed_for_runtimes:1.0::el9
    Create a notification for this product.
    Red Hat Red Hat Migration Toolkit 1.8 Unaffected: 1783953372 , < * (rpm)
        cpe:/a:redhat:rhmt:1.8::el8
    Create a notification for this product.
    Red Hat Red Hat Migration Toolkit for Applications 8.1 Unaffected: 1785171639 , < * (rpm)
        cpe:/a:redhat:migration_toolkit_applications:8.1::el9
    Create a notification for this product.
    Red Hat Red Hat Migration Toolkit for Applications 8.2 Unaffected: 1784211378 , < * (rpm)
        cpe:/a:redhat:migration_toolkit_applications:8.2::el9
    Create a notification for this product.
    Red Hat Red Hat multicluster global hub 1.5.3 Unaffected: 1784127491 , < * (rpm)
        cpe:/a:redhat:multicluster_globalhub:1.5::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 2.25 Unaffected: 1783544461 , < * (rpm)
        cpe:/a:redhat:openshift_ai:2.25::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 2.25 Unaffected: 1784004914 , < * (rpm)
        cpe:/a:redhat:openshift_ai:2.25::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 2.25 Unaffected: 1783946386 , < * (rpm)
        cpe:/a:redhat:openshift_ai:2.25::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 2.25 Unaffected: 1788312157 , < * (rpm)
        cpe:/a:redhat:openshift_ai:2.25::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 2.25 Unaffected: 1787330073 , < * (rpm)
        cpe:/a:redhat:openshift_ai:2.25::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 3.4 Unaffected: 1787051722 , < * (rpm)
        cpe:/a:redhat:openshift_ai:3.4::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 3.4 Unaffected: 1787102977 , < * (rpm)
        cpe:/a:redhat:openshift_ai:3.4::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 3.4 Unaffected: 1786630755 , < * (rpm)
        cpe:/a:redhat:openshift_ai:3.4::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 3.4 Unaffected: 1786630724 , < * (rpm)
        cpe:/a:redhat:openshift_ai:3.4::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 3.4 Unaffected: 1786630124 , < * (rpm)
        cpe:/a:redhat:openshift_ai:3.4::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 3.4 Unaffected: 1786611780 , < * (rpm)
        cpe:/a:redhat:openshift_ai:3.4::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 3.4 Unaffected: 1786612055 , < * (rpm)
        cpe:/a:redhat:openshift_ai:3.4::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 3.4 Unaffected: 1787153683 , < * (rpm)
        cpe:/a:redhat:openshift_ai:3.4::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 3.4 Unaffected: 1787088234 , < * (rpm)
        cpe:/a:redhat:openshift_ai:3.4::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 3.4 Unaffected: 1787250508 , < * (rpm)
        cpe:/a:redhat:openshift_ai:3.4::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 3.4 Unaffected: 1787251550 , < * (rpm)
        cpe:/a:redhat:openshift_ai:3.4::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 3.4 Unaffected: 1786611759 , < * (rpm)
        cpe:/a:redhat:openshift_ai:3.4::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 3.4 Unaffected: 1787251250 , < * (rpm)
        cpe:/a:redhat:openshift_ai:3.4::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 3.4 Unaffected: 1786612219 , < * (rpm)
        cpe:/a:redhat:openshift_ai:3.4::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 3.4 Unaffected: 1787250617 , < * (rpm)
        cpe:/a:redhat:openshift_ai:3.4::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 3.4 Unaffected: 1787090180 , < * (rpm)
        cpe:/a:redhat:openshift_ai:3.4::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 3.4 Unaffected: 1787089049 , < * (rpm)
        cpe:/a:redhat:openshift_ai:3.4::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 3.4 Unaffected: 1787361677 , < * (rpm)
        cpe:/a:redhat:openshift_ai:3.4::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Builds 1.7.3 Unaffected: 1783057515 , < * (rpm)
        cpe:/a:redhat:openshift_builds:1.7::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Builds 1.7.3 Unaffected: 1783057868 , < * (rpm)
        cpe:/a:redhat:openshift_builds:1.7::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Builds 1.8.1 Unaffected: 1784121108 , < * (rpm)
        cpe:/a:redhat:openshift_builds:1.8::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Builds 1.8.1 Unaffected: 1783612119 , < * (rpm)
        cpe:/a:redhat:openshift_builds:1.8::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.18 Unaffected: 1786705347 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.18::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.18 Unaffected: 1786706101 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.18::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.18 Unaffected: 1786705558 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.18::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.18 Unaffected: 1786705646 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.18::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.18 Unaffected: 1786706138 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.18::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.18 Unaffected: 1786705741 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.18::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.18 Unaffected: 1786705777 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.18::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.18 Unaffected: 1786705802 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.18::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.18 Unaffected: 1786705938 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.18::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.18 Unaffected: 1786706577 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.18::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.18 Unaffected: 1786706125 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.18::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.18 Unaffected: 1786706177 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.18::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.18 Unaffected: 1786706188 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.18::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.18 Unaffected: 1786706679 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.18::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.18 Unaffected: 1786706357 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.18::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.18 Unaffected: 1786706612 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.18::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.18 Unaffected: 1786706644 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.18::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.18 Unaffected: 1786706659 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.18::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.18 Unaffected: 1786706880 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.18::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.22 Unaffected: 1782932114 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.22::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.22 Unaffected: 1782931768 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.22::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.22 Unaffected: 1782932104 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.22::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.22 Unaffected: 1783536000 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.22::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.22 Unaffected: 1783535989 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.22::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.22 Unaffected: 1783536515 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.22::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.22 Unaffected: 1782932521 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.22::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.22 Unaffected: 1783018461 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.22::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.22 Unaffected: 1783018421 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.22::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.22 Unaffected: 1782932812 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.22::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.22 Unaffected: 1783537001 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.22::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.22 Unaffected: 1782932919 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.22::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.22 Unaffected: 1783537586 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.22::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.22 Unaffected: 1782932969 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.22::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.22 Unaffected: 1782933015 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.22::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.22 Unaffected: 1782933042 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.22::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.22 Unaffected: 1783537392 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.22::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.22 Unaffected: 1782933235 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.22::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.22 Unaffected: 1782933251 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.22::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.22 Unaffected: 1783537955 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.22::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.22 Unaffected: 1782933417 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.22::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.22 Unaffected: 1783537742 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.22::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.22 Unaffected: 1782933602 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.22::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.22 Unaffected: 1783019377 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.22::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.22 Unaffected: 1782934054 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.22::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.22 Unaffected: 1782934036 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.22::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.22 Unaffected: 1782934284 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.22::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Dev Spaces 3.29 Unaffected: 1782991491 , < * (rpm)
        cpe:/a:redhat:openshift_devspaces:3.29::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift distributed tracing 3.10.2 Unaffected: 1784775772 , < * (rpm)
        cpe:/a:redhat:openshift_distributed_tracing:3.10::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift distributed tracing 3.10.2 Unaffected: 1784775770 , < * (rpm)
        cpe:/a:redhat:openshift_distributed_tracing:3.10::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift distributed tracing 3.10.2 Unaffected: 1784775834 , < * (rpm)
        cpe:/a:redhat:openshift_distributed_tracing:3.10::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift distributed tracing 3.10.2 Unaffected: 1784777166 , < * (rpm)
        cpe:/a:redhat:openshift_distributed_tracing:3.10::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift distributed tracing 3.10.2 Unaffected: 1784775793 , < * (rpm)
        cpe:/a:redhat:openshift_distributed_tracing:3.10::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift distributed tracing 3.10.2 Unaffected: 1784775768 , < * (rpm)
        cpe:/a:redhat:openshift_distributed_tracing:3.10::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift distributed tracing 3.10.2 Unaffected: 1784775782 , < * (rpm)
        cpe:/a:redhat:openshift_distributed_tracing:3.10::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift GitOps 1.19 Unaffected: 1782292352 , < * (rpm)
        cpe:/a:redhat:openshift_gitops:1.19::el8
    Create a notification for this product.
    Red Hat Red Hat OpenShift GitOps 1.20 Unaffected: 1782383826 , < * (rpm)
        cpe:/a:redhat:openshift_gitops:1.20::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 2.6 Unaffected: 1782287580 , < * (rpm)
        cpe:/a:redhat:service_mesh:2.6::el8
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 3.0 Unaffected: 1782201833 , < * (rpm)
        cpe:/a:redhat:service_mesh:3.0::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 3.1 Unaffected: 1782201537 , < * (rpm)
        cpe:/a:redhat:service_mesh:3.1::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 3.2 Unaffected: 1782201812 , < * (rpm)
        cpe:/a:redhat:service_mesh:3.2::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 3.3 Unaffected: 1782201466 , < * (rpm)
        cpe:/a:redhat:service_mesh:3.3::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Workload Availability 0.12 Unaffected: 1785202723 , < * (rpm)
        cpe:/a:redhat:workload_availability_nhc:0.12::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Workload Availability 0.13 Unaffected: 1785203036 , < * (rpm)
        cpe:/a:redhat:workload_availability_snr:0.13::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Workload Availability 0.3 Unaffected: 1785203474 , < * (rpm)
        cpe:/a:redhat:workload_availability_sbr:0.3::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Workload Availability 0.7 Unaffected: 1785203508 , < * (rpm)
        cpe:/a:redhat:workload_availability_mdr:0.7::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Workload Availability 0.8 Unaffected: 1785203079 , < * (rpm)
        cpe:/a:redhat:workload_availability_far:0.8::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Workload Availability 5.7 Unaffected: 1785202847 , < * (rpm)
        cpe:/a:redhat:workload_availability_nmo:5.7::el9
    Create a notification for this product.
    Red Hat Red Hat Quay 3.10 Unaffected: 1783750447 , < * (rpm)
        cpe:/a:redhat:quay:3.10::el8
    Create a notification for this product.
    Red Hat Red Hat Quay 3.12 Unaffected: 1783751865 , < * (rpm)
    Unaffected: 1784353904 , < * (rpm)
        cpe:/a:redhat:quay:3.12::el8
    Create a notification for this product.
    Red Hat Red Hat Quay 3.15 Unaffected: 1784351966 , < * (rpm)
        cpe:/a:redhat:quay:3.15::el8
    Create a notification for this product.
    Red Hat Red Hat Quay 3.16 Unaffected: 1783955846 , < * (rpm)
        cpe:/a:redhat:quay:3.16::el9
    Create a notification for this product.
    Red Hat Red Hat Quay 3.17 Unaffected: 1786181981 , < * (rpm)
        cpe:/a:redhat:quay:3.17::el9
    Create a notification for this product.
    Red Hat Red Hat Quay 3.9 Unaffected: 1784125838 , < * (rpm)
        cpe:/a:redhat:quay:3.9::el8
    Create a notification for this product.
    Red Hat Red Hat Satellite 6.18 Unaffected: 1785923308 , < * (rpm)
        cpe:/a:redhat:satellite:6.18::el9
    Create a notification for this product.
    Red Hat Red Hat Satellite 6.19 Unaffected: 1785929994 , < * (rpm)
        cpe:/a:redhat:satellite:6.19::el9
    Create a notification for this product.
    Red Hat Red Hat Trusted Artifact Signer 1.4 Unaffected: 4-1.4.2 , < * (rpm)
    Unaffected: 4-1.4.3 , < * (rpm)
        cpe:/a:redhat:trusted_artifact_signer:1.4::el9
    Create a notification for this product.
    Red Hat Red Hat Web Terminal 1.11 Unaffected: 1784296203 , < * (rpm)
        cpe:/a:redhat:webterminal:1.11::el9
    Create a notification for this product.
    Red Hat Red Hat Web Terminal 1.12 Unaffected: 1784247610 , < * (rpm)
        cpe:/a:redhat:webterminal:1.12::el9
    Create a notification for this product.
    Red Hat Red Hat Web Terminal 1.13 Unaffected: 1784296127 , < * (rpm)
        cpe:/a:redhat:webterminal:1.13::el9
    Create a notification for this product.
    Red Hat Red Hat Web Terminal 1.14 Unaffected: 1784296114 , < * (rpm)
        cpe:/a:redhat:webterminal:1.14::el9
    Create a notification for this product.
    Red Hat Red Hat Web Terminal 1.15 Unaffected: 1784296033 , < * (rpm)
        cpe:/a:redhat:webterminal:1.15::el9
    Create a notification for this product.
    Red Hat Red Hat Web Terminal 1.16 Unaffected: 1784295767 , < * (rpm)
        cpe:/a:redhat:webterminal:1.16::el9
    Create a notification for this product.
    Red Hat Assisted Installer for Red Hat OpenShift Container Platform 2     cpe:/a:redhat:assisted_installer:2
    Create a notification for this product.
    Red Hat Compliance Operator     cpe:/a:redhat:openshift_compliance_operator:1
    Create a notification for this product.
    Red Hat Confidential Compute Attestation     cpe:/a:redhat:confidential_compute_attestation:1
    Create a notification for this product.
    Red Hat Cryostat 4     cpe:/a:redhat:cryostat:4
    Create a notification for this product.
    Red Hat Deployment Validation Operator     cpe:/a:redhat:deployment_validator_operator
    Create a notification for this product.
    Red Hat ExternalDNS Operator     cpe:/a:redhat:ext_dns_optr:1
    Create a notification for this product.
    Red Hat External Secrets Operator for Red Hat OpenShift     cpe:/a:redhat:external_secrets_operator:1
    Create a notification for this product.
    Red Hat Fence Agents Remediation Operator     cpe:/a:redhat:workload_availability_far:0
    Create a notification for this product.
    Red Hat File Integrity Operator     cpe:/a:redhat:openshift_file_integrity_operator:1
    Create a notification for this product.
    Red Hat Gatekeeper 3     cpe:/a:redhat:gatekeeper:3
    Create a notification for this product.
    Red Hat Logical Volume Manager Storage     cpe:/a:redhat:lvms:4
        cpe:/a:redhat:lvms:5
    Create a notification for this product.
    Red Hat Logical Volume Manager Storage     cpe:/a:redhat:lvms:4
    Create a notification for this product.
    Red Hat Machine Deletion Remediation Operator     cpe:/a:redhat:workload_availability_mdr:0
    Create a notification for this product.
    Red Hat Multiarch Tuning Operator     cpe:/a:redhat:multiarch_tuning_operator
    Create a notification for this product.
    Red Hat Multicluster Engine for Kubernetes     cpe:/a:redhat:multicluster_engine
    Create a notification for this product.
    Red Hat Network Observability Operator     cpe:/a:redhat:network_observ_optr:1
    Create a notification for this product.
    Red Hat Node HealthCheck Operator     cpe:/a:redhat:workload_availability_nhc:0
    Create a notification for this product.
    Red Hat OpenShift API for Data Protection     cpe:/a:redhat:openshift_api_data_protection:1
    Create a notification for this product.
    Red Hat OpenShift Developer Tools and Services     cpe:/a:redhat:ocp_tools
    Create a notification for this product.
    Red Hat OpenShift Lightspeed     cpe:/a:redhat:openshift_lightspeed
    Create a notification for this product.
    Red Hat OpenShift Pipelines     cpe:/a:redhat:openshift_pipelines:1
    Create a notification for this product.
    Red Hat OpenShift Serverless     cpe:/a:redhat:serverless:1
    Create a notification for this product.
    Red Hat Power monitoring for Red Hat OpenShift     cpe:/a:redhat:openshift_power_monitoring
    Create a notification for this product.
    Red Hat Red Hat 3scale API Management Platform 2     cpe:/a:redhat:red_hat_3scale_amp:2
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Management for Kubernetes 2     cpe:/a:redhat:acm:2
    Create a notification for this product.
    Red Hat Red Hat Ansible Automation Platform 2     cpe:/a:redhat:ansible_automation_platform:2
    Create a notification for this product.
    Red Hat Red Hat Ceph Storage 5     cpe:/a:redhat:ceph_storage:5
    Create a notification for this product.
    Red Hat Red Hat Ceph Storage 6     cpe:/a:redhat:ceph_storage:6
    Create a notification for this product.
    Red Hat Red Hat Ceph Storage 8     cpe:/a:redhat:ceph_storage:8
    Create a notification for this product.
    Red Hat Red Hat Ceph Storage 9     cpe:/a:redhat:ceph_storage:9
    Create a notification for this product.
    Red Hat Red Hat Certification Program for Red Hat Enterprise Linux 9     cpe:/a:redhat:certifications:9
    Create a notification for this product.
    Red Hat Red Hat Connectivity Link 1     cpe:/a:redhat:connectivity_link:1
    Create a notification for this product.
    Red Hat Red Hat Developer Hub     cpe:/a:redhat:rhdh:1
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 10     cpe:/o:redhat:enterprise_linux:10
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 7     cpe:/o:redhat:enterprise_linux:7
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 8     cpe:/o:redhat:enterprise_linux:8
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 9     cpe:/o:redhat:enterprise_linux:9
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux AI (RHEL AI) 3     cpe:/a:redhat:enterprise_linux_ai:3
    Create a notification for this product.
    Red Hat Red Hat Hardened Images     cpe:/a:redhat:hummingbird:1
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI (RHOAI)     cpe:/a:redhat:openshift_ai
    Create a notification for this product.
    Red Hat Red Hat OpenShift Cluster Manager CLI     cpe:/a:redhat:openshift_cluster_manager_cli:1
    Create a notification for this product.
    Red Hat Red Hat OpenShift Container Platform 4     cpe:/a:redhat:openshift:4
    Create a notification for this product.
    Red Hat Red Hat OpenShift distributed tracing 3     cpe:/a:redhat:openshift_distributed_tracing:3
    Create a notification for this product.
    Red Hat Red Hat OpenShift for Windows Containers     cpe:/a:redhat:windows_machine_config
    Create a notification for this product.
    Red Hat Red Hat OpenShift on AWS     cpe:/a:redhat:openshift_service_on_aws:1
    Create a notification for this product.
    Red Hat Red Hat OpenShift Virtualization 4     cpe:/a:redhat:container_native_virtualization:4
    Create a notification for this product.
    Red Hat Red Hat OpenStack Platform 16.2     cpe:/a:redhat:openstack:16.2
    Create a notification for this product.
    Red Hat Red Hat OpenStack Platform 17.1     cpe:/a:redhat:openstack:17.1
    Create a notification for this product.
    Red Hat Red Hat OpenStack Platform 18.0     cpe:/a:redhat:openstack:18.0
    Create a notification for this product.
    Red Hat Red Hat Satellite 6     cpe:/a:redhat:satellite:6
    Create a notification for this product.
    Red Hat Red Hat Service Interconnect 1     cpe:/a:redhat:service_interconnect:1
    Create a notification for this product.
    Red Hat Red Hat Service Interconnect 2     cpe:/a:redhat:service_interconnect:2
    Create a notification for this product.
    Red Hat Security Profiles Operator     cpe:/a:redhat:openshift_security_profiles_operator:1
    Create a notification for this product.
    Red Hat Zero Trust Workload Identity Manager     cpe:/a:redhat:zero_trust_workload_identity_manager:1
    Create a notification for this product.
    Red Hat Zero Trust Workload Identity Manager - Tech Preview     cpe:/a:redhat:zero_trust_workload_identity_manager:0
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "cvssV3_1": {
                  "attackComplexity": "LOW",
                  "attackVector": "NETWORK",
                  "availabilityImpact": "NONE",
                  "baseScore": 9.6,
                  "baseSeverity": "CRITICAL",
                  "confidentialityImpact": "HIGH",
                  "integrityImpact": "HIGH",
                  "privilegesRequired": "LOW",
                  "scope": "CHANGED",
                  "userInteraction": "NONE",
                  "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N",
                  "version": "3.1"
                }
              },
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-39821",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "total"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-05-23T03:55:58.522682Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "problemTypes": [
              {
                "descriptions": [
                  {
                    "cweId": "CWE-1289",
                    "description": "CWE-1289 Improper Validation of Unsafe Equivalence in Input",
                    "lang": "en",
                    "type": "CWE"
                  }
                ]
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-05-27T13:13:15.606Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          },
          {
            "affected": [
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2.5::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "receptor",
                "product": "Red Hat Ansible Automation Platform 2.5 for RHEL 8",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:1.6.6-1.el8ap",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2.5::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "receptor",
                "product": "Red Hat Ansible Automation Platform 2.5 for RHEL 9",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:1.6.6-1.el9ap",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2.6::el10"
                ],
                "defaultStatus": "affected",
                "packageName": "receptor",
                "product": "Red Hat Ansible Automation Platform 2.6 for RHEL 10",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:1.6.6-1.el10ap",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2.6::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "receptor",
                "product": "Red Hat Ansible Automation Platform 2.6 for RHEL 9",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:1.6.6-1.el9ap",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2.7::el10"
                ],
                "defaultStatus": "affected",
                "packageName": "receptor",
                "product": "Red Hat Ansible Automation Platform 2.7 for RHEL 10",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:1.6.6-1.el10ap",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2.7::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "receptor",
                "product": "Red Hat Ansible Automation Platform 2.7 for RHEL 9",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:1.6.6-1.el9ap",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:10.2"
                ],
                "defaultStatus": "affected",
                "packageName": "git-lfs",
                "product": "Red Hat Enterprise Linux 10",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:3.7.1-5.el10_2.5",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:10.2"
                ],
                "defaultStatus": "affected",
                "packageName": "opentelemetry-collector",
                "product": "Red Hat Enterprise Linux 10",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:0.152.1-1.el10_2",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:10.2"
                ],
                "defaultStatus": "affected",
                "packageName": "grafana-pcp",
                "product": "Red Hat Enterprise Linux 10",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:5.3.0-7.el10_2",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:10.2"
                ],
                "defaultStatus": "affected",
                "packageName": "grafana",
                "product": "Red Hat Enterprise Linux 10",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:10.2.6-27.el10_2",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:10.2"
                ],
                "defaultStatus": "affected",
                "packageName": "golang",
                "product": "Red Hat Enterprise Linux 10",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:1.26.5-1.el10_2",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:10.2"
                ],
                "defaultStatus": "affected",
                "packageName": "rhc",
                "product": "Red Hat Enterprise Linux 10",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1:0.3.8-6.el10_2",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:10.2"
                ],
                "defaultStatus": "affected",
                "packageName": "yggdrasil",
                "product": "Red Hat Enterprise Linux 10",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:0.4.9.2-1.el10_2",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:10.2"
                ],
                "defaultStatus": "affected",
                "packageName": "go-fdo-server",
                "product": "Red Hat Enterprise Linux 10",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:1.0.1-2.el10_2.3",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:10.2"
                ],
                "defaultStatus": "affected",
                "packageName": "image-builder",
                "product": "Red Hat Enterprise Linux 10",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:52.1-1.el10_2.2",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux_eus:10.0"
                ],
                "defaultStatus": "affected",
                "packageName": "golang",
                "product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:1.26.5-1.el10_0",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux_eus:10.0"
                ],
                "defaultStatus": "affected",
                "packageName": "yggdrasil",
                "product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:0.4.7-5.el10_0",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux_eus:10.0"
                ],
                "defaultStatus": "affected",
                "packageName": "rhc",
                "product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1:0.3.2-5.el10_0",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux_eus:10.0"
                ],
                "defaultStatus": "affected",
                "packageName": "opentelemetry-collector",
                "product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:0.152.1-1.el10_0",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux_eus:10.0"
                ],
                "defaultStatus": "affected",
                "packageName": "grafana-pcp",
                "product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:5.3.0-1.el10_0",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux_eus:10.0"
                ],
                "defaultStatus": "affected",
                "packageName": "ignition",
                "product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:2.21.0-2.el10_0.3",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux_eus:10.0"
                ],
                "defaultStatus": "affected",
                "packageName": "osbuild-composer",
                "product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:134.1-10.el10_0",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/o:redhat:rhel_els:7"
                ],
                "defaultStatus": "affected",
                "packageName": "rhc-worker-script",
                "product": "Red Hat Enterprise Linux 7 Extended Lifecycle Support",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:0.11-1.el7_9",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:enterprise_linux:8"
                ],
                "defaultStatus": "affected",
                "packageName": "git-lfs",
                "product": "Red Hat Enterprise Linux 8",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:3.4.1-11.el8_10",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:enterprise_linux:8"
                ],
                "defaultStatus": "affected",
                "packageName": "grafana",
                "product": "Red Hat Enterprise Linux 8",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:9.2.10-31.el8_10",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:enterprise_linux:8"
                ],
                "defaultStatus": "affected",
                "packageName": "grafana-pcp",
                "product": "Red Hat Enterprise Linux 8",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:5.1.1-16.el8_10",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:enterprise_linux:8"
                ],
                "defaultStatus": "affected",
                "packageName": "go-toolset:rhel8",
                "product": "Red Hat Enterprise Linux 8",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "8100020260710105056.a3795dee",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:enterprise_linux:8"
                ],
                "defaultStatus": "affected",
                "packageName": "rhc",
                "product": "Red Hat Enterprise Linux 8",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1:0.2.5-9.el8_10",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:enterprise_linux:8"
                ],
                "defaultStatus": "affected",
                "packageName": "osbuild-composer",
                "product": "Red Hat Enterprise Linux 8",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:101.5-2.el8_10",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:enterprise_linux:9"
                ],
                "defaultStatus": "affected",
                "packageName": "git-lfs",
                "product": "Red Hat Enterprise Linux 9",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:3.7.1-4.el9_8.1",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:enterprise_linux:9"
                ],
                "defaultStatus": "affected",
                "packageName": "opentelemetry-collector",
                "product": "Red Hat Enterprise Linux 9",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:0.152.1-1.el9_8",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:enterprise_linux:9"
                ],
                "defaultStatus": "affected",
                "packageName": "grafana",
                "product": "Red Hat Enterprise Linux 9",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:10.2.6-23.el9_8",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:enterprise_linux:9"
                ],
                "defaultStatus": "affected",
                "packageName": "grafana-pcp",
                "product": "Red Hat Enterprise Linux 9",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:5.1.1-17.el9_8",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:enterprise_linux:9"
                ],
                "defaultStatus": "affected",
                "packageName": "golang",
                "product": "Red Hat Enterprise Linux 9",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:1.26.5-1.el9_8",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:enterprise_linux:9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhc",
                "product": "Red Hat Enterprise Linux 9",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1:0.2.7-8.el9_8",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:enterprise_linux:9"
                ],
                "defaultStatus": "affected",
                "packageName": "osbuild-composer",
                "product": "Red Hat Enterprise Linux 9",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:165.1-4.el9_8.1",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:enterprise_linux:9"
                ],
                "defaultStatus": "affected",
                "packageName": "image-builder",
                "product": "Red Hat Enterprise Linux 9",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:52.1-1.el9_8.2",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:rhel_e4s:9.2"
                ],
                "defaultStatus": "affected",
                "packageName": "rhc",
                "product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1:0.2.2-1.el9_2.4",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:rhel_e4s:9.2"
                ],
                "defaultStatus": "affected",
                "packageName": "osbuild-composer",
                "product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:76.1-7.el9_2",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:rhel_e4s:9.2"
                ],
                "defaultStatus": "affected",
                "packageName": "golang",
                "product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:1.26.5-1.el9_2",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:rhel_e4s:9.2"
                ],
                "defaultStatus": "affected",
                "packageName": "ignition",
                "product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:2.15.0-2.el9_2.1",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:rhel_e4s:9.4"
                ],
                "defaultStatus": "affected",
                "packageName": "opentelemetry-collector",
                "product": "Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:0.152.1-1.el9_4",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:rhel_e4s:9.4"
                ],
                "defaultStatus": "affected",
                "packageName": "golang",
                "product": "Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:1.26.5-1.el9_4",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:rhel_e4s:9.4"
                ],
                "defaultStatus": "affected",
                "packageName": "ignition",
                "product": "Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:2.17.0-2.el9_4.1",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:rhel_e4s:9.4"
                ],
                "defaultStatus": "affected",
                "packageName": "osbuild-composer",
                "product": "Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:101.3-4.el9_4.5",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:rhel_e4s:9.4"
                ],
                "defaultStatus": "affected",
                "packageName": "rhc",
                "product": "Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1:0.2.4-9.el9_4",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:rhel_eus:9.6"
                ],
                "defaultStatus": "affected",
                "packageName": "golang",
                "product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:1.26.5-1.el9_6",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:rhel_eus:9.6"
                ],
                "defaultStatus": "affected",
                "packageName": "grafana",
                "product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:10.2.6-22.el9_6",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:rhel_eus:9.6"
                ],
                "defaultStatus": "affected",
                "packageName": "ignition",
                "product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:2.21.0-7.el9_6",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:rhel_eus:9.6"
                ],
                "defaultStatus": "affected",
                "packageName": "opentelemetry-collector",
                "product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:0.152.1-1.el9_6",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:rhel_eus:9.6"
                ],
                "defaultStatus": "affected",
                "packageName": "rhc",
                "product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1:0.2.7-1.el9_6.5",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:rhel_eus:9.6"
                ],
                "defaultStatus": "affected",
                "packageName": "grafana-pcp",
                "product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:5.1.1-15.el9_6",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:rhel_eus:9.6"
                ],
                "defaultStatus": "affected",
                "packageName": "osbuild-composer",
                "product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:132.2-10.el9_6",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4.16::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "microshift",
                "product": "Red Hat OpenShift Container Platform 4.16",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:4.16.69-202608202336.p0.g763478c.assembly.4.16.69.el9",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4.16::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhcos",
                "product": "Red Hat OpenShift Container Platform 4.16",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "416.94.202609011112-0",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4.20::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-clients",
                "product": "Red Hat OpenShift Container Platform 4.20",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el8",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4.22::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "ose-azure-acr-image-credential-provider",
                "product": "Red Hat OpenShift Container Platform 4.22",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:4.22.0-202606291123.p2.ga17a3e3.assembly.stream.el8",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openstack:16.2::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "etcd",
                "product": "Red Hat OpenStack Platform 16.2",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:3.3.23-22.el8ost",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:satellite:6.16::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "yggdrasil-worker-forwarder",
                "product": "Red Hat Satellite 6.16 for RHEL 8",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:0.0.4-1.el8sat",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:satellite:6.16::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "yggdrasil-worker-forwarder",
                "product": "Red Hat Satellite 6.16 for RHEL 9",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:0.0.4-1.el9sat",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:satellite:6.17::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "yggdrasil-worker-forwarder",
                "product": "Red Hat Satellite 6.17 for RHEL 9",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:0.0.4-1.el9sat",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:satellite:6.18::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "yggdrasil-worker-forwarder",
                "product": "Red Hat Satellite 6.18 for RHEL 9",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:0.0.4-1.el9sat",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:satellite:6.19::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "yggdrasil-worker-forwarder",
                "product": "Red Hat Satellite 6.19 for RHEL 9",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:0.0.4-1.el9sat",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:edge_manager:1.0::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "flightctl",
                "product": "RHEM 1.0 for RHEL 9",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:1.0.3-1.el9em",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:edge_manager:1.1::el10"
                ],
                "defaultStatus": "affected",
                "packageName": "flightctl",
                "product": "RHEM 1.1 for RHEL 10",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:1.1.3-1.el10em",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:edge_manager:1.1::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "flightctl",
                "product": "RHEM 1.1 for RHEL 9",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:1.1.3-1.el9em",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:amq_streams:3.2::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "golang-github",
                "product": "Streams for Apache Kafka 3.2.1",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "danielqsj-kafka_exporter",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:cert_manager:1.19::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "cert-manager/jetstack-cert-manager-rhel9",
                "product": "Cert Manager support for Red Hat OpenShift release 1.19",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786613805",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9",
                "product": "Cluster Observability Operator 1.5.0",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782840519",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9",
                "product": "Cluster Observability Operator 1.5.0",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782839981",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9",
                "product": "Cluster Observability Operator 1.5.0",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782839193",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "cluster-observability-operator/distributed-tracing-console-plugin-rhel9",
                "product": "Cluster Observability Operator 1.5.0",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782838753",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "cluster-observability-operator/logging-console-plugin-pf4-rhel9",
                "product": "Cluster Observability Operator 1.5.0",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782839279",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "cluster-observability-operator/logging-console-plugin-pf5-rhel9",
                "product": "Cluster Observability Operator 1.5.0",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782840539",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "cluster-observability-operator/monitoring-console-plugin-pf5-rhel9",
                "product": "Cluster Observability Operator 1.5.0",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782844225",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "cluster-observability-operator/monitoring-console-plugin-pf6-rhel9",
                "product": "Cluster Observability Operator 1.5.0",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782839658",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "cluster-observability-operator/monitoring-console-plugin-rhel9",
                "product": "Cluster Observability Operator 1.5.0",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782838476",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:devworkspace:0.42::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "devworkspace/devworkspace-rhel9-operator",
                "product": "DevWorkspace Operator 0.42",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782401674",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:logging:6.0::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-logging/eventrouter-rhel9",
                "product": "Logging for Red Hat OpenShift 6",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1785418851",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:logging:6.2::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-logging/eventrouter-rhel9",
                "product": "Logging for Red Hat OpenShift 6.2",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1784747813",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:logging:6.4::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-logging/eventrouter-rhel9",
                "product": "Logging Subsystem for Red Hat OpenShift 6.4",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782408807",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:logging:6.5::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-logging/eventrouter-rhel9",
                "product": "Logging Subsystem for Red Hat OpenShift 6.5",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786645107",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:multicluster_engine:2.11::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "multicluster-engine/hypershift-addon-rhel9-operator",
                "product": "multicluster engine for Kubernetes 2.11",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786912006",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:multicluster_engine:2.6::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "multicluster-engine/assisted-service-8-rhel8",
                "product": "multicluster engine for Kubernetes 2.6",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1783332008",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:multicluster_engine:2.6::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "multicluster-engine/assisted-service-9-rhel9",
                "product": "multicluster engine for Kubernetes 2.6",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1783333268",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:multicluster_engine:2.6::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "multicluster-engine/discovery-rhel9",
                "product": "multicluster engine for Kubernetes 2.6",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1783985999",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:multicluster_engine:2.8::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "multicluster-engine/kube-rbac-proxy-mce-rhel9",
                "product": "multicluster engine for Kubernetes 2.8",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782477094",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:multicluster_engine:2.8::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "multicluster-engine/multicloud-manager-rhel9",
                "product": "multicluster engine for Kubernetes 2.8",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782308518",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:multicluster_engine:2.8::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "multicluster-engine/backplane-rhel9-operator",
                "product": "multicluster engine for Kubernetes 2.8",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1784737366",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:multicluster_engine:2.8::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "multicluster-engine/discovery-rhel9",
                "product": "multicluster engine for Kubernetes 2.8",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1784306906",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:multicluster_engine:2.9::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "multicluster-engine/discovery-rhel9",
                "product": "multicluster engine for Kubernetes 2.9",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1783260894",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:multicluster_globalhub:1.4::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "multicluster-globalhub/multicluster-globalhub-agent-rhel9",
                "product": "Multicluster Global Hub 1.4.5",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1784061472",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:multicluster_globalhub:1.6::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "multicluster-globalhub/multicluster-globalhub-agent-rhel9",
                "product": "Multicluster Global Hub 1.6.5",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1784152046",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:multicluster_globalhub:1.7::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "multicluster-globalhub/multicluster-globalhub-agent-rhel9",
                "product": "Multicluster Global Hub 1.7.0",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1784768332",
                    "versionType": "rpm"
                  },
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1785775948",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_api_data_protection:1.3::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "oadp/oadp-velero-rhel9",
                "product": "OpenShift API for Data Protection 1.3",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1785180878",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_api_data_protection:1.6::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "oadp/oadp-velero-rhel9",
                "product": "OpenShift API for Data Protection 1.6",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1784058822",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:acm:2.11::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhacm2/thanos-rhel9",
                "product": "Red Hat Advanced Cluster Management for Kubernetes 2.11",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1787685239",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:acm:2.13::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhacm2/acm-grafana-rhel9",
                "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782383730",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:acm:2.13::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhacm2/acm-multicluster-observability-addon-rhel9",
                "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782156698",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:acm:2.13::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhacm2/acm-prometheus-config-reloader-rhel9",
                "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782157632",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:acm:2.13::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhacm2/acm-prometheus-rhel9",
                "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782157829",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:acm:2.13::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhacm2/cluster-backup-rhel9-operator",
                "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782157630",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:acm:2.13::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhacm2/endpoint-monitoring-rhel9-operator",
                "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782382580",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:acm:2.13::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhacm2/grafana-dashboard-loader-rhel9",
                "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782383255",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:acm:2.13::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhacm2/kube-rbac-proxy-rhel9",
                "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782488873",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:acm:2.13::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhacm2/kube-state-metrics-rhel9",
                "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782157507",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:acm:2.13::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhacm2/metrics-collector-rhel9",
                "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782396604",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:acm:2.13::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhacm2/multicluster-observability-rhel9-operator",
                "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782382711",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:acm:2.13::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhacm2/node-exporter-rhel9",
                "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782157546",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:acm:2.13::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhacm2/observatorium-rhel9",
                "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782157471",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:acm:2.13::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhacm2/observatorium-rhel9-operator",
                "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782157018",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:acm:2.13::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhacm2/prometheus-alertmanager-rhel9",
                "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782156920",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:acm:2.13::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhacm2/prometheus-rhel9",
                "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782374537",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:acm:2.13::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhacm2/rbac-query-proxy-rhel9",
                "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782383676",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:acm:2.13::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhacm2/thanos-receive-controller-rhel9",
                "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782156860",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:acm:2.13::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhacm2/thanos-rhel9",
                "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782465412",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:acm:2.13::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhacm2/multicloud-integrations-rhel9",
                "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1784652040",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:acm:2.13::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhacm2/multiclusterhub-rhel9",
                "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1784638644",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:acm:2.13::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhacm2/multicluster-operators-subscription-rhel9",
                "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1784740143",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:advanced_cluster_security:4.9::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "advanced-cluster-security/rhacs-main-rhel8",
                "product": "Red Hat Advanced Cluster Security 4.9",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1781686446",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:advanced_cluster_security:4.10::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "advanced-cluster-security/rhacs-main-rhel8",
                "product": "Red Hat Advanced Cluster Security for Kubernetes 4.10",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1781686458",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:advanced_cluster_security:4.11::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "advanced-cluster-security/rhacs-main-rhel9",
                "product": "Red Hat Advanced Cluster Security for Kubernetes 4.11",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1783352589",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2.6::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "ansible-automation-platform-26/receptor-rhel9",
                "product": "Red Hat Ansible Automation Platform 2.6",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1783962464",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2.7::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "ansible-automation-platform-27/receptor-rhel9",
                "product": "Red Hat Ansible Automation Platform 2.7",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1783917963",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:edge_manager:1.0::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhem/flightctl-ui-rhel9",
                "product": "Red Hat Edge Manager 1.0",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1783502438",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:edge_manager:1.1::el10"
                ],
                "defaultStatus": "affected",
                "packageName": "rhem/flightctl-ui-rhel10",
                "product": "Red Hat Edge Manager 1.1",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1784194574",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:edge_manager:1.1::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhem/flightctl-ui-rhel9",
                "product": "Red Hat Edge Manager 1.1",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1784127736",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:enterprise_linux_ai:3.4::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhelai3/disk-image-cuda-rhel9",
                "product": "Red Hat Enterprise Linux AI 3.4",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782804957",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:enterprise_linux_ai:3.4::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhelai3/bootc-aws-cuda-rhel9",
                "product": "Red Hat Enterprise Linux AI 3.4",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782758407",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:enterprise_linux_ai:3.4::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhelai3/bootc-azure-cuda-rhel9",
                "product": "Red Hat Enterprise Linux AI 3.4",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782758410",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:enterprise_linux_ai:3.4::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhelai3/bootc-azure-rocm-rhel9",
                "product": "Red Hat Enterprise Linux AI 3.4",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782754093",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:enterprise_linux_ai:3.4::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhelai3/bootc-cuda-rhel9",
                "product": "Red Hat Enterprise Linux AI 3.4",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782744816",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:enterprise_linux_ai:3.4::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhelai3/bootc-gcp-cuda-rhel9",
                "product": "Red Hat Enterprise Linux AI 3.4",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782758409",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:enterprise_linux_ai:3.4::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhelai3/bootc-rocm-rhel9",
                "product": "Red Hat Enterprise Linux AI 3.4",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782744830",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:hummingbird:1"
                ],
                "defaultStatus": "affected",
                "packageName": "golang1-25-main",
                "product": "Red Hat Hardened Images",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1.25.11-2.hum1",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:hummingbird:1"
                ],
                "defaultStatus": "affected",
                "packageName": "golang1-26-main",
                "product": "Red Hat Hardened Images",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1.26.4-2.hum1",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:lightspeed_for_runtimes:1.0::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator",
                "product": "Red Hat Lightspeed (formerly Insights) for Runtimes 1.0",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786483782",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:rhmt:1.8::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "rhmtc/openshift-migration-controller-rhel8",
                "product": "Red Hat Migration Toolkit 1.8",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1783953372",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:migration_toolkit_applications:8.1::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "mta/mta-cli-rhel9",
                "product": "Red Hat Migration Toolkit for Applications 8.1",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1785171639",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:migration_toolkit_applications:8.2::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "mta/mta-cli-rhel9",
                "product": "Red Hat Migration Toolkit for Applications 8.2",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1784211378",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:multicluster_globalhub:1.5::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "multicluster-globalhub/multicluster-globalhub-agent-rhel9",
                "product": "Red Hat multicluster global hub 1.5.3",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1784127491",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:2.25::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-kueue-controller-rhel9",
                "product": "Red Hat OpenShift AI 2.25",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1783544461",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:2.25::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-rhel9-operator",
                "product": "Red Hat OpenShift AI 2.25",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1784004914",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:2.25::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-training-operator-rhel9",
                "product": "Red Hat OpenShift AI 2.25",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1783946386",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:2.25::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-mod-arch-model-registry-rhel9",
                "product": "Red Hat OpenShift AI 2.25",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1788312157",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:2.25::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-trustyai-service-operator-rhel9",
                "product": "Red Hat OpenShift AI 2.25",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1787330073",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:3.4::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-feast-operator-rhel9",
                "product": "Red Hat OpenShift AI 3.4",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1787051722",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:3.4::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-kube-auth-proxy-rhel9",
                "product": "Red Hat OpenShift AI 3.4",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1787102977",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:3.4::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-llm-d-batch-gateway-apiserver-rhel9",
                "product": "Red Hat OpenShift AI 3.4",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786630755",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:3.4::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-llm-d-batch-gateway-gc-rhel9",
                "product": "Red Hat OpenShift AI 3.4",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786630724",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:3.4::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-llm-d-batch-gateway-processor-rhel9",
                "product": "Red Hat OpenShift AI 3.4",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786630124",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:3.4::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-llm-d-inference-scheduler-rhel9",
                "product": "Red Hat OpenShift AI 3.4",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786611780",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:3.4::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-llm-d-routing-sidecar-rhel9",
                "product": "Red Hat OpenShift AI 3.4",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786612055",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:3.4::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-maas-api-rhel9",
                "product": "Red Hat OpenShift AI 3.4",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1787153683",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:3.4::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-mlflow-operator-rhel9",
                "product": "Red Hat OpenShift AI 3.4",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1787088234",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:3.4::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-mod-arch-automl-rhel9",
                "product": "Red Hat OpenShift AI 3.4",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1787250508",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:3.4::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-mod-arch-autorag-rhel9",
                "product": "Red Hat OpenShift AI 3.4",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1787251550",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:3.4::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-mod-arch-gen-ai-rhel9",
                "product": "Red Hat OpenShift AI 3.4",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786611759",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:3.4::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-mod-arch-maas-rhel9",
                "product": "Red Hat OpenShift AI 3.4",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1787251250",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:3.4::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-mod-arch-mlflow-rhel9",
                "product": "Red Hat OpenShift AI 3.4",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786612219",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:3.4::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-mod-arch-model-registry-rhel9",
                "product": "Red Hat OpenShift AI 3.4",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1787250617",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:3.4::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-spark-operator-rhel9",
                "product": "Red Hat OpenShift AI 3.4",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1787090180",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:3.4::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-trainer-rhel9",
                "product": "Red Hat OpenShift AI 3.4",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1787089049",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:3.4::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-training-operator-rhel9",
                "product": "Red Hat OpenShift AI 3.4",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1787361677",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_builds:1.7::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-builds/openshift-builds-controller-rhel9",
                "product": "Red Hat OpenShift Builds 1.7.3",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1783057515",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_builds:1.7::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-builds/openshift-builds-waiters-rhel9",
                "product": "Red Hat OpenShift Builds 1.7.3",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1783057868",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_builds:1.8::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-builds/openshift-builds-rhel9-operator",
                "product": "Red Hat OpenShift Builds 1.8.1",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1784121108",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_builds:1.8::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-builds/openshift-builds-waiters-rhel9",
                "product": "Red Hat OpenShift Builds 1.8.1",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1783612119",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/cephcsi-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.18",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786705347",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/cephcsi-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.18",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786706101",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/mcg-core-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.18",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786705558",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/mcg-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.18",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786705646",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/ocs-client-console-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.18",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786706138",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/ocs-client-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.18",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786705741",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/ocs-metrics-exporter-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.18",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786705777",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/ocs-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.18",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786705802",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-cli-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.18",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786705938",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-console-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.18",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786706577",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-cosi-sidecar-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.18",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786706125",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-csi-addons-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.18",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786706177",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-csi-addons-sidecar-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.18",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786706188",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-multicluster-console-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.18",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786706679",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-multicluster-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.18",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786706357",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-must-gather-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.18",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786706612",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.18",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786706644",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odr-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.18",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786706659",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/rook-ceph-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.18",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786706880",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/cephcsi-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.22",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782932114",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/cephcsi-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.22",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782931768",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/devicefinder-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.22",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782932104",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/mcg-core-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.22",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1783536000",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/mcg-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.22",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1783535989",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/ocs-client-console-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.22",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1783536515",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/ocs-client-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.22",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782932521",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/ocs-metrics-exporter-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.22",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1783018461",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/ocs-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.22",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1783018421",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-blackbox-exporter-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.22",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782932812",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-cli-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.22",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1783537001",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-cloudnative-pg-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.22",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782932919",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-console-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.22",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1783537586",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-cosi-sidecar-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.22",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782932969",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-csi-addons-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.22",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782933015",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-csi-addons-sidecar-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.22",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782933042",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-drbd-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.22",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1783537392",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-external-snapshotter-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.22",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782933235",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-external-snapshotter-sidecar-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.22",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782933251",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-multicluster-console-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.22",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1783537955",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-multicluster-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.22",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782933417",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-must-gather-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.22",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1783537742",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.22",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782933602",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odr-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.22",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1783019377",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odr-volsync-plugin-mover-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.22",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782934054",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odr-volsync-plugin-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.22",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782934036",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/rook-ceph-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.22",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782934284",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_devspaces:3.29::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "devspaces/udi-rhel9",
                "product": "Red Hat OpenShift Dev Spaces 3.29",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782991491",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_distributed_tracing:3.10::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhosdt/tempo-gateway-opa-rhel9",
                "product": "Red Hat OpenShift distributed tracing 3.10.2",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1784775772",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_distributed_tracing:3.10::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhosdt/tempo-gateway-rhel9",
                "product": "Red Hat OpenShift distributed tracing 3.10.2",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1784775770",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_distributed_tracing:3.10::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhosdt/tempo-jaeger-query-rhel9",
                "product": "Red Hat OpenShift distributed tracing 3.10.2",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1784775834",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_distributed_tracing:3.10::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhosdt/tempo-operator-bundle",
                "product": "Red Hat OpenShift distributed tracing 3.10.2",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1784777166",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_distributed_tracing:3.10::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhosdt/tempo-query-rhel9",
                "product": "Red Hat OpenShift distributed tracing 3.10.2",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1784775793",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_distributed_tracing:3.10::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhosdt/tempo-rhel9",
                "product": "Red Hat OpenShift distributed tracing 3.10.2",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1784775768",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_distributed_tracing:3.10::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhosdt/tempo-rhel9-operator",
                "product": "Red Hat OpenShift distributed tracing 3.10.2",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1784775782",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_gitops:1.19::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-gitops-1/dex-rhel8",
                "product": "Red Hat OpenShift GitOps 1.19",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782292352",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_gitops:1.20::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-gitops-1/dex-rhel9",
                "product": "Red Hat OpenShift GitOps 1.20",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782383826",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:2.6::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-rhel8",
                "product": "Red Hat OpenShift Service Mesh 2.6",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782287580",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3.0::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-rhel9",
                "product": "Red Hat OpenShift Service Mesh 3.0",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782201833",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3.1::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-rhel9",
                "product": "Red Hat OpenShift Service Mesh 3.1",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782201537",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3.2::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-rhel9",
                "product": "Red Hat OpenShift Service Mesh 3.2",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782201812",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3.3::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-rhel9",
                "product": "Red Hat OpenShift Service Mesh 3.3",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782201466",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:workload_availability_nhc:0.12::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "workload-availability/node-healthcheck-rhel9-operator",
                "product": "Red Hat OpenShift Workload Availability 0.12",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1785202723",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:workload_availability_snr:0.13::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "workload-availability/self-node-remediation-rhel9-operator",
                "product": "Red Hat OpenShift Workload Availability 0.13",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1785203036",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:workload_availability_sbr:0.3::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "workload-availability/storage-based-remediation-rhel9-operator",
                "product": "Red Hat OpenShift Workload Availability 0.3",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1785203474",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:workload_availability_mdr:0.7::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "workload-availability/machine-deletion-remediation-rhel9-operator",
                "product": "Red Hat OpenShift Workload Availability 0.7",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1785203508",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:workload_availability_far:0.8::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "workload-availability/fence-agents-remediation-rhel9-operator",
                "product": "Red Hat OpenShift Workload Availability 0.8",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1785203079",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:workload_availability_nmo:5.7::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "workload-availability/node-maintenance-rhel9-operator",
                "product": "Red Hat OpenShift Workload Availability 5.7",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1785202847",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.10::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel8",
                "product": "Red Hat Quay 3.10",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1783750447",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.12::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel8",
                "product": "Red Hat Quay 3.12",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1783751865",
                    "versionType": "rpm"
                  },
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1784353904",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.15::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel8",
                "product": "Red Hat Quay 3.15",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1784351966",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.16::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel9",
                "product": "Red Hat Quay 3.16",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1783955846",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.17::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel9",
                "product": "Red Hat Quay 3.17",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786181981",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.9::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel8",
                "product": "Red Hat Quay 3.9",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1784125838",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:satellite:6.18::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "satellite/iop-vmaas-rhel9",
                "product": "Red Hat Satellite 6.18",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1785923308",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:satellite:6.19::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "satellite/iop-vmaas-rhel9",
                "product": "Red Hat Satellite 6.19",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1785929994",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:trusted_artifact_signer:1.4::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "conforma-cli-stack-v1",
                "product": "Red Hat Trusted Artifact Signer 1.4",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "4-1.4.2",
                    "versionType": "rpm"
                  },
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "4-1.4.3",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:webterminal:1.11::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "web-terminal/web-terminal-exec-rhel9",
                "product": "Red Hat Web Terminal 1.11",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1784296203",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:webterminal:1.12::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "web-terminal/web-terminal-exec-rhel9",
                "product": "Red Hat Web Terminal 1.12",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1784247610",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:webterminal:1.13::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "web-terminal/web-terminal-exec-rhel9",
                "product": "Red Hat Web Terminal 1.13",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1784296127",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:webterminal:1.14::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "web-terminal/web-terminal-exec-rhel9",
                "product": "Red Hat Web Terminal 1.14",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1784296114",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:webterminal:1.15::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "web-terminal/web-terminal-exec-rhel9",
                "product": "Red Hat Web Terminal 1.15",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1784296033",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:webterminal:1.16::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "web-terminal/web-terminal-exec-rhel9",
                "product": "Red Hat Web Terminal 1.16",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1784295767",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:assisted_installer:2"
                ],
                "defaultStatus": "affected",
                "packageName": "rhai/assisted-installer-rhel9",
                "product": "Assisted Installer for Red Hat OpenShift Container Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_compliance_operator:1"
                ],
                "defaultStatus": "affected",
                "packageName": "compliance/openshift-compliance-operator-bundle",
                "product": "Compliance Operator",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:confidential_compute_attestation:1"
                ],
                "defaultStatus": "affected",
                "packageName": "build-of-trustee/trustee-rhel9-operator",
                "product": "Confidential Compute Attestation",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:confidential_compute_attestation:1"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-sandboxed-containers/osc-monitor-rhel9",
                "product": "Confidential Compute Attestation",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:cryostat:4"
                ],
                "defaultStatus": "unaffected",
                "packageName": "cryostat/cryostat-storage-rhel9",
                "product": "Cryostat 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:deployment_validator_operator"
                ],
                "defaultStatus": "affected",
                "packageName": "dvo/deployment-validation-rhel8-operator",
                "product": "Deployment Validation Operator",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ext_dns_optr:1"
                ],
                "defaultStatus": "affected",
                "packageName": "edo/external-dns-rhel9",
                "product": "ExternalDNS Operator",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ext_dns_optr:1"
                ],
                "defaultStatus": "affected",
                "packageName": "edo/external-dns-rhel9-operator",
                "product": "ExternalDNS Operator",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:external_secrets_operator:1"
                ],
                "defaultStatus": "affected",
                "packageName": "external-secrets-operator/external-secrets-rhel9",
                "product": "External Secrets Operator for Red Hat OpenShift",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:workload_availability_far:0"
                ],
                "defaultStatus": "affected",
                "packageName": "redhat-user-workloads/far-operator-0-8",
                "product": "Fence Agents Remediation Operator",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_file_integrity_operator:1"
                ],
                "defaultStatus": "affected",
                "packageName": "compliance/openshift-compliance-operator-bundle",
                "product": "File Integrity Operator",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:gatekeeper:3"
                ],
                "defaultStatus": "affected",
                "packageName": "gatekeeper/gatekeeper-rhel9-operator",
                "product": "Gatekeeper 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:lvms:4",
                  "cpe:/a:redhat:lvms:5"
                ],
                "defaultStatus": "unaffected",
                "packageName": "lvms4/lvms-rhel9-operator",
                "product": "Logical Volume Manager Storage",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:lvms:4"
                ],
                "defaultStatus": "unaffected",
                "packageName": "lvms4/topolvm-rhel8",
                "product": "Logical Volume Manager Storage",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:lvms:4"
                ],
                "defaultStatus": "unaffected",
                "packageName": "lvms4/topolvm-rhel9",
                "product": "Logical Volume Manager Storage",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:workload_availability_mdr:0"
                ],
                "defaultStatus": "affected",
                "packageName": "redhat-user-workloads/mdr-operator-0-7",
                "product": "Machine Deletion Remediation Operator",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:multiarch_tuning_operator"
                ],
                "defaultStatus": "affected",
                "packageName": "multiarch-tuning/multiarch-tuning-rhel9-operator",
                "product": "Multiarch Tuning Operator",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:multicluster_engine"
                ],
                "defaultStatus": "affected",
                "packageName": "multicluster-engine/addon-manager-rhel9",
                "product": "Multicluster Engine for Kubernetes",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:multicluster_engine"
                ],
                "defaultStatus": "affected",
                "packageName": "multicluster-engine/assisted-installer-agent-rhel9",
                "product": "Multicluster Engine for Kubernetes",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:multicluster_engine"
                ],
                "defaultStatus": "affected",
                "packageName": "multicluster-engine/assisted-installer-controller-rhel9",
                "product": "Multicluster Engine for Kubernetes",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:multicluster_engine"
                ],
                "defaultStatus": "affected",
                "packageName": "multicluster-engine/assisted-installer-rhel9",
                "product": "Multicluster Engine for Kubernetes",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:multicluster_engine"
                ],
                "defaultStatus": "affected",
                "packageName": "multicluster-engine/cluster-api-provider-agent-rhel9",
                "product": "Multicluster Engine for Kubernetes",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:multicluster_engine"
                ],
                "defaultStatus": "affected",
                "packageName": "multicluster-engine/cluster-api-provider-kubevirt-rhel9",
                "product": "Multicluster Engine for Kubernetes",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:multicluster_engine"
                ],
                "defaultStatus": "affected",
                "packageName": "multicluster-engine/clusterclaims-controller-rhel9",
                "product": "Multicluster Engine for Kubernetes",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:multicluster_engine"
                ],
                "defaultStatus": "affected",
                "packageName": "multicluster-engine/cluster-curator-controller-rhel9",
                "product": "Multicluster Engine for Kubernetes",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:multicluster_engine"
                ],
                "defaultStatus": "affected",
                "packageName": "multicluster-engine/cluster-image-set-controller-rhel9",
                "product": "Multicluster Engine for Kubernetes",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:multicluster_engine"
                ],
                "defaultStatus": "affected",
                "packageName": "multicluster-engine/clusterlifecycle-state-metrics-rhel9",
                "product": "Multicluster Engine for Kubernetes",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:multicluster_engine"
                ],
                "defaultStatus": "affected",
                "packageName": "multicluster-engine/cluster-proxy-rhel9",
                "product": "Multicluster Engine for Kubernetes",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:multicluster_engine"
                ],
                "defaultStatus": "affected",
                "packageName": "multicluster-engine/image-based-install-rhel9",
                "product": "Multicluster Engine for Kubernetes",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:multicluster_engine"
                ],
                "defaultStatus": "affected",
                "packageName": "multicluster-engine/placement-rhel9",
                "product": "Multicluster Engine for Kubernetes",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:multicluster_engine"
                ],
                "defaultStatus": "affected",
                "packageName": "multicluster-engine/provider-credential-controller-rhel9",
                "product": "Multicluster Engine for Kubernetes",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:multicluster_engine"
                ],
                "defaultStatus": "affected",
                "packageName": "multicluster-engine/registration-operator-rhel9",
                "product": "Multicluster Engine for Kubernetes",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:multicluster_engine"
                ],
                "defaultStatus": "affected",
                "packageName": "multicluster-engine/registration-rhel9",
                "product": "Multicluster Engine for Kubernetes",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:multicluster_engine"
                ],
                "defaultStatus": "affected",
                "packageName": "multicluster-engine/work-rhel9",
                "product": "Multicluster Engine for Kubernetes",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:network_observ_optr:1"
                ],
                "defaultStatus": "affected",
                "packageName": "network-observability/network-observability-cli-rhel9",
                "product": "Network Observability Operator",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:workload_availability_nhc:0"
                ],
                "defaultStatus": "affected",
                "packageName": "node-healthcheck-operator-tech-preview/node-healthcheck-rhel8-operator",
                "product": "Node HealthCheck Operator",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:workload_availability_nhc:0"
                ],
                "defaultStatus": "affected",
                "packageName": "redhat-user-workloads/nhc-operator-0-12",
                "product": "Node HealthCheck Operator",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:workload_availability_nhc:0"
                ],
                "defaultStatus": "affected",
                "packageName": "workload-availability/node-healthcheck-rhel8-operator",
                "product": "Node HealthCheck Operator",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_api_data_protection:1"
                ],
                "defaultStatus": "unaffected",
                "packageName": "multicluster-engine/hypershift-addon-rhel9-operator",
                "product": "OpenShift API for Data Protection",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_api_data_protection:1"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift4/ose-hypershift-rhel9",
                "product": "OpenShift API for Data Protection",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ocp_tools"
                ],
                "defaultStatus": "affected",
                "packageName": "helm",
                "product": "OpenShift Developer Tools and Services",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_lightspeed"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-lightspeed/lightspeed-rhel9-operator",
                "product": "OpenShift Lightspeed",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_pipelines:1"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-pipelines-client",
                "product": "OpenShift Pipelines",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_pipelines:1"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-pipelines/pipelines-scheduler-rhel9",
                "product": "OpenShift Pipelines",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:serverless:1"
                ],
                "defaultStatus": "affected",
                "packageName": "kn-workflow-plugin",
                "product": "OpenShift Serverless",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:serverless:1"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-serverless-1/kn-plugin-event-sender-rhel9",
                "product": "OpenShift Serverless",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:serverless:1"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-serverless-1/logic-rhel9-operator",
                "product": "OpenShift Serverless",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:serverless:1"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-serverless-clients",
                "product": "OpenShift Serverless",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_power_monitoring"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-power-monitoring/kepler-rhel9",
                "product": "Power monitoring for Red Hat OpenShift",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:red_hat_3scale_amp:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "3scale-amp2/3scale-rhel7-operator",
                "product": "Red Hat 3scale API Management Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:red_hat_3scale_amp:2"
                ],
                "defaultStatus": "affected",
                "packageName": "3scale-amp2/3scale-rhel9-operator",
                "product": "Red Hat 3scale API Management Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:acm:2"
                ],
                "defaultStatus": "affected",
                "packageName": "multicluster-engine/cluster-permission-rhel9",
                "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:acm:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "rhacm2/acm-cli-rhel9",
                "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:acm:2"
                ],
                "defaultStatus": "affected",
                "packageName": "rhacm2/acm-cluster-permission-rhel9",
                "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:acm:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "rhacm2/acm-governance-policy-addon-controller-rhel9",
                "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:acm:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "rhacm2/acm-governance-policy-framework-addon-rhel9",
                "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:acm:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "rhacm2/acm-must-gather-rhel9",
                "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:acm:2"
                ],
                "defaultStatus": "affected",
                "packageName": "rhacm2/acm-search-indexer-rhel9",
                "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:acm:2"
                ],
                "defaultStatus": "affected",
                "packageName": "rhacm2/acm-search-v2-api-rhel9",
                "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:acm:2"
                ],
                "defaultStatus": "affected",
                "packageName": "rhacm2/acm-search-v2-rhel9",
                "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:acm:2"
                ],
                "defaultStatus": "affected",
                "packageName": "rhacm2/acm-volsync-addon-controller-rhel9",
                "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:acm:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "rhacm2/cert-policy-controller-rhel9",
                "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:acm:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "rhacm2/config-policy-controller-rhel9",
                "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:acm:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "rhacm2/governance-policy-propagator-rhel9",
                "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:acm:2"
                ],
                "defaultStatus": "affected",
                "packageName": "rhacm2/insights-client-rhel9",
                "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:acm:2"
                ],
                "defaultStatus": "affected",
                "packageName": "rhacm2/insights-metrics-rhel9",
                "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:acm:2"
                ],
                "defaultStatus": "affected",
                "packageName": "rhacm2/klusterlet-addon-controller-rhel9",
                "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:acm:2"
                ],
                "defaultStatus": "affected",
                "packageName": "rhacm2/memcached-exporter-rhel9",
                "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:acm:2"
                ],
                "defaultStatus": "affected",
                "packageName": "rhacm2/multicluster-operators-application-rhel9",
                "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:acm:2"
                ],
                "defaultStatus": "affected",
                "packageName": "rhacm2/multicluster-operators-channel-rhel9",
                "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:acm:2"
                ],
                "defaultStatus": "affected",
                "packageName": "rhacm2/search-collector-rhel9",
                "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:acm:2"
                ],
                "defaultStatus": "affected",
                "packageName": "rhacm2/subctl-rhel9",
                "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:acm:2"
                ],
                "defaultStatus": "affected",
                "packageName": "rhacm2/submariner-addon-rhel9",
                "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "ansible-automation-platform/platform-operator-bundle",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "automation-gateway-proxy",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "automation-gateway-proxy-openssl30",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "automation-gateway-proxy-openssl32",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "python3.11-galaxy-ng",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "python3.12-galaxy-ng",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ceph_storage:5"
                ],
                "defaultStatus": "affected",
                "packageName": "rhceph/rhceph-5-dashboard-rhel8",
                "product": "Red Hat Ceph Storage 5",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ceph_storage:6"
                ],
                "defaultStatus": "affected",
                "packageName": "rhceph/rhceph-6-dashboard-rhel9",
                "product": "Red Hat Ceph Storage 6",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ceph_storage:8"
                ],
                "defaultStatus": "affected",
                "packageName": "rhceph/grafana-rhel9",
                "product": "Red Hat Ceph Storage 8",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ceph_storage:9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhceph/alloy-rhel10",
                "product": "Red Hat Ceph Storage 9",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:certifications:9"
                ],
                "defaultStatus": "affected",
                "packageName": "redhat-certification-preflight",
                "product": "Red Hat Certification Program for Red Hat Enterprise Linux 9",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:connectivity_link:1"
                ],
                "defaultStatus": "affected",
                "packageName": "rhcl-1/authorino-rhel9",
                "product": "Red Hat Connectivity Link 1",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:rhdh:1"
                ],
                "defaultStatus": "unknown",
                "packageName": "rhdh/rhdh-rhel9-operator",
                "product": "Red Hat Developer Hub",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:10"
                ],
                "defaultStatus": "unaffected",
                "packageName": "buildah",
                "product": "Red Hat Enterprise Linux 10",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:10"
                ],
                "defaultStatus": "unaffected",
                "packageName": "butane",
                "product": "Red Hat Enterprise Linux 10",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:10"
                ],
                "defaultStatus": "unaffected",
                "packageName": "delve",
                "product": "Red Hat Enterprise Linux 10",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:10"
                ],
                "defaultStatus": "affected",
                "packageName": "go-fdo-client",
                "product": "Red Hat Enterprise Linux 10",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:10"
                ],
                "defaultStatus": "affected",
                "packageName": "golang-github-openprinting-ipp-usb",
                "product": "Red Hat Enterprise Linux 10",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:10"
                ],
                "defaultStatus": "affected",
                "packageName": "gvisor-tap-vsock",
                "product": "Red Hat Enterprise Linux 10",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:10"
                ],
                "defaultStatus": "affected",
                "packageName": "ignition",
                "product": "Red Hat Enterprise Linux 10",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:10"
                ],
                "defaultStatus": "affected",
                "packageName": "osbuild-composer",
                "product": "Red Hat Enterprise Linux 10",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:10"
                ],
                "defaultStatus": "unaffected",
                "packageName": "podman",
                "product": "Red Hat Enterprise Linux 10",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:10"
                ],
                "defaultStatus": "affected",
                "packageName": "rhc-worker-playbook",
                "product": "Red Hat Enterprise Linux 10",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:10"
                ],
                "defaultStatus": "affected",
                "packageName": "rhel10/bootc-image-builder",
                "product": "Red Hat Enterprise Linux 10",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:10"
                ],
                "defaultStatus": "affected",
                "packageName": "rhel10-eus/rhel-10.0-bootc-image-builder",
                "product": "Red Hat Enterprise Linux 10",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:10"
                ],
                "defaultStatus": "unaffected",
                "packageName": "skopeo",
                "product": "Red Hat Enterprise Linux 10",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:10"
                ],
                "defaultStatus": "unaffected",
                "packageName": "toolbox",
                "product": "Red Hat Enterprise Linux 10",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:10"
                ],
                "defaultStatus": "unaffected",
                "packageName": "trustee",
                "product": "Red Hat Enterprise Linux 10",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:10"
                ],
                "defaultStatus": "affected",
                "packageName": "trustee-guest-components",
                "product": "Red Hat Enterprise Linux 10",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:7"
                ],
                "defaultStatus": "unaffected",
                "packageName": "host-metering",
                "product": "Red Hat Enterprise Linux 7",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:7"
                ],
                "defaultStatus": "affected",
                "packageName": "rhc",
                "product": "Red Hat Enterprise Linux 7",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:8"
                ],
                "defaultStatus": "unaffected",
                "packageName": "container-tools:rhel8/buildah",
                "product": "Red Hat Enterprise Linux 8",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:8"
                ],
                "defaultStatus": "unaffected",
                "packageName": "container-tools:rhel8/conmon",
                "product": "Red Hat Enterprise Linux 8",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:8"
                ],
                "defaultStatus": "unaffected",
                "packageName": "container-tools:rhel8/containernetworking-plugins",
                "product": "Red Hat Enterprise Linux 8",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:8"
                ],
                "defaultStatus": "unaffected",
                "packageName": "container-tools:rhel8/podman",
                "product": "Red Hat Enterprise Linux 8",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:8"
                ],
                "defaultStatus": "unaffected",
                "packageName": "container-tools:rhel8/skopeo",
                "product": "Red Hat Enterprise Linux 8",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:8"
                ],
                "defaultStatus": "unaffected",
                "packageName": "container-tools:rhel8/toolbox",
                "product": "Red Hat Enterprise Linux 8",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:8"
                ],
                "defaultStatus": "affected",
                "packageName": "golang",
                "product": "Red Hat Enterprise Linux 8",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:8"
                ],
                "defaultStatus": "unaffected",
                "packageName": "weldr-client",
                "product": "Red Hat Enterprise Linux 8",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:9"
                ],
                "defaultStatus": "unaffected",
                "packageName": "buildah",
                "product": "Red Hat Enterprise Linux 9",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:9"
                ],
                "defaultStatus": "unaffected",
                "packageName": "butane",
                "product": "Red Hat Enterprise Linux 9",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:9"
                ],
                "defaultStatus": "unaffected",
                "packageName": "conmon",
                "product": "Red Hat Enterprise Linux 9",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:9"
                ],
                "defaultStatus": "unaffected",
                "packageName": "containernetworking-plugins",
                "product": "Red Hat Enterprise Linux 9",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:9"
                ],
                "defaultStatus": "affected",
                "packageName": "gvisor-tap-vsock",
                "product": "Red Hat Enterprise Linux 9",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:9"
                ],
                "defaultStatus": "affected",
                "packageName": "ignition",
                "product": "Red Hat Enterprise Linux 9",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:9"
                ],
                "defaultStatus": "unaffected",
                "packageName": "podman",
                "product": "Red Hat Enterprise Linux 9",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhel9/bootc-image-builder",
                "product": "Red Hat Enterprise Linux 9",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhel9-eus/rhel-9.6-bootc-image-builder",
                "product": "Red Hat Enterprise Linux 9",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:9"
                ],
                "defaultStatus": "unaffected",
                "packageName": "skopeo",
                "product": "Red Hat Enterprise Linux 9",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:9"
                ],
                "defaultStatus": "unaffected",
                "packageName": "toolbox",
                "product": "Red Hat Enterprise Linux 9",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:9"
                ],
                "defaultStatus": "affected",
                "packageName": "trustee-guest-components",
                "product": "Red Hat Enterprise Linux 9",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:9"
                ],
                "defaultStatus": "unaffected",
                "packageName": "weldr-client",
                "product": "Red Hat Enterprise Linux 9",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:enterprise_linux_ai:3"
                ],
                "defaultStatus": "affected",
                "packageName": "golang",
                "product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:hummingbird:1"
                ],
                "defaultStatus": "unaffected",
                "packageName": "golang-fips1.25",
                "product": "Red Hat Hardened Images",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-ai-gateway-payload-processing-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-codeflare-operator-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-data-science-pipelines-argo-argoexec-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-data-science-pipelines-operator-controller-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "unaffected",
                "packageName": "rhoai/odh-eval-hub-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-kf-notebook-controller-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-kserve-llmisvc-controller-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-kuberay-operator-controller-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "unaffected",
                "packageName": "rhoai/odh-llama-stack-k8s-operator-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-maas-controller-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-ml-pipelines-api-server-v2-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-ml-pipelines-driver-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-ml-pipelines-launcher-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-mm-rest-proxy-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "unaffected",
                "packageName": "rhoai/odh-mod-arch-eval-hub-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-model-controller-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-modelmesh-runtime-adapter-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-modelmesh-serving-controller-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "unaffected",
                "packageName": "rhoai/odh-model-registry-operator-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "unaffected",
                "packageName": "rhoai/odh-model-registry-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-model-serving-api-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-notebook-controller-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-rhaii-cluster-validator-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "unaffected",
                "packageName": "rhoai/odh-rhel8-operator",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-workload-variant-autoscaler-controller-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/rhai-cli-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_cluster_manager_cli:1"
                ],
                "defaultStatus": "affected",
                "packageName": "ocm-cli-clients/ocm-cli-rhel9",
                "product": "Red Hat OpenShift Cluster Manager CLI",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4"
                ],
                "defaultStatus": "unaffected",
                "packageName": "atomic-openshift-service-idler",
                "product": "Red Hat OpenShift Container Platform 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4"
                ],
                "defaultStatus": "affected",
                "packageName": "butane",
                "product": "Red Hat OpenShift Container Platform 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4"
                ],
                "defaultStatus": "unaffected",
                "packageName": "conmon",
                "product": "Red Hat OpenShift Container Platform 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4"
                ],
                "defaultStatus": "unaffected",
                "packageName": "conmon-rs",
                "product": "Red Hat OpenShift Container Platform 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4"
                ],
                "defaultStatus": "unaffected",
                "packageName": "containernetworking-plugins",
                "product": "Red Hat OpenShift Container Platform 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4"
                ],
                "defaultStatus": "unaffected",
                "packageName": "cri-o",
                "product": "Red Hat OpenShift Container Platform 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4"
                ],
                "defaultStatus": "affected",
                "packageName": "cri-tools",
                "product": "Red Hat OpenShift Container Platform 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4"
                ],
                "defaultStatus": "affected",
                "packageName": "golang-github-prometheus-promu",
                "product": "Red Hat OpenShift Container Platform 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4"
                ],
                "defaultStatus": "affected",
                "packageName": "ignition",
                "product": "Red Hat OpenShift Container Platform 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4"
                ],
                "defaultStatus": "affected",
                "packageName": "kata-containers",
                "product": "Red Hat OpenShift Container Platform 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4"
                ],
                "defaultStatus": "unaffected",
                "packageName": "openshift",
                "product": "Red Hat OpenShift Container Platform 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift4/frr-rhel9",
                "product": "Red Hat OpenShift Container Platform 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift4/ose-cli",
                "product": "Red Hat OpenShift Container Platform 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4"
                ],
                "defaultStatus": "unaffected",
                "packageName": "openshift4/ose-hypershift-rhel9",
                "product": "Red Hat OpenShift Container Platform 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4"
                ],
                "defaultStatus": "unaffected",
                "packageName": "openshift-kuryr",
                "product": "Red Hat OpenShift Container Platform 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4"
                ],
                "defaultStatus": "affected",
                "packageName": "ose-aws-ecr-image-credential-provider",
                "product": "Red Hat OpenShift Container Platform 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4"
                ],
                "defaultStatus": "affected",
                "packageName": "ose-gcp-gcr-image-credential-provider",
                "product": "Red Hat OpenShift Container Platform 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4"
                ],
                "defaultStatus": "unaffected",
                "packageName": "podman",
                "product": "Red Hat OpenShift Container Platform 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4"
                ],
                "defaultStatus": "affected",
                "packageName": "rh-osbs/openshift-golang-builder",
                "product": "Red Hat OpenShift Container Platform 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4"
                ],
                "defaultStatus": "unaffected",
                "packageName": "skopeo",
                "product": "Red Hat OpenShift Container Platform 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_distributed_tracing:3"
                ],
                "defaultStatus": "affected",
                "packageName": "rhosdt/opentelemetry-rhel9-operator",
                "product": "Red Hat OpenShift distributed tracing 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:windows_machine_config"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift4-wincw/windows-machine-config-rhel9-operator",
                "product": "Red Hat OpenShift for Windows Containers",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_service_on_aws:1"
                ],
                "defaultStatus": "affected",
                "packageName": "rosa",
                "product": "Red Hat OpenShift on AWS",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:container_native_virtualization:4"
                ],
                "defaultStatus": "unaffected",
                "packageName": "container-native-virtualization/kubevirt-apiserver-proxy-rhel9",
                "product": "Red Hat OpenShift Virtualization 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:container_native_virtualization:4"
                ],
                "defaultStatus": "affected",
                "packageName": "kubevirt",
                "product": "Red Hat OpenShift Virtualization 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openstack:16.2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "golang-github-infrawatch-apputils",
                "product": "Red Hat OpenStack Platform 16.2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openstack:16.2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "rhosp-rhel8/osp-director-agent",
                "product": "Red Hat OpenStack Platform 16.2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openstack:17.1"
                ],
                "defaultStatus": "unaffected",
                "packageName": "collectd-libpod-stats",
                "product": "Red Hat OpenStack Platform 17.1",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openstack:17.1"
                ],
                "defaultStatus": "affected",
                "packageName": "etcd",
                "product": "Red Hat OpenStack Platform 17.1",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openstack:17.1"
                ],
                "defaultStatus": "unaffected",
                "packageName": "golang-github-infrawatch-apputils",
                "product": "Red Hat OpenStack Platform 17.1",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openstack:17.1"
                ],
                "defaultStatus": "unaffected",
                "packageName": "rhosp-rhel9/osp-director-agent",
                "product": "Red Hat OpenStack Platform 17.1",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openstack:18.0"
                ],
                "defaultStatus": "unaffected",
                "packageName": "golang-github-openstack-k8s-operators-os-diff",
                "product": "Red Hat OpenStack Platform 18.0",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openstack:18.0"
                ],
                "defaultStatus": "unaffected",
                "packageName": "rhoso-operators/ovn-rhel9-operator",
                "product": "Red Hat OpenStack Platform 18.0",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:satellite:6"
                ],
                "defaultStatus": "affected",
                "packageName": "satellite:el8/yggdrasil-worker-forwarder",
                "product": "Red Hat Satellite 6",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:service_interconnect:1"
                ],
                "defaultStatus": "unaffected",
                "packageName": "skupper-cli",
                "product": "Red Hat Service Interconnect 1",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:service_interconnect:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "skupper-cli",
                "product": "Red Hat Service Interconnect 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_security_profiles_operator:1"
                ],
                "defaultStatus": "affected",
                "packageName": "compliance/openshift-security-profiles-rhel8-operator",
                "product": "Security Profiles Operator",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:zero_trust_workload_identity_manager:1"
                ],
                "defaultStatus": "affected",
                "packageName": "zero-trust-workload-identity-manager/spiffe-csi-driver-rhel9",
                "product": "Zero Trust Workload Identity Manager",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:zero_trust_workload_identity_manager:0"
                ],
                "defaultStatus": "affected",
                "packageName": "zero-trust-workload-identity-manager/spiffe-spire-agent-rhel9",
                "product": "Zero Trust Workload Identity Manager - Tech Preview",
                "vendor": "Red Hat"
              }
            ],
            "datePublic": "2026-05-22T15:01:21.462Z",
            "descriptions": [
              {
                "lang": "en",
                "value": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected."
              }
            ],
            "metrics": [
              {
                "other": {
                  "content": {
                    "namespace": "https://access.redhat.com/security/updates/classification/",
                    "value": "Important"
                  },
                  "type": "Red Hat severity rating"
                }
              },
              {
                "cvssV3_1": {
                  "attackComplexity": "HIGH",
                  "attackVector": "NETWORK",
                  "availabilityImpact": "NONE",
                  "baseScore": 8.2,
                  "baseSeverity": "HIGH",
                  "confidentialityImpact": "HIGH",
                  "integrityImpact": "HIGH",
                  "privilegesRequired": "LOW",
                  "scope": "CHANGED",
                  "userInteraction": "NONE",
                  "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
                  "version": "3.1"
                },
                "format": "CVSS"
              }
            ],
            "problemTypes": [
              {
                "descriptions": [
                  {
                    "cweId": "CWE-1289",
                    "description": "Improper Validation of Unsafe Equivalence in Input",
                    "lang": "en",
                    "type": "CWE"
                  }
                ]
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-09-10T12:05:04.748Z",
              "orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
              "shortName": "redhat-SADP"
            },
            "references": [
              {
                "tags": [
                  "vdb-entry",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/security/cve/CVE-2026-39821"
              },
              {
                "name": "RHBZ#2480756",
                "tags": [
                  "issue-tracking",
                  "x_refsource_REDHAT"
                ],
                "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
              },
              {
                "tags": [
                  "x_sadp-csaf-vex"
                ],
                "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-39821.json"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:42079"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:42080"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:41019"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:54191"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:42078"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:54757"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:54580"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:34789"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:42082"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:36796"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:57845"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:62549"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:42150"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:42151"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:42240"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:49702"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:56143"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:59546"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:53413"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:63134"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:53374"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:51187"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:30855"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:46395"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:37436"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:35827"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:35826"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:65534"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:34357"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:39005"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:39573"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:38995"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:30853"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:35830"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:35831"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:66016"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:41930"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:61253"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:65359"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:61245"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:60354"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:57649"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:59549"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:53412"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:59562"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:60315"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:49712"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:51112"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:56223"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:52826"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:53415"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:57541"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:54401"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:30854"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:37435"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:35828"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:35829"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:65886"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:34359"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:65153"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:39879"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:54531"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:34342"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:36808"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:34364"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:56340"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:47952"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:50843"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:41030"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:44622"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:47149"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:53530"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:51033"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:43692"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:60387"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:30651"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:47737"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:26546"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:26547"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:36207"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:42132"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:42142"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:36651"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:40945"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:40118"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:33531"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:33524"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:23262"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:23264"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:54441"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:41928"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:50300"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:43038"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:42644"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:65126"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:60520"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:36648"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:41036"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:36820"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:35994"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:35993"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:33155"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:33160"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:33163"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:33173"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:33183"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:54287"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:54284"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:54286"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:54285"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:54274"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:54283"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:44624"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:56431"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:37387"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:41031"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:42146"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:43052"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:42796"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:41066"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:54395"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:40262"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:51341"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:51194"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:36797"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:42043"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:42047"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:42050"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:42051"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:42049"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:42048"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:42852"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:54435"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:57194"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:36105"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:36167"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:41055"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:47735"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:30650"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:36883"
              }
            ],
            "solutions": [
              {
                "lang": "en",
                "value": "RHSA-2026:42079: Red Hat Ansible Automation Platform 2.6 for RHEL 10, Red Hat Ansible Automation Platform 2.6 for RHEL 9"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:42080: Red Hat Ansible Automation Platform 2.7 for RHEL 10, Red Hat Ansible Automation Platform 2.7 for RHEL 9"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:41019: RHEM 1.1 for RHEL 10, RHEM 1.1 for RHEL 9"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:54191: Red Hat Enterprise Linux Server (v. 7 ELS)"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:42078: Red Hat Ansible Automation Platform 2.5 for RHEL 8, Red Hat Ansible Automation Platform 2.5 for RHEL 9"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:54757: Red Hat OpenStack Platform 16.2"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:54580: Red Hat OpenShift Container Platform 4.20"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:34789: Red Hat OpenShift Container Platform 4.22"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:42082: Red Hat Satellite 6.16 for RHEL 8, Red Hat Satellite 6.16 for RHEL 9"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:36796: RHEM 1.0 for RHEL 9"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:57845: Red Hat OpenShift Container Platform 4.16"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:62549: Red Hat OpenShift Container Platform 4.16"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:42150: Red Hat Satellite 6.17 for RHEL 9"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:42151: Red Hat Satellite 6.18 for RHEL 9"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:42240: Red Hat Satellite 6.19 for RHEL 9"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:49702: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:56143: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:59546: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:53413: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:63134: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:53374: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:51187: Red Hat Enterprise Linux AppStream EUS (v. 10.0), Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:30855: Red Hat Enterprise Linux AppStream (v. 10)"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:46395: Red Hat Enterprise Linux AppStream (v. 10)"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:37436: Red Hat Enterprise Linux AppStream (v. 10)"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:35827: Red Hat Enterprise Linux AppStream (v. 10)"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:35826: Red Hat Enterprise Linux AppStream (v. 10)"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:65534: Red Hat Enterprise Linux AppStream (v. 10)"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:34357: Red Hat Enterprise Linux AppStream (v. 10)"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:39005: Red Hat Enterprise Linux AppStream (v. 10)"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:39573: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:38995: Red Hat Enterprise Linux AppStream (v. 8)"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:30853: Red Hat Enterprise Linux AppStream (v. 8)"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:35830: Red Hat Enterprise Linux AppStream (v. 8)"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:35831: Red Hat Enterprise Linux AppStream (v. 8)"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:66016: Red Hat Enterprise Linux AppStream (v. 8)"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:41930: Red Hat Enterprise Linux AppStream (v. 8)"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:61253: Red Hat Enterprise Linux AppStream E4S (v.9.2)"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:65359: Red Hat Enterprise Linux AppStream E4S (v.9.2)"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:61245: Red Hat Enterprise Linux AppStream E4S (v.9.2)"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:60354: Red Hat Enterprise Linux AppStream E4S (v.9.2)"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:57649: Red Hat Enterprise Linux AppStream E4S (v.9.4)"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:59549: Red Hat Enterprise Linux AppStream E4S (v.9.4)"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:53412: Red Hat Enterprise Linux AppStream E4S (v.9.4)"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:59562: Red Hat Enterprise Linux AppStream E4S (v.9.4)"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:60315: Red Hat Enterprise Linux AppStream E4S (v.9.4)"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:49712: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:51112: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:56223: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:52826: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:53415: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:57541: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:54401: Red Hat CodeReady Linux Builder EUS (v.9.6), Red Hat Enterprise Linux AppStream EUS (v.9.6)"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:30854: Red Hat Enterprise Linux AppStream (v. 9)"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:37435: Red Hat Enterprise Linux AppStream (v. 9)"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:35828: Red Hat Enterprise Linux AppStream (v. 9)"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:35829: Red Hat Enterprise Linux AppStream (v. 9)"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:65886: Red Hat Enterprise Linux AppStream (v. 9)"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:34359: Red Hat Enterprise Linux AppStream (v. 9)"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:65153: Red Hat Enterprise Linux AppStream (v. 9)"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:39879: Red Hat Enterprise Linux AppStream (v. 9), Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:54531: Cert Manager support for Red Hat OpenShift release 1.19"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:34342: Cluster Observability Operator 1.5.0"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:36808: DevWorkspace Operator 0.42"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:34364: Logging Subsystem for Red Hat OpenShift 6.4"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:56340: Logging Subsystem for Red Hat OpenShift 6.5"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:47952: Logging for Red Hat OpenShift 6.2"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:50843: Logging for Red Hat OpenShift 6"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:41030: Multicluster Global Hub 1.4.5"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:44622: Multicluster Global Hub 1.6.5"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:47149: Multicluster Global Hub 1.7.0"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:53530: Multicluster Global Hub 1.7.0"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:51033: OpenShift API for Data Protection 1.3"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:43692: OpenShift API for Data Protection 1.6"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:60387: Red Hat Advanced Cluster Management for Kubernetes 2.11"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:30651: Red Hat Advanced Cluster Management for Kubernetes 2.13"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:47737: Red Hat Advanced Cluster Management for Kubernetes 2.13"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:26546: Red Hat Advanced Cluster Security 4.9"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:26547: Red Hat Advanced Cluster Security for Kubernetes 4.10"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:36207: Red Hat Advanced Cluster Security for Kubernetes 4.11"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:42132: Red Hat Ansible Automation Platform 2.6"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:42142: Red Hat Ansible Automation Platform 2.7"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:36651: Red Hat Edge Manager 1.0"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:40945: Red Hat Edge Manager 1.1"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:40118: Red Hat Edge Manager 1.1"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:33531: Red Hat Enterprise Linux AI 3.4"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:33524: Red Hat Enterprise Linux AI 3.4"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:23262: Red Hat Hardened Images"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:23264: Red Hat Hardened Images"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:54441: Red Hat Lightspeed (formerly Insights) for Runtimes 1.0"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:41928: Red Hat Migration Toolkit 1.8"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:50300: Red Hat Migration Toolkit for Applications 8.1"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:43038: Red Hat Migration Toolkit for Applications 8.2"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:42644: Red Hat OpenShift AI 2.25"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:65126: Red Hat OpenShift AI 2.25"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:60520: Red Hat OpenShift AI 3.4"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:36648: Red Hat OpenShift Builds 1.7.3"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:41036: Red Hat OpenShift Builds 1.8.1"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:36820: Red Hat OpenShift Dev Spaces 3.29"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:35994: Red Hat OpenShift GitOps 1.19"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:35993: Red Hat OpenShift GitOps 1.20"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:33155: Red Hat OpenShift Service Mesh 2.6"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:33160: Red Hat OpenShift Service Mesh 3.0"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:33163: Red Hat OpenShift Service Mesh 3.1"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:33173: Red Hat OpenShift Service Mesh 3.2"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:33183: Red Hat OpenShift Service Mesh 3.3"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:54287: Red Hat OpenShift Workload Availability 0.12"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:54284: Red Hat OpenShift Workload Availability 0.13"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:54286: Red Hat OpenShift Workload Availability 0.3"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:54285: Red Hat OpenShift Workload Availability 0.7"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:54274: Red Hat OpenShift Workload Availability 0.8"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:54283: Red Hat OpenShift Workload Availability 5.7"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:44624: Red Hat OpenShift distributed tracing 3.10.2"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:56431: Red Hat Openshift Data Foundation 4.18"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:37387: Red Hat Openshift Data Foundation 4.22"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:41031: Red Hat Quay 3.10"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:42146: Red Hat Quay 3.12"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:43052: Red Hat Quay 3.12"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:42796: Red Hat Quay 3.15"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:41066: Red Hat Quay 3.16"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:54395: Red Hat Quay 3.17"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:40262: Red Hat Quay 3.9"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:51341: Red Hat Satellite 6.18"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:51194: Red Hat Satellite 6.19"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:36797: Red Hat Trusted Artifact Signer 1.4"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:42043: Red Hat Web Terminal 1.11"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:42047: Red Hat Web Terminal 1.12"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:42050: Red Hat Web Terminal 1.13"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:42051: Red Hat Web Terminal 1.14"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:42049: Red Hat Web Terminal 1.15"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:42048: Red Hat Web Terminal 1.16"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:42852: Red Hat multicluster global hub 1.5.3"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:54435: Streams for Apache Kafka 3.2.1"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:57194: multicluster engine for Kubernetes 2.11"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:36105: multicluster engine for Kubernetes 2.6"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:36167: multicluster engine for Kubernetes 2.6"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:41055: multicluster engine for Kubernetes 2.6"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:47735: multicluster engine for Kubernetes 2.8"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:30650: multicluster engine for Kubernetes 2.8"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:36883: multicluster engine for Kubernetes 2.9"
              }
            ],
            "timeline": [
              {
                "lang": "en",
                "time": "2026-05-22T16:00:52.844Z",
                "value": "Reported to Red Hat."
              },
              {
                "lang": "en",
                "time": "2026-05-22T15:01:21.462Z",
                "value": "Made public."
              }
            ],
            "title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
            "workarounds": [
              {
                "lang": "en",
                "value": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds."
              }
            ],
            "x_adpType": "supplier",
            "x_generator": {
              "engine": "sadp-cli 1.0.0"
            }
          }
        ],
        "cna": {
          "affected": [
            {
              "collectionURL": "https://pkg.go.dev",
              "defaultStatus": "unaffected",
              "packageName": "net/http",
              "product": "net/http",
              "programRoutines": [
                {
                  "name": "idnaASCII"
                },
                {
                  "name": "Client.CloseIdleConnections"
                },
                {
                  "name": "Client.Do"
                },
                {
                  "name": "Client.Get"
                },
                {
                  "name": "Client.Head"
                },
                {
                  "name": "Client.Post"
                },
                {
                  "name": "Client.PostForm"
                },
                {
                  "name": "ClientConn.Close"
                },
                {
                  "name": "ClientConn.RoundTrip"
                },
                {
                  "name": "Get"
                },
                {
                  "name": "Head"
                },
                {
                  "name": "Post"
                },
                {
                  "name": "PostForm"
                },
                {
                  "name": "Transport.CloseIdleConnections"
                },
                {
                  "name": "Transport.NewClientConn"
                },
                {
                  "name": "Transport.RoundTrip"
                },
                {
                  "name": "http1ClientConn.Close"
                },
                {
                  "name": "http1ClientConn.RoundTrip"
                },
                {
                  "name": "http2ClientConn.RoundTrip"
                },
                {
                  "name": "http2RoundTripper.RoundTrip"
                }
              ],
              "vendor": "Go standard library",
              "versions": [
                {
                  "lessThan": "1.25.13",
                  "status": "affected",
                  "version": "0",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.26.6",
                  "status": "affected",
                  "version": "1.26.0-0",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.27.0-rc.3",
                  "status": "affected",
                  "version": "1.27.0-0",
                  "versionType": "semver"
                }
              ]
            },
            {
              "collectionURL": "https://pkg.go.dev",
              "defaultStatus": "unaffected",
              "packageName": "net/http/internal/http2",
              "product": "net/http/internal/http2",
              "programRoutines": [
                {
                  "name": "authorityAddr"
                },
                {
                  "name": "Transport.AddConn"
                },
                {
                  "name": "Transport.RoundTrip"
                },
                {
                  "name": "Transport.RoundTripOpt"
                }
              ],
              "vendor": "Go standard library",
              "versions": [
                {
                  "lessThan": "1.25.13",
                  "status": "affected",
                  "version": "0",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.26.6",
                  "status": "affected",
                  "version": "1.26.0-0",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.27.0-rc.3",
                  "status": "affected",
                  "version": "1.27.0-0",
                  "versionType": "semver"
                }
              ]
            },
            {
              "collectionURL": "https://pkg.go.dev",
              "defaultStatus": "unaffected",
              "packageName": "golang.org/x/net/idna",
              "product": "golang.org/x/net/idna",
              "programRoutines": [
                {
                  "name": "Profile.process"
                },
                {
                  "name": "Profile.ToASCII"
                },
                {
                  "name": "Profile.ToUnicode"
                },
                {
                  "name": "ToASCII"
                },
                {
                  "name": "ToUnicode"
                }
              ],
              "vendor": "golang.org/x/net",
              "versions": [
                {
                  "lessThan": "0.55.0",
                  "status": "affected",
                  "version": "0",
                  "versionType": "semver"
                }
              ]
            }
          ],
          "credits": [
            {
              "lang": "en",
              "value": "KC1zs4 (https://github.com/KC1zs4)"
            },
            {
              "lang": "en",
              "value": "Longwei Wang (https://github.com/gn00295120)"
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. For example, ToUnicode(\"xn--example-.com\") incorrectly returns the name \"example.com\" rather than an error. This behavior can lead to privilege escalation in programs using the idna package. For example, a program which performs privilege checks on the ASCII hostname may reject \"example.com\" but permit \"xn--example-.com\". If that program subsequently converts the ASCII hostname to Unicode, it will inadvertently permits access to the Unicode name \"example.com\"."
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "description": "CWE-1289: Improper Validation of Unsafe Equivalence in Input",
                  "lang": "en"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-08-21T21:01:48.612Z",
            "orgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
            "shortName": "Go"
          },
          "references": [
            {
              "url": "https://go.dev/cl/767220"
            },
            {
              "url": "https://go.dev/issue/78760"
            },
            {
              "url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
            },
            {
              "url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
            },
            {
              "url": "https://pkg.go.dev/vuln/GO-2026-5026"
            }
          ],
          "title": "Invoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna"
        }
      },
      "cveMetadata": {
        "assignerOrgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
        "assignerShortName": "Go",
        "cveId": "CVE-2026-39821",
        "datePublished": "2026-05-22T15:01:21.462Z",
        "dateReserved": "2026-04-07T18:13:03.526Z",
        "dateUpdated": "2026-09-10T12:05:04.748Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2026-6322 (GCVE-0-2026-6322)

    Vulnerability from nvd – Published: 2026-05-05 10:29 – Updated: 2026-09-10 12:04
    VLAI
    Title
    fast-uri vulnerable to host confusion via percent-encoded authority delimiters
    Summary
    fast-uri normalize() decoded percent-encoded authority delimiters inside the host component and then re-emitted them as raw delimiters during serialization. A host that combined an allowed domain, an encoded at-sign, and a different domain was re-emitted with the at-sign as a raw userinfo separator, changing the URI's authority to the second domain. Applications that normalize untrusted URLs before host allowlist checks, redirect validation, or outbound request routing can be steered to a different authority than the input appeared to specify. Versions <= 3.1.1 are affected. Update to 3.1.2 or later.
    SSVC
    Exploitation: none Automatable: yes Technical Impact: partial
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-05-05 12:55 UTC
    CWE
    • CWE-436 - Interpretation Conflict
    • CWE-140 - Improper Neutralization of Delimiters
    References
    URL Tags
    https://github.com/fastify/fast-uri/security/advi…
    https://cna.openjsf.org/security-advisories.html
    https://access.redhat.com/security/cve/CVE-2026-6322 vdb-entryx_refsource_REDHAT
    https://bugzilla.redhat.com/show_bug.cgi?id=2466684 issue-trackingx_refsource_REDHAT
    https://security.access.redhat.com/data/csaf/v2/v… x_sadp-csaf-vex
    https://access.redhat.com/errata/RHSA-2026:42078 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:34160 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:34342 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:37385 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:25273 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:34374 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:42142 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:41951 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:36754 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:26234 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:29197 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:61783 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:36651 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:40945 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:40118 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:60855 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:41928 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:43038 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:60520 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:57487 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:54555 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:34766 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:37628 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:29800 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:34770 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:37186 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:29834 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:29796 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:29795 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:56431 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:56366 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:57013 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:56968 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:56928 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:33683 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:30076 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:41066 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:54395 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:28571 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:26225 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:25271 vendor-advisoryx_refsource_REDHAT
    Impacted products
    Vendor Product Version
    fast-uri fast-uri Affected: 0 , < 3.1.2 (semver)
    Unaffected: 3.1.2 (semver)
    Create a notification for this product.
    Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 8 Unaffected: 0:2.5.20260715-1.el8ap , < * (rpm)
        cpe:/a:redhat:ansible_automation_platform:2.5::el8
    Create a notification for this product.
    Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 9 Unaffected: 0:2.5.20260715-1.el9ap , < * (rpm)
        cpe:/a:redhat:ansible_automation_platform:2.5::el9
    Create a notification for this product.
    Red Hat Red Hat Ansible Automation Platform 2.6 for RHEL 9 Unaffected: 0:2.6.10-1.el9ap , < * (rpm)
        cpe:/a:redhat:ansible_automation_platform:2.6::el9
    Create a notification for this product.
    Red Hat Red Hat Data Grid 8.6.2     cpe:/a:redhat:jboss_data_grid:8
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 10 Unaffected: 0:1.1.1-1.el10_2 , < * (rpm)
        cpe:/o:redhat:enterprise_linux:10.2
    Create a notification for this product.
    Red Hat Cluster Observability Operator 1.5.0 Unaffected: 1782840519 , < * (rpm)
        cpe:/a:redhat:cluster_observability_operator:1.5::el9
    Create a notification for this product.
    Red Hat Cluster Observability Operator 1.5.0 Unaffected: 1782839981 , < * (rpm)
        cpe:/a:redhat:cluster_observability_operator:1.5::el9
    Create a notification for this product.
    Red Hat Cluster Observability Operator 1.5.0 Unaffected: 1782839193 , < * (rpm)
        cpe:/a:redhat:cluster_observability_operator:1.5::el9
    Create a notification for this product.
    Red Hat Cluster Observability Operator 1.5.0 Unaffected: 1782838753 , < * (rpm)
        cpe:/a:redhat:cluster_observability_operator:1.5::el9
    Create a notification for this product.
    Red Hat Cluster Observability Operator 1.5.0 Unaffected: 1782839279 , < * (rpm)
        cpe:/a:redhat:cluster_observability_operator:1.5::el9
    Create a notification for this product.
    Red Hat Cluster Observability Operator 1.5.0 Unaffected: 1782840539 , < * (rpm)
        cpe:/a:redhat:cluster_observability_operator:1.5::el9
    Create a notification for this product.
    Red Hat Cluster Observability Operator 1.5.0 Unaffected: 1782841925 , < * (rpm)
        cpe:/a:redhat:cluster_observability_operator:1.5::el9
    Create a notification for this product.
    Red Hat Cluster Observability Operator 1.5.0 Unaffected: 1782838476 , < * (rpm)
        cpe:/a:redhat:cluster_observability_operator:1.5::el9
    Create a notification for this product.
    Red Hat Cluster Observability Operator 1.5.0 Unaffected: 1782839996 , < * (rpm)
        cpe:/a:redhat:cluster_observability_operator:1.5::el9
    Create a notification for this product.
    Red Hat Cluster Observability Operator 1.5.0 Unaffected: 1782839494 , < * (rpm)
        cpe:/a:redhat:cluster_observability_operator:1.5::el9
    Create a notification for this product.
    Red Hat multicluster engine for Kubernetes 2.11 Unaffected: 1780910888 , < * (rpm)
        cpe:/a:redhat:multicluster_engine:2.11::el9
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.16 Unaffected: 1780600823 , < * (rpm)
        cpe:/a:redhat:acm:2.16::el9
    Create a notification for this product.
    Red Hat Red Hat Ansible Automation Platform 2.6 Unaffected: 1782761510 , < * (rpm)
        cpe:/a:redhat:ansible_automation_platform:2.6::el9
    Create a notification for this product.
    Red Hat Red Hat Ansible Automation Platform 2.6 Unaffected: 1782721130 , < * (rpm)
        cpe:/a:redhat:ansible_automation_platform:2.6::el9
    Create a notification for this product.
    Red Hat Red Hat Ansible Automation Platform 2.7 Unaffected: 1783919486 , < * (rpm)
        cpe:/a:redhat:ansible_automation_platform:2.7::el9
    Create a notification for this product.
    Red Hat Red Hat Developer Hub 1.10 Unaffected: 1783448184 , < * (rpm)
        cpe:/a:redhat:rhdh:1.10::el9
    Create a notification for this product.
    Red Hat Red Hat Developer Hub 1.9 Unaffected: 1781187342 , < * (rpm)
        cpe:/a:redhat:rhdh:1.9::el9
    Create a notification for this product.
    Red Hat Red Hat Discovery 2 Unaffected: 1782166952 , < * (rpm)
    Unaffected: 1788206196 , < * (rpm)
        cpe:/a:redhat:discovery:2::el9
    Create a notification for this product.
    Red Hat Red Hat Edge Manager 1.0 Unaffected: 1783502765 , < * (rpm)
        cpe:/a:redhat:edge_manager:1.0::el9
    Create a notification for this product.
    Red Hat Red Hat Edge Manager 1.0 Unaffected: 1783502438 , < * (rpm)
        cpe:/a:redhat:edge_manager:1.0::el9
    Create a notification for this product.
    Red Hat Red Hat Edge Manager 1.1 Unaffected: 1784194938 , < * (rpm)
        cpe:/a:redhat:edge_manager:1.1::el10
    Create a notification for this product.
    Red Hat Red Hat Edge Manager 1.1 Unaffected: 1784194574 , < * (rpm)
        cpe:/a:redhat:edge_manager:1.1::el10
    Create a notification for this product.
    Red Hat Red Hat Edge Manager 1.1 Unaffected: 1784126822 , < * (rpm)
        cpe:/a:redhat:edge_manager:1.1::el9
    Create a notification for this product.
    Red Hat Red Hat Edge Manager 1.1 Unaffected: 1784127736 , < * (rpm)
        cpe:/a:redhat:edge_manager:1.1::el9
    Create a notification for this product.
    Red Hat Red Hat Hardened Images Unaffected: 13.1.3-0.3.hum1 , < * (rpm)
        cpe:/a:redhat:hummingbird:1
    Create a notification for this product.
    Red Hat Red Hat Migration Toolkit 1.8 Unaffected: 1783690532 , < * (rpm)
        cpe:/a:redhat:rhmt:1.8::el8
    Create a notification for this product.
    Red Hat Red Hat Migration Toolkit for Applications 8.2 Unaffected: 1784109883 , < * (rpm)
        cpe:/a:redhat:migration_toolkit_applications:8.2::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 3.4 Unaffected: 1787347991 , < * (rpm)
        cpe:/a:redhat:openshift_ai:3.4::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 3.4 Unaffected: 1787250508 , < * (rpm)
        cpe:/a:redhat:openshift_ai:3.4::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 3.4 Unaffected: 1787251550 , < * (rpm)
        cpe:/a:redhat:openshift_ai:3.4::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 3.4 Unaffected: 1786611759 , < * (rpm)
        cpe:/a:redhat:openshift_ai:3.4::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 3.4 Unaffected: 1787251250 , < * (rpm)
        cpe:/a:redhat:openshift_ai:3.4::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 3.4 Unaffected: 1786612219 , < * (rpm)
        cpe:/a:redhat:openshift_ai:3.4::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 3.4 Unaffected: 1787250617 , < * (rpm)
        cpe:/a:redhat:openshift_ai:3.4::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 3.4 Unaffected: 1787121387 , < * (rpm)
        cpe:/a:redhat:openshift_ai:3.4::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Container Platform 4.18 Unaffected: 1787031447 , < * (rpm)
        cpe:/a:redhat:openshift:4.18::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Container Platform 4.19 Unaffected: 1782880472 , < * (rpm)
        cpe:/a:redhat:openshift:4.19::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Container Platform 4.19 Unaffected: 1786486822 , < * (rpm)
        cpe:/a:redhat:openshift:4.19::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Container Platform 4.20 Unaffected: 1782313844 , < * (rpm)
        cpe:/a:redhat:openshift:4.20::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Container Platform 4.20 Unaffected: 1783602326 , < * (rpm)
        cpe:/a:redhat:openshift:4.20::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Container Platform 4.21 Unaffected: 1782308519 , < * (rpm)
        cpe:/a:redhat:openshift:4.21::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Container Platform 4.21 Unaffected: 1782914001 , < * (rpm)
        cpe:/a:redhat:openshift:4.21::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Container Platform 4.21 Unaffected: 1783502338 , < * (rpm)
        cpe:/a:redhat:openshift:4.21::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Container Platform 4.22 Unaffected: 1782224390 , < * (rpm)
        cpe:/a:redhat:openshift:4.22::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Container Platform 4.22 Unaffected: 1782224316 , < * (rpm)
        cpe:/a:redhat:openshift:4.22::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Container Platform 4.22 Unaffected: 1782224099 , < * (rpm)
        cpe:/a:redhat:openshift:4.22::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.18 Unaffected: 1786705347 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.18::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.18 Unaffected: 1786706101 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.18::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.18 Unaffected: 1786705558 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.18::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.18 Unaffected: 1786705646 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.18::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.18 Unaffected: 1786706138 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.18::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.18 Unaffected: 1786705741 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.18::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.18 Unaffected: 1786705777 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.18::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.18 Unaffected: 1786705802 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.18::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.18 Unaffected: 1786705938 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.18::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.18 Unaffected: 1786706577 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.18::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.18 Unaffected: 1786706125 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.18::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.18 Unaffected: 1786706177 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.18::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.18 Unaffected: 1786706188 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.18::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.18 Unaffected: 1786706679 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.18::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.18 Unaffected: 1786706357 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.18::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.18 Unaffected: 1786706612 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.18::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.18 Unaffected: 1786706644 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.18::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.18 Unaffected: 1786706659 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.18::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.18 Unaffected: 1786706880 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.18::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.19 Unaffected: 1786701839 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.19::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.19 Unaffected: 1786701555 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.19::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.19 Unaffected: 1786702052 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.19::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.19 Unaffected: 1786702559 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.19::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.19 Unaffected: 1786702713 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.19::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.19 Unaffected: 1786702264 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.19::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.19 Unaffected: 1786702448 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.19::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.19 Unaffected: 1786702276 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.19::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.19 Unaffected: 1786702440 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.19::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.19 Unaffected: 1786702315 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.19::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.19 Unaffected: 1786703071 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.19::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.19 Unaffected: 1786702563 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.19::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.19 Unaffected: 1786702636 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.19::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.19 Unaffected: 1786702623 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.19::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.19 Unaffected: 1786703137 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.19::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.19 Unaffected: 1786702716 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.19::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.19 Unaffected: 1786702872 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.19::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.19 Unaffected: 1786702949 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.19::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.19 Unaffected: 1786702917 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.19::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.19 Unaffected: 1786703143 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.19::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.20 Unaffected: 1786627460 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.20::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.20 Unaffected: 1786626399 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.20::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.20 Unaffected: 1786628235 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.20::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.20 Unaffected: 1786627106 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.20::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.20 Unaffected: 1786629761 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.20::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.20 Unaffected: 1786627559 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.20::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.20 Unaffected: 1786687918 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.20::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.20 Unaffected: 1786629478 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.20::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.20 Unaffected: 1786628142 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.20::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.20 Unaffected: 1786631508 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.20::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.20 Unaffected: 1786628053 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.20::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.20 Unaffected: 1786627382 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.20::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.20 Unaffected: 1786627430 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.20::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.20 Unaffected: 1786629076 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.20::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.20 Unaffected: 1786627469 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.20::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.20 Unaffected: 1786644072 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.20::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.20 Unaffected: 1786688215 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.20::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.20 Unaffected: 1786628340 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.20::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.20 Unaffected: 1786628623 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.20::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.20 Unaffected: 1786632256 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.20::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.20 Unaffected: 1786628935 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.20::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.20 Unaffected: 1786629548 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.20::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.21 Unaffected: 1786627281 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.21::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.21 Unaffected: 1786627168 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.21::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.21 Unaffected: 1786628067 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.21::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.21 Unaffected: 1786628657 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.21::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.21 Unaffected: 1786627792 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.21::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.21 Unaffected: 1786698066 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.21::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.21 Unaffected: 1786627823 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.21::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.21 Unaffected: 1786628998 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.21::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.21 Unaffected: 1786697443 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.21::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.21 Unaffected: 1786628916 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.21::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.21 Unaffected: 1786630412 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.21::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.21 Unaffected: 1786629773 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.21::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.21 Unaffected: 1786630739 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.21::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.21 Unaffected: 1786628303 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.21::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.21 Unaffected: 1786629324 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.21::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.21 Unaffected: 1786628605 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.21::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.21 Unaffected: 1786631438 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.21::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.21 Unaffected: 1786697305 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.21::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.21 Unaffected: 1786644678 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.21::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.21 Unaffected: 1786634168 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.21::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.21 Unaffected: 1786633448 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.21::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.21 Unaffected: 1786634233 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.21::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.21 Unaffected: 1786633986 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.21::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.21 Unaffected: 1786633677 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.21::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.21 Unaffected: 1786644362 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.21::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.22 Unaffected: 1787057250 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.22::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.22 Unaffected: 1787057964 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.22::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.22 Unaffected: 1787057603 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.22::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.22 Unaffected: 1787058450 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.22::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.22 Unaffected: 1787057989 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.22::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.22 Unaffected: 1787059853 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.22::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.22 Unaffected: 1787057849 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.22::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.22 Unaffected: 1787060257 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.22::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.22 Unaffected: 1787058278 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.22::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.22 Unaffected: 1787058658 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.22::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.22 Unaffected: 1787058706 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.22::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.22 Unaffected: 1787058403 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.22::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.22 Unaffected: 1787059072 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.22::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.22 Unaffected: 1787058807 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.22::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.22 Unaffected: 1787058588 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.22::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.22 Unaffected: 1787058970 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.22::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.22 Unaffected: 1787059538 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.22::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.22 Unaffected: 1787059616 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.22::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.22 Unaffected: 1787061098 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.22::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.22 Unaffected: 1787059085 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.22::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.22 Unaffected: 1787059621 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.22::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.22 Unaffected: 1787059386 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.22::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.22 Unaffected: 1787060080 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.22::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.22 Unaffected: 1787060105 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.22::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.22 Unaffected: 1787059493 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.22::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.22 Unaffected: 1787060201 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.22::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.22 Unaffected: 1787060274 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.22::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.22 Unaffected: 1787061554 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.22::el9
    Create a notification for this product.
    Red Hat Red Hat Quay 3.10 Unaffected: 1782487717 , < * (rpm)
        cpe:/a:redhat:quay:3.10::el8
    Create a notification for this product.
    Red Hat Red Hat Quay 3.12 Unaffected: 1781937357 , < * (rpm)
        cpe:/a:redhat:quay:3.12::el8
    Create a notification for this product.
    Red Hat Red Hat Quay 3.16 Unaffected: 1783955846 , < * (rpm)
        cpe:/a:redhat:quay:3.16::el9
    Create a notification for this product.
    Red Hat Red Hat Quay 3.17 Unaffected: 1786181981 , < * (rpm)
        cpe:/a:redhat:quay:3.17::el9
    Create a notification for this product.
    Red Hat Red Hat Quay 3.9 Unaffected: 1781878070 , < * (rpm)
        cpe:/a:redhat:quay:3.9::el8
    Create a notification for this product.
    Red Hat Red Hat Satellite 6.18 Unaffected: 1781032495 , < * (rpm)
        cpe:/a:redhat:satellite:6.18::el9
    Create a notification for this product.
    Red Hat Confidential Compute Attestation     cpe:/a:redhat:confidential_compute_attestation:1
    Create a notification for this product.
    Red Hat Cryostat 4     cpe:/a:redhat:cryostat:4
    Create a notification for this product.
    Red Hat Network Observability Operator     cpe:/a:redhat:network_observ_optr:1
    Create a notification for this product.
    Red Hat OpenShift Lightspeed     cpe:/a:redhat:openshift_lightspeed
    Create a notification for this product.
    Red Hat OpenShift Pipelines     cpe:/a:redhat:openshift_pipelines:1
    Create a notification for this product.
    Red Hat OpenShift Serverless     cpe:/a:redhat:serverless:1
    Create a notification for this product.
    Red Hat Red Hat AMQ Broker 7     cpe:/a:redhat:amq_broker:7
    Create a notification for this product.
    Red Hat Red Hat Ansible Automation Platform 2     cpe:/a:redhat:ansible_automation_platform:2
    Create a notification for this product.
    Red Hat Red Hat build of Apache Camel - HawtIO 4     cpe:/a:redhat:apache_camel_hawtio:4
    Create a notification for this product.
    Red Hat Red Hat Build of Podman Desktop     cpe:/a:redhat:podman_desktop:1
    Create a notification for this product.
    Red Hat Red Hat Build of Podman Desktop - Tech Preview     cpe:/a:redhat:podman_desktop:0
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 9     cpe:/o:redhat:enterprise_linux:9
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux AI (RHEL AI) 3     cpe:/a:redhat:enterprise_linux_ai:3
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI (RHOAI)     cpe:/a:redhat:openshift_ai
    Create a notification for this product.
    Red Hat Red Hat OpenShift Container Platform 4     cpe:/a:redhat:openshift:4
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4     cpe:/a:redhat:openshift_data_foundation:4
    Create a notification for this product.
    Red Hat Red Hat OpenShift Dev Spaces     cpe:/a:redhat:openshift_devspaces:3
    Create a notification for this product.
    Red Hat Red Hat OpenShift Virtualization 4     cpe:/a:redhat:container_native_virtualization:4
    Create a notification for this product.
    Red Hat Red Hat Satellite 6     cpe:/a:redhat:satellite:6
    Create a notification for this product.
    Red Hat Self-service automation portal 2     cpe:/a:redhat:ansible_portal:2
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-6322",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "yes"
                      },
                      {
                        "Technical Impact": "partial"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-05-05T12:55:25.956279Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-05-05T12:55:43.750Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          },
          {
            "affected": [
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2.5::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "automation-gateway",
                "product": "Red Hat Ansible Automation Platform 2.5 for RHEL 8",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:2.5.20260715-1.el8ap",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2.5::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "automation-gateway",
                "product": "Red Hat Ansible Automation Platform 2.5 for RHEL 9",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:2.5.20260715-1.el9ap",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2.6::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "automation-platform-ui",
                "product": "Red Hat Ansible Automation Platform 2.6 for RHEL 9",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:2.6.10-1.el9ap",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:jboss_data_grid:8"
                ],
                "defaultStatus": "unaffected",
                "packageName": "fast-uri",
                "product": "Red Hat Data Grid 8.6.2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:10.2"
                ],
                "defaultStatus": "affected",
                "packageName": "rh-podman-desktop",
                "product": "Red Hat Enterprise Linux 10",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:1.1.1-1.el10_2",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9",
                "product": "Cluster Observability Operator 1.5.0",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782840519",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9",
                "product": "Cluster Observability Operator 1.5.0",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782839981",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9",
                "product": "Cluster Observability Operator 1.5.0",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782839193",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "cluster-observability-operator/distributed-tracing-console-plugin-rhel9",
                "product": "Cluster Observability Operator 1.5.0",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782838753",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "cluster-observability-operator/logging-console-plugin-pf4-rhel9",
                "product": "Cluster Observability Operator 1.5.0",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782839279",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "cluster-observability-operator/logging-console-plugin-pf5-rhel9",
                "product": "Cluster Observability Operator 1.5.0",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782840539",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "cluster-observability-operator/logging-console-plugin-rhel9",
                "product": "Cluster Observability Operator 1.5.0",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782841925",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "cluster-observability-operator/monitoring-console-plugin-rhel9",
                "product": "Cluster Observability Operator 1.5.0",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782838476",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9",
                "product": "Cluster Observability Operator 1.5.0",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782839996",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9",
                "product": "Cluster Observability Operator 1.5.0",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782839494",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:multicluster_engine:2.11::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "multicluster-engine/console-mce-rhel9",
                "product": "multicluster engine for Kubernetes 2.11",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1780910888",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:acm:2.16::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhacm2/console-rhel9",
                "product": "Red Hat Advanced Cluster Management for Kubernetes 2.16",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1780600823",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2.6::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "ansible-automation-platform-26/gateway-rhel9",
                "product": "Red Hat Ansible Automation Platform 2.6",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782761510",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2.6::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "ansible-automation-platform-tech-preview/mcp-server-rhel9",
                "product": "Red Hat Ansible Automation Platform 2.6",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782721130",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2.7::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "ansible-automation-platform-27/gateway-rhel9",
                "product": "Red Hat Ansible Automation Platform 2.7",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1783919486",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:rhdh:1.10::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhdh/rhdh-hub-rhel9",
                "product": "Red Hat Developer Hub 1.10",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1783448184",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:rhdh:1.9::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhdh/rhdh-hub-rhel9",
                "product": "Red Hat Developer Hub 1.9",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1781187342",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:discovery:2::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "discovery/discovery-ui-rhel9",
                "product": "Red Hat Discovery 2",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782166952",
                    "versionType": "rpm"
                  },
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1788206196",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:edge_manager:1.0::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhem/flightctl-ui-ocp-rhel9",
                "product": "Red Hat Edge Manager 1.0",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1783502765",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:edge_manager:1.0::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhem/flightctl-ui-rhel9",
                "product": "Red Hat Edge Manager 1.0",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1783502438",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:edge_manager:1.1::el10"
                ],
                "defaultStatus": "affected",
                "packageName": "rhem/flightctl-ui-ocp-rhel10",
                "product": "Red Hat Edge Manager 1.1",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1784194938",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:edge_manager:1.1::el10"
                ],
                "defaultStatus": "affected",
                "packageName": "rhem/flightctl-ui-rhel10",
                "product": "Red Hat Edge Manager 1.1",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1784194574",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:edge_manager:1.1::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhem/flightctl-ui-ocp-rhel9",
                "product": "Red Hat Edge Manager 1.1",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1784126822",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:edge_manager:1.1::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhem/flightctl-ui-rhel9",
                "product": "Red Hat Edge Manager 1.1",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1784127736",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:hummingbird:1"
                ],
                "defaultStatus": "affected",
                "packageName": "grafana13-1-main",
                "product": "Red Hat Hardened Images",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "13.1.3-0.3.hum1",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:rhmt:1.8::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "rhmtc/openshift-migration-ui-rhel8",
                "product": "Red Hat Migration Toolkit 1.8",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1783690532",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:migration_toolkit_applications:8.2::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "mta/mta-solution-server-rhel9",
                "product": "Red Hat Migration Toolkit for Applications 8.2",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1784109883",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:3.4::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-dashboard-rhel9",
                "product": "Red Hat OpenShift AI 3.4",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1787347991",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:3.4::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-mod-arch-automl-rhel9",
                "product": "Red Hat OpenShift AI 3.4",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1787250508",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:3.4::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-mod-arch-autorag-rhel9",
                "product": "Red Hat OpenShift AI 3.4",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1787251550",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:3.4::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-mod-arch-gen-ai-rhel9",
                "product": "Red Hat OpenShift AI 3.4",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786611759",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:3.4::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-mod-arch-maas-rhel9",
                "product": "Red Hat OpenShift AI 3.4",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1787251250",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:3.4::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-mod-arch-mlflow-rhel9",
                "product": "Red Hat OpenShift AI 3.4",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786612219",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:3.4::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-mod-arch-model-registry-rhel9",
                "product": "Red Hat OpenShift AI 3.4",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1787250617",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:3.4::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9",
                "product": "Red Hat OpenShift AI 3.4",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1787121387",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4.18::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift4/ose-console-rhel9",
                "product": "Red Hat OpenShift Container Platform 4.18",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1787031447",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4.19::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift4/ose-monitoring-plugin-rhel9",
                "product": "Red Hat OpenShift Container Platform 4.19",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782880472",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4.19::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift4/ose-console-rhel9",
                "product": "Red Hat OpenShift Container Platform 4.19",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786486822",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4.20::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift4/ose-monitoring-plugin-rhel9",
                "product": "Red Hat OpenShift Container Platform 4.20",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782313844",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4.20::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift4/ose-console-rhel9",
                "product": "Red Hat OpenShift Container Platform 4.20",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1783602326",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4.21::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift4/ose-monitoring-plugin-rhel9",
                "product": "Red Hat OpenShift Container Platform 4.21",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782308519",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4.21::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift4/nmstate-console-plugin-rhel9",
                "product": "Red Hat OpenShift Container Platform 4.21",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782914001",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4.21::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift4/ose-console-rhel9",
                "product": "Red Hat OpenShift Container Platform 4.21",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1783502338",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4.22::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift4/ose-console-rhel9",
                "product": "Red Hat OpenShift Container Platform 4.22",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782224390",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4.22::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift4/ose-monitoring-plugin-rhel9",
                "product": "Red Hat OpenShift Container Platform 4.22",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782224316",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4.22::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift4/nmstate-console-plugin-rhel9",
                "product": "Red Hat OpenShift Container Platform 4.22",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782224099",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/cephcsi-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.18",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786705347",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/cephcsi-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.18",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786706101",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/mcg-core-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.18",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786705558",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/mcg-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.18",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786705646",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/ocs-client-console-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.18",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786706138",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/ocs-client-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.18",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786705741",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/ocs-metrics-exporter-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.18",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786705777",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/ocs-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.18",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786705802",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-cli-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.18",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786705938",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-console-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.18",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786706577",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-cosi-sidecar-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.18",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786706125",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-csi-addons-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.18",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786706177",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-csi-addons-sidecar-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.18",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786706188",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-multicluster-console-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.18",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786706679",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-multicluster-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.18",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786706357",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-must-gather-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.18",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786706612",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.18",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786706644",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odr-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.18",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786706659",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/rook-ceph-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.18",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786706880",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.19::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/cephcsi-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.19",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786701839",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.19::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/cephcsi-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.19",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786701555",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.19::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/mcg-core-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.19",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786702052",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.19::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/mcg-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.19",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786702559",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.19::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/ocs-client-console-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.19",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786702713",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.19::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/ocs-client-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.19",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786702264",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.19::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/ocs-metrics-exporter-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.19",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786702448",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.19::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/ocs-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.19",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786702276",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.19::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-cli-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.19",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786702440",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.19::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-cloudnative-pg-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.19",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786702315",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.19::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-console-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.19",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786703071",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.19::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-cosi-sidecar-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.19",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786702563",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.19::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-csi-addons-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.19",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786702636",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.19::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-csi-addons-sidecar-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.19",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786702623",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.19::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-multicluster-console-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.19",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786703137",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.19::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-multicluster-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.19",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786702716",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.19::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-must-gather-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.19",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786702872",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.19::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.19",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786702949",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.19::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odr-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.19",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786702917",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.19::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/rook-ceph-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.19",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786703143",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/cephcsi-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.20",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786627460",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/cephcsi-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.20",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786626399",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/mcg-core-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.20",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786628235",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/mcg-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.20",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786627106",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/ocs-client-console-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.20",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786629761",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/ocs-client-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.20",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786627559",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/ocs-metrics-exporter-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.20",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786687918",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/ocs-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.20",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786629478",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-cli-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.20",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786628142",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-cloudnative-pg-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.20",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786631508",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-console-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.20",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786628053",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-cosi-sidecar-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.20",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786627382",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-csi-addons-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.20",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786627430",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-csi-addons-sidecar-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.20",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786629076",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-external-snapshotter-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.20",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786627469",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-external-snapshotter-sidecar-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.20",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786644072",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-multicluster-console-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.20",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786688215",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-multicluster-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.20",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786628340",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-must-gather-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.20",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786628623",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.20",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786632256",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odr-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.20",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786628935",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/rook-ceph-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.20",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786629548",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.21::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/cephcsi-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.21",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786627281",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.21::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/cephcsi-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.21",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786627168",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.21::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/devicefinder-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.21",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786628067",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.21::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/mcg-core-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.21",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786628657",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.21::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/mcg-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.21",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786627792",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.21::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/ocs-client-console-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.21",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786698066",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.21::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/ocs-client-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.21",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786627823",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.21::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/ocs-metrics-exporter-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.21",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786628998",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.21::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/ocs-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.21",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786697443",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.21::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-blackbox-exporter-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.21",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786628916",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.21::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-cli-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.21",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786630412",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.21::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-cloudnative-pg-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.21",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786629773",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.21::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-console-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.21",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786630739",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.21::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-cosi-sidecar-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.21",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786628303",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.21::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-csi-addons-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.21",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786629324",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.21::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-csi-addons-sidecar-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.21",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786628605",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.21::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-external-snapshotter-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.21",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786631438",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.21::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-external-snapshotter-sidecar-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.21",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786697305",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.21::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-lightspeed-rag-content-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.21",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786644678",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.21::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-multicluster-console-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.21",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786634168",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.21::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-multicluster-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.21",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786633448",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.21::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-must-gather-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.21",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786634233",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.21::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.21",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786633986",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.21::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odr-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.21",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786633677",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.21::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/rook-ceph-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.21",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786644362",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/cephcsi-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.22",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1787057250",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/cephcsi-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.22",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1787057964",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/devicefinder-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.22",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1787057603",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/mcg-core-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.22",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1787058450",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/mcg-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.22",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1787057989",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/ocs-client-console-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.22",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1787059853",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/ocs-client-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.22",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1787057849",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/ocs-metrics-exporter-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.22",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1787060257",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/ocs-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.22",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1787058278",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-blackbox-exporter-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.22",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1787058658",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-cli-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.22",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1787058706",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-cloudnative-pg-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.22",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1787058403",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-console-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.22",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1787059072",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-cosi-sidecar-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.22",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1787058807",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-csi-addons-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.22",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1787058588",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-csi-addons-sidecar-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.22",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1787058970",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-drbd-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.22",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1787059538",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-external-snapshotter-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.22",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1787059616",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-external-snapshotter-sidecar-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.22",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1787061098",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-lightspeed-rag-content-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.22",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1787059085",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-multicluster-console-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.22",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1787059621",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-multicluster-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.22",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1787059386",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-must-gather-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.22",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1787060080",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.22",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1787060105",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odr-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.22",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1787059493",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odr-volsync-plugin-mover-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.22",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1787060201",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odr-volsync-plugin-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.22",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1787060274",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/rook-ceph-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.22",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1787061554",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.10::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel8",
                "product": "Red Hat Quay 3.10",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782487717",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.12::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel8",
                "product": "Red Hat Quay 3.12",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1781937357",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.16::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel9",
                "product": "Red Hat Quay 3.16",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1783955846",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.17::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel9",
                "product": "Red Hat Quay 3.17",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786181981",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.9::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel8",
                "product": "Red Hat Quay 3.9",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1781878070",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:satellite:6.18::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "satellite/iop-vulnerability-frontend-rhel9",
                "product": "Red Hat Satellite 6.18",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1781032495",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:confidential_compute_attestation:1"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-sandboxed-containers/osc-pccs",
                "product": "Confidential Compute Attestation",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:cryostat:4"
                ],
                "defaultStatus": "unaffected",
                "packageName": "cryostat-openshift-console-plugin-npm",
                "product": "Cryostat 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:cryostat:4"
                ],
                "defaultStatus": "unaffected",
                "packageName": "grafana-infinity-datasource-npm",
                "product": "Cryostat 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:network_observ_optr:1"
                ],
                "defaultStatus": "affected",
                "packageName": "network-observability/network-observability-console-plugin-rhel9",
                "product": "Network Observability Operator",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_lightspeed"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-lightspeed/lightspeed-console-plugin-419-rhel9",
                "product": "OpenShift Lightspeed",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_lightspeed"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-lightspeed/lightspeed-console-plugin-pf5-rhel9",
                "product": "OpenShift Lightspeed",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_lightspeed"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-lightspeed/lightspeed-console-plugin-rhel9",
                "product": "OpenShift Lightspeed",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_pipelines:1"
                ],
                "defaultStatus": "unaffected",
                "packageName": "openshift-pipelines/pipelines-console-plugin-pf5-rhel9",
                "product": "OpenShift Pipelines",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_pipelines:1"
                ],
                "defaultStatus": "unaffected",
                "packageName": "openshift-pipelines/pipelines-console-plugin-rhel8",
                "product": "OpenShift Pipelines",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_pipelines:1"
                ],
                "defaultStatus": "unaffected",
                "packageName": "openshift-pipelines/pipelines-console-plugin-rhel9",
                "product": "OpenShift Pipelines",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_pipelines:1"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-pipelines/pipelines-hub-ui-rhel8",
                "product": "OpenShift Pipelines",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_pipelines:1"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-pipelines/pipelines-hub-ui-rhel9",
                "product": "OpenShift Pipelines",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:serverless:1"
                ],
                "defaultStatus": "unaffected",
                "packageName": "openshift-serverless-1/kn-eventing-integrations-aws-ddb-streams-source-rhel9",
                "product": "OpenShift Serverless",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:serverless:1"
                ],
                "defaultStatus": "unaffected",
                "packageName": "openshift-serverless-1/kn-eventing-integrations-aws-s3-sink-rhel9",
                "product": "OpenShift Serverless",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:serverless:1"
                ],
                "defaultStatus": "unaffected",
                "packageName": "openshift-serverless-1/kn-eventing-integrations-aws-s3-source-rhel9",
                "product": "OpenShift Serverless",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:serverless:1"
                ],
                "defaultStatus": "unaffected",
                "packageName": "openshift-serverless-1/kn-eventing-integrations-aws-sns-sink-rhel9",
                "product": "OpenShift Serverless",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:serverless:1"
                ],
                "defaultStatus": "unaffected",
                "packageName": "openshift-serverless-1/kn-eventing-integrations-aws-sqs-sink-rhel9",
                "product": "OpenShift Serverless",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:serverless:1"
                ],
                "defaultStatus": "unaffected",
                "packageName": "openshift-serverless-1/kn-eventing-integrations-aws-sqs-source-rhel9",
                "product": "OpenShift Serverless",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:serverless:1"
                ],
                "defaultStatus": "unaffected",
                "packageName": "openshift-serverless-1/kn-eventing-integrations-log-sink-rhel9",
                "product": "OpenShift Serverless",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:serverless:1"
                ],
                "defaultStatus": "unaffected",
                "packageName": "openshift-serverless-1/kn-eventing-integrations-timer-source-rhel9",
                "product": "OpenShift Serverless",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:serverless:1"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-serverless-1/kn-eventing-integrations-transform-jsonata-rhel9",
                "product": "OpenShift Serverless",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:amq_broker:7"
                ],
                "defaultStatus": "unaffected",
                "packageName": "fast-uri",
                "product": "Red Hat AMQ Broker 7",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "affected",
                "packageName": "ansible-automation-platform-24/lightspeed-rhel8",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "affected",
                "packageName": "ansible-automation-platform-25/lightspeed-rhel8",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "affected",
                "packageName": "ansible-automation-platform-26/lightspeed-rhel9",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "ansible-automation-platform-27/lightspeed-rhel9",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:apache_camel_hawtio:4"
                ],
                "defaultStatus": "unaffected",
                "packageName": "fast-uri",
                "product": "Red Hat build of Apache Camel - HawtIO 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:podman_desktop:1"
                ],
                "defaultStatus": "affected",
                "packageName": "rh-podman-desktop.git",
                "product": "Red Hat Build of Podman Desktop",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:podman_desktop:0"
                ],
                "defaultStatus": "affected",
                "packageName": "rhdesktop/rh-podman-desktop-ext-bootc-rhel10",
                "product": "Red Hat Build of Podman Desktop - Tech Preview",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:9"
                ],
                "defaultStatus": "affected",
                "packageName": "linux-sgx",
                "product": "Red Hat Enterprise Linux 9",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:enterprise_linux_ai:3"
                ],
                "defaultStatus": "affected",
                "packageName": "rhelai3/bootc-cuda-rhel9",
                "product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:enterprise_linux_ai:3"
                ],
                "defaultStatus": "affected",
                "packageName": "rhelai3/bootc-gaudi-rhel9",
                "product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:enterprise_linux_ai:3"
                ],
                "defaultStatus": "affected",
                "packageName": "rhelai3/bootc-rocm-rhel9",
                "product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:enterprise_linux_ai:3"
                ],
                "defaultStatus": "affected",
                "packageName": "rhelai3/disk-image-cuda-rhel9",
                "product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "unaffected",
                "packageName": "rhoai/odh-dashboard-rhel8",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "unaffected",
                "packageName": "rhoai/odh-mlflow-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-mod-arch-eval-hub-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4"
                ],
                "defaultStatus": "affected",
                "packageName": "redhat-user-workloads/art-images",
                "product": "Red Hat OpenShift Container Platform 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4"
                ],
                "defaultStatus": "affected",
                "packageName": "rhceph-dev/odf4-mcg-core-rhel9",
                "product": "Red Hat Openshift Data Foundation 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_devspaces:3"
                ],
                "defaultStatus": "affected",
                "packageName": "devspaces/dashboard-rhel9",
                "product": "Red Hat OpenShift Dev Spaces",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:container_native_virtualization:4"
                ],
                "defaultStatus": "unaffected",
                "packageName": "container-native-virtualization/kubevirt-console-plugin-rhel9",
                "product": "Red Hat OpenShift Virtualization 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:satellite:6"
                ],
                "defaultStatus": "unaffected",
                "packageName": "nodejs-compression-webpack-plugin",
                "product": "Red Hat Satellite 6",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:satellite:6"
                ],
                "defaultStatus": "unaffected",
                "packageName": "nodejs-mini-css-extract-plugin",
                "product": "Red Hat Satellite 6",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:satellite:6"
                ],
                "defaultStatus": "unaffected",
                "packageName": "nodejs-webpack",
                "product": "Red Hat Satellite 6",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:satellite:6"
                ],
                "defaultStatus": "unaffected",
                "packageName": "satellite/iop-host-inventory-frontend-rhel9",
                "product": "Red Hat Satellite 6",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_portal:2"
                ],
                "defaultStatus": "affected",
                "packageName": "ansible-automation-platform/automation-portal",
                "product": "Self-service automation portal 2",
                "vendor": "Red Hat"
              }
            ],
            "datePublic": "2026-05-05T10:29:16.378Z",
            "descriptions": [
              {
                "lang": "en",
                "value": "A flaw was found in fast-uri. A remote attacker could exploit this vulnerability by crafting a malicious Uniform Resource Identifier (URI) that contains percent-encoded authority delimiters. The fast-uri library incorrectly decodes these delimiters during normalization and then re-emits them as raw separators, which can change the URI\u0027s intended authority. This issue allows applications that perform host allowlist checks, redirect validation, or outbound request routing to be steered to a different authority than specified, potentially bypassing security controls."
              }
            ],
            "metrics": [
              {
                "other": {
                  "content": {
                    "namespace": "https://access.redhat.com/security/updates/classification/",
                    "value": "Important"
                  },
                  "type": "Red Hat severity rating"
                }
              },
              {
                "cvssV3_1": {
                  "attackComplexity": "LOW",
                  "attackVector": "NETWORK",
                  "availabilityImpact": "NONE",
                  "baseScore": 7.5,
                  "baseSeverity": "HIGH",
                  "confidentialityImpact": "NONE",
                  "integrityImpact": "HIGH",
                  "privilegesRequired": "NONE",
                  "scope": "UNCHANGED",
                  "userInteraction": "NONE",
                  "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
                  "version": "3.1"
                },
                "format": "CVSS"
              }
            ],
            "problemTypes": [
              {
                "descriptions": [
                  {
                    "cweId": "CWE-140",
                    "description": "Improper Neutralization of Delimiters",
                    "lang": "en",
                    "type": "CWE"
                  }
                ]
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-09-10T12:04:48.155Z",
              "orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
              "shortName": "redhat-SADP"
            },
            "references": [
              {
                "tags": [
                  "vdb-entry",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/security/cve/CVE-2026-6322"
              },
              {
                "name": "RHBZ#2466684",
                "tags": [
                  "issue-tracking",
                  "x_refsource_REDHAT"
                ],
                "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466684"
              },
              {
                "tags": [
                  "x_sadp-csaf-vex"
                ],
                "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6322.json"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:42078"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:34160"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:34342"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:37385"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:25273"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:34374"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:42142"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:41951"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:36754"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:26234"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:29197"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:61783"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:36651"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:40945"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:40118"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:60855"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:41928"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:43038"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:60520"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:57487"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:54555"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:34766"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:37628"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:29800"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:34770"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:37186"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:29834"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:29796"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:29795"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:56431"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:56366"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:57013"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:56968"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:56928"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:33683"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:30076"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:41066"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:54395"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:28571"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:26225"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:25271"
              }
            ],
            "solutions": [
              {
                "lang": "en",
                "value": "RHSA-2026:42078: Red Hat Ansible Automation Platform 2.5 for RHEL 8, Red Hat Ansible Automation Platform 2.5 for RHEL 9"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:34160: Red Hat Ansible Automation Platform 2.6 for RHEL 9"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:34342: Cluster Observability Operator 1.5.0"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:37385: Red Hat Enterprise Linux Extensions Channel (v. 10)"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:25273: Red Hat Advanced Cluster Management for Kubernetes 2.16"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:34374: Red Hat Ansible Automation Platform 2.6"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:42142: Red Hat Ansible Automation Platform 2.7"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:41951: Red Hat Data Grid 8.6.2"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:36754: Red Hat Developer Hub 1.10"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:26234: Red Hat Developer Hub 1.9"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:29197: Red Hat Discovery 2"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:61783: Red Hat Discovery 2"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:36651: Red Hat Edge Manager 1.0"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:40945: Red Hat Edge Manager 1.1"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:40118: Red Hat Edge Manager 1.1"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:60855: Red Hat Hardened Images"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:41928: Red Hat Migration Toolkit 1.8"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:43038: Red Hat Migration Toolkit for Applications 8.2"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:60520: Red Hat OpenShift AI 3.4"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:57487: Red Hat OpenShift Container Platform 4.18"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:54555: Red Hat OpenShift Container Platform 4.19"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:34766: Red Hat OpenShift Container Platform 4.19"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:37628: Red Hat OpenShift Container Platform 4.20"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:29800: Red Hat OpenShift Container Platform 4.20"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:34770: Red Hat OpenShift Container Platform 4.21"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:37186: Red Hat OpenShift Container Platform 4.21"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:29834: Red Hat OpenShift Container Platform 4.21"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:29796: Red Hat OpenShift Container Platform 4.22"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:29795: Red Hat OpenShift Container Platform 4.22"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:56431: Red Hat Openshift Data Foundation 4.18"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:56366: Red Hat Openshift Data Foundation 4.19"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:57013: Red Hat Openshift Data Foundation 4.20"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:56968: Red Hat Openshift Data Foundation 4.21"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:56928: Red Hat Openshift Data Foundation 4.22"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:33683: Red Hat Quay 3.10"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:30076: Red Hat Quay 3.12"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:41066: Red Hat Quay 3.16"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:54395: Red Hat Quay 3.17"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:28571: Red Hat Quay 3.9"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:26225: Red Hat Satellite 6.18"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:25271: multicluster engine for Kubernetes 2.11"
              }
            ],
            "timeline": [
              {
                "lang": "en",
                "time": "2026-05-05T11:01:00.332Z",
                "value": "Reported to Red Hat."
              },
              {
                "lang": "en",
                "time": "2026-05-05T10:29:16.378Z",
                "value": "Made public."
              }
            ],
            "title": "fast-uri: fast-uri: URI authority bypass due to improper delimiter handling",
            "x_adpType": "supplier",
            "x_generator": {
              "engine": "sadp-cli 1.0.0"
            }
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "unaffected",
              "packageURL": "pkg:npm/fast-uri",
              "product": "fast-uri",
              "vendor": "fast-uri",
              "versions": [
                {
                  "lessThan": "3.1.2",
                  "status": "affected",
                  "version": "0",
                  "versionType": "semver"
                },
                {
                  "status": "unaffected",
                  "version": "3.1.2",
                  "versionType": "semver"
                }
              ]
            }
          ],
          "credits": [
            {
              "lang": "en",
              "type": "reporter",
              "value": "Jvr"
            },
            {
              "lang": "en",
              "type": "remediation developer",
              "value": "Matteo Collina"
            },
            {
              "lang": "en",
              "type": "remediation developer",
              "value": "Ulises Gasc\u00f3n"
            },
            {
              "lang": "en",
              "type": "remediation reviewer",
              "value": "KaKa"
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "supportingMedia": [
                {
                  "base64": false,
                  "type": "text/html",
                  "value": "fast-uri normalize() decoded percent-encoded authority delimiters inside the host component and then re-emitted them as raw delimiters during serialization. A host that combined an allowed domain, an encoded at-sign, and a different domain was re-emitted with the at-sign as a raw userinfo separator, changing the URI\u0027s authority to the second domain. Applications that normalize untrusted URLs before host allowlist checks, redirect validation, or outbound request routing can be steered to a different authority than the input appeared to specify. Versions \u003c= 3.1.1 are affected. Update to 3.1.2 or later."
                }
              ],
              "value": "fast-uri normalize() decoded percent-encoded authority delimiters inside the host component and then re-emitted them as raw delimiters during serialization. A host that combined an allowed domain, an encoded at-sign, and a different domain was re-emitted with the at-sign as a raw userinfo separator, changing the URI\u0027s authority to the second domain. Applications that normalize untrusted URLs before host allowlist checks, redirect validation, or outbound request routing can be steered to a different authority than the input appeared to specify. Versions \u003c= 3.1.1 are affected. Update to 3.1.2 or later."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "baseScore": 7.5,
                "baseSeverity": "HIGH",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
                "version": "3.1"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-436",
                  "description": "CWE-436: Interpretation Conflict",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-05-05T10:29:16.378Z",
            "orgId": "ce714d77-add3-4f53-aff5-83d477b104bb",
            "shortName": "openjs"
          },
          "references": [
            {
              "url": "https://github.com/fastify/fast-uri/security/advisories/GHSA-v39h-62p7-jpjc"
            },
            {
              "url": "https://cna.openjsf.org/security-advisories.html"
            }
          ],
          "title": "fast-uri vulnerable to host confusion via percent-encoded authority delimiters",
          "x_generator": {
            "engine": "cve-kit 1.0.0"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "ce714d77-add3-4f53-aff5-83d477b104bb",
        "assignerShortName": "openjs",
        "cveId": "CVE-2026-6322",
        "datePublished": "2026-05-05T10:29:16.378Z",
        "dateReserved": "2026-04-14T20:28:09.160Z",
        "dateUpdated": "2026-09-10T12:04:48.155Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2026-42044 (GCVE-0-2026-42044)

    Vulnerability from nvd – Published: 2026-04-24 17:49 – Updated: 2026-09-10 12:04
    VLAI
    Title
    Axios: Invisible JSON Response Tampering via Prototype Pollution Gadget in `parseReviver`
    Summary
    Axios is a promise based HTTP client for the browser and Node.js. From 1.0.0 to before 1.15.2, he Axios library is vulnerable to a Prototype Pollution "Gadget" attack that allows any Object.prototype pollution in the application's dependency tree to be escalated into surgical, invisible modification of all JSON API responses — including privilege escalation, balance manipulation, and authorization bypass. The default transformResponse function at lib/defaults/index.js:124 calls JSON.parse(data, this.parseReviver), where this is the merged config object. Because parseReviver is not present in Axios defaults, not validated by assertOptions, and not subject to any constraints, a polluted Object.prototype.parseReviver function is called for every key-value pair in every JSON response, allowing the attacker to selectively modify individual values while leaving the rest of the response intact. This vulnerability is fixed in 1.15.2.
    SSVC
    Exploitation: poc Automatable: no Technical Impact: partial
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-04-24 18:11 UTC
    CWE
    • CWE-915 - Improperly Controlled Modification of Dynamically-Determined Object Attributes
    • CWE-1321 - Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
    References
    URL Tags
    https://github.com/axios/axios/security/advisorie… x_refsource_CONFIRM
    https://access.redhat.com/security/cve/CVE-2026-42044 vdb-entryx_refsource_REDHAT
    https://bugzilla.redhat.com/show_bug.cgi?id=2461624 issue-trackingx_refsource_REDHAT
    https://security.access.redhat.com/data/csaf/v2/v… x_sadp-csaf-vex
    https://access.redhat.com/errata/RHSA-2026:42078 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:25089 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:24473 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:36882 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:24539 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:25273 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:20938 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:20889 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:36107 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:21338 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:33574 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:20338 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:25041 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:50300 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:21772 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:20454 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:16534 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:16532 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:16535 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:16542 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:22840 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:22629 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:21017 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:24853 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:19375 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:41066 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:22465 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:23361 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:26214 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:26232 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:26225 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:24471 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:34608 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:25271 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:24536 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:17657 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:17699 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:19109 vendor-advisoryx_refsource_REDHAT
    Impacted products
    Vendor Product Version
    axios axios Affected: >= 1.0.0, < 1.15.2
    Create a notification for this product.
    Red Hat HawtIO HawtIO 4.4.0     cpe:/a:redhat:apache_camel_hawtio:4.4::el9
    Create a notification for this product.
    Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 8 Unaffected: 0:2.5.20260715-1.el8ap , < * (rpm)
        cpe:/a:redhat:ansible_automation_platform:2.5::el8
    Create a notification for this product.
    Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 9 Unaffected: 0:2.5.20260715-1.el9ap , < * (rpm)
        cpe:/a:redhat:ansible_automation_platform:2.5::el9
    Create a notification for this product.
    Red Hat Streams for Apache Kafka 2.9.4     cpe:/a:redhat:amq_streams:2.9::el9
    Create a notification for this product.
    Red Hat multicluster engine for Kubernetes 2.1 Unaffected: 1780917531 , < * (rpm)
        cpe:/a:redhat:multicluster_engine:2.10::el9
    Create a notification for this product.
    Red Hat multicluster engine for Kubernetes 2.11 Unaffected: 1780910888 , < * (rpm)
        cpe:/a:redhat:multicluster_engine:2.11::el9
    Create a notification for this product.
    Red Hat multicluster engine for Kubernetes 2.6 Unaffected: 1778511348 , < * (rpm)
        cpe:/a:redhat:multicluster_engine:2.6::el9
    Create a notification for this product.
    Red Hat multicluster engine for Kubernetes 2.8 Unaffected: 1778383863 , < * (rpm)
        cpe:/a:redhat:multicluster_engine:2.8::el9
    Create a notification for this product.
    Red Hat multicluster engine for Kubernetes 2.9 Unaffected: 1778532610 , < * (rpm)
        cpe:/a:redhat:multicluster_engine:2.9::el9
    Create a notification for this product.
    Red Hat Network Observability (NETOBSERV) 1.12.2 Unaffected: 1780920979 , < * (rpm)
        cpe:/a:redhat:network_observ_optr:1.12::el9
    Create a notification for this product.
    Red Hat Network Observability (NETOBSERV) 1.12.2 Unaffected: 1780556069 , < * (rpm)
        cpe:/a:redhat:network_observ_optr:1.12::el9
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.14 Unaffected: 1783451729 , < * (rpm)
        cpe:/a:redhat:acm:2.14::el9
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.15 Unaffected: 1780876734 , < * (rpm)
        cpe:/a:redhat:acm:2.15::el9
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.16 Unaffected: 1780600823 , < * (rpm)
        cpe:/a:redhat:acm:2.16::el9
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Security 4.9 Unaffected: 1779371594 , < * (rpm)
        cpe:/a:redhat:advanced_cluster_security:4.9::el8
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Security for Kubernetes 4.10 Unaffected: 1779293013 , < * (rpm)
        cpe:/a:redhat:advanced_cluster_security:4.10::el8
    Create a notification for this product.
    Red Hat Red Hat Container Native Virtualization 4.15 Unaffected: 1782917983 , < * (rpm)
        cpe:/a:redhat:container_native_virtualization:4.15::el9
    Create a notification for this product.
    Red Hat Red Hat Developer Hub 1.8 Unaffected: 1779841586 , < * (rpm)
        cpe:/a:redhat:rhdh:1.8::el9
    Create a notification for this product.
    Red Hat Red Hat Developer Hub 1.9 Unaffected: 1782761244 , < * (rpm)
        cpe:/a:redhat:rhdh:1.9::el9
    Create a notification for this product.
    Red Hat Red Hat Discovery 2 Unaffected: 1779395188 , < * (rpm)
        cpe:/a:redhat:discovery:2::el9
    Create a notification for this product.
    Red Hat Red Hat Migration Toolkit 1.8 Unaffected: 1780590717 , < * (rpm)
        cpe:/a:redhat:rhmt:1.8::el8
    Create a notification for this product.
    Red Hat Red Hat Migration Toolkit for Applications 8.1 Unaffected: 1785169013 , < * (rpm)
        cpe:/a:redhat:migration_toolkit_applications:8.1::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Dev Spaces 3.28 Unaffected: 1779814592 , < * (rpm)
        cpe:/a:redhat:openshift_devspaces:3.28::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Dev Spaces 3.28 Unaffected: 1779341289 , < * (rpm)
        cpe:/a:redhat:openshift_devspaces:3.28::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 2.6 Unaffected: 1779520355 , < * (rpm)
        cpe:/a:redhat:service_mesh:2.6::el8
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 2.6 Unaffected: 1779520348 , < * (rpm)
        cpe:/a:redhat:service_mesh:2.6::el8
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 3.0 Unaffected: 1778163785 , < * (rpm)
        cpe:/a:redhat:service_mesh:3.0::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 3.0 Unaffected: 1778164208 , < * (rpm)
        cpe:/a:redhat:service_mesh:3.0::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 3.1 Unaffected: 1778163935 , < * (rpm)
        cpe:/a:redhat:service_mesh:3.1::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 3.1 Unaffected: 1778164042 , < * (rpm)
        cpe:/a:redhat:service_mesh:3.1::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 3.2 Unaffected: 1778163792 , < * (rpm)
        cpe:/a:redhat:service_mesh:3.2::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 3.2 Unaffected: 1778163909 , < * (rpm)
        cpe:/a:redhat:service_mesh:3.2::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 3.3 Unaffected: 1778163785 , < * (rpm)
        cpe:/a:redhat:service_mesh:3.3::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 3.3 Unaffected: 1778163986 , < * (rpm)
        cpe:/a:redhat:service_mesh:3.3::el9
    Create a notification for this product.
    Red Hat Red Hat Quay 3.10 Unaffected: 1779822261 , < * (rpm)
        cpe:/a:redhat:quay:3.10::el8
    Create a notification for this product.
    Red Hat Red Hat Quay 3.12 Unaffected: 1779811412 , < * (rpm)
        cpe:/a:redhat:quay:3.12::el8
    Create a notification for this product.
    Red Hat Red Hat Quay 3.14 Unaffected: 1779689392 , < * (rpm)
        cpe:/a:redhat:quay:3.14::el8
    Create a notification for this product.
    Red Hat Red Hat Quay 3.15 Unaffected: 1780891395 , < * (rpm)
        cpe:/a:redhat:quay:3.15::el8
    Create a notification for this product.
    Red Hat Red Hat Quay 3.16 Unaffected: 1779204086 , < * (rpm)
    Unaffected: 1783955846 , < * (rpm)
        cpe:/a:redhat:quay:3.16::el9
    Create a notification for this product.
    Red Hat Red Hat Quay 3.17 Unaffected: 1779922205 , < * (rpm)
        cpe:/a:redhat:quay:3.17::el9
    Create a notification for this product.
    Red Hat Red Hat Quay 3.9 Unaffected: 1779811473 , < * (rpm)
        cpe:/a:redhat:quay:3.9::el8
    Create a notification for this product.
    Red Hat Red Hat Satellite 6.18 Unaffected: 1781181673 , < * (rpm)
        cpe:/a:redhat:satellite:6.18::el9
    Create a notification for this product.
    Red Hat Red Hat Satellite 6.18 Unaffected: 1781032495 , < * (rpm)
        cpe:/a:redhat:satellite:6.18::el9
    Create a notification for this product.
    Red Hat Red Hat Satellite 6.18 Unaffected: 1780105179 , < * (rpm)
        cpe:/a:redhat:satellite:6.18::el9
    Create a notification for this product.
    Red Hat Red Hat Trusted Artifact Signer 1.3 Unaffected: 1779971506 , < * (rpm)
        cpe:/a:redhat:trusted_artifact_signer:1.3::el9
    Create a notification for this product.
    Red Hat Cryostat 4     cpe:/a:redhat:cryostat:4
    Create a notification for this product.
    Red Hat Gatekeeper 3     cpe:/a:redhat:gatekeeper:3
    Create a notification for this product.
    Red Hat Migration Toolkit for Applications 8     cpe:/a:redhat:migration_toolkit_applications:8
    Create a notification for this product.
    Red Hat Network Observability Operator     cpe:/a:redhat:network_observ_optr:1
    Create a notification for this product.
    Red Hat OpenShift Pipelines     cpe:/a:redhat:openshift_pipelines:1
    Create a notification for this product.
    Red Hat OpenShift Service Mesh 3     cpe:/a:redhat:service_mesh:3
    Create a notification for this product.
    Red Hat Red Hat 3scale API Management Platform 2     cpe:/a:redhat:red_hat_3scale_amp:2
    Create a notification for this product.
    Red Hat Red Hat Ansible Automation Platform 2     cpe:/a:redhat:ansible_automation_platform:2
    Create a notification for this product.
    Red Hat Red Hat build of Apicurio Registry 2     cpe:/a:redhat:service_registry:2
    Create a notification for this product.
    Red Hat Red Hat build of Apicurio Registry 3     cpe:/a:redhat:apicurio_registry:3
    Create a notification for this product.
    Red Hat Red Hat Build of Podman Desktop - Tech Preview     cpe:/a:redhat:podman_desktop:0
    Create a notification for this product.
    Red Hat Red Hat Data Grid 8     cpe:/a:redhat:jboss_data_grid:8
    Create a notification for this product.
    Red Hat Red Hat Developer Hub     cpe:/a:redhat:rhdh:1
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 8     cpe:/o:redhat:enterprise_linux:8
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 9     cpe:/o:redhat:enterprise_linux:9
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux AI (RHEL AI) 3     cpe:/a:redhat:enterprise_linux_ai:3
    Create a notification for this product.
    Red Hat Red Hat Fuse 7     cpe:/a:redhat:jboss_fuse:7
    Create a notification for this product.
    Red Hat Red Hat Hardened Images     cpe:/a:redhat:hummingbird:1
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI (RHOAI)     cpe:/a:redhat:openshift_ai
    Create a notification for this product.
    Red Hat Red Hat OpenShift Container Platform 4     cpe:/a:redhat:openshift:4
    Create a notification for this product.
    Red Hat Red Hat OpenShift Virtualization 4     cpe:/a:redhat:container_native_virtualization:4
    Create a notification for this product.
    Red Hat Red Hat Process Automation 7     cpe:/a:redhat:jboss_enterprise_bpms_platform:7
    Create a notification for this product.
    Red Hat Red Hat Trusted Profile Analyzer     cpe:/a:redhat:trusted_profile_analyzer:2
    Create a notification for this product.
    Red Hat Self-service automation portal 2     cpe:/a:redhat:ansible_portal:2
    Create a notification for this product.
    Red Hat streams for Apache Kafka 3     cpe:/a:redhat:amq_streams:3
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-42044",
                    "options": [
                      {
                        "Exploitation": "poc"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "partial"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-04-24T18:11:49.647774Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-04-24T18:12:13.920Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "references": [
              {
                "tags": [
                  "exploit"
                ],
                "url": "https://github.com/axios/axios/security/advisories/GHSA-3w6x-2g7m-8v23"
              }
            ],
            "title": "CISA ADP Vulnrichment"
          },
          {
            "affected": [
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:apache_camel_hawtio:4.4::el9"
                ],
                "defaultStatus": "unaffected",
                "packageName": "axios",
                "product": "HawtIO HawtIO 4.4.0",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2.5::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "automation-gateway",
                "product": "Red Hat Ansible Automation Platform 2.5 for RHEL 8",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:2.5.20260715-1.el8ap",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2.5::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "automation-gateway",
                "product": "Red Hat Ansible Automation Platform 2.5 for RHEL 9",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:2.5.20260715-1.el9ap",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:amq_streams:2.9::el9"
                ],
                "defaultStatus": "unaffected",
                "packageName": "axios",
                "product": "Streams for Apache Kafka 2.9.4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:multicluster_engine:2.10::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "multicluster-engine/console-mce-rhel9",
                "product": "multicluster engine for Kubernetes 2.1",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1780917531",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:multicluster_engine:2.11::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "multicluster-engine/console-mce-rhel9",
                "product": "multicluster engine for Kubernetes 2.11",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1780910888",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:multicluster_engine:2.6::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "multicluster-engine/console-mce-rhel9",
                "product": "multicluster engine for Kubernetes 2.6",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778511348",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:multicluster_engine:2.8::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "multicluster-engine/console-mce-rhel9",
                "product": "multicluster engine for Kubernetes 2.8",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778383863",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:multicluster_engine:2.9::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "multicluster-engine/console-mce-rhel9",
                "product": "multicluster engine for Kubernetes 2.9",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778532610",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:network_observ_optr:1.12::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "network-observability/network-observability-console-plugin-pf4-rhel9",
                "product": "Network Observability (NETOBSERV) 1.12.2",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1780920979",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:network_observ_optr:1.12::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "network-observability/network-observability-console-plugin-rhel9",
                "product": "Network Observability (NETOBSERV) 1.12.2",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1780556069",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:acm:2.14::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhacm2/console-rhel9",
                "product": "Red Hat Advanced Cluster Management for Kubernetes 2.14",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1783451729",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:acm:2.15::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhacm2/console-rhel9",
                "product": "Red Hat Advanced Cluster Management for Kubernetes 2.15",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1780876734",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:acm:2.16::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhacm2/console-rhel9",
                "product": "Red Hat Advanced Cluster Management for Kubernetes 2.16",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1780600823",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:advanced_cluster_security:4.9::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "advanced-cluster-security/rhacs-main-rhel8",
                "product": "Red Hat Advanced Cluster Security 4.9",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779371594",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:advanced_cluster_security:4.10::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "advanced-cluster-security/rhacs-main-rhel8",
                "product": "Red Hat Advanced Cluster Security for Kubernetes 4.10",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779293013",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:container_native_virtualization:4.15::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "container-native-virtualization/kubevirt-console-plugin-rhel9",
                "product": "Red Hat Container Native Virtualization 4.15",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782917983",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:rhdh:1.8::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhdh/rhdh-hub-rhel9",
                "product": "Red Hat Developer Hub 1.8",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779841586",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:rhdh:1.9::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhdh/rhdh-hub-rhel9",
                "product": "Red Hat Developer Hub 1.9",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782761244",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:discovery:2::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "discovery/discovery-ui-rhel9",
                "product": "Red Hat Discovery 2",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779395188",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:rhmt:1.8::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "rhmtc/openshift-migration-ui-rhel8",
                "product": "Red Hat Migration Toolkit 1.8",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1780590717",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:migration_toolkit_applications:8.1::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "mta/mta-ui-rhel9",
                "product": "Red Hat Migration Toolkit for Applications 8.1",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1785169013",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_devspaces:3.28::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "devspaces/code-rhel9",
                "product": "Red Hat OpenShift Dev Spaces 3.28",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779814592",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_devspaces:3.28::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "devspaces/dashboard-rhel9",
                "product": "Red Hat OpenShift Dev Spaces 3.28",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779341289",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:2.6::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-ossmc-rhel8",
                "product": "Red Hat OpenShift Service Mesh 2.6",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779520355",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:2.6::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-rhel8",
                "product": "Red Hat OpenShift Service Mesh 2.6",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779520348",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3.0::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-ossmc-rhel9",
                "product": "Red Hat OpenShift Service Mesh 3.0",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778163785",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3.0::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-rhel9",
                "product": "Red Hat OpenShift Service Mesh 3.0",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778164208",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3.1::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-ossmc-rhel9",
                "product": "Red Hat OpenShift Service Mesh 3.1",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778163935",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3.1::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-rhel9",
                "product": "Red Hat OpenShift Service Mesh 3.1",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778164042",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3.2::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-ossmc-rhel9",
                "product": "Red Hat OpenShift Service Mesh 3.2",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778163792",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3.2::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-rhel9",
                "product": "Red Hat OpenShift Service Mesh 3.2",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778163909",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3.3::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-ossmc-rhel9",
                "product": "Red Hat OpenShift Service Mesh 3.3",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778163785",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3.3::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-rhel9",
                "product": "Red Hat OpenShift Service Mesh 3.3",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778163986",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.10::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel8",
                "product": "Red Hat Quay 3.10",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779822261",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.12::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel8",
                "product": "Red Hat Quay 3.12",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779811412",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.14::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel8",
                "product": "Red Hat Quay 3.14",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779689392",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.15::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel8",
                "product": "Red Hat Quay 3.15",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1780891395",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.16::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel9",
                "product": "Red Hat Quay 3.16",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779204086",
                    "versionType": "rpm"
                  },
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1783955846",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.17::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel9",
                "product": "Red Hat Quay 3.17",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779922205",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.9::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel8",
                "product": "Red Hat Quay 3.9",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779811473",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:satellite:6.18::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "satellite/iop-advisor-frontend-rhel9",
                "product": "Red Hat Satellite 6.18",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1781181673",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:satellite:6.18::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "satellite/iop-vulnerability-frontend-rhel9",
                "product": "Red Hat Satellite 6.18",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1781032495",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:satellite:6.18::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "satellite/iop-host-inventory-frontend-rhel9",
                "product": "Red Hat Satellite 6.18",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1780105179",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:trusted_artifact_signer:1.3::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhtas/rhtas-console-ui-rhel9",
                "product": "Red Hat Trusted Artifact Signer 1.3",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779971506",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:cryostat:4"
                ],
                "defaultStatus": "unaffected",
                "packageName": "axios",
                "product": "Cryostat 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:gatekeeper:3"
                ],
                "defaultStatus": "affected",
                "packageName": "gatekeeper/gatekeeper-rhel9",
                "product": "Gatekeeper 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:migration_toolkit_applications:8"
                ],
                "defaultStatus": "affected",
                "packageName": "mta/mta-ui-rhel8",
                "product": "Migration Toolkit for Applications 8",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:network_observ_optr:1"
                ],
                "defaultStatus": "affected",
                "packageName": "network-observability/network-observability-console-plugin-compat-rhel9",
                "product": "Network Observability Operator",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_pipelines:1"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-pipelines/pipelines-hub-ui-rhel8",
                "product": "OpenShift Pipelines",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_pipelines:1"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-pipelines/pipelines-hub-ui-rhel9",
                "product": "OpenShift Pipelines",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3"
                ],
                "defaultStatus": "unaffected",
                "packageName": "openshift-service-mesh/kiali-operator-bundle",
                "product": "OpenShift Service Mesh 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3"
                ],
                "defaultStatus": "unaffected",
                "packageName": "openshift-service-mesh/kiali-rhel9-operator",
                "product": "OpenShift Service Mesh 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:red_hat_3scale_amp:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "3scale-amp21/system",
                "product": "Red Hat 3scale API Management Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:red_hat_3scale_amp:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "3scale-amp22/system",
                "product": "Red Hat 3scale API Management Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:red_hat_3scale_amp:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "3scale-amp2/system-rhel7",
                "product": "Red Hat 3scale API Management Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:red_hat_3scale_amp:2"
                ],
                "defaultStatus": "affected",
                "packageName": "3scale-amp2/system-rhel8",
                "product": "Red Hat 3scale API Management Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:red_hat_3scale_amp:2"
                ],
                "defaultStatus": "affected",
                "packageName": "3scale-amp2/system-rhel9",
                "product": "Red Hat 3scale API Management Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "affected",
                "packageName": "ansible-automation-platform-26/gateway-rhel9",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "affected",
                "packageName": "ansible-automation-platform/automation-dashboard-rhel9",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "affected",
                "packageName": "automation-controller",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "affected",
                "packageName": "automation-hub",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "affected",
                "packageName": "automation-platform-ui",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "python3.11-galaxy-ng",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "python3.12-galaxy-ng",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "python3x-galaxy-ng",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "python-galaxy-ng",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:service_registry:2"
                ],
                "defaultStatus": "affected",
                "packageName": "axios",
                "product": "Red Hat build of Apicurio Registry 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:apicurio_registry:3"
                ],
                "defaultStatus": "affected",
                "packageName": "apicurio/apicurio-registry-ui-rhel8",
                "product": "Red Hat build of Apicurio Registry 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:apicurio_registry:3"
                ],
                "defaultStatus": "affected",
                "packageName": "apicurio/apicurio-registry-ui-rhel9",
                "product": "Red Hat build of Apicurio Registry 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:podman_desktop:0"
                ],
                "defaultStatus": "affected",
                "packageName": "rhdesktop/rh-podman-desktop-ext-openshift-local-rhel10",
                "product": "Red Hat Build of Podman Desktop - Tech Preview",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:jboss_data_grid:8"
                ],
                "defaultStatus": "unaffected",
                "packageName": "axios",
                "product": "Red Hat Data Grid 8",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:rhdh:1"
                ],
                "defaultStatus": "affected",
                "packageName": "rhdh/backstage-community-plugin-catalog-backend-module-scaffolder-relation-processor",
                "product": "Red Hat Developer Hub",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:8"
                ],
                "defaultStatus": "affected",
                "packageName": "grafana",
                "product": "Red Hat Enterprise Linux 8",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:9"
                ],
                "defaultStatus": "unaffected",
                "packageName": "grafana",
                "product": "Red Hat Enterprise Linux 9",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:enterprise_linux_ai:3"
                ],
                "defaultStatus": "affected",
                "packageName": "rhelai3/bootc-cuda-rhel9",
                "product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:enterprise_linux_ai:3"
                ],
                "defaultStatus": "affected",
                "packageName": "rhelai3/bootc-rocm-rhel9",
                "product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:enterprise_linux_ai:3"
                ],
                "defaultStatus": "affected",
                "packageName": "rhelai3/disk-image-cuda-rhel9",
                "product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:jboss_fuse:7"
                ],
                "defaultStatus": "unaffected",
                "packageName": "axios",
                "product": "Red Hat Fuse 7",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:hummingbird:1"
                ],
                "defaultStatus": "unaffected",
                "packageName": "boost",
                "product": "Red Hat Hardened Images",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "unaffected",
                "packageName": "rhoai/odh-dashboard-rhel8",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-dashboard-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-mod-arch-gen-ai-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-mod-arch-maas-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-mod-arch-model-registry-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift3/ose-console",
                "product": "Red Hat OpenShift Container Platform 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift4/ose-agent-installer-ui-rhel9",
                "product": "Red Hat OpenShift Container Platform 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4"
                ],
                "defaultStatus": "unaffected",
                "packageName": "openshift4/ose-console",
                "product": "Red Hat OpenShift Container Platform 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4"
                ],
                "defaultStatus": "unaffected",
                "packageName": "openshift4/ose-console-rhel9",
                "product": "Red Hat OpenShift Container Platform 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift4/ose-monitoring-plugin-rhel9",
                "product": "Red Hat OpenShift Container Platform 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:container_native_virtualization:4"
                ],
                "defaultStatus": "affected",
                "packageName": "container-native-virtualization/kubevirt-console-plugin",
                "product": "Red Hat OpenShift Virtualization 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:jboss_enterprise_bpms_platform:7"
                ],
                "defaultStatus": "unaffected",
                "packageName": "axios",
                "product": "Red Hat Process Automation 7",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:trusted_profile_analyzer:2"
                ],
                "defaultStatus": "affected",
                "packageName": "rhtpa/rhtpa-trustification-service-rhel9",
                "product": "Red Hat Trusted Profile Analyzer",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_portal:2"
                ],
                "defaultStatus": "affected",
                "packageName": "ansible-automation-platform/automation-portal",
                "product": "Self-service automation portal 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:amq_streams:3"
                ],
                "defaultStatus": "unaffected",
                "packageName": "axios",
                "product": "streams for Apache Kafka 3",
                "vendor": "Red Hat"
              }
            ],
            "datePublic": "2026-04-24T17:49:49.517Z",
            "descriptions": [
              {
                "lang": "en",
                "value": "A flaw was found in Axios, a widely used HTTP client. This vulnerability, known as a Prototype Pollution \"Gadget\" attack, allows a remote attacker to subtly alter JSON API responses. By manipulating a specific function, an attacker can selectively modify data within these responses. This could lead to significant security breaches, including unauthorized privilege escalation, fraudulent balance manipulation, or bypassing critical authorization checks."
              }
            ],
            "metrics": [
              {
                "other": {
                  "content": {
                    "namespace": "https://access.redhat.com/security/updates/classification/",
                    "value": "Important"
                  },
                  "type": "Red Hat severity rating"
                }
              },
              {
                "cvssV3_1": {
                  "attackComplexity": "HIGH",
                  "attackVector": "NETWORK",
                  "availabilityImpact": "NONE",
                  "baseScore": 7.4,
                  "baseSeverity": "HIGH",
                  "confidentialityImpact": "HIGH",
                  "integrityImpact": "HIGH",
                  "privilegesRequired": "NONE",
                  "scope": "UNCHANGED",
                  "userInteraction": "NONE",
                  "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
                  "version": "3.1"
                },
                "format": "CVSS"
              }
            ],
            "problemTypes": [
              {
                "descriptions": [
                  {
                    "cweId": "CWE-915",
                    "description": "Improperly Controlled Modification of Dynamically-Determined Object Attributes",
                    "lang": "en",
                    "type": "CWE"
                  }
                ]
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-09-10T12:04:51.583Z",
              "orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
              "shortName": "redhat-SADP"
            },
            "references": [
              {
                "tags": [
                  "vdb-entry",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/security/cve/CVE-2026-42044"
              },
              {
                "name": "RHBZ#2461624",
                "tags": [
                  "issue-tracking",
                  "x_refsource_REDHAT"
                ],
                "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2461624"
              },
              {
                "tags": [
                  "x_sadp-csaf-vex"
                ],
                "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42044.json"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:42078"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:25089"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:24473"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:36882"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:24539"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:25273"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:20938"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:20889"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:36107"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:21338"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:33574"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:20338"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:25041"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:50300"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:21772"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:20454"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:16534"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:16532"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:16535"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:16542"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:22840"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:22629"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:21017"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:24853"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:19375"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:41066"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:22465"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:23361"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:26214"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:26232"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:26225"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:24471"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:34608"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:25271"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:24536"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:17657"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:17699"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:19109"
              }
            ],
            "solutions": [
              {
                "lang": "en",
                "value": "RHSA-2026:42078: Red Hat Ansible Automation Platform 2.5 for RHEL 8, Red Hat Ansible Automation Platform 2.5 for RHEL 9"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:25089: HawtIO HawtIO 4.4.0"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:24473: Network Observability (NETOBSERV) 1.12.2"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:36882: Red Hat Advanced Cluster Management for Kubernetes 2.14"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:24539: Red Hat Advanced Cluster Management for Kubernetes 2.15"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:25273: Red Hat Advanced Cluster Management for Kubernetes 2.16"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:20938: Red Hat Advanced Cluster Security 4.9"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:20889: Red Hat Advanced Cluster Security for Kubernetes 4.10"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:36107: Red Hat Container Native Virtualization 4.15"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:21338: Red Hat Developer Hub 1.8"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:33574: Red Hat Developer Hub 1.9"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:20338: Red Hat Discovery 2"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:25041: Red Hat Migration Toolkit 1.8"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:50300: Red Hat Migration Toolkit for Applications 8.1"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:21772: Red Hat OpenShift Dev Spaces 3.28"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:20454: Red Hat OpenShift Service Mesh 2.6"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:16534: Red Hat OpenShift Service Mesh 3.0"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:16532: Red Hat OpenShift Service Mesh 3.1"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:16535: Red Hat OpenShift Service Mesh 3.2"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:16542: Red Hat OpenShift Service Mesh 3.3"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:22840: Red Hat Quay 3.10"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:22629: Red Hat Quay 3.12"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:21017: Red Hat Quay 3.14"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:24853: Red Hat Quay 3.15"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:19375: Red Hat Quay 3.16"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:41066: Red Hat Quay 3.16"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:22465: Red Hat Quay 3.17"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:23361: Red Hat Quay 3.9"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:26214: Red Hat Satellite 6.18"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:26232: Red Hat Satellite 6.18"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:26225: Red Hat Satellite 6.18"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:24471: Red Hat Trusted Artifact Signer 1.3"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:34608: Streams for Apache Kafka 2.9.4"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:25271: multicluster engine for Kubernetes 2.11"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:24536: multicluster engine for Kubernetes 2.1"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:17657: multicluster engine for Kubernetes 2.6"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:17699: multicluster engine for Kubernetes 2.8"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:19109: multicluster engine for Kubernetes 2.9"
              }
            ],
            "timeline": [
              {
                "lang": "en",
                "time": "2026-04-24T19:01:13.418Z",
                "value": "Reported to Red Hat."
              },
              {
                "lang": "en",
                "time": "2026-04-24T17:49:49.517Z",
                "value": "Made public."
              }
            ],
            "title": "axios: Axios: Invisible JSON Response Tampering via Prototype Pollution Gadget",
            "workarounds": [
              {
                "lang": "en",
                "value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
              }
            ],
            "x_adpType": "supplier",
            "x_generator": {
              "engine": "sadp-cli 1.0.0"
            }
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "axios",
              "vendor": "axios",
              "versions": [
                {
                  "status": "affected",
                  "version": "\u003e= 1.0.0, \u003c 1.15.2"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "Axios is a promise based HTTP client for the browser and Node.js. From 1.0.0 to before 1.15.2, he Axios library is vulnerable to a Prototype Pollution \"Gadget\" attack that allows any Object.prototype pollution in the application\u0027s dependency tree to be escalated into surgical, invisible modification of all JSON API responses \u2014 including privilege escalation, balance manipulation, and authorization bypass. The default transformResponse function at lib/defaults/index.js:124 calls JSON.parse(data, this.parseReviver), where this is the merged config object. Because parseReviver is not present in Axios defaults, not validated by assertOptions, and not subject to any constraints, a polluted Object.prototype.parseReviver function is called for every key-value pair in every JSON response, allowing the attacker to selectively modify individual values while leaving the rest of the response intact. This vulnerability is fixed in 1.15.2."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "HIGH",
                "attackVector": "NETWORK",
                "availabilityImpact": "NONE",
                "baseScore": 6.5,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "LOW",
                "integrityImpact": "HIGH",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N",
                "version": "3.1"
              }
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-915",
                  "description": "CWE-915: Improperly Controlled Modification of Dynamically-Determined Object Attributes",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            },
            {
              "descriptions": [
                {
                  "cweId": "CWE-1321",
                  "description": "CWE-1321: Improperly Controlled Modification of Object Prototype Attributes (\u0027Prototype Pollution\u0027)",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-04-24T17:50:26.586Z",
            "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
            "shortName": "GitHub_M"
          },
          "references": [
            {
              "name": "https://github.com/axios/axios/security/advisories/GHSA-3w6x-2g7m-8v23",
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "https://github.com/axios/axios/security/advisories/GHSA-3w6x-2g7m-8v23"
            }
          ],
          "source": {
            "advisory": "GHSA-3w6x-2g7m-8v23",
            "discovery": "UNKNOWN"
          },
          "title": "Axios: Invisible JSON Response Tampering via Prototype Pollution Gadget in `parseReviver`"
        }
      },
      "cveMetadata": {
        "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "assignerShortName": "GitHub_M",
        "cveId": "CVE-2026-42044",
        "datePublished": "2026-04-24T17:49:49.517Z",
        "dateReserved": "2026-04-23T16:05:01.709Z",
        "dateUpdated": "2026-09-10T12:04:51.583Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2026-42043 (GCVE-0-2026-42043)

    Vulnerability from nvd – Published: 2026-04-24 17:54 – Updated: 2026-09-10 12:04
    VLAI
    Title
    Axios: Incomplete Fix for CVE-2025-62718 — NO_PROXY Protection Bypassed via RFC 1122 Loopback Subnet (127.0.0.0/8) in Axios 1.15.0
    Summary
    Axios is a promise based HTTP client for the browser and Node.js. Prior to 1.15.1 and 0.31.1, an attacker who can influence the target URL of an Axios request can use any address in the 127.0.0.0/8 range (other than 127.0.0.1) to completely bypass the NO_PROXY protection. This vulnerability is due to an incomplete for CVE-2025-62718, This vulnerability is fixed in 1.15.1 and 0.31.1.
    SSVC
    Exploitation: poc Automatable: yes Technical Impact: partial
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-04-27 13:47 UTC
    CWE
    • CWE-183 - Permissive List of Allowed Inputs
    • CWE-441 - Unintended Proxy or Intermediary ('Confused Deputy')
    • CWE-918 - Server-Side Request Forgery (SSRF)
    References
    URL Tags
    https://github.com/axios/axios/security/advisorie… x_refsource_CONFIRM
    https://access.redhat.com/security/cve/CVE-2026-42043 vdb-entryx_refsource_REDHAT
    https://bugzilla.redhat.com/show_bug.cgi?id=2461626 issue-trackingx_refsource_REDHAT
    https://security.access.redhat.com/data/csaf/v2/v… x_sadp-csaf-vex
    https://access.redhat.com/errata/RHSA-2026:25089 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:16874 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:36882 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:24539 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:25273 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:20938 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:20889 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:22619 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:21338 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:33574 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:14937 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:25041 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:24977 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:17468 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:17474 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:48670 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:21772 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:16476 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:16534 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:16532 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:16535 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:16542 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:22840 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:22629 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:21017 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:24853 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:19375 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:22465 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:23361 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:26214 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:26232 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:26225 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:25271 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:24536 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:17657 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:17699 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:19109 vendor-advisoryx_refsource_REDHAT
    Impacted products
    Vendor Product Version
    axios axios Affected: >= 1.0.0, < 1.15.1
    Affected: < 0.31.1
    Create a notification for this product.
    Red Hat HawtIO HawtIO 4.4.0     cpe:/a:redhat:apache_camel_hawtio:4.4::el9
    Create a notification for this product.
    Red Hat Red Hat Data Grid 8.6.1     cpe:/a:redhat:jboss_data_grid:8
    Create a notification for this product.
    Red Hat multicluster engine for Kubernetes 2.1 Unaffected: 1780917531 , < * (rpm)
        cpe:/a:redhat:multicluster_engine:2.10::el9
    Create a notification for this product.
    Red Hat multicluster engine for Kubernetes 2.11 Unaffected: 1780910888 , < * (rpm)
        cpe:/a:redhat:multicluster_engine:2.11::el9
    Create a notification for this product.
    Red Hat multicluster engine for Kubernetes 2.6 Unaffected: 1778511348 , < * (rpm)
        cpe:/a:redhat:multicluster_engine:2.6::el9
    Create a notification for this product.
    Red Hat multicluster engine for Kubernetes 2.8 Unaffected: 1778383863 , < * (rpm)
        cpe:/a:redhat:multicluster_engine:2.8::el9
    Create a notification for this product.
    Red Hat multicluster engine for Kubernetes 2.9 Unaffected: 1778532610 , < * (rpm)
        cpe:/a:redhat:multicluster_engine:2.9::el9
    Create a notification for this product.
    Red Hat Network Observability (NETOBSERV) 1.11.0 Unaffected: 1778508956 , < * (rpm)
        cpe:/a:redhat:network_observ_optr:1.11::el9
    Create a notification for this product.
    Red Hat Network Observability (NETOBSERV) 1.11.0 Unaffected: 1778510461 , < * (rpm)
        cpe:/a:redhat:network_observ_optr:1.11::el9
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.14 Unaffected: 1783451729 , < * (rpm)
        cpe:/a:redhat:acm:2.14::el9
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.15 Unaffected: 1780876734 , < * (rpm)
        cpe:/a:redhat:acm:2.15::el9
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.16 Unaffected: 1780600823 , < * (rpm)
        cpe:/a:redhat:acm:2.16::el9
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Security 4.9 Unaffected: 1779371594 , < * (rpm)
        cpe:/a:redhat:advanced_cluster_security:4.9::el8
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Security for Kubernetes 4.10 Unaffected: 1779293013 , < * (rpm)
        cpe:/a:redhat:advanced_cluster_security:4.10::el8
    Create a notification for this product.
    Red Hat Red Hat Developer Hub 1.8 Unaffected: 1779841586 , < * (rpm)
        cpe:/a:redhat:rhdh:1.8::el9
    Create a notification for this product.
    Red Hat Red Hat Developer Hub 1.9 Unaffected: 1782761244 , < * (rpm)
        cpe:/a:redhat:rhdh:1.9::el9
    Create a notification for this product.
    Red Hat Red Hat Discovery 2 Unaffected: 1778156756 , < * (rpm)
        cpe:/a:redhat:discovery:2::el9
    Create a notification for this product.
    Red Hat Red Hat Migration Toolkit 1.8 Unaffected: 1780590717 , < * (rpm)
        cpe:/a:redhat:rhmt:1.8::el8
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 2.25 Unaffected: 1780467029 , < * (rpm)
        cpe:/a:redhat:openshift_ai:2.25::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 2.25 Unaffected: 1780467147 , < * (rpm)
        cpe:/a:redhat:openshift_ai:2.25::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Container Platform 4.20 Unaffected: 1778645099 , < * (rpm)
        cpe:/a:redhat:openshift:4.20::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Container Platform 4.21 Unaffected: 1778539338 , < * (rpm)
        cpe:/a:redhat:openshift:4.21::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Container Platform 4.21 Unaffected: 1785354128 , < * (rpm)
        cpe:/a:redhat:openshift:4.21::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Dev Spaces 3.28 Unaffected: 1779814592 , < * (rpm)
        cpe:/a:redhat:openshift_devspaces:3.28::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Dev Spaces 3.28 Unaffected: 1779341289 , < * (rpm)
        cpe:/a:redhat:openshift_devspaces:3.28::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 2.6 Unaffected: 1778191473 , < * (rpm)
        cpe:/a:redhat:service_mesh:2.6::el8
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 2.6 Unaffected: 1778191378 , < * (rpm)
        cpe:/a:redhat:service_mesh:2.6::el8
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 3.0 Unaffected: 1778163785 , < * (rpm)
        cpe:/a:redhat:service_mesh:3.0::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 3.0 Unaffected: 1778164208 , < * (rpm)
        cpe:/a:redhat:service_mesh:3.0::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 3.1 Unaffected: 1778163935 , < * (rpm)
        cpe:/a:redhat:service_mesh:3.1::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 3.1 Unaffected: 1778164042 , < * (rpm)
        cpe:/a:redhat:service_mesh:3.1::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 3.2 Unaffected: 1778163792 , < * (rpm)
        cpe:/a:redhat:service_mesh:3.2::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 3.2 Unaffected: 1778163909 , < * (rpm)
        cpe:/a:redhat:service_mesh:3.2::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 3.3 Unaffected: 1778163785 , < * (rpm)
        cpe:/a:redhat:service_mesh:3.3::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 3.3 Unaffected: 1778163986 , < * (rpm)
        cpe:/a:redhat:service_mesh:3.3::el9
    Create a notification for this product.
    Red Hat Red Hat Quay 3.10 Unaffected: 1779822261 , < * (rpm)
        cpe:/a:redhat:quay:3.10::el8
    Create a notification for this product.
    Red Hat Red Hat Quay 3.12 Unaffected: 1779811412 , < * (rpm)
        cpe:/a:redhat:quay:3.12::el8
    Create a notification for this product.
    Red Hat Red Hat Quay 3.14 Unaffected: 1779689392 , < * (rpm)
        cpe:/a:redhat:quay:3.14::el8
    Create a notification for this product.
    Red Hat Red Hat Quay 3.15 Unaffected: 1780891395 , < * (rpm)
        cpe:/a:redhat:quay:3.15::el8
    Create a notification for this product.
    Red Hat Red Hat Quay 3.16 Unaffected: 1779204086 , < * (rpm)
        cpe:/a:redhat:quay:3.16::el9
    Create a notification for this product.
    Red Hat Red Hat Quay 3.17 Unaffected: 1779922205 , < * (rpm)
        cpe:/a:redhat:quay:3.17::el9
    Create a notification for this product.
    Red Hat Red Hat Quay 3.9 Unaffected: 1779811473 , < * (rpm)
        cpe:/a:redhat:quay:3.9::el8
    Create a notification for this product.
    Red Hat Red Hat Satellite 6.18 Unaffected: 1781181673 , < * (rpm)
        cpe:/a:redhat:satellite:6.18::el9
    Create a notification for this product.
    Red Hat Red Hat Satellite 6.18 Unaffected: 1781032495 , < * (rpm)
        cpe:/a:redhat:satellite:6.18::el9
    Create a notification for this product.
    Red Hat Red Hat Satellite 6.18 Unaffected: 1780105179 , < * (rpm)
        cpe:/a:redhat:satellite:6.18::el9
    Create a notification for this product.
    Red Hat Cryostat 4     cpe:/a:redhat:cryostat:4
    Create a notification for this product.
    Red Hat Gatekeeper 3     cpe:/a:redhat:gatekeeper:3
    Create a notification for this product.
    Red Hat Migration Toolkit for Applications 8     cpe:/a:redhat:migration_toolkit_applications:8
    Create a notification for this product.
    Red Hat OpenShift Pipelines     cpe:/a:redhat:openshift_pipelines:1
    Create a notification for this product.
    Red Hat OpenShift Service Mesh 3     cpe:/a:redhat:service_mesh:3
    Create a notification for this product.
    Red Hat Red Hat 3scale API Management Platform 2     cpe:/a:redhat:red_hat_3scale_amp:2
    Create a notification for this product.
    Red Hat Red Hat Ansible Automation Platform 2     cpe:/a:redhat:ansible_automation_platform:2
    Create a notification for this product.
    Red Hat Red Hat build of Apicurio Registry 2     cpe:/a:redhat:service_registry:2
    Create a notification for this product.
    Red Hat Red Hat build of Apicurio Registry 3     cpe:/a:redhat:apicurio_registry:3
    Create a notification for this product.
    Red Hat Red Hat Build of Podman Desktop - Tech Preview     cpe:/a:redhat:podman_desktop:0
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 8     cpe:/o:redhat:enterprise_linux:8
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 9     cpe:/o:redhat:enterprise_linux:9
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux AI (RHEL AI) 3     cpe:/a:redhat:enterprise_linux_ai:3
    Create a notification for this product.
    Red Hat Red Hat Fuse 7     cpe:/a:redhat:jboss_fuse:7
    Create a notification for this product.
    Red Hat Red Hat Hardened Images     cpe:/a:redhat:hummingbird:1
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI (RHOAI)     cpe:/a:redhat:openshift_ai
    Create a notification for this product.
    Red Hat Red Hat OpenShift Container Platform 4     cpe:/a:redhat:openshift:4
    Create a notification for this product.
    Red Hat Red Hat OpenShift Virtualization 4     cpe:/a:redhat:container_native_virtualization:4
    Create a notification for this product.
    Red Hat Red Hat Process Automation 7     cpe:/a:redhat:jboss_enterprise_bpms_platform:7
    Create a notification for this product.
    Red Hat Red Hat Trusted Artifact Signer     cpe:/a:redhat:trusted_artifact_signer:1
    Create a notification for this product.
    Red Hat Red Hat Trusted Profile Analyzer     cpe:/a:redhat:trusted_profile_analyzer:2
    Create a notification for this product.
    Red Hat Self-service automation portal 2     cpe:/a:redhat:ansible_portal:2
    Create a notification for this product.
    Red Hat streams for Apache Kafka 2     cpe:/a:redhat:amq_streams:2
    Create a notification for this product.
    Red Hat streams for Apache Kafka 3     cpe:/a:redhat:amq_streams:3
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-42043",
                    "options": [
                      {
                        "Exploitation": "poc"
                      },
                      {
                        "Automatable": "yes"
                      },
                      {
                        "Technical Impact": "partial"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-04-27T13:47:20.443878Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-04-27T13:47:24.724Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "references": [
              {
                "tags": [
                  "exploit"
                ],
                "url": "https://github.com/axios/axios/security/advisories/GHSA-pmwg-cvhr-8vh7"
              }
            ],
            "title": "CISA ADP Vulnrichment"
          },
          {
            "affected": [
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:apache_camel_hawtio:4.4::el9"
                ],
                "defaultStatus": "unaffected",
                "packageName": "axios",
                "product": "HawtIO HawtIO 4.4.0",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:jboss_data_grid:8"
                ],
                "defaultStatus": "unaffected",
                "packageName": "axios",
                "product": "Red Hat Data Grid 8.6.1",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:multicluster_engine:2.10::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "multicluster-engine/console-mce-rhel9",
                "product": "multicluster engine for Kubernetes 2.1",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1780917531",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:multicluster_engine:2.11::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "multicluster-engine/console-mce-rhel9",
                "product": "multicluster engine for Kubernetes 2.11",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1780910888",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:multicluster_engine:2.6::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "multicluster-engine/console-mce-rhel9",
                "product": "multicluster engine for Kubernetes 2.6",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778511348",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:multicluster_engine:2.8::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "multicluster-engine/console-mce-rhel9",
                "product": "multicluster engine for Kubernetes 2.8",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778383863",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:multicluster_engine:2.9::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "multicluster-engine/console-mce-rhel9",
                "product": "multicluster engine for Kubernetes 2.9",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778532610",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:network_observ_optr:1.11::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "network-observability/network-observability-console-plugin-compat-rhel9",
                "product": "Network Observability (NETOBSERV) 1.11.0",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778508956",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:network_observ_optr:1.11::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "network-observability/network-observability-console-plugin-rhel9",
                "product": "Network Observability (NETOBSERV) 1.11.0",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778510461",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:acm:2.14::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhacm2/console-rhel9",
                "product": "Red Hat Advanced Cluster Management for Kubernetes 2.14",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1783451729",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:acm:2.15::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhacm2/console-rhel9",
                "product": "Red Hat Advanced Cluster Management for Kubernetes 2.15",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1780876734",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:acm:2.16::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhacm2/console-rhel9",
                "product": "Red Hat Advanced Cluster Management for Kubernetes 2.16",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1780600823",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:advanced_cluster_security:4.9::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "advanced-cluster-security/rhacs-main-rhel8",
                "product": "Red Hat Advanced Cluster Security 4.9",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779371594",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:advanced_cluster_security:4.10::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "advanced-cluster-security/rhacs-main-rhel8",
                "product": "Red Hat Advanced Cluster Security for Kubernetes 4.10",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779293013",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:rhdh:1.8::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhdh/rhdh-hub-rhel9",
                "product": "Red Hat Developer Hub 1.8",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779841586",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:rhdh:1.9::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhdh/rhdh-hub-rhel9",
                "product": "Red Hat Developer Hub 1.9",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782761244",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:discovery:2::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "discovery/discovery-ui-rhel9",
                "product": "Red Hat Discovery 2",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778156756",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:rhmt:1.8::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "rhmtc/openshift-migration-ui-rhel8",
                "product": "Red Hat Migration Toolkit 1.8",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1780590717",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:2.25::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-dashboard-rhel9",
                "product": "Red Hat OpenShift AI 2.25",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1780467029",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:2.25::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-mod-arch-model-registry-rhel9",
                "product": "Red Hat OpenShift AI 2.25",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1780467147",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4.20::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift4/ose-agent-installer-ui-rhel9",
                "product": "Red Hat OpenShift Container Platform 4.20",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778645099",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4.21::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift4/ose-agent-installer-ui-rhel9",
                "product": "Red Hat OpenShift Container Platform 4.21",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778539338",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4.21::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift4/ose-monitoring-plugin-rhel9",
                "product": "Red Hat OpenShift Container Platform 4.21",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1785354128",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_devspaces:3.28::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "devspaces/code-rhel9",
                "product": "Red Hat OpenShift Dev Spaces 3.28",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779814592",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_devspaces:3.28::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "devspaces/dashboard-rhel9",
                "product": "Red Hat OpenShift Dev Spaces 3.28",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779341289",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:2.6::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-ossmc-rhel8",
                "product": "Red Hat OpenShift Service Mesh 2.6",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778191473",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:2.6::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-rhel8",
                "product": "Red Hat OpenShift Service Mesh 2.6",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778191378",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3.0::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-ossmc-rhel9",
                "product": "Red Hat OpenShift Service Mesh 3.0",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778163785",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3.0::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-rhel9",
                "product": "Red Hat OpenShift Service Mesh 3.0",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778164208",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3.1::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-ossmc-rhel9",
                "product": "Red Hat OpenShift Service Mesh 3.1",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778163935",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3.1::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-rhel9",
                "product": "Red Hat OpenShift Service Mesh 3.1",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778164042",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3.2::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-ossmc-rhel9",
                "product": "Red Hat OpenShift Service Mesh 3.2",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778163792",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3.2::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-rhel9",
                "product": "Red Hat OpenShift Service Mesh 3.2",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778163909",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3.3::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-ossmc-rhel9",
                "product": "Red Hat OpenShift Service Mesh 3.3",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778163785",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3.3::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-rhel9",
                "product": "Red Hat OpenShift Service Mesh 3.3",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778163986",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.10::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel8",
                "product": "Red Hat Quay 3.10",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779822261",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.12::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel8",
                "product": "Red Hat Quay 3.12",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779811412",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.14::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel8",
                "product": "Red Hat Quay 3.14",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779689392",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.15::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel8",
                "product": "Red Hat Quay 3.15",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1780891395",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.16::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel9",
                "product": "Red Hat Quay 3.16",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779204086",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.17::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel9",
                "product": "Red Hat Quay 3.17",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779922205",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.9::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel8",
                "product": "Red Hat Quay 3.9",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779811473",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:satellite:6.18::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "satellite/iop-advisor-frontend-rhel9",
                "product": "Red Hat Satellite 6.18",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1781181673",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:satellite:6.18::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "satellite/iop-vulnerability-frontend-rhel9",
                "product": "Red Hat Satellite 6.18",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1781032495",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:satellite:6.18::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "satellite/iop-host-inventory-frontend-rhel9",
                "product": "Red Hat Satellite 6.18",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1780105179",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:cryostat:4"
                ],
                "defaultStatus": "unaffected",
                "packageName": "axios",
                "product": "Cryostat 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:gatekeeper:3"
                ],
                "defaultStatus": "unaffected",
                "packageName": "gatekeeper/gatekeeper-rhel9",
                "product": "Gatekeeper 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:migration_toolkit_applications:8"
                ],
                "defaultStatus": "unaffected",
                "packageName": "mta/mta-ui-rhel8",
                "product": "Migration Toolkit for Applications 8",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:migration_toolkit_applications:8"
                ],
                "defaultStatus": "unaffected",
                "packageName": "mta/mta-ui-rhel9",
                "product": "Migration Toolkit for Applications 8",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_pipelines:1"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-pipelines/pipelines-hub-ui-rhel8",
                "product": "OpenShift Pipelines",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_pipelines:1"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-pipelines/pipelines-hub-ui-rhel9",
                "product": "OpenShift Pipelines",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3"
                ],
                "defaultStatus": "unaffected",
                "packageName": "openshift-service-mesh/kiali-operator-bundle",
                "product": "OpenShift Service Mesh 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3"
                ],
                "defaultStatus": "unaffected",
                "packageName": "openshift-service-mesh/kiali-rhel9-operator",
                "product": "OpenShift Service Mesh 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:red_hat_3scale_amp:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "3scale-amp21/system",
                "product": "Red Hat 3scale API Management Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:red_hat_3scale_amp:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "3scale-amp22/system",
                "product": "Red Hat 3scale API Management Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:red_hat_3scale_amp:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "3scale-amp2/system-rhel7",
                "product": "Red Hat 3scale API Management Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:red_hat_3scale_amp:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "3scale-amp2/system-rhel8",
                "product": "Red Hat 3scale API Management Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:red_hat_3scale_amp:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "3scale-amp2/system-rhel9",
                "product": "Red Hat 3scale API Management Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "ansible-automation-platform-26/gateway-rhel9",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "affected",
                "packageName": "ansible-automation-platform/automation-dashboard-rhel9",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "affected",
                "packageName": "automation-controller",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "automation-gateway",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "affected",
                "packageName": "automation-hub",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "automation-platform-ui",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "python3.11-galaxy-ng",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "python3.12-galaxy-ng",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "python3x-galaxy-ng",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "python-galaxy-ng",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:service_registry:2"
                ],
                "defaultStatus": "affected",
                "packageName": "axios",
                "product": "Red Hat build of Apicurio Registry 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:apicurio_registry:3"
                ],
                "defaultStatus": "affected",
                "packageName": "apicurio/apicurio-registry-ui-rhel8",
                "product": "Red Hat build of Apicurio Registry 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:apicurio_registry:3"
                ],
                "defaultStatus": "affected",
                "packageName": "apicurio/apicurio-registry-ui-rhel9",
                "product": "Red Hat build of Apicurio Registry 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:podman_desktop:0"
                ],
                "defaultStatus": "affected",
                "packageName": "rhdesktop/rh-podman-desktop-ext-openshift-local-rhel10",
                "product": "Red Hat Build of Podman Desktop - Tech Preview",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:8"
                ],
                "defaultStatus": "affected",
                "packageName": "grafana",
                "product": "Red Hat Enterprise Linux 8",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:9"
                ],
                "defaultStatus": "unaffected",
                "packageName": "grafana",
                "product": "Red Hat Enterprise Linux 9",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:enterprise_linux_ai:3"
                ],
                "defaultStatus": "affected",
                "packageName": "rhelai3/bootc-cuda-rhel9",
                "product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:enterprise_linux_ai:3"
                ],
                "defaultStatus": "affected",
                "packageName": "rhelai3/bootc-rocm-rhel9",
                "product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:enterprise_linux_ai:3"
                ],
                "defaultStatus": "affected",
                "packageName": "rhelai3/disk-image-cuda-rhel9",
                "product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:jboss_fuse:7"
                ],
                "defaultStatus": "unaffected",
                "packageName": "axios",
                "product": "Red Hat Fuse 7",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:hummingbird:1"
                ],
                "defaultStatus": "unaffected",
                "packageName": "boost",
                "product": "Red Hat Hardened Images",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "unaffected",
                "packageName": "rhoai/odh-dashboard-rhel8",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-mod-arch-gen-ai-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-mod-arch-maas-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift3/ose-console",
                "product": "Red Hat OpenShift Container Platform 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift4/ose-console",
                "product": "Red Hat OpenShift Container Platform 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift4/ose-console-rhel9",
                "product": "Red Hat OpenShift Container Platform 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:container_native_virtualization:4"
                ],
                "defaultStatus": "unaffected",
                "packageName": "container-native-virtualization/kubevirt-console-plugin",
                "product": "Red Hat OpenShift Virtualization 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:container_native_virtualization:4"
                ],
                "defaultStatus": "unaffected",
                "packageName": "container-native-virtualization/kubevirt-console-plugin-rhel9",
                "product": "Red Hat OpenShift Virtualization 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:jboss_enterprise_bpms_platform:7"
                ],
                "defaultStatus": "unaffected",
                "packageName": "axios",
                "product": "Red Hat Process Automation 7",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:trusted_artifact_signer:1"
                ],
                "defaultStatus": "unaffected",
                "packageName": "rhtas/rhtas-console-ui-rhel9",
                "product": "Red Hat Trusted Artifact Signer",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:trusted_profile_analyzer:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "rhtpa/rhtpa-trustification-service-rhel9",
                "product": "Red Hat Trusted Profile Analyzer",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_portal:2"
                ],
                "defaultStatus": "affected",
                "packageName": "ansible-automation-platform/automation-portal",
                "product": "Self-service automation portal 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:amq_streams:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "axios",
                "product": "streams for Apache Kafka 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:amq_streams:3"
                ],
                "defaultStatus": "unaffected",
                "packageName": "axios",
                "product": "streams for Apache Kafka 3",
                "vendor": "Red Hat"
              }
            ],
            "datePublic": "2026-04-24T17:54:42.668Z",
            "descriptions": [
              {
                "lang": "en",
                "value": "A flaw was found in Axios, a promise-based HTTP client. An attacker who can control the destination address of an Axios request can exploit this vulnerability. By using specific internal network addresses (within the 127.0.0.0/8 range, excluding 127.0.0.1), the attacker can completely bypass the NO_PROXY protection, potentially leading to unauthorized access or information disclosure within the network. This issue is an incomplete fix for a previous vulnerability."
              }
            ],
            "metrics": [
              {
                "other": {
                  "content": {
                    "namespace": "https://access.redhat.com/security/updates/classification/",
                    "value": "Important"
                  },
                  "type": "Red Hat severity rating"
                }
              },
              {
                "cvssV3_1": {
                  "attackComplexity": "LOW",
                  "attackVector": "NETWORK",
                  "availabilityImpact": "NONE",
                  "baseScore": 7.2,
                  "baseSeverity": "HIGH",
                  "confidentialityImpact": "LOW",
                  "integrityImpact": "LOW",
                  "privilegesRequired": "NONE",
                  "scope": "CHANGED",
                  "userInteraction": "NONE",
                  "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
                  "version": "3.1"
                },
                "format": "CVSS"
              }
            ],
            "problemTypes": [
              {
                "descriptions": [
                  {
                    "cweId": "CWE-918",
                    "description": "Server-Side Request Forgery (SSRF)",
                    "lang": "en",
                    "type": "CWE"
                  }
                ]
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-09-10T12:04:53.581Z",
              "orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
              "shortName": "redhat-SADP"
            },
            "references": [
              {
                "tags": [
                  "vdb-entry",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/security/cve/CVE-2026-42043"
              },
              {
                "name": "RHBZ#2461626",
                "tags": [
                  "issue-tracking",
                  "x_refsource_REDHAT"
                ],
                "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2461626"
              },
              {
                "tags": [
                  "x_sadp-csaf-vex"
                ],
                "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42043.json"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:25089"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:16874"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:36882"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:24539"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:25273"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:20938"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:20889"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:22619"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:21338"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:33574"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:14937"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:25041"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:24977"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:17468"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:17474"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:48670"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:21772"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:16476"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:16534"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:16532"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:16535"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:16542"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:22840"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:22629"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:21017"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:24853"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:19375"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:22465"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:23361"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:26214"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:26232"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:26225"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:25271"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:24536"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:17657"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:17699"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:19109"
              }
            ],
            "solutions": [
              {
                "lang": "en",
                "value": "RHSA-2026:25089: HawtIO HawtIO 4.4.0"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:16874: Network Observability (NETOBSERV) 1.11.0"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:36882: Red Hat Advanced Cluster Management for Kubernetes 2.14"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:24539: Red Hat Advanced Cluster Management for Kubernetes 2.15"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:25273: Red Hat Advanced Cluster Management for Kubernetes 2.16"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:20938: Red Hat Advanced Cluster Security 4.9"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:20889: Red Hat Advanced Cluster Security for Kubernetes 4.10"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:22619: Red Hat Data Grid 8.6.1"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:21338: Red Hat Developer Hub 1.8"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:33574: Red Hat Developer Hub 1.9"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:14937: Red Hat Discovery 2"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:25041: Red Hat Migration Toolkit 1.8"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:24977: Red Hat OpenShift AI 2.25"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:17468: Red Hat OpenShift Container Platform 4.20"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:17474: Red Hat OpenShift Container Platform 4.21"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:48670: Red Hat OpenShift Container Platform 4.21"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:21772: Red Hat OpenShift Dev Spaces 3.28"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:16476: Red Hat OpenShift Service Mesh 2.6"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:16534: Red Hat OpenShift Service Mesh 3.0"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:16532: Red Hat OpenShift Service Mesh 3.1"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:16535: Red Hat OpenShift Service Mesh 3.2"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:16542: Red Hat OpenShift Service Mesh 3.3"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:22840: Red Hat Quay 3.10"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:22629: Red Hat Quay 3.12"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:21017: Red Hat Quay 3.14"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:24853: Red Hat Quay 3.15"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:19375: Red Hat Quay 3.16"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:22465: Red Hat Quay 3.17"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:23361: Red Hat Quay 3.9"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:26214: Red Hat Satellite 6.18"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:26232: Red Hat Satellite 6.18"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:26225: Red Hat Satellite 6.18"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:25271: multicluster engine for Kubernetes 2.11"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:24536: multicluster engine for Kubernetes 2.1"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:17657: multicluster engine for Kubernetes 2.6"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:17699: multicluster engine for Kubernetes 2.8"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:19109: multicluster engine for Kubernetes 2.9"
              }
            ],
            "timeline": [
              {
                "lang": "en",
                "time": "2026-04-24T19:01:22.552Z",
                "value": "Reported to Red Hat."
              },
              {
                "lang": "en",
                "time": "2026-04-24T17:54:42.668Z",
                "value": "Made public."
              }
            ],
            "title": "axios: Axios: NO_PROXY bypass via crafted URL",
            "x_adpType": "supplier",
            "x_generator": {
              "engine": "sadp-cli 1.0.0"
            }
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "axios",
              "vendor": "axios",
              "versions": [
                {
                  "status": "affected",
                  "version": "\u003e= 1.0.0, \u003c 1.15.1"
                },
                {
                  "status": "affected",
                  "version": "\u003c 0.31.1"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "Axios is a promise based HTTP client for the browser and Node.js. Prior to 1.15.1 and 0.31.1, an attacker who can influence the target URL of an Axios request can use any address in the 127.0.0.0/8 range (other than 127.0.0.1) to completely bypass the NO_PROXY protection. This vulnerability is due to an incomplete for CVE-2025-62718, This vulnerability is fixed in 1.15.1 and 0.31.1."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "NONE",
                "baseScore": 7.2,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "LOW",
                "integrityImpact": "LOW",
                "privilegesRequired": "NONE",
                "scope": "CHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
                "version": "3.1"
              }
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-183",
                  "description": "CWE-183: Permissive List of Allowed Inputs",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            },
            {
              "descriptions": [
                {
                  "cweId": "CWE-441",
                  "description": "CWE-441: Unintended Proxy or Intermediary (\u0027Confused Deputy\u0027)",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            },
            {
              "descriptions": [
                {
                  "cweId": "CWE-918",
                  "description": "CWE-918: Server-Side Request Forgery (SSRF)",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-04-24T17:54:42.668Z",
            "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
            "shortName": "GitHub_M"
          },
          "references": [
            {
              "name": "https://github.com/axios/axios/security/advisories/GHSA-pmwg-cvhr-8vh7",
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "https://github.com/axios/axios/security/advisories/GHSA-pmwg-cvhr-8vh7"
            }
          ],
          "source": {
            "advisory": "GHSA-pmwg-cvhr-8vh7",
            "discovery": "UNKNOWN"
          },
          "title": "Axios: Incomplete Fix for CVE-2025-62718 \u2014 NO_PROXY  Protection Bypassed via RFC 1122 Loopback Subnet (127.0.0.0/8)  in Axios 1.15.0"
        }
      },
      "cveMetadata": {
        "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "assignerShortName": "GitHub_M",
        "cveId": "CVE-2026-42043",
        "datePublished": "2026-04-24T17:54:42.668Z",
        "dateReserved": "2026-04-23T16:05:01.709Z",
        "dateUpdated": "2026-09-10T12:04:53.581Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2026-42041 (GCVE-0-2026-42041)

    Vulnerability from nvd – Published: 2026-04-24 17:55 – Updated: 2026-09-10 12:04
    VLAI
    Title
    Axios: Authentication Bypass via Prototype Pollution Gadget in `validateStatus` Merge Strategy
    Summary
    Axios is a promise based HTTP client for the browser and Node.js. Prior to 1.15.1 and 0.31.1, the Axios library is vulnerable to a Prototype Pollution "Gadget" attack that allows any Object.prototype pollution to silently suppress all HTTP error responses (401, 403, 500, etc.), causing them to be treated as successful responses. This completely bypasses application-level authentication and error handling. The root cause is that validateStatus is the only config property using the mergeDirectKeys merge strategy, which uses JavaScript's in operator — an operator that inherently traverses the prototype chain. When Object.prototype.validateStatus is polluted with () => true, all HTTP status codes are accepted as success. This vulnerability is fixed in 1.15.1 and 0.31.1.
    SSVC
    Exploitation: poc Automatable: no Technical Impact: partial
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-04-24 18:29 UTC
    CWE
    • CWE-287 - Improper Authentication
    • CWE-1321 - Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
    • CWE-915 - Improperly Controlled Modification of Dynamically-Determined Object Attributes
    References
    URL Tags
    https://github.com/axios/axios/security/advisorie… x_refsource_CONFIRM
    https://access.redhat.com/security/cve/CVE-2026-42041 vdb-entryx_refsource_REDHAT
    https://bugzilla.redhat.com/show_bug.cgi?id=2461629 issue-trackingx_refsource_REDHAT
    https://security.access.redhat.com/data/csaf/v2/v… x_sadp-csaf-vex
    https://access.redhat.com/errata/RHSA-2026:25089 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:16874 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:36882 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:24539 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:25273 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:20938 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:20889 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:22619 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:21338 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:33574 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:14937 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:25041 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:50300 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:24977 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:17468 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:17474 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:21772 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:16476 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:16534 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:16532 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:16535 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:16542 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:22840 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:22629 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:21017 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:24853 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:19375 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:22465 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:23361 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:26214 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:26232 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:26225 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:25271 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:24536 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:17657 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:17699 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:19109 vendor-advisoryx_refsource_REDHAT
    Impacted products
    Vendor Product Version
    axios axios Affected: >= 1.0.0, < 1.15.1
    Affected: < 0.31.1
    Create a notification for this product.
    Red Hat HawtIO HawtIO 4.4.0     cpe:/a:redhat:apache_camel_hawtio:4.4::el9
    Create a notification for this product.
    Red Hat Red Hat Data Grid 8.6.1     cpe:/a:redhat:jboss_data_grid:8
    Create a notification for this product.
    Red Hat multicluster engine for Kubernetes 2.1 Unaffected: 1780917531 , < * (rpm)
        cpe:/a:redhat:multicluster_engine:2.10::el9
    Create a notification for this product.
    Red Hat multicluster engine for Kubernetes 2.11 Unaffected: 1780910888 , < * (rpm)
        cpe:/a:redhat:multicluster_engine:2.11::el9
    Create a notification for this product.
    Red Hat multicluster engine for Kubernetes 2.6 Unaffected: 1778511348 , < * (rpm)
        cpe:/a:redhat:multicluster_engine:2.6::el9
    Create a notification for this product.
    Red Hat multicluster engine for Kubernetes 2.8 Unaffected: 1778383863 , < * (rpm)
        cpe:/a:redhat:multicluster_engine:2.8::el9
    Create a notification for this product.
    Red Hat multicluster engine for Kubernetes 2.9 Unaffected: 1778532610 , < * (rpm)
        cpe:/a:redhat:multicluster_engine:2.9::el9
    Create a notification for this product.
    Red Hat Network Observability (NETOBSERV) 1.11.0 Unaffected: 1778508956 , < * (rpm)
        cpe:/a:redhat:network_observ_optr:1.11::el9
    Create a notification for this product.
    Red Hat Network Observability (NETOBSERV) 1.11.0 Unaffected: 1778510461 , < * (rpm)
        cpe:/a:redhat:network_observ_optr:1.11::el9
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.14 Unaffected: 1783451729 , < * (rpm)
        cpe:/a:redhat:acm:2.14::el9
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.15 Unaffected: 1780876734 , < * (rpm)
        cpe:/a:redhat:acm:2.15::el9
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.16 Unaffected: 1780600823 , < * (rpm)
        cpe:/a:redhat:acm:2.16::el9
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Security 4.9 Unaffected: 1779371594 , < * (rpm)
        cpe:/a:redhat:advanced_cluster_security:4.9::el8
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Security for Kubernetes 4.10 Unaffected: 1779293013 , < * (rpm)
        cpe:/a:redhat:advanced_cluster_security:4.10::el8
    Create a notification for this product.
    Red Hat Red Hat Developer Hub 1.8 Unaffected: 1779841586 , < * (rpm)
        cpe:/a:redhat:rhdh:1.8::el9
    Create a notification for this product.
    Red Hat Red Hat Developer Hub 1.9 Unaffected: 1782761244 , < * (rpm)
        cpe:/a:redhat:rhdh:1.9::el9
    Create a notification for this product.
    Red Hat Red Hat Discovery 2 Unaffected: 1778156756 , < * (rpm)
        cpe:/a:redhat:discovery:2::el9
    Create a notification for this product.
    Red Hat Red Hat Migration Toolkit 1.8 Unaffected: 1780590717 , < * (rpm)
        cpe:/a:redhat:rhmt:1.8::el8
    Create a notification for this product.
    Red Hat Red Hat Migration Toolkit for Applications 8.1 Unaffected: 1785169013 , < * (rpm)
        cpe:/a:redhat:migration_toolkit_applications:8.1::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 2.25 Unaffected: 1780467029 , < * (rpm)
        cpe:/a:redhat:openshift_ai:2.25::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 2.25 Unaffected: 1780467147 , < * (rpm)
        cpe:/a:redhat:openshift_ai:2.25::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Container Platform 4.20 Unaffected: 1778645099 , < * (rpm)
        cpe:/a:redhat:openshift:4.20::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Container Platform 4.21 Unaffected: 1778539338 , < * (rpm)
        cpe:/a:redhat:openshift:4.21::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Dev Spaces 3.28 Unaffected: 1779814592 , < * (rpm)
        cpe:/a:redhat:openshift_devspaces:3.28::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Dev Spaces 3.28 Unaffected: 1779341289 , < * (rpm)
        cpe:/a:redhat:openshift_devspaces:3.28::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 2.6 Unaffected: 1778191473 , < * (rpm)
        cpe:/a:redhat:service_mesh:2.6::el8
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 2.6 Unaffected: 1778191378 , < * (rpm)
        cpe:/a:redhat:service_mesh:2.6::el8
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 3.0 Unaffected: 1778163785 , < * (rpm)
        cpe:/a:redhat:service_mesh:3.0::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 3.0 Unaffected: 1778164208 , < * (rpm)
        cpe:/a:redhat:service_mesh:3.0::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 3.1 Unaffected: 1778163935 , < * (rpm)
        cpe:/a:redhat:service_mesh:3.1::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 3.1 Unaffected: 1778164042 , < * (rpm)
        cpe:/a:redhat:service_mesh:3.1::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 3.2 Unaffected: 1778163792 , < * (rpm)
        cpe:/a:redhat:service_mesh:3.2::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 3.2 Unaffected: 1778163909 , < * (rpm)
        cpe:/a:redhat:service_mesh:3.2::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 3.3 Unaffected: 1778163785 , < * (rpm)
        cpe:/a:redhat:service_mesh:3.3::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 3.3 Unaffected: 1778163986 , < * (rpm)
        cpe:/a:redhat:service_mesh:3.3::el9
    Create a notification for this product.
    Red Hat Red Hat Quay 3.10 Unaffected: 1779822261 , < * (rpm)
        cpe:/a:redhat:quay:3.10::el8
    Create a notification for this product.
    Red Hat Red Hat Quay 3.12 Unaffected: 1779811412 , < * (rpm)
        cpe:/a:redhat:quay:3.12::el8
    Create a notification for this product.
    Red Hat Red Hat Quay 3.14 Unaffected: 1779689392 , < * (rpm)
        cpe:/a:redhat:quay:3.14::el8
    Create a notification for this product.
    Red Hat Red Hat Quay 3.15 Unaffected: 1780891395 , < * (rpm)
        cpe:/a:redhat:quay:3.15::el8
    Create a notification for this product.
    Red Hat Red Hat Quay 3.16 Unaffected: 1779204086 , < * (rpm)
        cpe:/a:redhat:quay:3.16::el9
    Create a notification for this product.
    Red Hat Red Hat Quay 3.17 Unaffected: 1779922205 , < * (rpm)
        cpe:/a:redhat:quay:3.17::el9
    Create a notification for this product.
    Red Hat Red Hat Quay 3.9 Unaffected: 1779811473 , < * (rpm)
        cpe:/a:redhat:quay:3.9::el8
    Create a notification for this product.
    Red Hat Red Hat Satellite 6.18 Unaffected: 1781181673 , < * (rpm)
        cpe:/a:redhat:satellite:6.18::el9
    Create a notification for this product.
    Red Hat Red Hat Satellite 6.18 Unaffected: 1781032495 , < * (rpm)
        cpe:/a:redhat:satellite:6.18::el9
    Create a notification for this product.
    Red Hat Red Hat Satellite 6.18 Unaffected: 1780105179 , < * (rpm)
        cpe:/a:redhat:satellite:6.18::el9
    Create a notification for this product.
    Red Hat Cryostat 4     cpe:/a:redhat:cryostat:4
    Create a notification for this product.
    Red Hat Gatekeeper 3     cpe:/a:redhat:gatekeeper:3
    Create a notification for this product.
    Red Hat Migration Toolkit for Applications 8     cpe:/a:redhat:migration_toolkit_applications:8
    Create a notification for this product.
    Red Hat OpenShift Pipelines     cpe:/a:redhat:openshift_pipelines:1
    Create a notification for this product.
    Red Hat OpenShift Service Mesh 3     cpe:/a:redhat:service_mesh:3
    Create a notification for this product.
    Red Hat Red Hat 3scale API Management Platform 2     cpe:/a:redhat:red_hat_3scale_amp:2
    Create a notification for this product.
    Red Hat Red Hat Ansible Automation Platform 2     cpe:/a:redhat:ansible_automation_platform:2
    Create a notification for this product.
    Red Hat Red Hat build of Apicurio Registry 2     cpe:/a:redhat:service_registry:2
    Create a notification for this product.
    Red Hat Red Hat build of Apicurio Registry 3     cpe:/a:redhat:apicurio_registry:3
    Create a notification for this product.
    Red Hat Red Hat Build of Podman Desktop - Tech Preview     cpe:/a:redhat:podman_desktop:0
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 8     cpe:/o:redhat:enterprise_linux:8
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 9     cpe:/o:redhat:enterprise_linux:9
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux AI (RHEL AI) 3     cpe:/a:redhat:enterprise_linux_ai:3
    Create a notification for this product.
    Red Hat Red Hat Fuse 7     cpe:/a:redhat:jboss_fuse:7
    Create a notification for this product.
    Red Hat Red Hat Hardened Images     cpe:/a:redhat:hummingbird:1
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI (RHOAI)     cpe:/a:redhat:openshift_ai
    Create a notification for this product.
    Red Hat Red Hat OpenShift Container Platform 4     cpe:/a:redhat:openshift:4
    Create a notification for this product.
    Red Hat Red Hat OpenShift Virtualization 4     cpe:/a:redhat:container_native_virtualization:4
    Create a notification for this product.
    Red Hat Red Hat Process Automation 7     cpe:/a:redhat:jboss_enterprise_bpms_platform:7
    Create a notification for this product.
    Red Hat Red Hat Trusted Artifact Signer     cpe:/a:redhat:trusted_artifact_signer:1
    Create a notification for this product.
    Red Hat Red Hat Trusted Profile Analyzer     cpe:/a:redhat:trusted_profile_analyzer:2
    Create a notification for this product.
    Red Hat Self-service automation portal 2     cpe:/a:redhat:ansible_portal:2
    Create a notification for this product.
    Red Hat streams for Apache Kafka 2     cpe:/a:redhat:amq_streams:2
    Create a notification for this product.
    Red Hat streams for Apache Kafka 3     cpe:/a:redhat:amq_streams:3
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-42041",
                    "options": [
                      {
                        "Exploitation": "poc"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "partial"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-04-24T18:29:47.107016Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-04-24T18:32:58.115Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "references": [
              {
                "tags": [
                  "exploit"
                ],
                "url": "https://github.com/axios/axios/security/advisories/GHSA-w9j2-pvgh-6h63"
              }
            ],
            "title": "CISA ADP Vulnrichment"
          },
          {
            "affected": [
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:apache_camel_hawtio:4.4::el9"
                ],
                "defaultStatus": "unaffected",
                "packageName": "axios",
                "product": "HawtIO HawtIO 4.4.0",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:jboss_data_grid:8"
                ],
                "defaultStatus": "unaffected",
                "packageName": "axios",
                "product": "Red Hat Data Grid 8.6.1",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:multicluster_engine:2.10::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "multicluster-engine/console-mce-rhel9",
                "product": "multicluster engine for Kubernetes 2.1",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1780917531",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:multicluster_engine:2.11::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "multicluster-engine/console-mce-rhel9",
                "product": "multicluster engine for Kubernetes 2.11",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1780910888",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:multicluster_engine:2.6::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "multicluster-engine/console-mce-rhel9",
                "product": "multicluster engine for Kubernetes 2.6",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778511348",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:multicluster_engine:2.8::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "multicluster-engine/console-mce-rhel9",
                "product": "multicluster engine for Kubernetes 2.8",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778383863",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:multicluster_engine:2.9::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "multicluster-engine/console-mce-rhel9",
                "product": "multicluster engine for Kubernetes 2.9",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778532610",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:network_observ_optr:1.11::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "network-observability/network-observability-console-plugin-compat-rhel9",
                "product": "Network Observability (NETOBSERV) 1.11.0",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778508956",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:network_observ_optr:1.11::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "network-observability/network-observability-console-plugin-rhel9",
                "product": "Network Observability (NETOBSERV) 1.11.0",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778510461",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:acm:2.14::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhacm2/console-rhel9",
                "product": "Red Hat Advanced Cluster Management for Kubernetes 2.14",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1783451729",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:acm:2.15::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhacm2/console-rhel9",
                "product": "Red Hat Advanced Cluster Management for Kubernetes 2.15",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1780876734",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:acm:2.16::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhacm2/console-rhel9",
                "product": "Red Hat Advanced Cluster Management for Kubernetes 2.16",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1780600823",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:advanced_cluster_security:4.9::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "advanced-cluster-security/rhacs-main-rhel8",
                "product": "Red Hat Advanced Cluster Security 4.9",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779371594",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:advanced_cluster_security:4.10::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "advanced-cluster-security/rhacs-main-rhel8",
                "product": "Red Hat Advanced Cluster Security for Kubernetes 4.10",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779293013",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:rhdh:1.8::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhdh/rhdh-hub-rhel9",
                "product": "Red Hat Developer Hub 1.8",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779841586",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:rhdh:1.9::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhdh/rhdh-hub-rhel9",
                "product": "Red Hat Developer Hub 1.9",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782761244",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:discovery:2::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "discovery/discovery-ui-rhel9",
                "product": "Red Hat Discovery 2",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778156756",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:rhmt:1.8::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "rhmtc/openshift-migration-ui-rhel8",
                "product": "Red Hat Migration Toolkit 1.8",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1780590717",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:migration_toolkit_applications:8.1::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "mta/mta-ui-rhel9",
                "product": "Red Hat Migration Toolkit for Applications 8.1",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1785169013",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:2.25::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-dashboard-rhel9",
                "product": "Red Hat OpenShift AI 2.25",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1780467029",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:2.25::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-mod-arch-model-registry-rhel9",
                "product": "Red Hat OpenShift AI 2.25",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1780467147",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4.20::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift4/ose-agent-installer-ui-rhel9",
                "product": "Red Hat OpenShift Container Platform 4.20",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778645099",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4.21::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift4/ose-agent-installer-ui-rhel9",
                "product": "Red Hat OpenShift Container Platform 4.21",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778539338",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_devspaces:3.28::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "devspaces/code-rhel9",
                "product": "Red Hat OpenShift Dev Spaces 3.28",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779814592",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_devspaces:3.28::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "devspaces/dashboard-rhel9",
                "product": "Red Hat OpenShift Dev Spaces 3.28",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779341289",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:2.6::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-ossmc-rhel8",
                "product": "Red Hat OpenShift Service Mesh 2.6",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778191473",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:2.6::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-rhel8",
                "product": "Red Hat OpenShift Service Mesh 2.6",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778191378",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3.0::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-ossmc-rhel9",
                "product": "Red Hat OpenShift Service Mesh 3.0",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778163785",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3.0::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-rhel9",
                "product": "Red Hat OpenShift Service Mesh 3.0",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778164208",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3.1::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-ossmc-rhel9",
                "product": "Red Hat OpenShift Service Mesh 3.1",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778163935",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3.1::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-rhel9",
                "product": "Red Hat OpenShift Service Mesh 3.1",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778164042",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3.2::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-ossmc-rhel9",
                "product": "Red Hat OpenShift Service Mesh 3.2",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778163792",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3.2::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-rhel9",
                "product": "Red Hat OpenShift Service Mesh 3.2",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778163909",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3.3::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-ossmc-rhel9",
                "product": "Red Hat OpenShift Service Mesh 3.3",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778163785",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3.3::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-rhel9",
                "product": "Red Hat OpenShift Service Mesh 3.3",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778163986",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.10::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel8",
                "product": "Red Hat Quay 3.10",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779822261",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.12::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel8",
                "product": "Red Hat Quay 3.12",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779811412",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.14::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel8",
                "product": "Red Hat Quay 3.14",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779689392",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.15::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel8",
                "product": "Red Hat Quay 3.15",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1780891395",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.16::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel9",
                "product": "Red Hat Quay 3.16",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779204086",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.17::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel9",
                "product": "Red Hat Quay 3.17",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779922205",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.9::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel8",
                "product": "Red Hat Quay 3.9",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779811473",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:satellite:6.18::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "satellite/iop-advisor-frontend-rhel9",
                "product": "Red Hat Satellite 6.18",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1781181673",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:satellite:6.18::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "satellite/iop-vulnerability-frontend-rhel9",
                "product": "Red Hat Satellite 6.18",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1781032495",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:satellite:6.18::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "satellite/iop-host-inventory-frontend-rhel9",
                "product": "Red Hat Satellite 6.18",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1780105179",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:cryostat:4"
                ],
                "defaultStatus": "unaffected",
                "packageName": "axios",
                "product": "Cryostat 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:gatekeeper:3"
                ],
                "defaultStatus": "unaffected",
                "packageName": "gatekeeper/gatekeeper-rhel9",
                "product": "Gatekeeper 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:migration_toolkit_applications:8"
                ],
                "defaultStatus": "affected",
                "packageName": "mta/mta-ui-rhel8",
                "product": "Migration Toolkit for Applications 8",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_pipelines:1"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-pipelines/pipelines-hub-ui-rhel8",
                "product": "OpenShift Pipelines",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_pipelines:1"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-pipelines/pipelines-hub-ui-rhel9",
                "product": "OpenShift Pipelines",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3"
                ],
                "defaultStatus": "unaffected",
                "packageName": "openshift-service-mesh/kiali-operator-bundle",
                "product": "OpenShift Service Mesh 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3"
                ],
                "defaultStatus": "unaffected",
                "packageName": "openshift-service-mesh/kiali-rhel9-operator",
                "product": "OpenShift Service Mesh 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:red_hat_3scale_amp:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "3scale-amp21/system",
                "product": "Red Hat 3scale API Management Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:red_hat_3scale_amp:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "3scale-amp22/system",
                "product": "Red Hat 3scale API Management Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:red_hat_3scale_amp:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "3scale-amp2/system-rhel7",
                "product": "Red Hat 3scale API Management Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:red_hat_3scale_amp:2"
                ],
                "defaultStatus": "affected",
                "packageName": "3scale-amp2/system-rhel8",
                "product": "Red Hat 3scale API Management Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:red_hat_3scale_amp:2"
                ],
                "defaultStatus": "affected",
                "packageName": "3scale-amp2/system-rhel9",
                "product": "Red Hat 3scale API Management Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "ansible-automation-platform-26/gateway-rhel9",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "affected",
                "packageName": "ansible-automation-platform/automation-dashboard-rhel9",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "affected",
                "packageName": "automation-controller",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "automation-gateway",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "affected",
                "packageName": "automation-hub",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "automation-platform-ui",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "python3.11-galaxy-ng",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "python3.12-galaxy-ng",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "python3x-galaxy-ng",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "python-galaxy-ng",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:service_registry:2"
                ],
                "defaultStatus": "affected",
                "packageName": "axios",
                "product": "Red Hat build of Apicurio Registry 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:apicurio_registry:3"
                ],
                "defaultStatus": "affected",
                "packageName": "apicurio/apicurio-registry-ui-rhel8",
                "product": "Red Hat build of Apicurio Registry 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:apicurio_registry:3"
                ],
                "defaultStatus": "affected",
                "packageName": "apicurio/apicurio-registry-ui-rhel9",
                "product": "Red Hat build of Apicurio Registry 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:podman_desktop:0"
                ],
                "defaultStatus": "affected",
                "packageName": "rhdesktop/rh-podman-desktop-ext-openshift-local-rhel10",
                "product": "Red Hat Build of Podman Desktop - Tech Preview",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:8"
                ],
                "defaultStatus": "affected",
                "packageName": "grafana",
                "product": "Red Hat Enterprise Linux 8",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:9"
                ],
                "defaultStatus": "unaffected",
                "packageName": "grafana",
                "product": "Red Hat Enterprise Linux 9",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:enterprise_linux_ai:3"
                ],
                "defaultStatus": "affected",
                "packageName": "rhelai3/bootc-cuda-rhel9",
                "product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:enterprise_linux_ai:3"
                ],
                "defaultStatus": "affected",
                "packageName": "rhelai3/bootc-rocm-rhel9",
                "product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:enterprise_linux_ai:3"
                ],
                "defaultStatus": "affected",
                "packageName": "rhelai3/disk-image-cuda-rhel9",
                "product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:jboss_fuse:7"
                ],
                "defaultStatus": "unaffected",
                "packageName": "axios",
                "product": "Red Hat Fuse 7",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:hummingbird:1"
                ],
                "defaultStatus": "unaffected",
                "packageName": "boost",
                "product": "Red Hat Hardened Images",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "unaffected",
                "packageName": "rhoai/odh-dashboard-rhel8",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-mod-arch-gen-ai-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-mod-arch-maas-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift3/ose-console",
                "product": "Red Hat OpenShift Container Platform 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift4/ose-console",
                "product": "Red Hat OpenShift Container Platform 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4"
                ],
                "defaultStatus": "unaffected",
                "packageName": "openshift4/ose-console-rhel9",
                "product": "Red Hat OpenShift Container Platform 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift4/ose-monitoring-plugin-rhel9",
                "product": "Red Hat OpenShift Container Platform 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:container_native_virtualization:4"
                ],
                "defaultStatus": "unaffected",
                "packageName": "container-native-virtualization/kubevirt-console-plugin",
                "product": "Red Hat OpenShift Virtualization 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:container_native_virtualization:4"
                ],
                "defaultStatus": "unaffected",
                "packageName": "container-native-virtualization/kubevirt-console-plugin-rhel9",
                "product": "Red Hat OpenShift Virtualization 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:jboss_enterprise_bpms_platform:7"
                ],
                "defaultStatus": "unaffected",
                "packageName": "axios",
                "product": "Red Hat Process Automation 7",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:trusted_artifact_signer:1"
                ],
                "defaultStatus": "unaffected",
                "packageName": "rhtas/rhtas-console-ui-rhel9",
                "product": "Red Hat Trusted Artifact Signer",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:trusted_profile_analyzer:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "rhtpa/rhtpa-trustification-service-rhel9",
                "product": "Red Hat Trusted Profile Analyzer",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_portal:2"
                ],
                "defaultStatus": "affected",
                "packageName": "ansible-automation-platform/automation-portal",
                "product": "Self-service automation portal 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:amq_streams:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "axios",
                "product": "streams for Apache Kafka 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:amq_streams:3"
                ],
                "defaultStatus": "unaffected",
                "packageName": "axios",
                "product": "streams for Apache Kafka 3",
                "vendor": "Red Hat"
              }
            ],
            "datePublic": "2026-04-24T17:55:30.036Z",
            "descriptions": [
              {
                "lang": "en",
                "value": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability, a Prototype Pollution \"Gadget\" attack, allows an attacker to manipulate the `Object.prototype.validateStatus` property. By polluting this property, all HTTP error responses (such as 401, 403, or 500) are silently treated as successful responses. This can lead to a complete bypass of application-level authentication and error handling, potentially granting unauthorized access."
              }
            ],
            "metrics": [
              {
                "other": {
                  "content": {
                    "namespace": "https://access.redhat.com/security/updates/classification/",
                    "value": "Important"
                  },
                  "type": "Red Hat severity rating"
                }
              },
              {
                "cvssV3_1": {
                  "attackComplexity": "LOW",
                  "attackVector": "NETWORK",
                  "availabilityImpact": "NONE",
                  "baseScore": 8.2,
                  "baseSeverity": "HIGH",
                  "confidentialityImpact": "LOW",
                  "integrityImpact": "HIGH",
                  "privilegesRequired": "NONE",
                  "scope": "UNCHANGED",
                  "userInteraction": "NONE",
                  "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N",
                  "version": "3.1"
                },
                "format": "CVSS"
              }
            ],
            "problemTypes": [
              {
                "descriptions": [
                  {
                    "cweId": "CWE-915",
                    "description": "Improperly Controlled Modification of Dynamically-Determined Object Attributes",
                    "lang": "en",
                    "type": "CWE"
                  }
                ]
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-09-10T12:04:53.539Z",
              "orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
              "shortName": "redhat-SADP"
            },
            "references": [
              {
                "tags": [
                  "vdb-entry",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/security/cve/CVE-2026-42041"
              },
              {
                "name": "RHBZ#2461629",
                "tags": [
                  "issue-tracking",
                  "x_refsource_REDHAT"
                ],
                "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2461629"
              },
              {
                "tags": [
                  "x_sadp-csaf-vex"
                ],
                "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42041.json"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:25089"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:16874"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:36882"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:24539"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:25273"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:20938"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:20889"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:22619"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:21338"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:33574"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:14937"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:25041"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:50300"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:24977"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:17468"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:17474"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:21772"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:16476"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:16534"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:16532"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:16535"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:16542"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:22840"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:22629"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:21017"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:24853"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:19375"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:22465"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:23361"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:26214"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:26232"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:26225"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:25271"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:24536"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:17657"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:17699"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:19109"
              }
            ],
            "solutions": [
              {
                "lang": "en",
                "value": "RHSA-2026:25089: HawtIO HawtIO 4.4.0"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:16874: Network Observability (NETOBSERV) 1.11.0"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:36882: Red Hat Advanced Cluster Management for Kubernetes 2.14"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:24539: Red Hat Advanced Cluster Management for Kubernetes 2.15"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:25273: Red Hat Advanced Cluster Management for Kubernetes 2.16"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:20938: Red Hat Advanced Cluster Security 4.9"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:20889: Red Hat Advanced Cluster Security for Kubernetes 4.10"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:22619: Red Hat Data Grid 8.6.1"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:21338: Red Hat Developer Hub 1.8"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:33574: Red Hat Developer Hub 1.9"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:14937: Red Hat Discovery 2"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:25041: Red Hat Migration Toolkit 1.8"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:50300: Red Hat Migration Toolkit for Applications 8.1"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:24977: Red Hat OpenShift AI 2.25"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:17468: Red Hat OpenShift Container Platform 4.20"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:17474: Red Hat OpenShift Container Platform 4.21"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:21772: Red Hat OpenShift Dev Spaces 3.28"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:16476: Red Hat OpenShift Service Mesh 2.6"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:16534: Red Hat OpenShift Service Mesh 3.0"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:16532: Red Hat OpenShift Service Mesh 3.1"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:16535: Red Hat OpenShift Service Mesh 3.2"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:16542: Red Hat OpenShift Service Mesh 3.3"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:22840: Red Hat Quay 3.10"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:22629: Red Hat Quay 3.12"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:21017: Red Hat Quay 3.14"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:24853: Red Hat Quay 3.15"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:19375: Red Hat Quay 3.16"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:22465: Red Hat Quay 3.17"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:23361: Red Hat Quay 3.9"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:26214: Red Hat Satellite 6.18"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:26232: Red Hat Satellite 6.18"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:26225: Red Hat Satellite 6.18"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:25271: multicluster engine for Kubernetes 2.11"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:24536: multicluster engine for Kubernetes 2.1"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:17657: multicluster engine for Kubernetes 2.6"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:17699: multicluster engine for Kubernetes 2.8"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:19109: multicluster engine for Kubernetes 2.9"
              }
            ],
            "timeline": [
              {
                "lang": "en",
                "time": "2026-04-24T19:01:41.034Z",
                "value": "Reported to Red Hat."
              },
              {
                "lang": "en",
                "time": "2026-04-24T17:55:30.036Z",
                "value": "Made public."
              }
            ],
            "title": "axios: Axios: Authentication bypass due to prototype pollution of HTTP error handling",
            "x_adpType": "supplier",
            "x_generator": {
              "engine": "sadp-cli 1.0.0"
            }
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "axios",
              "vendor": "axios",
              "versions": [
                {
                  "status": "affected",
                  "version": "\u003e= 1.0.0, \u003c 1.15.1"
                },
                {
                  "status": "affected",
                  "version": "\u003c 0.31.1"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "Axios is a promise based HTTP client for the browser and Node.js. Prior to 1.15.1 and 0.31.1, the Axios library is vulnerable to a Prototype Pollution \"Gadget\" attack that allows any Object.prototype pollution to silently suppress all HTTP error responses (401, 403, 500, etc.), causing them to be treated as successful responses. This completely bypasses application-level authentication and error handling. The root cause is that validateStatus is the only config property using the mergeDirectKeys merge strategy, which uses JavaScript\u0027s in operator \u2014 an operator that inherently traverses the prototype chain. When Object.prototype.validateStatus is polluted with () =\u003e true, all HTTP status codes are accepted as success. This vulnerability is fixed in 1.15.1 and 0.31.1."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "HIGH",
                "attackVector": "NETWORK",
                "availabilityImpact": "NONE",
                "baseScore": 4.8,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "LOW",
                "integrityImpact": "LOW",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
                "version": "3.1"
              }
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-287",
                  "description": "CWE-287: Improper Authentication",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            },
            {
              "descriptions": [
                {
                  "cweId": "CWE-1321",
                  "description": "CWE-1321: Improperly Controlled Modification of Object Prototype Attributes (\u0027Prototype Pollution\u0027)",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-04-24T17:55:30.036Z",
            "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
            "shortName": "GitHub_M"
          },
          "references": [
            {
              "name": "https://github.com/axios/axios/security/advisories/GHSA-w9j2-pvgh-6h63",
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "https://github.com/axios/axios/security/advisories/GHSA-w9j2-pvgh-6h63"
            }
          ],
          "source": {
            "advisory": "GHSA-w9j2-pvgh-6h63",
            "discovery": "UNKNOWN"
          },
          "title": "Axios: Authentication Bypass via Prototype Pollution Gadget in `validateStatus` Merge Strategy"
        }
      },
      "cveMetadata": {
        "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "assignerShortName": "GitHub_M",
        "cveId": "CVE-2026-42041",
        "datePublished": "2026-04-24T17:55:30.036Z",
        "dateReserved": "2026-04-23T16:05:01.709Z",
        "dateUpdated": "2026-09-10T12:04:53.539Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2026-42039 (GCVE-0-2026-42039)

    Vulnerability from nvd – Published: 2026-04-24 18:01 – Updated: 2026-09-10 12:04
    VLAI
    Title
    Axios: unbounded recursion in toFormData causes DoS via deeply nested request data
    Summary
    Axios is a promise based HTTP client for the browser and Node.js. Prior to 1.15.1 and 0.31.1, toFormData recursively walks nested objects with no depth limit, so a deeply nested value passed as request data crashes the Node.js process with a RangeError. This vulnerability is fixed in 1.15.1 and 0.31.1.
    SSVC
    Exploitation: poc Automatable: yes Technical Impact: partial
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-04-24 18:14 UTC
    CWE
    • CWE-674 - Uncontrolled Recursion
    • CWE-770 - Allocation of Resources Without Limits or Throttling
    References
    URL Tags
    https://github.com/axios/axios/security/advisorie… x_refsource_CONFIRM
    https://access.redhat.com/security/cve/CVE-2026-42039 vdb-entryx_refsource_REDHAT
    https://bugzilla.redhat.com/show_bug.cgi?id=2461630 issue-trackingx_refsource_REDHAT
    https://security.access.redhat.com/data/csaf/v2/v… x_sadp-csaf-vex
    https://access.redhat.com/errata/RHSA-2026:25089 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:16874 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:24473 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:36882 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:24539 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:25273 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:20938 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:20889 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:22619 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:21338 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:33574 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:14937 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:25041 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:50300 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:24977 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:17468 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:17474 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:48670 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:21772 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:16476 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:16534 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:16532 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:16535 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:16542 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:22840 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:22629 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:21017 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:24853 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:19375 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:22465 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:48085 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:23361 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:26214 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:26225 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:25271 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:24536 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:17657 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:17699 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:19109 vendor-advisoryx_refsource_REDHAT
    Impacted products
    Vendor Product Version
    axios axios Affected: >= 1.0.0, < 1.15.1
    Affected: < 0.31.1
    Create a notification for this product.
    Red Hat HawtIO HawtIO 4.4.0     cpe:/a:redhat:apache_camel_hawtio:4.4::el9
    Create a notification for this product.
    Red Hat Red Hat Data Grid 8.6.1     cpe:/a:redhat:jboss_data_grid:8
    Create a notification for this product.
    Red Hat multicluster engine for Kubernetes 2.1 Unaffected: 1780917531 , < * (rpm)
        cpe:/a:redhat:multicluster_engine:2.10::el9
    Create a notification for this product.
    Red Hat multicluster engine for Kubernetes 2.11 Unaffected: 1780910888 , < * (rpm)
        cpe:/a:redhat:multicluster_engine:2.11::el9
    Create a notification for this product.
    Red Hat multicluster engine for Kubernetes 2.6 Unaffected: 1778511348 , < * (rpm)
        cpe:/a:redhat:multicluster_engine:2.6::el9
    Create a notification for this product.
    Red Hat multicluster engine for Kubernetes 2.8 Unaffected: 1778383863 , < * (rpm)
        cpe:/a:redhat:multicluster_engine:2.8::el9
    Create a notification for this product.
    Red Hat multicluster engine for Kubernetes 2.9 Unaffected: 1778532610 , < * (rpm)
        cpe:/a:redhat:multicluster_engine:2.9::el9
    Create a notification for this product.
    Red Hat Network Observability (NETOBSERV) 1.11.0 Unaffected: 1778510461 , < * (rpm)
        cpe:/a:redhat:network_observ_optr:1.11::el9
    Create a notification for this product.
    Red Hat Network Observability (NETOBSERV) 1.12.2 Unaffected: 1780920979 , < * (rpm)
        cpe:/a:redhat:network_observ_optr:1.12::el9
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.14 Unaffected: 1783451729 , < * (rpm)
        cpe:/a:redhat:acm:2.14::el9
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.15 Unaffected: 1780876734 , < * (rpm)
        cpe:/a:redhat:acm:2.15::el9
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.16 Unaffected: 1780600823 , < * (rpm)
        cpe:/a:redhat:acm:2.16::el9
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Security 4.9 Unaffected: 1779371594 , < * (rpm)
        cpe:/a:redhat:advanced_cluster_security:4.9::el8
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Security for Kubernetes 4.10 Unaffected: 1779293013 , < * (rpm)
        cpe:/a:redhat:advanced_cluster_security:4.10::el8
    Create a notification for this product.
    Red Hat Red Hat Developer Hub 1.8 Unaffected: 1779841586 , < * (rpm)
        cpe:/a:redhat:rhdh:1.8::el9
    Create a notification for this product.
    Red Hat Red Hat Developer Hub 1.9 Unaffected: 1782761244 , < * (rpm)
        cpe:/a:redhat:rhdh:1.9::el9
    Create a notification for this product.
    Red Hat Red Hat Discovery 2 Unaffected: 1778156756 , < * (rpm)
        cpe:/a:redhat:discovery:2::el9
    Create a notification for this product.
    Red Hat Red Hat Migration Toolkit 1.8 Unaffected: 1780590717 , < * (rpm)
        cpe:/a:redhat:rhmt:1.8::el8
    Create a notification for this product.
    Red Hat Red Hat Migration Toolkit for Applications 8.1 Unaffected: 1785169013 , < * (rpm)
        cpe:/a:redhat:migration_toolkit_applications:8.1::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 2.25 Unaffected: 1780467029 , < * (rpm)
        cpe:/a:redhat:openshift_ai:2.25::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 2.25 Unaffected: 1780467147 , < * (rpm)
        cpe:/a:redhat:openshift_ai:2.25::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Container Platform 4.20 Unaffected: 1778645099 , < * (rpm)
        cpe:/a:redhat:openshift:4.20::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Container Platform 4.21 Unaffected: 1778539338 , < * (rpm)
        cpe:/a:redhat:openshift:4.21::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Container Platform 4.21 Unaffected: 1785354128 , < * (rpm)
        cpe:/a:redhat:openshift:4.21::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Dev Spaces 3.28 Unaffected: 1779814592 , < * (rpm)
        cpe:/a:redhat:openshift_devspaces:3.28::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Dev Spaces 3.28 Unaffected: 1779341289 , < * (rpm)
        cpe:/a:redhat:openshift_devspaces:3.28::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 2.6 Unaffected: 1778191473 , < * (rpm)
        cpe:/a:redhat:service_mesh:2.6::el8
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 2.6 Unaffected: 1778191378 , < * (rpm)
        cpe:/a:redhat:service_mesh:2.6::el8
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 3.0 Unaffected: 1778163785 , < * (rpm)
        cpe:/a:redhat:service_mesh:3.0::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 3.0 Unaffected: 1778164208 , < * (rpm)
        cpe:/a:redhat:service_mesh:3.0::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 3.1 Unaffected: 1778163935 , < * (rpm)
        cpe:/a:redhat:service_mesh:3.1::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 3.1 Unaffected: 1778164042 , < * (rpm)
        cpe:/a:redhat:service_mesh:3.1::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 3.2 Unaffected: 1778163792 , < * (rpm)
        cpe:/a:redhat:service_mesh:3.2::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 3.2 Unaffected: 1778163909 , < * (rpm)
        cpe:/a:redhat:service_mesh:3.2::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 3.3 Unaffected: 1778163785 , < * (rpm)
        cpe:/a:redhat:service_mesh:3.3::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 3.3 Unaffected: 1778163986 , < * (rpm)
        cpe:/a:redhat:service_mesh:3.3::el9
    Create a notification for this product.
    Red Hat Red Hat Quay 3.10 Unaffected: 1779822261 , < * (rpm)
        cpe:/a:redhat:quay:3.10::el8
    Create a notification for this product.
    Red Hat Red Hat Quay 3.12 Unaffected: 1779811412 , < * (rpm)
        cpe:/a:redhat:quay:3.12::el8
    Create a notification for this product.
    Red Hat Red Hat Quay 3.14 Unaffected: 1779689392 , < * (rpm)
        cpe:/a:redhat:quay:3.14::el8
    Create a notification for this product.
    Red Hat Red Hat Quay 3.15 Unaffected: 1780891395 , < * (rpm)
        cpe:/a:redhat:quay:3.15::el8
    Create a notification for this product.
    Red Hat Red Hat Quay 3.16 Unaffected: 1779204086 , < * (rpm)
        cpe:/a:redhat:quay:3.16::el9
    Create a notification for this product.
    Red Hat Red Hat Quay 3.17 Unaffected: 1779922205 , < * (rpm)
        cpe:/a:redhat:quay:3.17::el9
    Create a notification for this product.
    Red Hat Red Hat Quay 3.18 Unaffected: 1784987273 , < * (rpm)
        cpe:/a:redhat:quay:3.18::el9
    Create a notification for this product.
    Red Hat Red Hat Quay 3.9 Unaffected: 1779811473 , < * (rpm)
        cpe:/a:redhat:quay:3.9::el8
    Create a notification for this product.
    Red Hat Red Hat Satellite 6.18 Unaffected: 1781181673 , < * (rpm)
        cpe:/a:redhat:satellite:6.18::el9
    Create a notification for this product.
    Red Hat Red Hat Satellite 6.18 Unaffected: 1781032495 , < * (rpm)
        cpe:/a:redhat:satellite:6.18::el9
    Create a notification for this product.
    Red Hat Cryostat 4     cpe:/a:redhat:cryostat:4
    Create a notification for this product.
    Red Hat Gatekeeper 3     cpe:/a:redhat:gatekeeper:3
    Create a notification for this product.
    Red Hat Migration Toolkit for Applications 8     cpe:/a:redhat:migration_toolkit_applications:8
    Create a notification for this product.
    Red Hat Network Observability Operator     cpe:/a:redhat:network_observ_optr:1
    Create a notification for this product.
    Red Hat OpenShift Pipelines     cpe:/a:redhat:openshift_pipelines:1
    Create a notification for this product.
    Red Hat OpenShift Service Mesh 3     cpe:/a:redhat:service_mesh:3
    Create a notification for this product.
    Red Hat Red Hat 3scale API Management Platform 2     cpe:/a:redhat:red_hat_3scale_amp:2
    Create a notification for this product.
    Red Hat Red Hat Ansible Automation Platform 2     cpe:/a:redhat:ansible_automation_platform:2
    Create a notification for this product.
    Red Hat Red Hat build of Apicurio Registry 2     cpe:/a:redhat:service_registry:2
    Create a notification for this product.
    Red Hat Red Hat build of Apicurio Registry 3     cpe:/a:redhat:apicurio_registry:3
    Create a notification for this product.
    Red Hat Red Hat Build of Podman Desktop - Tech Preview     cpe:/a:redhat:podman_desktop:0
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 8     cpe:/o:redhat:enterprise_linux:8
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 9     cpe:/o:redhat:enterprise_linux:9
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux AI (RHEL AI) 3     cpe:/a:redhat:enterprise_linux_ai:3
    Create a notification for this product.
    Red Hat Red Hat Fuse 7     cpe:/a:redhat:jboss_fuse:7
    Create a notification for this product.
    Red Hat Red Hat Hardened Images     cpe:/a:redhat:hummingbird:1
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI (RHOAI)     cpe:/a:redhat:openshift_ai
    Create a notification for this product.
    Red Hat Red Hat OpenShift Container Platform 4     cpe:/a:redhat:openshift:4
    Create a notification for this product.
    Red Hat Red Hat OpenShift Virtualization 4     cpe:/a:redhat:container_native_virtualization:4
    Create a notification for this product.
    Red Hat Red Hat Process Automation 7     cpe:/a:redhat:jboss_enterprise_bpms_platform:7
    Create a notification for this product.
    Red Hat Red Hat Satellite 6     cpe:/a:redhat:satellite:6
    Create a notification for this product.
    Red Hat Red Hat Trusted Artifact Signer     cpe:/a:redhat:trusted_artifact_signer:1
    Create a notification for this product.
    Red Hat Red Hat Trusted Profile Analyzer     cpe:/a:redhat:trusted_profile_analyzer:2
    Create a notification for this product.
    Red Hat Self-service automation portal 2     cpe:/a:redhat:ansible_portal:2
    Create a notification for this product.
    Red Hat streams for Apache Kafka 2     cpe:/a:redhat:amq_streams:2
    Create a notification for this product.
    Red Hat streams for Apache Kafka 3     cpe:/a:redhat:amq_streams:3
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-42039",
                    "options": [
                      {
                        "Exploitation": "poc"
                      },
                      {
                        "Automatable": "yes"
                      },
                      {
                        "Technical Impact": "partial"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-04-24T18:14:11.509943Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-04-24T18:14:37.802Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "references": [
              {
                "tags": [
                  "exploit"
                ],
                "url": "https://github.com/axios/axios/security/advisories/GHSA-62hf-57xw-28j9"
              }
            ],
            "title": "CISA ADP Vulnrichment"
          },
          {
            "affected": [
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:apache_camel_hawtio:4.4::el9"
                ],
                "defaultStatus": "unaffected",
                "packageName": "axios",
                "product": "HawtIO HawtIO 4.4.0",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:jboss_data_grid:8"
                ],
                "defaultStatus": "unaffected",
                "packageName": "axios",
                "product": "Red Hat Data Grid 8.6.1",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:multicluster_engine:2.10::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "multicluster-engine/console-mce-rhel9",
                "product": "multicluster engine for Kubernetes 2.1",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1780917531",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:multicluster_engine:2.11::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "multicluster-engine/console-mce-rhel9",
                "product": "multicluster engine for Kubernetes 2.11",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1780910888",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:multicluster_engine:2.6::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "multicluster-engine/console-mce-rhel9",
                "product": "multicluster engine for Kubernetes 2.6",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778511348",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:multicluster_engine:2.8::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "multicluster-engine/console-mce-rhel9",
                "product": "multicluster engine for Kubernetes 2.8",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778383863",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:multicluster_engine:2.9::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "multicluster-engine/console-mce-rhel9",
                "product": "multicluster engine for Kubernetes 2.9",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778532610",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:network_observ_optr:1.11::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "network-observability/network-observability-console-plugin-rhel9",
                "product": "Network Observability (NETOBSERV) 1.11.0",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778510461",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:network_observ_optr:1.12::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "network-observability/network-observability-console-plugin-pf4-rhel9",
                "product": "Network Observability (NETOBSERV) 1.12.2",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1780920979",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:acm:2.14::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhacm2/console-rhel9",
                "product": "Red Hat Advanced Cluster Management for Kubernetes 2.14",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1783451729",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:acm:2.15::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhacm2/console-rhel9",
                "product": "Red Hat Advanced Cluster Management for Kubernetes 2.15",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1780876734",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:acm:2.16::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhacm2/console-rhel9",
                "product": "Red Hat Advanced Cluster Management for Kubernetes 2.16",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1780600823",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:advanced_cluster_security:4.9::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "advanced-cluster-security/rhacs-main-rhel8",
                "product": "Red Hat Advanced Cluster Security 4.9",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779371594",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:advanced_cluster_security:4.10::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "advanced-cluster-security/rhacs-main-rhel8",
                "product": "Red Hat Advanced Cluster Security for Kubernetes 4.10",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779293013",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:rhdh:1.8::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhdh/rhdh-hub-rhel9",
                "product": "Red Hat Developer Hub 1.8",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779841586",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:rhdh:1.9::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhdh/rhdh-hub-rhel9",
                "product": "Red Hat Developer Hub 1.9",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782761244",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:discovery:2::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "discovery/discovery-ui-rhel9",
                "product": "Red Hat Discovery 2",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778156756",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:rhmt:1.8::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "rhmtc/openshift-migration-ui-rhel8",
                "product": "Red Hat Migration Toolkit 1.8",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1780590717",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:migration_toolkit_applications:8.1::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "mta/mta-ui-rhel9",
                "product": "Red Hat Migration Toolkit for Applications 8.1",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1785169013",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:2.25::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-dashboard-rhel9",
                "product": "Red Hat OpenShift AI 2.25",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1780467029",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:2.25::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-mod-arch-model-registry-rhel9",
                "product": "Red Hat OpenShift AI 2.25",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1780467147",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4.20::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift4/ose-agent-installer-ui-rhel9",
                "product": "Red Hat OpenShift Container Platform 4.20",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778645099",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4.21::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift4/ose-agent-installer-ui-rhel9",
                "product": "Red Hat OpenShift Container Platform 4.21",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778539338",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4.21::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift4/ose-monitoring-plugin-rhel9",
                "product": "Red Hat OpenShift Container Platform 4.21",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1785354128",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_devspaces:3.28::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "devspaces/code-rhel9",
                "product": "Red Hat OpenShift Dev Spaces 3.28",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779814592",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_devspaces:3.28::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "devspaces/dashboard-rhel9",
                "product": "Red Hat OpenShift Dev Spaces 3.28",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779341289",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:2.6::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-ossmc-rhel8",
                "product": "Red Hat OpenShift Service Mesh 2.6",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778191473",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:2.6::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-rhel8",
                "product": "Red Hat OpenShift Service Mesh 2.6",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778191378",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3.0::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-ossmc-rhel9",
                "product": "Red Hat OpenShift Service Mesh 3.0",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778163785",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3.0::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-rhel9",
                "product": "Red Hat OpenShift Service Mesh 3.0",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778164208",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3.1::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-ossmc-rhel9",
                "product": "Red Hat OpenShift Service Mesh 3.1",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778163935",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3.1::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-rhel9",
                "product": "Red Hat OpenShift Service Mesh 3.1",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778164042",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3.2::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-ossmc-rhel9",
                "product": "Red Hat OpenShift Service Mesh 3.2",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778163792",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3.2::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-rhel9",
                "product": "Red Hat OpenShift Service Mesh 3.2",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778163909",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3.3::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-ossmc-rhel9",
                "product": "Red Hat OpenShift Service Mesh 3.3",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778163785",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3.3::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-rhel9",
                "product": "Red Hat OpenShift Service Mesh 3.3",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778163986",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.10::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel8",
                "product": "Red Hat Quay 3.10",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779822261",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.12::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel8",
                "product": "Red Hat Quay 3.12",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779811412",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.14::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel8",
                "product": "Red Hat Quay 3.14",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779689392",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.15::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel8",
                "product": "Red Hat Quay 3.15",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1780891395",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.16::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel9",
                "product": "Red Hat Quay 3.16",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779204086",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.17::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel9",
                "product": "Red Hat Quay 3.17",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779922205",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.18::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel9",
                "product": "Red Hat Quay 3.18",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1784987273",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.9::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel8",
                "product": "Red Hat Quay 3.9",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779811473",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:satellite:6.18::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "satellite/iop-advisor-frontend-rhel9",
                "product": "Red Hat Satellite 6.18",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1781181673",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:satellite:6.18::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "satellite/iop-vulnerability-frontend-rhel9",
                "product": "Red Hat Satellite 6.18",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1781032495",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:cryostat:4"
                ],
                "defaultStatus": "unaffected",
                "packageName": "axios",
                "product": "Cryostat 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:gatekeeper:3"
                ],
                "defaultStatus": "unaffected",
                "packageName": "gatekeeper/gatekeeper-rhel9",
                "product": "Gatekeeper 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:migration_toolkit_applications:8"
                ],
                "defaultStatus": "affected",
                "packageName": "mta/mta-ui-rhel8",
                "product": "Migration Toolkit for Applications 8",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:network_observ_optr:1"
                ],
                "defaultStatus": "affected",
                "packageName": "network-observability/network-observability-console-plugin-compat-rhel9",
                "product": "Network Observability Operator",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_pipelines:1"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-pipelines/pipelines-hub-ui-rhel8",
                "product": "OpenShift Pipelines",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_pipelines:1"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-pipelines/pipelines-hub-ui-rhel9",
                "product": "OpenShift Pipelines",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3"
                ],
                "defaultStatus": "unaffected",
                "packageName": "openshift-service-mesh/kiali-operator-bundle",
                "product": "OpenShift Service Mesh 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3"
                ],
                "defaultStatus": "unaffected",
                "packageName": "openshift-service-mesh/kiali-rhel9-operator",
                "product": "OpenShift Service Mesh 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:red_hat_3scale_amp:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "3scale-amp21/system",
                "product": "Red Hat 3scale API Management Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:red_hat_3scale_amp:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "3scale-amp22/system",
                "product": "Red Hat 3scale API Management Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:red_hat_3scale_amp:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "3scale-amp2/system-rhel7",
                "product": "Red Hat 3scale API Management Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:red_hat_3scale_amp:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "3scale-amp2/system-rhel8",
                "product": "Red Hat 3scale API Management Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:red_hat_3scale_amp:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "3scale-amp2/system-rhel9",
                "product": "Red Hat 3scale API Management Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "ansible-automation-platform-26/gateway-rhel9",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "affected",
                "packageName": "ansible-automation-platform/automation-dashboard-rhel9",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "affected",
                "packageName": "automation-controller",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "automation-gateway",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "affected",
                "packageName": "automation-hub",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "automation-platform-ui",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "python3.11-galaxy-ng",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "python3.12-galaxy-ng",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "python3x-galaxy-ng",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "python-galaxy-ng",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:service_registry:2"
                ],
                "defaultStatus": "affected",
                "packageName": "axios",
                "product": "Red Hat build of Apicurio Registry 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:apicurio_registry:3"
                ],
                "defaultStatus": "affected",
                "packageName": "apicurio/apicurio-registry-ui-rhel8",
                "product": "Red Hat build of Apicurio Registry 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:apicurio_registry:3"
                ],
                "defaultStatus": "affected",
                "packageName": "apicurio/apicurio-registry-ui-rhel9",
                "product": "Red Hat build of Apicurio Registry 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:podman_desktop:0"
                ],
                "defaultStatus": "affected",
                "packageName": "rhdesktop/rh-podman-desktop-ext-openshift-local-rhel10",
                "product": "Red Hat Build of Podman Desktop - Tech Preview",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:8"
                ],
                "defaultStatus": "affected",
                "packageName": "grafana",
                "product": "Red Hat Enterprise Linux 8",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:9"
                ],
                "defaultStatus": "unaffected",
                "packageName": "grafana",
                "product": "Red Hat Enterprise Linux 9",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:enterprise_linux_ai:3"
                ],
                "defaultStatus": "affected",
                "packageName": "rhelai3/bootc-cuda-rhel9",
                "product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:enterprise_linux_ai:3"
                ],
                "defaultStatus": "affected",
                "packageName": "rhelai3/bootc-rocm-rhel9",
                "product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:enterprise_linux_ai:3"
                ],
                "defaultStatus": "affected",
                "packageName": "rhelai3/disk-image-cuda-rhel9",
                "product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:jboss_fuse:7"
                ],
                "defaultStatus": "unaffected",
                "packageName": "axios",
                "product": "Red Hat Fuse 7",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:hummingbird:1"
                ],
                "defaultStatus": "unaffected",
                "packageName": "boost",
                "product": "Red Hat Hardened Images",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "unaffected",
                "packageName": "rhoai/odh-dashboard-rhel8",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-mod-arch-gen-ai-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-mod-arch-maas-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift3/ose-console",
                "product": "Red Hat OpenShift Container Platform 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift4/ose-console",
                "product": "Red Hat OpenShift Container Platform 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift4/ose-console-rhel9",
                "product": "Red Hat OpenShift Container Platform 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:container_native_virtualization:4"
                ],
                "defaultStatus": "unaffected",
                "packageName": "container-native-virtualization/kubevirt-console-plugin",
                "product": "Red Hat OpenShift Virtualization 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:container_native_virtualization:4"
                ],
                "defaultStatus": "unaffected",
                "packageName": "container-native-virtualization/kubevirt-console-plugin-rhel9",
                "product": "Red Hat OpenShift Virtualization 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:jboss_enterprise_bpms_platform:7"
                ],
                "defaultStatus": "unaffected",
                "packageName": "axios",
                "product": "Red Hat Process Automation 7",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:satellite:6"
                ],
                "defaultStatus": "affected",
                "packageName": "satellite/iop-host-inventory-frontend-rhel9",
                "product": "Red Hat Satellite 6",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:trusted_artifact_signer:1"
                ],
                "defaultStatus": "unaffected",
                "packageName": "rhtas/rhtas-console-ui-rhel9",
                "product": "Red Hat Trusted Artifact Signer",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:trusted_profile_analyzer:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "rhtpa/rhtpa-trustification-service-rhel9",
                "product": "Red Hat Trusted Profile Analyzer",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_portal:2"
                ],
                "defaultStatus": "affected",
                "packageName": "ansible-automation-platform/automation-portal",
                "product": "Self-service automation portal 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:amq_streams:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "axios",
                "product": "streams for Apache Kafka 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:amq_streams:3"
                ],
                "defaultStatus": "unaffected",
                "packageName": "axios",
                "product": "streams for Apache Kafka 3",
                "vendor": "Red Hat"
              }
            ],
            "datePublic": "2026-04-24T18:01:30.775Z",
            "descriptions": [
              {
                "lang": "en",
                "value": "A flaw was found in Axios, a promise-based HTTP client for browsers and Node.js. This vulnerability occurs because the `toFormData` function recursively processes nested objects without a depth limit. A remote attacker can exploit this by sending deeply nested request data, which causes the Node.js process to crash due to a RangeError, leading to a potential Denial of Service (DoS) if the process crashes."
              }
            ],
            "metrics": [
              {
                "other": {
                  "content": {
                    "namespace": "https://access.redhat.com/security/updates/classification/",
                    "value": "Important"
                  },
                  "type": "Red Hat severity rating"
                }
              },
              {
                "cvssV3_1": {
                  "attackComplexity": "LOW",
                  "attackVector": "NETWORK",
                  "availabilityImpact": "HIGH",
                  "baseScore": 7.5,
                  "baseSeverity": "HIGH",
                  "confidentialityImpact": "NONE",
                  "integrityImpact": "NONE",
                  "privilegesRequired": "NONE",
                  "scope": "UNCHANGED",
                  "userInteraction": "NONE",
                  "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "version": "3.1"
                },
                "format": "CVSS"
              }
            ],
            "problemTypes": [
              {
                "descriptions": [
                  {
                    "cweId": "CWE-770",
                    "description": "Allocation of Resources Without Limits or Throttling",
                    "lang": "en",
                    "type": "CWE"
                  }
                ]
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-09-10T12:04:56.504Z",
              "orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
              "shortName": "redhat-SADP"
            },
            "references": [
              {
                "tags": [
                  "vdb-entry",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/security/cve/CVE-2026-42039"
              },
              {
                "name": "RHBZ#2461630",
                "tags": [
                  "issue-tracking",
                  "x_refsource_REDHAT"
                ],
                "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2461630"
              },
              {
                "tags": [
                  "x_sadp-csaf-vex"
                ],
                "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42039.json"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:25089"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:16874"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:24473"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:36882"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:24539"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:25273"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:20938"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:20889"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:22619"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:21338"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:33574"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:14937"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:25041"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:50300"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:24977"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:17468"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:17474"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:48670"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:21772"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:16476"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:16534"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:16532"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:16535"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:16542"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:22840"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:22629"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:21017"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:24853"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:19375"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:22465"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:48085"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:23361"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:26214"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:26225"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:25271"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:24536"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:17657"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:17699"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:19109"
              }
            ],
            "solutions": [
              {
                "lang": "en",
                "value": "RHSA-2026:25089: HawtIO HawtIO 4.4.0"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:16874: Network Observability (NETOBSERV) 1.11.0"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:24473: Network Observability (NETOBSERV) 1.12.2"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:36882: Red Hat Advanced Cluster Management for Kubernetes 2.14"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:24539: Red Hat Advanced Cluster Management for Kubernetes 2.15"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:25273: Red Hat Advanced Cluster Management for Kubernetes 2.16"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:20938: Red Hat Advanced Cluster Security 4.9"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:20889: Red Hat Advanced Cluster Security for Kubernetes 4.10"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:22619: Red Hat Data Grid 8.6.1"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:21338: Red Hat Developer Hub 1.8"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:33574: Red Hat Developer Hub 1.9"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:14937: Red Hat Discovery 2"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:25041: Red Hat Migration Toolkit 1.8"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:50300: Red Hat Migration Toolkit for Applications 8.1"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:24977: Red Hat OpenShift AI 2.25"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:17468: Red Hat OpenShift Container Platform 4.20"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:17474: Red Hat OpenShift Container Platform 4.21"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:48670: Red Hat OpenShift Container Platform 4.21"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:21772: Red Hat OpenShift Dev Spaces 3.28"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:16476: Red Hat OpenShift Service Mesh 2.6"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:16534: Red Hat OpenShift Service Mesh 3.0"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:16532: Red Hat OpenShift Service Mesh 3.1"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:16535: Red Hat OpenShift Service Mesh 3.2"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:16542: Red Hat OpenShift Service Mesh 3.3"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:22840: Red Hat Quay 3.10"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:22629: Red Hat Quay 3.12"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:21017: Red Hat Quay 3.14"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:24853: Red Hat Quay 3.15"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:19375: Red Hat Quay 3.16"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:22465: Red Hat Quay 3.17"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:48085: Red Hat Quay 3.18"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:23361: Red Hat Quay 3.9"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:26214: Red Hat Satellite 6.18"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:26225: Red Hat Satellite 6.18"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:25271: multicluster engine for Kubernetes 2.11"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:24536: multicluster engine for Kubernetes 2.1"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:17657: multicluster engine for Kubernetes 2.6"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:17699: multicluster engine for Kubernetes 2.8"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:19109: multicluster engine for Kubernetes 2.9"
              }
            ],
            "timeline": [
              {
                "lang": "en",
                "time": "2026-04-24T19:01:44.887Z",
                "value": "Reported to Red Hat."
              },
              {
                "lang": "en",
                "time": "2026-04-24T18:01:30.775Z",
                "value": "Made public."
              }
            ],
            "title": "axios: Node.js: Axios: Denial of Service via unbounded recursion in toFormData with deeply nested request data",
            "x_adpType": "supplier",
            "x_generator": {
              "engine": "sadp-cli 1.0.0"
            }
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "axios",
              "vendor": "axios",
              "versions": [
                {
                  "status": "affected",
                  "version": "\u003e= 1.0.0, \u003c 1.15.1"
                },
                {
                  "status": "affected",
                  "version": "\u003c 0.31.1"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "Axios is a promise based HTTP client for the browser and Node.js. Prior to 1.15.1 and 0.31.1, toFormData recursively walks nested objects with no depth limit, so a deeply nested value passed as request data crashes the Node.js process with a RangeError. This vulnerability is fixed in 1.15.1 and 0.31.1."
            }
          ],
          "metrics": [
            {
              "cvssV4_0": {
                "attackComplexity": "LOW",
                "attackRequirements": "NONE",
                "attackVector": "NETWORK",
                "baseScore": 6.9,
                "baseSeverity": "MEDIUM",
                "privilegesRequired": "NONE",
                "subAvailabilityImpact": "NONE",
                "subConfidentialityImpact": "NONE",
                "subIntegrityImpact": "NONE",
                "userInteraction": "NONE",
                "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N",
                "version": "4.0",
                "vulnAvailabilityImpact": "LOW",
                "vulnConfidentialityImpact": "NONE",
                "vulnIntegrityImpact": "NONE"
              }
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-674",
                  "description": "CWE-674: Uncontrolled Recursion",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-04-24T18:01:30.775Z",
            "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
            "shortName": "GitHub_M"
          },
          "references": [
            {
              "name": "https://github.com/axios/axios/security/advisories/GHSA-62hf-57xw-28j9",
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "https://github.com/axios/axios/security/advisories/GHSA-62hf-57xw-28j9"
            }
          ],
          "source": {
            "advisory": "GHSA-62hf-57xw-28j9",
            "discovery": "UNKNOWN"
          },
          "title": "Axios: unbounded recursion in toFormData causes DoS via deeply nested request data"
        }
      },
      "cveMetadata": {
        "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "assignerShortName": "GitHub_M",
        "cveId": "CVE-2026-42039",
        "datePublished": "2026-04-24T18:01:30.775Z",
        "dateReserved": "2026-04-23T16:05:01.709Z",
        "dateUpdated": "2026-09-10T12:04:56.504Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2026-42033 (GCVE-0-2026-42033)

    Vulnerability from nvd – Published: 2026-04-24 17:36 – Updated: 2026-09-10 12:05
    VLAI
    Title
    Axios: Prototype Pollution Gadgets - Response Tampering, Data Exfiltration, and Request Hijacking
    Summary
    Axios is a promise based HTTP client for the browser and Node.js. Prior to 1.15.1 and 0.31.1, when Object.prototype has been polluted by any co-dependency with keys that axios reads without a hasOwnProperty guard, an attacker can (a) silently intercept and modify every JSON response before the application sees it, or (b) fully hijack the underlying HTTP transport, gaining access to request credentials, headers, and body. The precondition is prototype pollution from a separate source in the same process. This vulnerability is fixed in 1.15.1 and 0.31.1.
    SSVC
    Exploitation: poc Automatable: no Technical Impact: total
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-04-24 00:00 UTC
    CWE
    • CWE-1321 - Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
    • CWE-915 - Improperly Controlled Modification of Dynamically-Determined Object Attributes
    References
    URL Tags
    https://github.com/axios/axios/security/advisorie… x_refsource_CONFIRM
    https://access.redhat.com/security/cve/CVE-2026-42033 vdb-entryx_refsource_REDHAT
    https://bugzilla.redhat.com/show_bug.cgi?id=2461607 issue-trackingx_refsource_REDHAT
    https://security.access.redhat.com/data/csaf/v2/v… x_sadp-csaf-vex
    https://access.redhat.com/errata/RHSA-2026:25089 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:16874 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:36882 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:24539 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:25273 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:20938 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:20889 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:22619 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:21338 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:33574 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:14937 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:25041 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:24977 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:17468 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:17474 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:48670 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:21772 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:16476 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:16534 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:16532 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:16535 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:16542 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:22840 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:22629 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:21017 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:24853 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:19375 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:22465 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:23361 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:26214 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:26232 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:26225 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:25271 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:24536 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:17657 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:17699 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:19109 vendor-advisoryx_refsource_REDHAT
    Impacted products
    Vendor Product Version
    axios axios Affected: >= 1.0.0, < 1.15.1
    Affected: < 0.31.1
    Create a notification for this product.
    Red Hat HawtIO HawtIO 4.4.0     cpe:/a:redhat:apache_camel_hawtio:4.4::el9
    Create a notification for this product.
    Red Hat Red Hat Data Grid 8.6.1     cpe:/a:redhat:jboss_data_grid:8
    Create a notification for this product.
    Red Hat multicluster engine for Kubernetes 2.1 Unaffected: 1780917531 , < * (rpm)
        cpe:/a:redhat:multicluster_engine:2.10::el9
    Create a notification for this product.
    Red Hat multicluster engine for Kubernetes 2.11 Unaffected: 1780910888 , < * (rpm)
        cpe:/a:redhat:multicluster_engine:2.11::el9
    Create a notification for this product.
    Red Hat multicluster engine for Kubernetes 2.6 Unaffected: 1778511348 , < * (rpm)
        cpe:/a:redhat:multicluster_engine:2.6::el9
    Create a notification for this product.
    Red Hat multicluster engine for Kubernetes 2.8 Unaffected: 1778383863 , < * (rpm)
        cpe:/a:redhat:multicluster_engine:2.8::el9
    Create a notification for this product.
    Red Hat multicluster engine for Kubernetes 2.9 Unaffected: 1778532610 , < * (rpm)
        cpe:/a:redhat:multicluster_engine:2.9::el9
    Create a notification for this product.
    Red Hat Network Observability (NETOBSERV) 1.11.0 Unaffected: 1778508956 , < * (rpm)
        cpe:/a:redhat:network_observ_optr:1.11::el9
    Create a notification for this product.
    Red Hat Network Observability (NETOBSERV) 1.11.0 Unaffected: 1778510461 , < * (rpm)
        cpe:/a:redhat:network_observ_optr:1.11::el9
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.14 Unaffected: 1783451729 , < * (rpm)
        cpe:/a:redhat:acm:2.14::el9
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.15 Unaffected: 1780876734 , < * (rpm)
        cpe:/a:redhat:acm:2.15::el9
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.16 Unaffected: 1780600823 , < * (rpm)
        cpe:/a:redhat:acm:2.16::el9
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Security 4.9 Unaffected: 1779371594 , < * (rpm)
        cpe:/a:redhat:advanced_cluster_security:4.9::el8
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Security for Kubernetes 4.10 Unaffected: 1779293013 , < * (rpm)
        cpe:/a:redhat:advanced_cluster_security:4.10::el8
    Create a notification for this product.
    Red Hat Red Hat Developer Hub 1.8 Unaffected: 1779841586 , < * (rpm)
        cpe:/a:redhat:rhdh:1.8::el9
    Create a notification for this product.
    Red Hat Red Hat Developer Hub 1.9 Unaffected: 1782761244 , < * (rpm)
        cpe:/a:redhat:rhdh:1.9::el9
    Create a notification for this product.
    Red Hat Red Hat Discovery 2 Unaffected: 1778156756 , < * (rpm)
        cpe:/a:redhat:discovery:2::el9
    Create a notification for this product.
    Red Hat Red Hat Migration Toolkit 1.8 Unaffected: 1780590717 , < * (rpm)
        cpe:/a:redhat:rhmt:1.8::el8
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 2.25 Unaffected: 1780467029 , < * (rpm)
        cpe:/a:redhat:openshift_ai:2.25::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 2.25 Unaffected: 1780467147 , < * (rpm)
        cpe:/a:redhat:openshift_ai:2.25::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Container Platform 4.20 Unaffected: 1778645099 , < * (rpm)
        cpe:/a:redhat:openshift:4.20::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Container Platform 4.21 Unaffected: 1778539338 , < * (rpm)
        cpe:/a:redhat:openshift:4.21::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Container Platform 4.21 Unaffected: 1785354128 , < * (rpm)
        cpe:/a:redhat:openshift:4.21::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Dev Spaces 3.28 Unaffected: 1779814592 , < * (rpm)
        cpe:/a:redhat:openshift_devspaces:3.28::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Dev Spaces 3.28 Unaffected: 1779341289 , < * (rpm)
        cpe:/a:redhat:openshift_devspaces:3.28::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 2.6 Unaffected: 1778191473 , < * (rpm)
        cpe:/a:redhat:service_mesh:2.6::el8
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 2.6 Unaffected: 1778191378 , < * (rpm)
        cpe:/a:redhat:service_mesh:2.6::el8
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 3.0 Unaffected: 1778163785 , < * (rpm)
        cpe:/a:redhat:service_mesh:3.0::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 3.0 Unaffected: 1778164208 , < * (rpm)
        cpe:/a:redhat:service_mesh:3.0::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 3.1 Unaffected: 1778163935 , < * (rpm)
        cpe:/a:redhat:service_mesh:3.1::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 3.1 Unaffected: 1778164042 , < * (rpm)
        cpe:/a:redhat:service_mesh:3.1::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 3.2 Unaffected: 1778163792 , < * (rpm)
        cpe:/a:redhat:service_mesh:3.2::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 3.2 Unaffected: 1778163909 , < * (rpm)
        cpe:/a:redhat:service_mesh:3.2::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 3.3 Unaffected: 1778163785 , < * (rpm)
        cpe:/a:redhat:service_mesh:3.3::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 3.3 Unaffected: 1778163986 , < * (rpm)
        cpe:/a:redhat:service_mesh:3.3::el9
    Create a notification for this product.
    Red Hat Red Hat Quay 3.10 Unaffected: 1779822261 , < * (rpm)
        cpe:/a:redhat:quay:3.10::el8
    Create a notification for this product.
    Red Hat Red Hat Quay 3.12 Unaffected: 1779811412 , < * (rpm)
        cpe:/a:redhat:quay:3.12::el8
    Create a notification for this product.
    Red Hat Red Hat Quay 3.14 Unaffected: 1779689392 , < * (rpm)
        cpe:/a:redhat:quay:3.14::el8
    Create a notification for this product.
    Red Hat Red Hat Quay 3.15 Unaffected: 1780891395 , < * (rpm)
        cpe:/a:redhat:quay:3.15::el8
    Create a notification for this product.
    Red Hat Red Hat Quay 3.16 Unaffected: 1779204086 , < * (rpm)
        cpe:/a:redhat:quay:3.16::el9
    Create a notification for this product.
    Red Hat Red Hat Quay 3.17 Unaffected: 1779922205 , < * (rpm)
        cpe:/a:redhat:quay:3.17::el9
    Create a notification for this product.
    Red Hat Red Hat Quay 3.9 Unaffected: 1779811473 , < * (rpm)
        cpe:/a:redhat:quay:3.9::el8
    Create a notification for this product.
    Red Hat Red Hat Satellite 6.18 Unaffected: 1781181673 , < * (rpm)
        cpe:/a:redhat:satellite:6.18::el9
    Create a notification for this product.
    Red Hat Red Hat Satellite 6.18 Unaffected: 1781032495 , < * (rpm)
        cpe:/a:redhat:satellite:6.18::el9
    Create a notification for this product.
    Red Hat Red Hat Satellite 6.18 Unaffected: 1780105179 , < * (rpm)
        cpe:/a:redhat:satellite:6.18::el9
    Create a notification for this product.
    Red Hat Cryostat 4     cpe:/a:redhat:cryostat:4
    Create a notification for this product.
    Red Hat Gatekeeper 3     cpe:/a:redhat:gatekeeper:3
    Create a notification for this product.
    Red Hat Migration Toolkit for Applications 8     cpe:/a:redhat:migration_toolkit_applications:8
    Create a notification for this product.
    Red Hat OpenShift Pipelines     cpe:/a:redhat:openshift_pipelines:1
    Create a notification for this product.
    Red Hat OpenShift Service Mesh 3     cpe:/a:redhat:service_mesh:3
    Create a notification for this product.
    Red Hat Red Hat 3scale API Management Platform 2     cpe:/a:redhat:red_hat_3scale_amp:2
    Create a notification for this product.
    Red Hat Red Hat Ansible Automation Platform 2     cpe:/a:redhat:ansible_automation_platform:2
    Create a notification for this product.
    Red Hat Red Hat build of Apicurio Registry 2     cpe:/a:redhat:service_registry:2
    Create a notification for this product.
    Red Hat Red Hat build of Apicurio Registry 3     cpe:/a:redhat:apicurio_registry:3
    Create a notification for this product.
    Red Hat Red Hat Build of Podman Desktop - Tech Preview     cpe:/a:redhat:podman_desktop:0
    Create a notification for this product.
    Red Hat Red Hat Developer Hub     cpe:/a:redhat:rhdh:1
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 8     cpe:/o:redhat:enterprise_linux:8
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 9     cpe:/o:redhat:enterprise_linux:9
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux AI (RHEL AI) 3     cpe:/a:redhat:enterprise_linux_ai:3
    Create a notification for this product.
    Red Hat Red Hat Fuse 7     cpe:/a:redhat:jboss_fuse:7
    Create a notification for this product.
    Red Hat Red Hat Hardened Images     cpe:/a:redhat:hummingbird:1
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI (RHOAI)     cpe:/a:redhat:openshift_ai
    Create a notification for this product.
    Red Hat Red Hat OpenShift Container Platform 4     cpe:/a:redhat:openshift:4
    Create a notification for this product.
    Red Hat Red Hat OpenShift Virtualization 4     cpe:/a:redhat:container_native_virtualization:4
    Create a notification for this product.
    Red Hat Red Hat Process Automation 7     cpe:/a:redhat:jboss_enterprise_bpms_platform:7
    Create a notification for this product.
    Red Hat Red Hat Trusted Artifact Signer     cpe:/a:redhat:trusted_artifact_signer:1
    Create a notification for this product.
    Red Hat Red Hat Trusted Profile Analyzer     cpe:/a:redhat:trusted_profile_analyzer:2
    Create a notification for this product.
    Red Hat Self-service automation portal 2     cpe:/a:redhat:ansible_portal:2
    Create a notification for this product.
    Red Hat streams for Apache Kafka 2     cpe:/a:redhat:amq_streams:2
    Create a notification for this product.
    Red Hat streams for Apache Kafka 3     cpe:/a:redhat:amq_streams:3
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-42033",
                    "options": [
                      {
                        "Exploitation": "poc"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "total"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-04-24T00:00:00+00:00",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-04-25T03:55:57.725Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "references": [
              {
                "tags": [
                  "exploit"
                ],
                "url": "https://github.com/axios/axios/security/advisories/GHSA-pf86-5x62-jrwf"
              }
            ],
            "title": "CISA ADP Vulnrichment"
          },
          {
            "affected": [
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:apache_camel_hawtio:4.4::el9"
                ],
                "defaultStatus": "unaffected",
                "packageName": "axios",
                "product": "HawtIO HawtIO 4.4.0",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:jboss_data_grid:8"
                ],
                "defaultStatus": "unaffected",
                "packageName": "axios",
                "product": "Red Hat Data Grid 8.6.1",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:multicluster_engine:2.10::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "multicluster-engine/console-mce-rhel9",
                "product": "multicluster engine for Kubernetes 2.1",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1780917531",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:multicluster_engine:2.11::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "multicluster-engine/console-mce-rhel9",
                "product": "multicluster engine for Kubernetes 2.11",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1780910888",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:multicluster_engine:2.6::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "multicluster-engine/console-mce-rhel9",
                "product": "multicluster engine for Kubernetes 2.6",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778511348",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:multicluster_engine:2.8::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "multicluster-engine/console-mce-rhel9",
                "product": "multicluster engine for Kubernetes 2.8",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778383863",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:multicluster_engine:2.9::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "multicluster-engine/console-mce-rhel9",
                "product": "multicluster engine for Kubernetes 2.9",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778532610",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:network_observ_optr:1.11::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "network-observability/network-observability-console-plugin-compat-rhel9",
                "product": "Network Observability (NETOBSERV) 1.11.0",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778508956",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:network_observ_optr:1.11::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "network-observability/network-observability-console-plugin-rhel9",
                "product": "Network Observability (NETOBSERV) 1.11.0",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778510461",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:acm:2.14::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhacm2/console-rhel9",
                "product": "Red Hat Advanced Cluster Management for Kubernetes 2.14",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1783451729",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:acm:2.15::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhacm2/console-rhel9",
                "product": "Red Hat Advanced Cluster Management for Kubernetes 2.15",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1780876734",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:acm:2.16::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhacm2/console-rhel9",
                "product": "Red Hat Advanced Cluster Management for Kubernetes 2.16",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1780600823",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:advanced_cluster_security:4.9::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "advanced-cluster-security/rhacs-main-rhel8",
                "product": "Red Hat Advanced Cluster Security 4.9",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779371594",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:advanced_cluster_security:4.10::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "advanced-cluster-security/rhacs-main-rhel8",
                "product": "Red Hat Advanced Cluster Security for Kubernetes 4.10",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779293013",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:rhdh:1.8::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhdh/rhdh-hub-rhel9",
                "product": "Red Hat Developer Hub 1.8",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779841586",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:rhdh:1.9::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhdh/rhdh-hub-rhel9",
                "product": "Red Hat Developer Hub 1.9",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782761244",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:discovery:2::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "discovery/discovery-ui-rhel9",
                "product": "Red Hat Discovery 2",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778156756",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:rhmt:1.8::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "rhmtc/openshift-migration-ui-rhel8",
                "product": "Red Hat Migration Toolkit 1.8",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1780590717",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:2.25::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-dashboard-rhel9",
                "product": "Red Hat OpenShift AI 2.25",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1780467029",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:2.25::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-mod-arch-model-registry-rhel9",
                "product": "Red Hat OpenShift AI 2.25",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1780467147",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4.20::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift4/ose-agent-installer-ui-rhel9",
                "product": "Red Hat OpenShift Container Platform 4.20",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778645099",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4.21::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift4/ose-agent-installer-ui-rhel9",
                "product": "Red Hat OpenShift Container Platform 4.21",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778539338",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4.21::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift4/ose-monitoring-plugin-rhel9",
                "product": "Red Hat OpenShift Container Platform 4.21",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1785354128",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_devspaces:3.28::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "devspaces/code-rhel9",
                "product": "Red Hat OpenShift Dev Spaces 3.28",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779814592",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_devspaces:3.28::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "devspaces/dashboard-rhel9",
                "product": "Red Hat OpenShift Dev Spaces 3.28",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779341289",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:2.6::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-ossmc-rhel8",
                "product": "Red Hat OpenShift Service Mesh 2.6",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778191473",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:2.6::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-rhel8",
                "product": "Red Hat OpenShift Service Mesh 2.6",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778191378",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3.0::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-ossmc-rhel9",
                "product": "Red Hat OpenShift Service Mesh 3.0",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778163785",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3.0::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-rhel9",
                "product": "Red Hat OpenShift Service Mesh 3.0",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778164208",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3.1::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-ossmc-rhel9",
                "product": "Red Hat OpenShift Service Mesh 3.1",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778163935",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3.1::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-rhel9",
                "product": "Red Hat OpenShift Service Mesh 3.1",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778164042",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3.2::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-ossmc-rhel9",
                "product": "Red Hat OpenShift Service Mesh 3.2",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778163792",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3.2::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-rhel9",
                "product": "Red Hat OpenShift Service Mesh 3.2",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778163909",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3.3::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-ossmc-rhel9",
                "product": "Red Hat OpenShift Service Mesh 3.3",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778163785",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3.3::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-rhel9",
                "product": "Red Hat OpenShift Service Mesh 3.3",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778163986",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.10::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel8",
                "product": "Red Hat Quay 3.10",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779822261",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.12::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel8",
                "product": "Red Hat Quay 3.12",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779811412",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.14::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel8",
                "product": "Red Hat Quay 3.14",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779689392",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.15::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel8",
                "product": "Red Hat Quay 3.15",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1780891395",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.16::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel9",
                "product": "Red Hat Quay 3.16",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779204086",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.17::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel9",
                "product": "Red Hat Quay 3.17",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779922205",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.9::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel8",
                "product": "Red Hat Quay 3.9",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779811473",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:satellite:6.18::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "satellite/iop-advisor-frontend-rhel9",
                "product": "Red Hat Satellite 6.18",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1781181673",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:satellite:6.18::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "satellite/iop-vulnerability-frontend-rhel9",
                "product": "Red Hat Satellite 6.18",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1781032495",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:satellite:6.18::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "satellite/iop-host-inventory-frontend-rhel9",
                "product": "Red Hat Satellite 6.18",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1780105179",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:cryostat:4"
                ],
                "defaultStatus": "unaffected",
                "packageName": "axios",
                "product": "Cryostat 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:gatekeeper:3"
                ],
                "defaultStatus": "unaffected",
                "packageName": "gatekeeper/gatekeeper-rhel9",
                "product": "Gatekeeper 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:migration_toolkit_applications:8"
                ],
                "defaultStatus": "affected",
                "packageName": "mta/mta-ui-rhel8",
                "product": "Migration Toolkit for Applications 8",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:migration_toolkit_applications:8"
                ],
                "defaultStatus": "affected",
                "packageName": "mta/mta-ui-rhel9",
                "product": "Migration Toolkit for Applications 8",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_pipelines:1"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-pipelines/pipelines-hub-ui-rhel8",
                "product": "OpenShift Pipelines",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_pipelines:1"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-pipelines/pipelines-hub-ui-rhel9",
                "product": "OpenShift Pipelines",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3"
                ],
                "defaultStatus": "unaffected",
                "packageName": "openshift-service-mesh/kiali-operator-bundle",
                "product": "OpenShift Service Mesh 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3"
                ],
                "defaultStatus": "unaffected",
                "packageName": "openshift-service-mesh/kiali-rhel9-operator",
                "product": "OpenShift Service Mesh 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:red_hat_3scale_amp:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "3scale-amp21/system",
                "product": "Red Hat 3scale API Management Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:red_hat_3scale_amp:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "3scale-amp22/system",
                "product": "Red Hat 3scale API Management Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:red_hat_3scale_amp:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "3scale-amp2/system-rhel7",
                "product": "Red Hat 3scale API Management Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:red_hat_3scale_amp:2"
                ],
                "defaultStatus": "affected",
                "packageName": "3scale-amp2/system-rhel8",
                "product": "Red Hat 3scale API Management Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:red_hat_3scale_amp:2"
                ],
                "defaultStatus": "affected",
                "packageName": "3scale-amp2/system-rhel9",
                "product": "Red Hat 3scale API Management Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "ansible-automation-platform-26/gateway-rhel9",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "affected",
                "packageName": "ansible-automation-platform/automation-dashboard-rhel9",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "affected",
                "packageName": "automation-controller",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "automation-gateway",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "affected",
                "packageName": "automation-hub",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "automation-platform-ui",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "python3.11-galaxy-ng",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "python3.12-galaxy-ng",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "python3x-galaxy-ng",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "python-galaxy-ng",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:service_registry:2"
                ],
                "defaultStatus": "affected",
                "packageName": "axios",
                "product": "Red Hat build of Apicurio Registry 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:apicurio_registry:3"
                ],
                "defaultStatus": "affected",
                "packageName": "apicurio/apicurio-registry-ui-rhel8",
                "product": "Red Hat build of Apicurio Registry 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:apicurio_registry:3"
                ],
                "defaultStatus": "affected",
                "packageName": "apicurio/apicurio-registry-ui-rhel9",
                "product": "Red Hat build of Apicurio Registry 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:podman_desktop:0"
                ],
                "defaultStatus": "affected",
                "packageName": "rhdesktop/rh-podman-desktop-ext-openshift-local-rhel10",
                "product": "Red Hat Build of Podman Desktop - Tech Preview",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:rhdh:1"
                ],
                "defaultStatus": "unaffected",
                "packageName": "rhdh/backstage-community-plugin-catalog-backend-module-scaffolder-relation-processor",
                "product": "Red Hat Developer Hub",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:8"
                ],
                "defaultStatus": "affected",
                "packageName": "grafana",
                "product": "Red Hat Enterprise Linux 8",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:9"
                ],
                "defaultStatus": "unaffected",
                "packageName": "grafana",
                "product": "Red Hat Enterprise Linux 9",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:enterprise_linux_ai:3"
                ],
                "defaultStatus": "affected",
                "packageName": "rhelai3/bootc-cuda-rhel9",
                "product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:enterprise_linux_ai:3"
                ],
                "defaultStatus": "affected",
                "packageName": "rhelai3/bootc-rocm-rhel9",
                "product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:enterprise_linux_ai:3"
                ],
                "defaultStatus": "affected",
                "packageName": "rhelai3/disk-image-cuda-rhel9",
                "product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:jboss_fuse:7"
                ],
                "defaultStatus": "affected",
                "packageName": "axios",
                "product": "Red Hat Fuse 7",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:hummingbird:1"
                ],
                "defaultStatus": "unaffected",
                "packageName": "boost",
                "product": "Red Hat Hardened Images",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "unaffected",
                "packageName": "rhoai/odh-dashboard-rhel8",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-mod-arch-gen-ai-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-mod-arch-maas-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift3/ose-console",
                "product": "Red Hat OpenShift Container Platform 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4"
                ],
                "defaultStatus": "unaffected",
                "packageName": "openshift4/ose-console",
                "product": "Red Hat OpenShift Container Platform 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4"
                ],
                "defaultStatus": "unaffected",
                "packageName": "openshift4/ose-console-rhel9",
                "product": "Red Hat OpenShift Container Platform 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:container_native_virtualization:4"
                ],
                "defaultStatus": "unaffected",
                "packageName": "container-native-virtualization/kubevirt-console-plugin",
                "product": "Red Hat OpenShift Virtualization 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:container_native_virtualization:4"
                ],
                "defaultStatus": "affected",
                "packageName": "container-native-virtualization/kubevirt-console-plugin-rhel9",
                "product": "Red Hat OpenShift Virtualization 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:jboss_enterprise_bpms_platform:7"
                ],
                "defaultStatus": "unaffected",
                "packageName": "axios",
                "product": "Red Hat Process Automation 7",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:trusted_artifact_signer:1"
                ],
                "defaultStatus": "unaffected",
                "packageName": "rhtas/rhtas-console-ui-rhel9",
                "product": "Red Hat Trusted Artifact Signer",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:trusted_profile_analyzer:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "rhtpa/rhtpa-trustification-service-rhel9",
                "product": "Red Hat Trusted Profile Analyzer",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_portal:2"
                ],
                "defaultStatus": "affected",
                "packageName": "ansible-automation-platform/automation-portal",
                "product": "Self-service automation portal 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:amq_streams:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "axios",
                "product": "streams for Apache Kafka 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:amq_streams:3"
                ],
                "defaultStatus": "unaffected",
                "packageName": "axios",
                "product": "streams for Apache Kafka 3",
                "vendor": "Red Hat"
              }
            ],
            "datePublic": "2026-04-24T17:36:44.132Z",
            "descriptions": [
              {
                "lang": "en",
                "value": "A flaw was found in Axios, an HTTP client library. This vulnerability allows an attacker to exploit a prototype pollution issue if another part of the application has already polluted the Object.prototype. By doing so, the attacker can intercept and modify JSON responses or take control of the HTTP communication. This could lead to unauthorized access to sensitive information like user credentials and request details."
              }
            ],
            "metrics": [
              {
                "other": {
                  "content": {
                    "namespace": "https://access.redhat.com/security/updates/classification/",
                    "value": "Important"
                  },
                  "type": "Red Hat severity rating"
                }
              },
              {
                "cvssV3_1": {
                  "attackComplexity": "HIGH",
                  "attackVector": "NETWORK",
                  "availabilityImpact": "NONE",
                  "baseScore": 7.4,
                  "baseSeverity": "HIGH",
                  "confidentialityImpact": "HIGH",
                  "integrityImpact": "HIGH",
                  "privilegesRequired": "NONE",
                  "scope": "UNCHANGED",
                  "userInteraction": "NONE",
                  "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
                  "version": "3.1"
                },
                "format": "CVSS"
              }
            ],
            "problemTypes": [
              {
                "descriptions": [
                  {
                    "cweId": "CWE-915",
                    "description": "Improperly Controlled Modification of Dynamically-Determined Object Attributes",
                    "lang": "en",
                    "type": "CWE"
                  }
                ]
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-09-10T12:05:09.354Z",
              "orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
              "shortName": "redhat-SADP"
            },
            "references": [
              {
                "tags": [
                  "vdb-entry",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/security/cve/CVE-2026-42033"
              },
              {
                "name": "RHBZ#2461607",
                "tags": [
                  "issue-tracking",
                  "x_refsource_REDHAT"
                ],
                "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2461607"
              },
              {
                "tags": [
                  "x_sadp-csaf-vex"
                ],
                "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42033.json"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:25089"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:16874"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:36882"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:24539"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:25273"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:20938"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:20889"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:22619"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:21338"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:33574"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:14937"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:25041"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:24977"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:17468"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:17474"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:48670"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:21772"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:16476"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:16534"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:16532"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:16535"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:16542"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:22840"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:22629"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:21017"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:24853"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:19375"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:22465"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:23361"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:26214"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:26232"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:26225"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:25271"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:24536"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:17657"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:17699"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:19109"
              }
            ],
            "solutions": [
              {
                "lang": "en",
                "value": "RHSA-2026:25089: HawtIO HawtIO 4.4.0"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:16874: Network Observability (NETOBSERV) 1.11.0"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:36882: Red Hat Advanced Cluster Management for Kubernetes 2.14"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:24539: Red Hat Advanced Cluster Management for Kubernetes 2.15"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:25273: Red Hat Advanced Cluster Management for Kubernetes 2.16"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:20938: Red Hat Advanced Cluster Security 4.9"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:20889: Red Hat Advanced Cluster Security for Kubernetes 4.10"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:22619: Red Hat Data Grid 8.6.1"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:21338: Red Hat Developer Hub 1.8"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:33574: Red Hat Developer Hub 1.9"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:14937: Red Hat Discovery 2"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:25041: Red Hat Migration Toolkit 1.8"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:24977: Red Hat OpenShift AI 2.25"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:17468: Red Hat OpenShift Container Platform 4.20"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:17474: Red Hat OpenShift Container Platform 4.21"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:48670: Red Hat OpenShift Container Platform 4.21"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:21772: Red Hat OpenShift Dev Spaces 3.28"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:16476: Red Hat OpenShift Service Mesh 2.6"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:16534: Red Hat OpenShift Service Mesh 3.0"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:16532: Red Hat OpenShift Service Mesh 3.1"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:16535: Red Hat OpenShift Service Mesh 3.2"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:16542: Red Hat OpenShift Service Mesh 3.3"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:22840: Red Hat Quay 3.10"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:22629: Red Hat Quay 3.12"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:21017: Red Hat Quay 3.14"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:24853: Red Hat Quay 3.15"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:19375: Red Hat Quay 3.16"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:22465: Red Hat Quay 3.17"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:23361: Red Hat Quay 3.9"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:26214: Red Hat Satellite 6.18"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:26232: Red Hat Satellite 6.18"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:26225: Red Hat Satellite 6.18"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:25271: multicluster engine for Kubernetes 2.11"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:24536: multicluster engine for Kubernetes 2.1"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:17657: multicluster engine for Kubernetes 2.6"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:17699: multicluster engine for Kubernetes 2.8"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:19109: multicluster engine for Kubernetes 2.9"
              }
            ],
            "timeline": [
              {
                "lang": "en",
                "time": "2026-04-24T18:01:20.937Z",
                "value": "Reported to Red Hat."
              },
              {
                "lang": "en",
                "time": "2026-04-24T17:36:44.132Z",
                "value": "Made public."
              }
            ],
            "title": "axios: Axios: HTTP Transport Hijacking via Prototype Pollution",
            "x_adpType": "supplier",
            "x_generator": {
              "engine": "sadp-cli 1.0.0"
            }
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "axios",
              "vendor": "axios",
              "versions": [
                {
                  "status": "affected",
                  "version": "\u003e= 1.0.0, \u003c 1.15.1"
                },
                {
                  "status": "affected",
                  "version": "\u003c 0.31.1"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "Axios is a promise based HTTP client for the browser and Node.js. Prior to 1.15.1 and 0.31.1, when Object.prototype has been polluted by any co-dependency with keys that axios reads without a hasOwnProperty guard, an attacker can (a) silently intercept and modify every JSON response before the application sees it, or (b) fully hijack the underlying HTTP transport, gaining access to request credentials, headers, and body. The precondition is prototype pollution from a separate source in the same process. This vulnerability is fixed in 1.15.1 and 0.31.1."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "HIGH",
                "attackVector": "NETWORK",
                "availabilityImpact": "NONE",
                "baseScore": 7.4,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
                "version": "3.1"
              }
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-1321",
                  "description": "CWE-1321: Improperly Controlled Modification of Object Prototype Attributes (\u0027Prototype Pollution\u0027)",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-04-24T17:36:44.132Z",
            "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
            "shortName": "GitHub_M"
          },
          "references": [
            {
              "name": "https://github.com/axios/axios/security/advisories/GHSA-pf86-5x62-jrwf",
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "https://github.com/axios/axios/security/advisories/GHSA-pf86-5x62-jrwf"
            }
          ],
          "source": {
            "advisory": "GHSA-pf86-5x62-jrwf",
            "discovery": "UNKNOWN"
          },
          "title": "Axios: Prototype Pollution Gadgets - Response Tampering, Data Exfiltration, and Request Hijacking"
        }
      },
      "cveMetadata": {
        "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "assignerShortName": "GitHub_M",
        "cveId": "CVE-2026-42033",
        "datePublished": "2026-04-24T17:36:44.132Z",
        "dateReserved": "2026-04-23T16:05:01.708Z",
        "dateUpdated": "2026-09-10T12:05:09.354Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2026-40895 (GCVE-0-2026-40895)

    Vulnerability from nvd – Published: 2026-04-21 19:59 – Updated: 2026-09-10 12:05
    VLAI
    Title
    follow-redirects: Custom Authentication Headers Leaked to Cross-Domain Redirect Targets
    Summary
    follow-redirects is an open source, drop-in replacement for Node's `http` and `https` modules that automatically follows redirects. Prior to 1.16.0, when an HTTP request follows a cross-domain redirect (301/302/307/308), follow-redirects only strips authorization, proxy-authorization, and cookie headers (matched by regex at index.js). Any custom authentication header (e.g., X-API-Key, X-Auth-Token, Api-Key, Token) is forwarded verbatim to the redirect target. This vulnerability is fixed in 1.16.0.
    SSVC
    Exploitation: none Automatable: no Technical Impact: partial
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-04-22 13:31 UTC
    CWE
    • CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor
    • CWE-212 - Improper Removal of Sensitive Information Before Storage or Transfer
    References
    URL Tags
    https://github.com/follow-redirects/follow-redire… x_refsource_CONFIRM
    https://access.redhat.com/security/cve/CVE-2026-40895 vdb-entryx_refsource_REDHAT
    https://bugzilla.redhat.com/show_bug.cgi?id=2460297 issue-trackingx_refsource_REDHAT
    https://security.access.redhat.com/data/csaf/v2/v… x_sadp-csaf-vex
    https://access.redhat.com/errata/RHSA-2026:17789 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:26010 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:16874 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:36882 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:24539 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:25273 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:20938 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:20889 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:24766 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:21338 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:13826 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:14937 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:41928 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:50300 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:24977 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:65126 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:19712 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:47728 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:48699 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:44235 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:27004 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:44263 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:27063 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:44267 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:27044 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:40768 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:21772 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:16476 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:16534 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:16532 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:16535 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:16542 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:22840 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:22629 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:21017 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:24853 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:19375 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:22465 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:23361 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:25271 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:24536 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:17657 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:17699 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:19109 vendor-advisoryx_refsource_REDHAT
    Impacted products
    Vendor Product Version
    follow-redirects follow-redirects Affected: < 1.16.0
    Create a notification for this product.
    Red Hat Cryostat 4 on RHEL 9 Unaffected: 4.2.0-9 , < * (rpm)
        cpe:/a:redhat:cryostat:4::el9
    Create a notification for this product.
    Red Hat Cluster Observability Operator 1.5.0 Unaffected: 1781116645 , < * (rpm)
        cpe:/a:redhat:cluster_observability_operator:1.5::el9
    Create a notification for this product.
    Red Hat Cluster Observability Operator 1.5.0 Unaffected: 1781116658 , < * (rpm)
        cpe:/a:redhat:cluster_observability_operator:1.5::el9
    Create a notification for this product.
    Red Hat Cluster Observability Operator 1.5.0 Unaffected: 1781116387 , < * (rpm)
        cpe:/a:redhat:cluster_observability_operator:1.5::el9
    Create a notification for this product.
    Red Hat Cluster Observability Operator 1.5.0 Unaffected: 1781116392 , < * (rpm)
        cpe:/a:redhat:cluster_observability_operator:1.5::el9
    Create a notification for this product.
    Red Hat multicluster engine for Kubernetes 2.1 Unaffected: 1780917531 , < * (rpm)
        cpe:/a:redhat:multicluster_engine:2.10::el9
    Create a notification for this product.
    Red Hat multicluster engine for Kubernetes 2.11 Unaffected: 1780910888 , < * (rpm)
        cpe:/a:redhat:multicluster_engine:2.11::el9
    Create a notification for this product.
    Red Hat multicluster engine for Kubernetes 2.6 Unaffected: 1778511348 , < * (rpm)
        cpe:/a:redhat:multicluster_engine:2.6::el9
    Create a notification for this product.
    Red Hat multicluster engine for Kubernetes 2.8 Unaffected: 1778383863 , < * (rpm)
        cpe:/a:redhat:multicluster_engine:2.8::el9
    Create a notification for this product.
    Red Hat multicluster engine for Kubernetes 2.9 Unaffected: 1778532610 , < * (rpm)
        cpe:/a:redhat:multicluster_engine:2.9::el9
    Create a notification for this product.
    Red Hat Network Observability (NETOBSERV) 1.11.0 Unaffected: 1778508956 , < * (rpm)
        cpe:/a:redhat:network_observ_optr:1.11::el9
    Create a notification for this product.
    Red Hat Network Observability (NETOBSERV) 1.11.0 Unaffected: 1778510461 , < * (rpm)
        cpe:/a:redhat:network_observ_optr:1.11::el9
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.14 Unaffected: 1783451729 , < * (rpm)
        cpe:/a:redhat:acm:2.14::el9
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.15 Unaffected: 1780876734 , < * (rpm)
        cpe:/a:redhat:acm:2.15::el9
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.16 Unaffected: 1780600823 , < * (rpm)
        cpe:/a:redhat:acm:2.16::el9
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Security 4.9 Unaffected: 1779371594 , < * (rpm)
        cpe:/a:redhat:advanced_cluster_security:4.9::el8
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Security for Kubernetes 4.10 Unaffected: 1779293013 , < * (rpm)
        cpe:/a:redhat:advanced_cluster_security:4.10::el8
    Create a notification for this product.
    Red Hat Red Hat Ansible Automation Platform 2.5 Unaffected: 1780082949 , < * (rpm)
        cpe:/a:redhat:ansible_automation_platform:2.5::el8
    Create a notification for this product.
    Red Hat Red Hat Developer Hub 1.8 Unaffected: 1779841586 , < * (rpm)
        cpe:/a:redhat:rhdh:1.8::el9
    Create a notification for this product.
    Red Hat Red Hat Developer Hub 1.9 Unaffected: 1777903262 , < * (rpm)
        cpe:/a:redhat:rhdh:1.9::el9
    Create a notification for this product.
    Red Hat Red Hat Discovery 2 Unaffected: 1778156756 , < * (rpm)
        cpe:/a:redhat:discovery:2::el9
    Create a notification for this product.
    Red Hat Red Hat Migration Toolkit 1.8 Unaffected: 1783690532 , < * (rpm)
        cpe:/a:redhat:rhmt:1.8::el8
    Create a notification for this product.
    Red Hat Red Hat Migration Toolkit for Applications 8.1 Unaffected: 1785169013 , < * (rpm)
        cpe:/a:redhat:migration_toolkit_applications:8.1::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 2.25 Unaffected: 1780467029 , < * (rpm)
        cpe:/a:redhat:openshift_ai:2.25::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 2.25 Unaffected: 1780467147 , < * (rpm)
        cpe:/a:redhat:openshift_ai:2.25::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 2.25 Unaffected: 1787801527 , < * (rpm)
        cpe:/a:redhat:openshift_ai:2.25::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 3.3 Unaffected: 1779189627 , < * (rpm)
        cpe:/a:redhat:openshift_ai:3.3::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 3.3 Unaffected: 1778473763 , < * (rpm)
        cpe:/a:redhat:openshift_ai:3.3::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 3.3 Unaffected: 1778666987 , < * (rpm)
        cpe:/a:redhat:openshift_ai:3.3::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Container Platform 4.17 Unaffected: 1784803344 , < * (rpm)
        cpe:/a:redhat:openshift:4.17::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Container Platform 4.18 Unaffected: 1785278569 , < * (rpm)
        cpe:/a:redhat:openshift:4.18::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Container Platform 4.19 Unaffected: 1781708434 , < * (rpm)
        cpe:/a:redhat:openshift:4.19::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Container Platform 4.19 Unaffected: 1784634877 , < * (rpm)
        cpe:/a:redhat:openshift:4.19::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Container Platform 4.20 Unaffected: 1781695012 , < * (rpm)
        cpe:/a:redhat:openshift:4.20::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Container Platform 4.20 Unaffected: 1784731014 , < * (rpm)
        cpe:/a:redhat:openshift:4.20::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Container Platform 4.21 Unaffected: 1781731914 , < * (rpm)
        cpe:/a:redhat:openshift:4.21::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Container Platform 4.21 Unaffected: 1784713762 , < * (rpm)
        cpe:/a:redhat:openshift:4.21::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Container Platform 4.22 Unaffected: 1784125329 , < * (rpm)
        cpe:/a:redhat:openshift:4.22::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Dev Spaces 3.28 Unaffected: 1779814592 , < * (rpm)
        cpe:/a:redhat:openshift_devspaces:3.28::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Dev Spaces 3.28 Unaffected: 1779341289 , < * (rpm)
        cpe:/a:redhat:openshift_devspaces:3.28::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Dev Spaces 3.28 Unaffected: 1779528224 , < * (rpm)
        cpe:/a:redhat:openshift_devspaces:3.28::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Dev Spaces 3.28 Unaffected: 1779359423 , < * (rpm)
        cpe:/a:redhat:openshift_devspaces:3.28::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 2.6 Unaffected: 1778191473 , < * (rpm)
        cpe:/a:redhat:service_mesh:2.6::el8
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 2.6 Unaffected: 1778191378 , < * (rpm)
        cpe:/a:redhat:service_mesh:2.6::el8
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 3.0 Unaffected: 1778163785 , < * (rpm)
        cpe:/a:redhat:service_mesh:3.0::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 3.0 Unaffected: 1778164208 , < * (rpm)
        cpe:/a:redhat:service_mesh:3.0::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 3.1 Unaffected: 1778163935 , < * (rpm)
        cpe:/a:redhat:service_mesh:3.1::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 3.1 Unaffected: 1778164042 , < * (rpm)
        cpe:/a:redhat:service_mesh:3.1::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 3.2 Unaffected: 1778163792 , < * (rpm)
        cpe:/a:redhat:service_mesh:3.2::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 3.2 Unaffected: 1778163909 , < * (rpm)
        cpe:/a:redhat:service_mesh:3.2::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 3.3 Unaffected: 1778163785 , < * (rpm)
        cpe:/a:redhat:service_mesh:3.3::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 3.3 Unaffected: 1778163986 , < * (rpm)
        cpe:/a:redhat:service_mesh:3.3::el9
    Create a notification for this product.
    Red Hat Red Hat Quay 3.10 Unaffected: 1779822261 , < * (rpm)
        cpe:/a:redhat:quay:3.10::el8
    Create a notification for this product.
    Red Hat Red Hat Quay 3.12 Unaffected: 1779811412 , < * (rpm)
        cpe:/a:redhat:quay:3.12::el8
    Create a notification for this product.
    Red Hat Red Hat Quay 3.14 Unaffected: 1779689392 , < * (rpm)
        cpe:/a:redhat:quay:3.14::el8
    Create a notification for this product.
    Red Hat Red Hat Quay 3.15 Unaffected: 1780891395 , < * (rpm)
        cpe:/a:redhat:quay:3.15::el8
    Create a notification for this product.
    Red Hat Red Hat Quay 3.16 Unaffected: 1779204086 , < * (rpm)
        cpe:/a:redhat:quay:3.16::el9
    Create a notification for this product.
    Red Hat Red Hat Quay 3.17 Unaffected: 1779922205 , < * (rpm)
        cpe:/a:redhat:quay:3.17::el9
    Create a notification for this product.
    Red Hat Red Hat Quay 3.9 Unaffected: 1779811473 , < * (rpm)
        cpe:/a:redhat:quay:3.9::el8
    Create a notification for this product.
    Red Hat Cryostat 4     cpe:/a:redhat:cryostat:4
    Create a notification for this product.
    Red Hat Gatekeeper 3     cpe:/a:redhat:gatekeeper:3
    Create a notification for this product.
    Red Hat Migration Toolkit for Applications 8     cpe:/a:redhat:migration_toolkit_applications:8
    Create a notification for this product.
    Red Hat Migration Toolkit for Virtualization     cpe:/a:redhat:migration_toolkit_virtualization:2
    Create a notification for this product.
    Red Hat Node HealthCheck Operator     cpe:/a:redhat:workload_availability_nhc:0
    Create a notification for this product.
    Red Hat OpenShift Lightspeed     cpe:/a:redhat:openshift_lightspeed
    Create a notification for this product.
    Red Hat OpenShift Pipelines     cpe:/a:redhat:openshift_pipelines:1
    Create a notification for this product.
    Red Hat OpenShift Service Mesh 3     cpe:/a:redhat:service_mesh:3
    Create a notification for this product.
    Red Hat Red Hat 3scale API Management Platform 2     cpe:/a:redhat:red_hat_3scale_amp:2
    Create a notification for this product.
    Red Hat Red Hat Ansible Automation Platform 2     cpe:/a:redhat:ansible_automation_platform:2
    Create a notification for this product.
    Red Hat Red Hat build of Apache Camel - HawtIO 4     cpe:/a:redhat:apache_camel_hawtio:4
    Create a notification for this product.
    Red Hat Red Hat build of Apicurio Registry 2     cpe:/a:redhat:service_registry:2
    Create a notification for this product.
    Red Hat Red Hat build of Apicurio Registry 3     cpe:/a:redhat:apicurio_registry:3
    Create a notification for this product.
    Red Hat Red Hat Build of Podman Desktop     cpe:/a:redhat:podman_desktop:1
    Create a notification for this product.
    Red Hat Red Hat Build of Podman Desktop - Tech Preview     cpe:/a:redhat:podman_desktop:0
    Create a notification for this product.
    Red Hat Red Hat Ceph Storage 9     cpe:/a:redhat:ceph_storage:9
    Create a notification for this product.
    Red Hat Red Hat Connectivity Link 1     cpe:/a:redhat:connectivity_link:1
    Create a notification for this product.
    Red Hat Red Hat Data Grid 8     cpe:/a:redhat:jboss_data_grid:8
    Create a notification for this product.
    Red Hat Red Hat Developer Hub     cpe:/a:redhat:rhdh:1
    Create a notification for this product.
    Red Hat Red Hat Edge Manager 1     cpe:/a:redhat:edge_manager:1
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 8     cpe:/o:redhat:enterprise_linux:8
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 9     cpe:/o:redhat:enterprise_linux:9
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux AI (RHEL AI) 3     cpe:/a:redhat:enterprise_linux_ai:3
    Create a notification for this product.
    Red Hat Red Hat Fuse 7     cpe:/a:redhat:jboss_fuse:7
    Create a notification for this product.
    Red Hat Red Hat Hardened Images     cpe:/a:redhat:hummingbird:1
    Create a notification for this product.
    Red Hat Red Hat JBoss Enterprise Application Platform 7     cpe:/a:redhat:jboss_enterprise_application_platform:7
    Create a notification for this product.
    Red Hat Red Hat JBoss Enterprise Application Platform 8     cpe:/a:redhat:jboss_enterprise_application_platform:8
    Create a notification for this product.
    Red Hat Red Hat JBoss Enterprise Application Platform Expansion Pack     cpe:/a:redhat:jbosseapxp
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI (RHOAI)     cpe:/a:redhat:openshift_ai
    Create a notification for this product.
    Red Hat Red Hat OpenShift Container Platform 4     cpe:/a:redhat:openshift:4
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4     cpe:/a:redhat:openshift_data_foundation:4
    Create a notification for this product.
    Red Hat Red Hat OpenShift distributed tracing 3     cpe:/a:redhat:openshift_distributed_tracing:3
    Create a notification for this product.
    Red Hat Red Hat OpenShift GitOps     cpe:/a:redhat:openshift_gitops:1
    Create a notification for this product.
    Red Hat Red Hat OpenShift Virtualization 4     cpe:/a:redhat:container_native_virtualization:4
    Create a notification for this product.
    Red Hat Red Hat Process Automation 7     cpe:/a:redhat:jboss_enterprise_bpms_platform:7
    Create a notification for this product.
    Red Hat Red Hat Satellite 6     cpe:/a:redhat:satellite:6
    Create a notification for this product.
    Red Hat Red Hat Trusted Artifact Signer     cpe:/a:redhat:trusted_artifact_signer:1
    Create a notification for this product.
    Red Hat Red Hat Trusted Profile Analyzer     cpe:/a:redhat:trusted_profile_analyzer:2
    Create a notification for this product.
    Red Hat Self-service automation portal 2     cpe:/a:redhat:ansible_portal:2
    Create a notification for this product.
    Red Hat streams for Apache Kafka 2     cpe:/a:redhat:amq_streams:2
    Create a notification for this product.
    Red Hat streams for Apache Kafka 3     cpe:/a:redhat:amq_streams:3
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-40895",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "partial"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-04-22T13:31:13.035788Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-04-22T13:31:34.652Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          },
          {
            "affected": [
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:cryostat:4::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "cryostat/cryostat-openshift-console-plugin-rhel9",
                "product": "Cryostat 4 on RHEL 9",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "4.2.0-9",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9",
                "product": "Cluster Observability Operator 1.5.0",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1781116645",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9",
                "product": "Cluster Observability Operator 1.5.0",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1781116658",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9",
                "product": "Cluster Observability Operator 1.5.0",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1781116387",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "cluster-observability-operator/distributed-tracing-console-plugin-rhel9",
                "product": "Cluster Observability Operator 1.5.0",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1781116392",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:multicluster_engine:2.10::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "multicluster-engine/console-mce-rhel9",
                "product": "multicluster engine for Kubernetes 2.1",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1780917531",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:multicluster_engine:2.11::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "multicluster-engine/console-mce-rhel9",
                "product": "multicluster engine for Kubernetes 2.11",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1780910888",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:multicluster_engine:2.6::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "multicluster-engine/console-mce-rhel9",
                "product": "multicluster engine for Kubernetes 2.6",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778511348",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:multicluster_engine:2.8::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "multicluster-engine/console-mce-rhel9",
                "product": "multicluster engine for Kubernetes 2.8",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778383863",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:multicluster_engine:2.9::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "multicluster-engine/console-mce-rhel9",
                "product": "multicluster engine for Kubernetes 2.9",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778532610",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:network_observ_optr:1.11::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "network-observability/network-observability-console-plugin-compat-rhel9",
                "product": "Network Observability (NETOBSERV) 1.11.0",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778508956",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:network_observ_optr:1.11::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "network-observability/network-observability-console-plugin-rhel9",
                "product": "Network Observability (NETOBSERV) 1.11.0",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778510461",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:acm:2.14::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhacm2/console-rhel9",
                "product": "Red Hat Advanced Cluster Management for Kubernetes 2.14",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1783451729",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:acm:2.15::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhacm2/console-rhel9",
                "product": "Red Hat Advanced Cluster Management for Kubernetes 2.15",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1780876734",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:acm:2.16::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhacm2/console-rhel9",
                "product": "Red Hat Advanced Cluster Management for Kubernetes 2.16",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1780600823",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:advanced_cluster_security:4.9::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "advanced-cluster-security/rhacs-main-rhel8",
                "product": "Red Hat Advanced Cluster Security 4.9",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779371594",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:advanced_cluster_security:4.10::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "advanced-cluster-security/rhacs-main-rhel8",
                "product": "Red Hat Advanced Cluster Security for Kubernetes 4.10",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779293013",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2.5::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "ansible-automation-platform-25/lightspeed-rhel8",
                "product": "Red Hat Ansible Automation Platform 2.5",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1780082949",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:rhdh:1.8::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhdh/rhdh-hub-rhel9",
                "product": "Red Hat Developer Hub 1.8",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779841586",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:rhdh:1.9::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhdh/rhdh-hub-rhel9",
                "product": "Red Hat Developer Hub 1.9",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1777903262",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:discovery:2::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "discovery/discovery-ui-rhel9",
                "product": "Red Hat Discovery 2",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778156756",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:rhmt:1.8::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "rhmtc/openshift-migration-ui-rhel8",
                "product": "Red Hat Migration Toolkit 1.8",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1783690532",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:migration_toolkit_applications:8.1::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "mta/mta-ui-rhel9",
                "product": "Red Hat Migration Toolkit for Applications 8.1",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1785169013",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:2.25::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-dashboard-rhel9",
                "product": "Red Hat OpenShift AI 2.25",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1780467029",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:2.25::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-mod-arch-model-registry-rhel9",
                "product": "Red Hat OpenShift AI 2.25",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1780467147",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:2.25::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9",
                "product": "Red Hat OpenShift AI 2.25",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1787801527",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:3.3::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-dashboard-rhel9",
                "product": "Red Hat OpenShift AI 3.3",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779189627",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:3.3::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-mod-arch-gen-ai-rhel9",
                "product": "Red Hat OpenShift AI 3.3",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778473763",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:3.3::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-mod-arch-model-registry-rhel9",
                "product": "Red Hat OpenShift AI 3.3",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778666987",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4.17::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift4/ose-console-rhel9",
                "product": "Red Hat OpenShift Container Platform 4.17",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1784803344",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4.18::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift4/ose-console-rhel9",
                "product": "Red Hat OpenShift Container Platform 4.18",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1785278569",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4.19::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift4/ose-monitoring-plugin-rhel9",
                "product": "Red Hat OpenShift Container Platform 4.19",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1781708434",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4.19::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift4/ose-console-rhel9",
                "product": "Red Hat OpenShift Container Platform 4.19",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1784634877",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4.20::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift4/ose-monitoring-plugin-rhel9",
                "product": "Red Hat OpenShift Container Platform 4.20",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1781695012",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4.20::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift4/ose-console-rhel9",
                "product": "Red Hat OpenShift Container Platform 4.20",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1784731014",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4.21::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift4/ose-monitoring-plugin-rhel9",
                "product": "Red Hat OpenShift Container Platform 4.21",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1781731914",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4.21::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift4/ose-console-rhel9",
                "product": "Red Hat OpenShift Container Platform 4.21",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1784713762",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4.22::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift4/ose-console-rhel9",
                "product": "Red Hat OpenShift Container Platform 4.22",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1784125329",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_devspaces:3.28::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "devspaces/code-rhel9",
                "product": "Red Hat OpenShift Dev Spaces 3.28",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779814592",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_devspaces:3.28::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "devspaces/dashboard-rhel9",
                "product": "Red Hat OpenShift Dev Spaces 3.28",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779341289",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_devspaces:3.28::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "devspaces/openvsx-rhel9",
                "product": "Red Hat OpenShift Dev Spaces 3.28",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779528224",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_devspaces:3.28::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "devspaces/pluginregistry-rhel9",
                "product": "Red Hat OpenShift Dev Spaces 3.28",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779359423",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:2.6::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-ossmc-rhel8",
                "product": "Red Hat OpenShift Service Mesh 2.6",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778191473",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:2.6::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-rhel8",
                "product": "Red Hat OpenShift Service Mesh 2.6",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778191378",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3.0::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-ossmc-rhel9",
                "product": "Red Hat OpenShift Service Mesh 3.0",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778163785",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3.0::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-rhel9",
                "product": "Red Hat OpenShift Service Mesh 3.0",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778164208",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3.1::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-ossmc-rhel9",
                "product": "Red Hat OpenShift Service Mesh 3.1",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778163935",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3.1::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-rhel9",
                "product": "Red Hat OpenShift Service Mesh 3.1",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778164042",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3.2::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-ossmc-rhel9",
                "product": "Red Hat OpenShift Service Mesh 3.2",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778163792",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3.2::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-rhel9",
                "product": "Red Hat OpenShift Service Mesh 3.2",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778163909",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3.3::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-ossmc-rhel9",
                "product": "Red Hat OpenShift Service Mesh 3.3",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778163785",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3.3::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-rhel9",
                "product": "Red Hat OpenShift Service Mesh 3.3",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778163986",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.10::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel8",
                "product": "Red Hat Quay 3.10",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779822261",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.12::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel8",
                "product": "Red Hat Quay 3.12",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779811412",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.14::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel8",
                "product": "Red Hat Quay 3.14",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779689392",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.15::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel8",
                "product": "Red Hat Quay 3.15",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1780891395",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.16::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel9",
                "product": "Red Hat Quay 3.16",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779204086",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.17::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel9",
                "product": "Red Hat Quay 3.17",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779922205",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.9::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel8",
                "product": "Red Hat Quay 3.9",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779811473",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:cryostat:4"
                ],
                "defaultStatus": "unaffected",
                "packageName": "cryostat-openshift-console-plugin-npm",
                "product": "Cryostat 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:cryostat:4"
                ],
                "defaultStatus": "unaffected",
                "packageName": "follow-redirects",
                "product": "Cryostat 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:gatekeeper:3"
                ],
                "defaultStatus": "unaffected",
                "packageName": "gatekeeper/gatekeeper-rhel9",
                "product": "Gatekeeper 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:migration_toolkit_applications:8"
                ],
                "defaultStatus": "affected",
                "packageName": "mta/mta-ui-rhel8",
                "product": "Migration Toolkit for Applications 8",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:migration_toolkit_virtualization:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "migration-toolkit-virtualization/mtv-console-plugin-rhel9",
                "product": "Migration Toolkit for Virtualization",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:migration_toolkit_virtualization:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "mtv-candidate/mtv-console-plugin-rhel9",
                "product": "Migration Toolkit for Virtualization",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:workload_availability_nhc:0"
                ],
                "defaultStatus": "unaffected",
                "packageName": "workload-availability/node-healthcheck-must-gather-rhel9",
                "product": "Node HealthCheck Operator",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:workload_availability_nhc:0"
                ],
                "defaultStatus": "unaffected",
                "packageName": "workload-availability/node-healthcheck-operator-bundle",
                "product": "Node HealthCheck Operator",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:workload_availability_nhc:0"
                ],
                "defaultStatus": "unaffected",
                "packageName": "workload-availability/node-healthcheck-rhel9-operator",
                "product": "Node HealthCheck Operator",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_lightspeed"
                ],
                "defaultStatus": "unaffected",
                "packageName": "openshift-lightspeed/lightspeed-console-plugin-419-rhel9",
                "product": "OpenShift Lightspeed",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_lightspeed"
                ],
                "defaultStatus": "unaffected",
                "packageName": "openshift-lightspeed/lightspeed-console-plugin-pf5-rhel9",
                "product": "OpenShift Lightspeed",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_lightspeed"
                ],
                "defaultStatus": "unaffected",
                "packageName": "openshift-lightspeed/lightspeed-console-plugin-rhel9",
                "product": "OpenShift Lightspeed",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_pipelines:1"
                ],
                "defaultStatus": "unaffected",
                "packageName": "openshift-pipelines/pipelines-console-plugin-rhel8",
                "product": "OpenShift Pipelines",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_pipelines:1"
                ],
                "defaultStatus": "unaffected",
                "packageName": "openshift-pipelines/pipelines-console-plugin-rhel9",
                "product": "OpenShift Pipelines",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_pipelines:1"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-pipelines/pipelines-hub-ui-rhel8",
                "product": "OpenShift Pipelines",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_pipelines:1"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-pipelines/pipelines-hub-ui-rhel9",
                "product": "OpenShift Pipelines",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3"
                ],
                "defaultStatus": "unaffected",
                "packageName": "openshift-service-mesh/kiali-operator-bundle",
                "product": "OpenShift Service Mesh 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3"
                ],
                "defaultStatus": "unaffected",
                "packageName": "openshift-service-mesh/kiali-rhel9-operator",
                "product": "OpenShift Service Mesh 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:red_hat_3scale_amp:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "3scale-amp21/system",
                "product": "Red Hat 3scale API Management Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:red_hat_3scale_amp:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "3scale-amp22/system",
                "product": "Red Hat 3scale API Management Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:red_hat_3scale_amp:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "3scale-amp2/system-rhel7",
                "product": "Red Hat 3scale API Management Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:red_hat_3scale_amp:2"
                ],
                "defaultStatus": "affected",
                "packageName": "3scale-amp2/system-rhel8",
                "product": "Red Hat 3scale API Management Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:red_hat_3scale_amp:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "3scale-amp2/system-rhel9",
                "product": "Red Hat 3scale API Management Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "ansible-automation-platform-26/gateway-rhel9",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "affected",
                "packageName": "ansible-automation-platform-26/lightspeed-rhel9",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "affected",
                "packageName": "ansible-automation-platform/automation-dashboard-rhel9",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "affected",
                "packageName": "automation-controller",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "automation-eda-controller",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "automation-gateway",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "affected",
                "packageName": "automation-hub",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "automation-platform-ui",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "python3.11-galaxy-ng",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "python3.12-galaxy-ng",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "python3x-galaxy-ng",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "python-galaxy-ng",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:apache_camel_hawtio:4"
                ],
                "defaultStatus": "affected",
                "packageName": "follow-redirects",
                "product": "Red Hat build of Apache Camel - HawtIO 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:service_registry:2"
                ],
                "defaultStatus": "affected",
                "packageName": "follow-redirects",
                "product": "Red Hat build of Apicurio Registry 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:apicurio_registry:3"
                ],
                "defaultStatus": "affected",
                "packageName": "apicurio/apicurio-registry-ui-rhel8",
                "product": "Red Hat build of Apicurio Registry 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:apicurio_registry:3"
                ],
                "defaultStatus": "affected",
                "packageName": "apicurio/apicurio-registry-ui-rhel9",
                "product": "Red Hat build of Apicurio Registry 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:podman_desktop:1"
                ],
                "defaultStatus": "affected",
                "packageName": "rh-podman-desktop.git",
                "product": "Red Hat Build of Podman Desktop",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:podman_desktop:0"
                ],
                "defaultStatus": "affected",
                "packageName": "rhdesktop/rh-podman-desktop-ext-openshift-local-rhel10",
                "product": "Red Hat Build of Podman Desktop - Tech Preview",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ceph_storage:9"
                ],
                "defaultStatus": "unaffected",
                "packageName": "rhceph/alloy-rhel10",
                "product": "Red Hat Ceph Storage 9",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:connectivity_link:1"
                ],
                "defaultStatus": "affected",
                "packageName": "rhcl-1/rhcl-console-plugin-rhel9",
                "product": "Red Hat Connectivity Link 1",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:jboss_data_grid:8"
                ],
                "defaultStatus": "unaffected",
                "packageName": "follow-redirects",
                "product": "Red Hat Data Grid 8",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:rhdh:1"
                ],
                "defaultStatus": "affected",
                "packageName": "rhdh/backstage-community-plugin-catalog-backend-module-scaffolder-relation-processor",
                "product": "Red Hat Developer Hub",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:edge_manager:1"
                ],
                "defaultStatus": "unaffected",
                "packageName": "rhem/flightctl-ui-ocp-rhel10",
                "product": "Red Hat Edge Manager 1",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:edge_manager:1"
                ],
                "defaultStatus": "unaffected",
                "packageName": "rhem/flightctl-ui-ocp-rhel9",
                "product": "Red Hat Edge Manager 1",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:edge_manager:1"
                ],
                "defaultStatus": "unaffected",
                "packageName": "rhem/flightctl-ui-rhel10",
                "product": "Red Hat Edge Manager 1",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:edge_manager:1"
                ],
                "defaultStatus": "unaffected",
                "packageName": "rhem/flightctl-ui-rhel9",
                "product": "Red Hat Edge Manager 1",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:8"
                ],
                "defaultStatus": "affected",
                "packageName": "grafana",
                "product": "Red Hat Enterprise Linux 8",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:8"
                ],
                "defaultStatus": "unaffected",
                "packageName": "pcs",
                "product": "Red Hat Enterprise Linux 8",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:9"
                ],
                "defaultStatus": "unaffected",
                "packageName": "grafana",
                "product": "Red Hat Enterprise Linux 9",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:9"
                ],
                "defaultStatus": "unaffected",
                "packageName": "pcs",
                "product": "Red Hat Enterprise Linux 9",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:enterprise_linux_ai:3"
                ],
                "defaultStatus": "affected",
                "packageName": "rhelai3/bootc-cuda-rhel9",
                "product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:enterprise_linux_ai:3"
                ],
                "defaultStatus": "affected",
                "packageName": "rhelai3/bootc-rocm-rhel9",
                "product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:enterprise_linux_ai:3"
                ],
                "defaultStatus": "affected",
                "packageName": "rhelai3/disk-image-cuda-rhel9",
                "product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:jboss_fuse:7"
                ],
                "defaultStatus": "affected",
                "packageName": "follow-redirects",
                "product": "Red Hat Fuse 7",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:hummingbird:1"
                ],
                "defaultStatus": "unaffected",
                "packageName": "boost",
                "product": "Red Hat Hardened Images",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:hummingbird:1"
                ],
                "defaultStatus": "unaffected",
                "packageName": "dotnet8.0",
                "product": "Red Hat Hardened Images",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:hummingbird:1"
                ],
                "defaultStatus": "unaffected",
                "packageName": "python3.14",
                "product": "Red Hat Hardened Images",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:jboss_enterprise_application_platform:7"
                ],
                "defaultStatus": "unaffected",
                "packageName": "follow-redirects",
                "product": "Red Hat JBoss Enterprise Application Platform 7",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:jboss_enterprise_application_platform:8"
                ],
                "defaultStatus": "unaffected",
                "packageName": "follow-redirects",
                "product": "Red Hat JBoss Enterprise Application Platform 8",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:jbosseapxp"
                ],
                "defaultStatus": "unaffected",
                "packageName": "follow-redirects",
                "product": "Red Hat JBoss Enterprise Application Platform Expansion Pack",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "unaffected",
                "packageName": "rhoai/odh-dashboard-rhel8",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "unaffected",
                "packageName": "rhoai/odh-mlflow-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-mod-arch-maas-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "unaffected",
                "packageName": "rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "unaffected",
                "packageName": "rhoai/odh-pipeline-runtime-minimal-cpu-py312-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "unaffected",
                "packageName": "rhoai/odh-pipeline-runtime-pytorch-cuda-py312-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "unaffected",
                "packageName": "rhoai/odh-pipeline-runtime-pytorch-llmcompressor-cuda-py312-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "unaffected",
                "packageName": "rhoai/odh-pipeline-runtime-pytorch-rocm-py312-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "unaffected",
                "packageName": "rhoai/odh-pipeline-runtime-tensorflow-cuda-py312-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "unaffected",
                "packageName": "rhoai/odh-pipeline-runtime-tensorflow-rocm-py312-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "unaffected",
                "packageName": "rhoai/odh-workbench-jupyter-datascience-cpu-py312-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "unaffected",
                "packageName": "rhoai/odh-workbench-jupyter-minimal-cpu-py312-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "unaffected",
                "packageName": "rhoai/odh-workbench-jupyter-minimal-cuda-py312-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "unaffected",
                "packageName": "rhoai/odh-workbench-jupyter-minimal-rocm-py312-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "unaffected",
                "packageName": "rhoai/odh-workbench-jupyter-pytorch-cuda-py312-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "unaffected",
                "packageName": "rhoai/odh-workbench-jupyter-pytorch-llmcompressor-cuda-py312-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "unaffected",
                "packageName": "rhoai/odh-workbench-jupyter-pytorch-rocm-py312-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "unaffected",
                "packageName": "rhoai/odh-workbench-jupyter-tensorflow-cuda-py312-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "unaffected",
                "packageName": "rhoai/odh-workbench-jupyter-tensorflow-rocm-py312-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "unaffected",
                "packageName": "rhoai/odh-workbench-jupyter-trustyai-cpu-py312-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift3/ose-console",
                "product": "Red Hat OpenShift Container Platform 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4"
                ],
                "defaultStatus": "unaffected",
                "packageName": "openshift4/nmstate-console-plugin-rhel9",
                "product": "Red Hat OpenShift Container Platform 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift4/ose-agent-installer-ui-rhel9",
                "product": "Red Hat OpenShift Container Platform 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4"
                ],
                "defaultStatus": "unaffected",
                "packageName": "openshift4/ose-console",
                "product": "Red Hat OpenShift Container Platform 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4"
                ],
                "defaultStatus": "unaffected",
                "packageName": "openshift4/ose-networking-console-plugin-rhel9",
                "product": "Red Hat OpenShift Container Platform 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4"
                ],
                "defaultStatus": "unaffected",
                "packageName": "odf4/ocs-client-console-rhel9",
                "product": "Red Hat Openshift Data Foundation 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4"
                ],
                "defaultStatus": "unaffected",
                "packageName": "odf4/odf-console-rhel9",
                "product": "Red Hat Openshift Data Foundation 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4"
                ],
                "defaultStatus": "unaffected",
                "packageName": "odf4/odf-multicluster-console-rhel9",
                "product": "Red Hat Openshift Data Foundation 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_distributed_tracing:3"
                ],
                "defaultStatus": "unaffected",
                "packageName": "rhosdt/tempo-jaeger-query-rhel9",
                "product": "Red Hat OpenShift distributed tracing 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_gitops:1"
                ],
                "defaultStatus": "unaffected",
                "packageName": "openshift-gitops-1/console-plugin-rhel8",
                "product": "Red Hat OpenShift GitOps",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_gitops:1"
                ],
                "defaultStatus": "unaffected",
                "packageName": "openshift-gitops-1/console-plugin-rhel9",
                "product": "Red Hat OpenShift GitOps",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:container_native_virtualization:4"
                ],
                "defaultStatus": "unaffected",
                "packageName": "container-native-virtualization/kubevirt-console-plugin",
                "product": "Red Hat OpenShift Virtualization 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:container_native_virtualization:4"
                ],
                "defaultStatus": "unaffected",
                "packageName": "container-native-virtualization/kubevirt-console-plugin-rhel9",
                "product": "Red Hat OpenShift Virtualization 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:jboss_enterprise_bpms_platform:7"
                ],
                "defaultStatus": "unaffected",
                "packageName": "follow-redirects",
                "product": "Red Hat Process Automation 7",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:satellite:6"
                ],
                "defaultStatus": "unaffected",
                "packageName": "satellite/iop-advisor-frontend-rhel9",
                "product": "Red Hat Satellite 6",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:satellite:6"
                ],
                "defaultStatus": "unaffected",
                "packageName": "satellite/iop-host-inventory-frontend-rhel9",
                "product": "Red Hat Satellite 6",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:satellite:6"
                ],
                "defaultStatus": "unaffected",
                "packageName": "satellite/iop-vulnerability-frontend-rhel9",
                "product": "Red Hat Satellite 6",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:trusted_artifact_signer:1"
                ],
                "defaultStatus": "unaffected",
                "packageName": "rhtas/rhtas-console-ui-rhel9",
                "product": "Red Hat Trusted Artifact Signer",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:trusted_profile_analyzer:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "rhtpa/rhtpa-trustification-service-rhel9",
                "product": "Red Hat Trusted Profile Analyzer",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_portal:2"
                ],
                "defaultStatus": "affected",
                "packageName": "ansible-automation-platform/automation-portal",
                "product": "Self-service automation portal 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:amq_streams:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "follow-redirects",
                "product": "streams for Apache Kafka 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:amq_streams:3"
                ],
                "defaultStatus": "unaffected",
                "packageName": "follow-redirects",
                "product": "streams for Apache Kafka 3",
                "vendor": "Red Hat"
              }
            ],
            "datePublic": "2026-04-21T19:59:59.759Z",
            "descriptions": [
              {
                "lang": "en",
                "value": "A flaw was found in follow-redirects. When an HTTP request follows a cross-domain redirect (a redirection to a different domain), custom authentication headers, such as X-API-Key or X-Auth-Token, are not properly stripped. This allows these sensitive headers to be forwarded verbatim to the redirect target, potentially leading to the unintended disclosure of authentication information to an untrusted third party."
              }
            ],
            "metrics": [
              {
                "other": {
                  "content": {
                    "namespace": "https://access.redhat.com/security/updates/classification/",
                    "value": "Important"
                  },
                  "type": "Red Hat severity rating"
                }
              },
              {
                "cvssV3_1": {
                  "attackComplexity": "LOW",
                  "attackVector": "NETWORK",
                  "availabilityImpact": "NONE",
                  "baseScore": 7.5,
                  "baseSeverity": "HIGH",
                  "confidentialityImpact": "HIGH",
                  "integrityImpact": "NONE",
                  "privilegesRequired": "NONE",
                  "scope": "UNCHANGED",
                  "userInteraction": "NONE",
                  "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
                  "version": "3.1"
                },
                "format": "CVSS"
              }
            ],
            "problemTypes": [
              {
                "descriptions": [
                  {
                    "cweId": "CWE-212",
                    "description": "Improper Removal of Sensitive Information Before Storage or Transfer",
                    "lang": "en",
                    "type": "CWE"
                  }
                ]
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-09-10T12:05:07.783Z",
              "orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
              "shortName": "redhat-SADP"
            },
            "references": [
              {
                "tags": [
                  "vdb-entry",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/security/cve/CVE-2026-40895"
              },
              {
                "name": "RHBZ#2460297",
                "tags": [
                  "issue-tracking",
                  "x_refsource_REDHAT"
                ],
                "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2460297"
              },
              {
                "tags": [
                  "x_sadp-csaf-vex"
                ],
                "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-40895.json"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:17789"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:26010"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:16874"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:36882"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:24539"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:25273"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:20938"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:20889"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:24766"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:21338"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:13826"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:14937"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:41928"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:50300"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:24977"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:65126"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:19712"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:47728"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:48699"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:44235"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:27004"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:44263"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:27063"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:44267"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:27044"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:40768"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:21772"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:16476"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:16534"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:16532"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:16535"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:16542"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:22840"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:22629"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:21017"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:24853"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:19375"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:22465"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:23361"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:25271"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:24536"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:17657"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:17699"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:19109"
              }
            ],
            "solutions": [
              {
                "lang": "en",
                "value": "RHSA-2026:17789: Cryostat 4 on RHEL 9"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:26010: Cluster Observability Operator 1.5.0"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:16874: Network Observability (NETOBSERV) 1.11.0"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:36882: Red Hat Advanced Cluster Management for Kubernetes 2.14"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:24539: Red Hat Advanced Cluster Management for Kubernetes 2.15"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:25273: Red Hat Advanced Cluster Management for Kubernetes 2.16"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:20938: Red Hat Advanced Cluster Security 4.9"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:20889: Red Hat Advanced Cluster Security for Kubernetes 4.10"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:24766: Red Hat Ansible Automation Platform 2.5"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:21338: Red Hat Developer Hub 1.8"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:13826: Red Hat Developer Hub 1.9"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:14937: Red Hat Discovery 2"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:41928: Red Hat Migration Toolkit 1.8"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:50300: Red Hat Migration Toolkit for Applications 8.1"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:24977: Red Hat OpenShift AI 2.25"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:65126: Red Hat OpenShift AI 2.25"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:19712: Red Hat OpenShift AI 3.3"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:47728: Red Hat OpenShift Container Platform 4.17"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:48699: Red Hat OpenShift Container Platform 4.18"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:44235: Red Hat OpenShift Container Platform 4.19"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:27004: Red Hat OpenShift Container Platform 4.19"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:44263: Red Hat OpenShift Container Platform 4.20"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:27063: Red Hat OpenShift Container Platform 4.20"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:44267: Red Hat OpenShift Container Platform 4.21"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:27044: Red Hat OpenShift Container Platform 4.21"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:40768: Red Hat OpenShift Container Platform 4.22"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:21772: Red Hat OpenShift Dev Spaces 3.28"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:16476: Red Hat OpenShift Service Mesh 2.6"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:16534: Red Hat OpenShift Service Mesh 3.0"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:16532: Red Hat OpenShift Service Mesh 3.1"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:16535: Red Hat OpenShift Service Mesh 3.2"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:16542: Red Hat OpenShift Service Mesh 3.3"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:22840: Red Hat Quay 3.10"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:22629: Red Hat Quay 3.12"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:21017: Red Hat Quay 3.14"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:24853: Red Hat Quay 3.15"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:19375: Red Hat Quay 3.16"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:22465: Red Hat Quay 3.17"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:23361: Red Hat Quay 3.9"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:25271: multicluster engine for Kubernetes 2.11"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:24536: multicluster engine for Kubernetes 2.1"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:17657: multicluster engine for Kubernetes 2.6"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:17699: multicluster engine for Kubernetes 2.8"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:19109: multicluster engine for Kubernetes 2.9"
              }
            ],
            "timeline": [
              {
                "lang": "en",
                "time": "2026-04-21T21:02:33.280Z",
                "value": "Reported to Red Hat."
              },
              {
                "lang": "en",
                "time": "2026-04-21T19:59:59.759Z",
                "value": "Made public."
              }
            ],
            "title": "follow-redirects: follow-redirects: Information disclosure via cross-domain redirects",
            "workarounds": [
              {
                "lang": "en",
                "value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
              }
            ],
            "x_adpType": "supplier",
            "x_generator": {
              "engine": "sadp-cli 1.0.0"
            }
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "follow-redirects",
              "vendor": "follow-redirects",
              "versions": [
                {
                  "status": "affected",
                  "version": "\u003c 1.16.0"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "follow-redirects is an open source, drop-in replacement for Node\u0027s `http` and `https` modules that automatically follows redirects. Prior to 1.16.0, when an HTTP request follows a cross-domain redirect (301/302/307/308), follow-redirects only strips authorization, proxy-authorization, and cookie headers (matched by regex at index.js). Any custom authentication header (e.g., X-API-Key, X-Auth-Token, Api-Key, Token) is forwarded verbatim to the redirect target. This vulnerability is fixed in 1.16.0."
            }
          ],
          "metrics": [
            {
              "cvssV4_0": {
                "attackComplexity": "LOW",
                "attackRequirements": "NONE",
                "attackVector": "NETWORK",
                "baseScore": 6.9,
                "baseSeverity": "MEDIUM",
                "privilegesRequired": "NONE",
                "subAvailabilityImpact": "NONE",
                "subConfidentialityImpact": "NONE",
                "subIntegrityImpact": "NONE",
                "userInteraction": "NONE",
                "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
                "version": "4.0",
                "vulnAvailabilityImpact": "NONE",
                "vulnConfidentialityImpact": "LOW",
                "vulnIntegrityImpact": "NONE"
              }
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-200",
                  "description": "CWE-200: Exposure of Sensitive Information to an Unauthorized Actor",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-04-21T19:59:59.759Z",
            "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
            "shortName": "GitHub_M"
          },
          "references": [
            {
              "name": "https://github.com/follow-redirects/follow-redirects/security/advisories/GHSA-r4q5-vmmm-2653",
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "https://github.com/follow-redirects/follow-redirects/security/advisories/GHSA-r4q5-vmmm-2653"
            }
          ],
          "source": {
            "advisory": "GHSA-r4q5-vmmm-2653",
            "discovery": "UNKNOWN"
          },
          "title": "follow-redirects: Custom Authentication Headers Leaked to Cross-Domain Redirect Targets"
        }
      },
      "cveMetadata": {
        "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "assignerShortName": "GitHub_M",
        "cveId": "CVE-2026-40895",
        "datePublished": "2026-04-21T19:59:59.759Z",
        "dateReserved": "2026-04-15T16:37:22.766Z",
        "dateUpdated": "2026-09-10T12:05:07.783Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2026-40192 (GCVE-0-2026-40192)

    Vulnerability from nvd – Published: 2026-04-15 22:53 – Updated: 2026-09-10 12:04
    VLAI
    Title
    Pillow is vulnerable to a FITS GZIP decompression bomb
    Summary
    Pillow is a Python imaging library. Versions 10.3.0 through 12.1.1 did not limit the amount of GZIP-compressed data read when decoding a FITS image, making them vulnerable to decompression bomb attacks. A specially crafted FITS file could cause unbounded memory consumption, leading to denial of service (OOM crash or severe performance degradation). If users are unable to immediately upgrade, they should only open specific image formats, excluding FITS, as a workaround.
    SSVC
    Exploitation: none Automatable: yes Technical Impact: partial
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-04-16 13:37 UTC
    CWE
    • CWE-770 - Allocation of Resources Without Limits or Throttling
    • CWE-400 - Uncontrolled Resource Consumption
    • CWE-409 - Improper Handling of Highly Compressed Data (Data Amplification)
    References
    URL Tags
    https://github.com/python-pillow/Pillow/security/… x_refsource_CONFIRM
    https://github.com/python-pillow/Pillow/pull/9521 x_refsource_MISC
    https://github.com/python-pillow/Pillow/commit/3c… x_refsource_MISC
    https://pillow.readthedocs.io/en/stable/releaseno… x_refsource_MISC
    https://access.redhat.com/security/cve/CVE-2026-40192 vdb-entryx_refsource_REDHAT
    https://bugzilla.redhat.com/show_bug.cgi?id=2458856 issue-trackingx_refsource_REDHAT
    https://security.access.redhat.com/data/csaf/v2/v… x_sadp-csaf-vex
    https://access.redhat.com/errata/RHSA-2026:24761 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:27076 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:24762 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:34366 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:34368 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:34365 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:61628 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:61627 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:61629 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:16008 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:16030 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:16009 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:16174 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:57387 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:24866 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:17611 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:17609 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:24977 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:65126 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:19712 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:37275 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:22840 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:22629 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:21017 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:24853 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:19375 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:22465 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:23361 vendor-advisoryx_refsource_REDHAT
    Impacted products
    Vendor Product Version
    python-pillow Pillow Affected: >= 10.3.0, < 12.2.0
    Create a notification for this product.
    Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 8 Unaffected: 0:12.2.0-1.el8ap , < * (rpm)
        cpe:/a:redhat:ansible_automation_platform:2.5::el8
    Create a notification for this product.
    Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 9 Unaffected: 0:12.2.0-1.el9ap , < * (rpm)
        cpe:/a:redhat:ansible_automation_platform:2.5::el9
    Create a notification for this product.
    Red Hat Red Hat Ansible Automation Platform 2.6 for RHEL 9 Unaffected: 0:12.2.0-1.el9ap , < * (rpm)
        cpe:/a:redhat:ansible_automation_platform:2.6::el9
    Create a notification for this product.
    Red Hat Red Hat Satellite 6.16 for RHEL 8 Unaffected: 0:12.2.0-1.el8pc , < * (rpm)
        cpe:/a:redhat:satellite:6.16::el8
        cpe:/a:redhat:satellite_capsule:6.16::el8
    Create a notification for this product.
    Red Hat Red Hat Satellite 6.16 for RHEL 9 Unaffected: 0:12.2.0-1.el9pc , < * (rpm)
        cpe:/a:redhat:satellite:6.16::el9
        cpe:/a:redhat:satellite_capsule:6.16::el9
    Create a notification for this product.
    Red Hat Red Hat Satellite 6.17 for RHEL 9 Unaffected: 0:12.2.0-1.el9pc , < * (rpm)
        cpe:/a:redhat:satellite:6.17::el9
        cpe:/a:redhat:satellite_capsule:6.17::el9
    Create a notification for this product.
    Red Hat Red Hat Satellite 6.18 for RHEL 9 Unaffected: 0:12.2.0-1.el9pc , < * (rpm)
        cpe:/a:redhat:satellite:6.18::el9
        cpe:/a:redhat:satellite_capsule:6.18::el9
    Create a notification for this product.
    Red Hat Red Hat Satellite 6.19 for RHEL 9 Unaffected: 0:12.2.0-1.el9pc , < * (rpm)
        cpe:/a:redhat:satellite:6.19::el9
        cpe:/a:redhat:satellite_capsule:6.19::el9
    Create a notification for this product.
    Red Hat Red Hat AI Inference Server 3.2 Unaffected: 1787860580 , < * (rpm)
        cpe:/a:redhat:ai_inference_server:3.2::el9
    Create a notification for this product.
    Red Hat Red Hat AI Inference Server 3.2 Unaffected: 1787772157 , < * (rpm)
        cpe:/a:redhat:ai_inference_server:3.2::el9
    Create a notification for this product.
    Red Hat Red Hat AI Inference Server 3.2 Unaffected: 1787884873 , < * (rpm)
        cpe:/a:redhat:ai_inference_server:3.2::el9
    Create a notification for this product.
    Red Hat Red Hat AI Inference Server 3.3 Unaffected: 1778244559 , < * (rpm)
        cpe:/a:redhat:ai_inference_server:3.3::el9
    Create a notification for this product.
    Red Hat Red Hat AI Inference Server 3.3 Unaffected: 1778244531 , < * (rpm)
        cpe:/a:redhat:ai_inference_server:3.3::el9
    Create a notification for this product.
    Red Hat Red Hat AI Inference Server 3.3 Unaffected: 1778274666 , < * (rpm)
        cpe:/a:redhat:ai_inference_server:3.3::el9
    Create a notification for this product.
    Red Hat Red Hat AI Inference Server 3.3 Unaffected: 1778244546 , < * (rpm)
        cpe:/a:redhat:ai_inference_server:3.3::el9
    Create a notification for this product.
    Red Hat Red Hat AI Inference Server 3.4 Unaffected: 1787151840 , < * (rpm)
        cpe:/a:redhat:ai_inference_server:3.4::el9
    Create a notification for this product.
    Red Hat Red Hat Ansible Automation Platform 2.6 Unaffected: 1779761061 , < * (rpm)
        cpe:/a:redhat:ansible_automation_platform:2.6::el9
    Create a notification for this product.
    Red Hat Red Hat Ansible Automation Platform 2.6 Unaffected: 1780102732 , < * (rpm)
        cpe:/a:redhat:ansible_automation_platform:2.6::el9
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux AI 3.3 Unaffected: 1778690639 , < * (rpm)
        cpe:/a:redhat:enterprise_linux_ai:3.3::el9
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux AI 3.3 Unaffected: 1778677633 , < * (rpm)
        cpe:/a:redhat:enterprise_linux_ai:3.3::el9
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux AI 3.3 Unaffected: 1778677632 , < * (rpm)
        cpe:/a:redhat:enterprise_linux_ai:3.3::el9
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux AI 3.3 Unaffected: 1778677745 , < * (rpm)
        cpe:/a:redhat:enterprise_linux_ai:3.3::el9
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux AI 3.3 Unaffected: 1778666122 , < * (rpm)
        cpe:/a:redhat:enterprise_linux_ai:3.3::el9
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux AI 3.3 Unaffected: 1778666124 , < * (rpm)
        cpe:/a:redhat:enterprise_linux_ai:3.3::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 2.25 Unaffected: 1780388133 , < * (rpm)
        cpe:/a:redhat:openshift_ai:2.25::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 2.25 Unaffected: 1786711151 , < * (rpm)
        cpe:/a:redhat:openshift_ai:2.25::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 3.3 Unaffected: 1778677779 , < * (rpm)
        cpe:/a:redhat:openshift_ai:3.3::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 3.3 Unaffected: 1778677692 , < * (rpm)
        cpe:/a:redhat:openshift_ai:3.3::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 3.3 Unaffected: 1778262893 , < * (rpm)
        cpe:/a:redhat:openshift_ai:3.3::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 3.3 Unaffected: 1778677701 , < * (rpm)
        cpe:/a:redhat:openshift_ai:3.3::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 3.3 Unaffected: 1778677741 , < * (rpm)
        cpe:/a:redhat:openshift_ai:3.3::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 3.3 Unaffected: 1778677767 , < * (rpm)
        cpe:/a:redhat:openshift_ai:3.3::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 3.3 Unaffected: 1779123334 , < * (rpm)
        cpe:/a:redhat:openshift_ai:3.3::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 3.3 Unaffected: 1778263128 , < * (rpm)
        cpe:/a:redhat:openshift_ai:3.3::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 3.3 Unaffected: 1778782933 , < * (rpm)
        cpe:/a:redhat:openshift_ai:3.3::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 3.3 Unaffected: 1778677718 , < * (rpm)
        cpe:/a:redhat:openshift_ai:3.3::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 3.3 Unaffected: 1778677716 , < * (rpm)
        cpe:/a:redhat:openshift_ai:3.3::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 3.3 Unaffected: 1778263054 , < * (rpm)
        cpe:/a:redhat:openshift_ai:3.3::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 3.3 Unaffected: 1778677734 , < * (rpm)
        cpe:/a:redhat:openshift_ai:3.3::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 3.3 Unaffected: 1778677667 , < * (rpm)
        cpe:/a:redhat:openshift_ai:3.3::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 3.3 Unaffected: 1778677717 , < * (rpm)
        cpe:/a:redhat:openshift_ai:3.3::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 3.3 Unaffected: 1778677722 , < * (rpm)
        cpe:/a:redhat:openshift_ai:3.3::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 3.3 Unaffected: 1782472374 , < * (rpm)
        cpe:/a:redhat:openshift_ai:3.3::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 3.3 Unaffected: 1782471606 , < * (rpm)
        cpe:/a:redhat:openshift_ai:3.3::el9
    Create a notification for this product.
    Red Hat Red Hat Quay 3.10 Unaffected: 1779822261 , < * (rpm)
        cpe:/a:redhat:quay:3.10::el8
    Create a notification for this product.
    Red Hat Red Hat Quay 3.12 Unaffected: 1779811412 , < * (rpm)
        cpe:/a:redhat:quay:3.12::el8
    Create a notification for this product.
    Red Hat Red Hat Quay 3.14 Unaffected: 1779689392 , < * (rpm)
        cpe:/a:redhat:quay:3.14::el8
    Create a notification for this product.
    Red Hat Red Hat Quay 3.15 Unaffected: 1780891395 , < * (rpm)
        cpe:/a:redhat:quay:3.15::el8
    Create a notification for this product.
    Red Hat Red Hat Quay 3.16 Unaffected: 1779204086 , < * (rpm)
        cpe:/a:redhat:quay:3.16::el9
    Create a notification for this product.
    Red Hat Red Hat Quay 3.17 Unaffected: 1779922205 , < * (rpm)
        cpe:/a:redhat:quay:3.17::el9
    Create a notification for this product.
    Red Hat Red Hat Quay 3.9 Unaffected: 1779811473 , < * (rpm)
        cpe:/a:redhat:quay:3.9::el8
    Create a notification for this product.
    Red Hat Lightspeed Core     cpe:/a:redhat:lightspeed_core
    Create a notification for this product.
    Red Hat OpenShift Lightspeed     cpe:/a:redhat:openshift_lightspeed
    Create a notification for this product.
    Red Hat Red Hat AI Inference Server     cpe:/a:redhat:ai_inference_server:3
    Create a notification for this product.
    Red Hat Red Hat Ansible Automation Platform 2     cpe:/a:redhat:ansible_automation_platform:2
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 7     cpe:/o:redhat:enterprise_linux:7
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 8     cpe:/o:redhat:enterprise_linux:8
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI (RHOAI)     cpe:/a:redhat:openshift_ai
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-40192",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "yes"
                      },
                      {
                        "Technical Impact": "partial"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-04-16T13:37:11.864898Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-04-16T13:37:19.918Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          },
          {
            "affected": [
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2.5::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "python3.12-pillow",
                "product": "Red Hat Ansible Automation Platform 2.5 for RHEL 8",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:12.2.0-1.el8ap",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2.5::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "python3.12-pillow",
                "product": "Red Hat Ansible Automation Platform 2.5 for RHEL 9",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:12.2.0-1.el9ap",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2.6::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "python3.12-pillow",
                "product": "Red Hat Ansible Automation Platform 2.6 for RHEL 9",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:12.2.0-1.el9ap",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:satellite:6.16::el8",
                  "cpe:/a:redhat:satellite_capsule:6.16::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "python-pillow",
                "product": "Red Hat Satellite 6.16 for RHEL 8",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:12.2.0-1.el8pc",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:satellite:6.16::el9",
                  "cpe:/a:redhat:satellite_capsule:6.16::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "python-pillow",
                "product": "Red Hat Satellite 6.16 for RHEL 9",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:12.2.0-1.el9pc",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:satellite:6.17::el9",
                  "cpe:/a:redhat:satellite_capsule:6.17::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "python-pillow",
                "product": "Red Hat Satellite 6.17 for RHEL 9",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:12.2.0-1.el9pc",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:satellite:6.18::el9",
                  "cpe:/a:redhat:satellite_capsule:6.18::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "python3.12-pillow",
                "product": "Red Hat Satellite 6.18 for RHEL 9",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:12.2.0-1.el9pc",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:satellite:6.19::el9",
                  "cpe:/a:redhat:satellite_capsule:6.19::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "python3.12-pillow",
                "product": "Red Hat Satellite 6.19 for RHEL 9",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:12.2.0-1.el9pc",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:ai_inference_server:3.2::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhaiis/vllm-cuda-rhel9",
                "product": "Red Hat AI Inference Server 3.2",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1787860580",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:ai_inference_server:3.2::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhaiis/model-opt-cuda-rhel9",
                "product": "Red Hat AI Inference Server 3.2",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1787772157",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:ai_inference_server:3.2::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhaiis/vllm-rocm-rhel9",
                "product": "Red Hat AI Inference Server 3.2",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1787884873",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:ai_inference_server:3.3::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhaiis/model-opt-cuda-rhel9",
                "product": "Red Hat AI Inference Server 3.3",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778244559",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:ai_inference_server:3.3::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhaiis/vllm-rocm-rhel9",
                "product": "Red Hat AI Inference Server 3.3",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778244531",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:ai_inference_server:3.3::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhaiis/vllm-cuda-rhel9",
                "product": "Red Hat AI Inference Server 3.3",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778274666",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:ai_inference_server:3.3::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhaiis/vllm-spyre-rhel9",
                "product": "Red Hat AI Inference Server 3.3",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778244546",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:ai_inference_server:3.4::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhaii/vllm-spyre-rhel9",
                "product": "Red Hat AI Inference Server 3.4",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1787151840",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2.6::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "ansible-automation-platform-26/hub-rhel9",
                "product": "Red Hat Ansible Automation Platform 2.6",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779761061",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2.6::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "ansible-automation-platform-26/lightspeed-chatbot-rhel9",
                "product": "Red Hat Ansible Automation Platform 2.6",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1780102732",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:enterprise_linux_ai:3.3::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhelai3/disk-image-cuda-rhel9",
                "product": "Red Hat Enterprise Linux AI 3.3",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778690639",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:enterprise_linux_ai:3.3::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhelai3/bootc-aws-cuda-rhel9",
                "product": "Red Hat Enterprise Linux AI 3.3",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778677633",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:enterprise_linux_ai:3.3::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhelai3/bootc-azure-cuda-rhel9",
                "product": "Red Hat Enterprise Linux AI 3.3",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778677632",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:enterprise_linux_ai:3.3::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhelai3/bootc-azure-rocm-rhel9",
                "product": "Red Hat Enterprise Linux AI 3.3",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778677745",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:enterprise_linux_ai:3.3::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhelai3/bootc-cuda-rhel9",
                "product": "Red Hat Enterprise Linux AI 3.3",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778666122",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:enterprise_linux_ai:3.3::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhelai3/bootc-gcp-cuda-rhel9",
                "product": "Red Hat Enterprise Linux AI 3.3",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778677632",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:enterprise_linux_ai:3.3::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhelai3/bootc-rocm-rhel9",
                "product": "Red Hat Enterprise Linux AI 3.3",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778666124",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:2.25::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-caikit-tgis-serving-rhel9",
                "product": "Red Hat OpenShift AI 2.25",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1780388133",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:2.25::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-vllm-rocm-rhel9",
                "product": "Red Hat OpenShift AI 2.25",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786711151",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:3.3::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9",
                "product": "Red Hat OpenShift AI 3.3",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778677779",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:3.3::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-pipeline-runtime-pytorch-cuda-py312-rhel9",
                "product": "Red Hat OpenShift AI 3.3",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778677692",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:3.3::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-pipeline-runtime-pytorch-llmcompressor-cuda-py312-rhel9",
                "product": "Red Hat OpenShift AI 3.3",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778262893",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:3.3::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-pipeline-runtime-pytorch-rocm-py312-rhel9",
                "product": "Red Hat OpenShift AI 3.3",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778677701",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:3.3::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-pipeline-runtime-tensorflow-cuda-py312-rhel9",
                "product": "Red Hat OpenShift AI 3.3",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778677741",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:3.3::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-pipeline-runtime-tensorflow-rocm-py312-rhel9",
                "product": "Red Hat OpenShift AI 3.3",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778677767",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:3.3::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-training-cuda128-torch29-py312-rhel9",
                "product": "Red Hat OpenShift AI 3.3",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779123334",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:3.3::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-training-rocm64-torch29-py312-rhel9",
                "product": "Red Hat OpenShift AI 3.3",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778263128",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:3.3::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9",
                "product": "Red Hat OpenShift AI 3.3",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778782933",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:3.3::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-workbench-jupyter-datascience-cpu-py312-rhel9",
                "product": "Red Hat OpenShift AI 3.3",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778677718",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:3.3::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-workbench-jupyter-pytorch-cuda-py312-rhel9",
                "product": "Red Hat OpenShift AI 3.3",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778677716",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:3.3::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-workbench-jupyter-pytorch-llmcompressor-cuda-py312-rhel9",
                "product": "Red Hat OpenShift AI 3.3",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778263054",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:3.3::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-workbench-jupyter-pytorch-rocm-py312-rhel9",
                "product": "Red Hat OpenShift AI 3.3",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778677734",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:3.3::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-workbench-jupyter-tensorflow-cuda-py312-rhel9",
                "product": "Red Hat OpenShift AI 3.3",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778677667",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:3.3::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-workbench-jupyter-tensorflow-rocm-py312-rhel9",
                "product": "Red Hat OpenShift AI 3.3",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778677717",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:3.3::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-workbench-jupyter-trustyai-cpu-py312-rhel9",
                "product": "Red Hat OpenShift AI 3.3",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778677722",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:3.3::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-trustyai-garak-lls-provider-dsp-rhel9",
                "product": "Red Hat OpenShift AI 3.3",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782472374",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:3.3::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-trustyai-nemo-guardrails-server-rhel9",
                "product": "Red Hat OpenShift AI 3.3",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782471606",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.10::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel8",
                "product": "Red Hat Quay 3.10",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779822261",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.12::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel8",
                "product": "Red Hat Quay 3.12",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779811412",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.14::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel8",
                "product": "Red Hat Quay 3.14",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779689392",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.15::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel8",
                "product": "Red Hat Quay 3.15",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1780891395",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.16::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel9",
                "product": "Red Hat Quay 3.16",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779204086",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.17::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel9",
                "product": "Red Hat Quay 3.17",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779922205",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.9::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel8",
                "product": "Red Hat Quay 3.9",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779811473",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:lightspeed_core"
                ],
                "defaultStatus": "affected",
                "packageName": "lightspeed-core/rag-tool-rhel9",
                "product": "Lightspeed Core",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_lightspeed"
                ],
                "defaultStatus": "unaffected",
                "packageName": "openshift-lightspeed/lightspeed-ocp-rag-rhel9",
                "product": "OpenShift Lightspeed",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_lightspeed"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-lightspeed/lightspeed-service-api-rhel9",
                "product": "OpenShift Lightspeed",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_lightspeed"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-lightspeed-tech-preview/lightspeed-rag-tool-rhel9",
                "product": "OpenShift Lightspeed",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ai_inference_server:3"
                ],
                "defaultStatus": "affected",
                "packageName": "rhaiis/vllm-cpu-rhel9",
                "product": "Red Hat AI Inference Server",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ai_inference_server:3"
                ],
                "defaultStatus": "affected",
                "packageName": "rhaiis/vllm-neuron-rhel9",
                "product": "Red Hat AI Inference Server",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ai_inference_server:3"
                ],
                "defaultStatus": "affected",
                "packageName": "rhaiis/vllm-tpu-rhel9",
                "product": "Red Hat AI Inference Server",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "affected",
                "packageName": "ansible-automation-platform-25/lightspeed-chatbot-rhel8",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "python-pillow",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:7"
                ],
                "defaultStatus": "unknown",
                "packageName": "python-pillow",
                "product": "Red Hat Enterprise Linux 7",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:8"
                ],
                "defaultStatus": "affected",
                "packageName": "python-pillow",
                "product": "Red Hat Enterprise Linux 8",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "unaffected",
                "packageName": "rhoai/odh-caikit-nlp-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "unaffected",
                "packageName": "rhoai/odh-kserve-agent-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "unaffected",
                "packageName": "rhoai/odh-kserve-controller-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "unaffected",
                "packageName": "rhoai/odh-kserve-router-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "unaffected",
                "packageName": "rhoai/odh-kserve-storage-initializer-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-llama-stack-core-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-llm-d-inference-scheduler-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "unaffected",
                "packageName": "rhoai/odh-mlflow-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-openvino-model-server-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-vllm-cuda-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-vllm-gaudi-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              }
            ],
            "datePublic": "2026-04-15T22:53:56.147Z",
            "descriptions": [
              {
                "lang": "en",
                "value": "A flaw was found in Pillow, a Python imaging library. This vulnerability allows a remote attacker to trigger a denial of service (DoS) by providing a specially crafted FITS image file. The library\u0027s failure to limit the amount of GZIP-compressed data during decoding can lead to unbounded memory consumption, causing the system to crash or experience severe performance issues."
              }
            ],
            "metrics": [
              {
                "other": {
                  "content": {
                    "namespace": "https://access.redhat.com/security/updates/classification/",
                    "value": "Important"
                  },
                  "type": "Red Hat severity rating"
                }
              },
              {
                "cvssV3_1": {
                  "attackComplexity": "LOW",
                  "attackVector": "NETWORK",
                  "availabilityImpact": "HIGH",
                  "baseScore": 7.5,
                  "baseSeverity": "HIGH",
                  "confidentialityImpact": "NONE",
                  "integrityImpact": "NONE",
                  "privilegesRequired": "NONE",
                  "scope": "UNCHANGED",
                  "userInteraction": "NONE",
                  "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "version": "3.1"
                },
                "format": "CVSS"
              }
            ],
            "problemTypes": [
              {
                "descriptions": [
                  {
                    "cweId": "CWE-409",
                    "description": "Improper Handling of Highly Compressed Data (Data Amplification)",
                    "lang": "en",
                    "type": "CWE"
                  }
                ]
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-09-10T12:04:47.474Z",
              "orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
              "shortName": "redhat-SADP"
            },
            "references": [
              {
                "tags": [
                  "vdb-entry",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/security/cve/CVE-2026-40192"
              },
              {
                "name": "RHBZ#2458856",
                "tags": [
                  "issue-tracking",
                  "x_refsource_REDHAT"
                ],
                "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2458856"
              },
              {
                "tags": [
                  "x_sadp-csaf-vex"
                ],
                "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-40192.json"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:24761"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:27076"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:24762"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:34366"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:34368"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:34365"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:61628"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:61627"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:61629"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:16008"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:16030"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:16009"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:16174"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:57387"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:24866"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:17611"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:17609"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:24977"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:65126"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:19712"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:37275"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:22840"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:22629"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:21017"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:24853"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:19375"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:22465"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:23361"
              }
            ],
            "solutions": [
              {
                "lang": "en",
                "value": "RHSA-2026:24761: Red Hat Ansible Automation Platform 2.5 for RHEL 8, Red Hat Ansible Automation Platform 2.5 for RHEL 9"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:27076: Red Hat Satellite 6.16 for RHEL 8, Red Hat Satellite 6.16 for RHEL 9"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:24762: Red Hat Ansible Automation Platform 2.6 for RHEL 9"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:34366: Red Hat Satellite 6.17 for RHEL 9"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:34368: Red Hat Satellite 6.18 for RHEL 9"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:34365: Red Hat Satellite 6.19 for RHEL 9"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:61628: Red Hat AI Inference Server 3.2"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:61627: Red Hat AI Inference Server 3.2"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:61629: Red Hat AI Inference Server 3.2"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:16008: Red Hat AI Inference Server 3.3"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:16030: Red Hat AI Inference Server 3.3"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:16009: Red Hat AI Inference Server 3.3"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:16174: Red Hat AI Inference Server 3.3"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:57387: Red Hat AI Inference Server 3.4"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:24866: Red Hat Ansible Automation Platform 2.6"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:17611: Red Hat Enterprise Linux AI 3.3"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:17609: Red Hat Enterprise Linux AI 3.3"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:24977: Red Hat OpenShift AI 2.25"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:65126: Red Hat OpenShift AI 2.25"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:19712: Red Hat OpenShift AI 3.3"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:37275: Red Hat OpenShift AI 3.3"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:22840: Red Hat Quay 3.10"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:22629: Red Hat Quay 3.12"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:21017: Red Hat Quay 3.14"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:24853: Red Hat Quay 3.15"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:19375: Red Hat Quay 3.16"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:22465: Red Hat Quay 3.17"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:23361: Red Hat Quay 3.9"
              }
            ],
            "timeline": [
              {
                "lang": "en",
                "time": "2026-04-16T00:00:49.590Z",
                "value": "Reported to Red Hat."
              },
              {
                "lang": "en",
                "time": "2026-04-15T22:53:56.147Z",
                "value": "Made public."
              }
            ],
            "title": "Pillow: Pillow: Denial of Service via decompression bomb in FITS image processing",
            "workarounds": [
              {
                "lang": "en",
                "value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."
              }
            ],
            "x_adpType": "supplier",
            "x_generator": {
              "engine": "sadp-cli 1.0.0"
            }
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "Pillow",
              "vendor": "python-pillow",
              "versions": [
                {
                  "status": "affected",
                  "version": "\u003e= 10.3.0, \u003c 12.2.0"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "Pillow is a Python imaging library. Versions 10.3.0 through 12.1.1 did not limit the amount of GZIP-compressed data read when decoding a FITS image, making them vulnerable to decompression bomb attacks. A specially crafted FITS file could cause unbounded memory consumption, leading to denial of service (OOM crash or severe performance degradation). If users are unable to immediately upgrade, they should only open specific image formats, excluding FITS, as a workaround."
            }
          ],
          "metrics": [
            {
              "cvssV4_0": {
                "attackComplexity": "LOW",
                "attackRequirements": "NONE",
                "attackVector": "NETWORK",
                "baseScore": 8.7,
                "baseSeverity": "HIGH",
                "privilegesRequired": "NONE",
                "subAvailabilityImpact": "NONE",
                "subConfidentialityImpact": "NONE",
                "subIntegrityImpact": "NONE",
                "userInteraction": "NONE",
                "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
                "version": "4.0",
                "vulnAvailabilityImpact": "HIGH",
                "vulnConfidentialityImpact": "NONE",
                "vulnIntegrityImpact": "NONE"
              }
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-770",
                  "description": "CWE-770: Allocation of Resources Without Limits or Throttling",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            },
            {
              "descriptions": [
                {
                  "cweId": "CWE-400",
                  "description": "CWE-400: Uncontrolled Resource Consumption",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-04-15T22:53:56.147Z",
            "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
            "shortName": "GitHub_M"
          },
          "references": [
            {
              "name": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-whj4-6x5x-4v2j",
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-whj4-6x5x-4v2j"
            },
            {
              "name": "https://github.com/python-pillow/Pillow/pull/9521",
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "https://github.com/python-pillow/Pillow/pull/9521"
            },
            {
              "name": "https://github.com/python-pillow/Pillow/commit/3cb854e8b2bab43f40e342e665f9340d861aa628",
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "https://github.com/python-pillow/Pillow/commit/3cb854e8b2bab43f40e342e665f9340d861aa628"
            },
            {
              "name": "https://pillow.readthedocs.io/en/stable/releasenotes/12.2.0.html#prevent-fits-decompression-bomb",
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "https://pillow.readthedocs.io/en/stable/releasenotes/12.2.0.html#prevent-fits-decompression-bomb"
            }
          ],
          "source": {
            "advisory": "GHSA-whj4-6x5x-4v2j",
            "discovery": "UNKNOWN"
          },
          "title": "Pillow is vulnerable to a FITS GZIP decompression bomb"
        }
      },
      "cveMetadata": {
        "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "assignerShortName": "GitHub_M",
        "cveId": "CVE-2026-40192",
        "datePublished": "2026-04-15T22:53:56.147Z",
        "dateReserved": "2026-04-09T20:59:17.620Z",
        "dateUpdated": "2026-09-10T12:04:47.474Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2025-62718 (GCVE-0-2025-62718)

    Vulnerability from nvd – Published: 2026-04-09 14:31 – Updated: 2026-09-10 12:04
    VLAI
    Title
    Axios has a NO_PROXY Hostname Normalization Bypass that Leads to SSRF
    Summary
    Axios is a promise based HTTP client for the browser and Node.js. Prior to 1.15.0 and 0.31.0, Axios does not correctly handle hostname normalization when checking NO_PROXY rules. Requests to loopback addresses like localhost. (with a trailing dot) or [::1] (IPv6 literal) skip NO_PROXY matching and go through the configured proxy. This goes against what developers expect and lets attackers force requests through a proxy, even if NO_PROXY is set up to protect loopback or internal services. This issue leads to the possibility of proxy bypass and SSRF vulnerabilities allowing attackers to reach sensitive loopback or internal services despite the configured protections. This vulnerability is fixed in 1.15.0 and 0.31.0.
    SSVC
    Exploitation: poc Automatable: yes Technical Impact: partial
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-04-09 15:02 UTC
    CWE
    • CWE-441 - Unintended Proxy or Intermediary ('Confused Deputy')
    • CWE-918 - Server-Side Request Forgery (SSRF)
    • CWE-1289 - Improper Validation of Unsafe Equivalence in Input
    References
    URL Tags
    https://github.com/axios/axios/security/advisorie… x_refsource_CONFIRM
    https://github.com/axios/axios/pull/10661 x_refsource_MISC
    https://github.com/axios/axios/pull/10688 x_refsource_MISC
    https://github.com/axios/axios/commit/03cdfc99e8d… x_refsource_MISC
    https://github.com/axios/axios/commit/fb3befb6daa… x_refsource_MISC
    https://datatracker.ietf.org/doc/html/rfc1034#sec… x_refsource_MISC
    https://datatracker.ietf.org/doc/html/rfc3986#sec… x_refsource_MISC
    https://github.com/axios/axios/releases/tag/v0.31.0 x_refsource_MISC
    https://github.com/axios/axios/releases/tag/v1.15.0 x_refsource_MISC
    https://access.redhat.com/security/cve/CVE-2025-62718 vdb-entryx_refsource_REDHAT
    https://bugzilla.redhat.com/show_bug.cgi?id=2456913 issue-trackingx_refsource_REDHAT
    https://security.access.redhat.com/data/csaf/v2/v… x_sadp-csaf-vex
    https://access.redhat.com/errata/RHSA-2026:24761 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:26010 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:16874 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:36882 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:20938 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:20889 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:24766 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:59155 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:24866 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:9742 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:13826 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:14937 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:41928 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:24977 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:19712 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:10175 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:8483 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:8484 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:8490 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:8491 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:8493 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:22840 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:22629 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:21017 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:24853 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:19375 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:22465 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:23361 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:24471 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:13571 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:17657 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:17699 vendor-advisoryx_refsource_REDHAT
    Impacted products
    Vendor Product Version
    axios axios Affected: >= 1.0.0, < 1.15.0
    Affected: < 0.31.0
    Create a notification for this product.
    Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 8 Unaffected: 0:2.5.20260422-3.el8ap , < * (rpm)
        cpe:/a:redhat:ansible_automation_platform:2.5::el8
    Create a notification for this product.
    Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 9 Unaffected: 0:2.5.20260422-3.el9ap , < * (rpm)
        cpe:/a:redhat:ansible_automation_platform:2.5::el9
    Create a notification for this product.
    Red Hat Streams for Apache Kafka 3.2.0     cpe:/a:redhat:amq_streams:3.2::el9
    Create a notification for this product.
    Red Hat Cluster Observability Operator 1.5.0 Unaffected: 1781116645 , < * (rpm)
        cpe:/a:redhat:cluster_observability_operator:1.5::el9
    Create a notification for this product.
    Red Hat Cluster Observability Operator 1.5.0 Unaffected: 1781116658 , < * (rpm)
        cpe:/a:redhat:cluster_observability_operator:1.5::el9
    Create a notification for this product.
    Red Hat Cluster Observability Operator 1.5.0 Unaffected: 1781116387 , < * (rpm)
        cpe:/a:redhat:cluster_observability_operator:1.5::el9
    Create a notification for this product.
    Red Hat Cluster Observability Operator 1.5.0 Unaffected: 1781116392 , < * (rpm)
        cpe:/a:redhat:cluster_observability_operator:1.5::el9
    Create a notification for this product.
    Red Hat Cluster Observability Operator 1.5.0 Unaffected: 1781116667 , < * (rpm)
        cpe:/a:redhat:cluster_observability_operator:1.5::el9
    Create a notification for this product.
    Red Hat multicluster engine for Kubernetes 2.6 Unaffected: 1778511348 , < * (rpm)
        cpe:/a:redhat:multicluster_engine:2.6::el9
    Create a notification for this product.
    Red Hat multicluster engine for Kubernetes 2.8 Unaffected: 1778383863 , < * (rpm)
        cpe:/a:redhat:multicluster_engine:2.8::el9
    Create a notification for this product.
    Red Hat Network Observability (NETOBSERV) 1.11.0 Unaffected: 1778508956 , < * (rpm)
        cpe:/a:redhat:network_observ_optr:1.11::el9
    Create a notification for this product.
    Red Hat Network Observability (NETOBSERV) 1.11.0 Unaffected: 1778510461 , < * (rpm)
        cpe:/a:redhat:network_observ_optr:1.11::el9
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.14 Unaffected: 1783451729 , < * (rpm)
        cpe:/a:redhat:acm:2.14::el9
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Security 4.9 Unaffected: 1779371594 , < * (rpm)
        cpe:/a:redhat:advanced_cluster_security:4.9::el8
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Security for Kubernetes 4.10 Unaffected: 1779293013 , < * (rpm)
        cpe:/a:redhat:advanced_cluster_security:4.10::el8
    Create a notification for this product.
    Red Hat Red Hat Ansible Automation Platform 2.5 Unaffected: 1780082949 , < * (rpm)
        cpe:/a:redhat:ansible_automation_platform:2.5::el8
    Create a notification for this product.
    Red Hat Red Hat Ansible Automation Platform 2.6 Unaffected: 1779784904 , < * (rpm)
        cpe:/a:redhat:ansible_automation_platform:2.6::el9
    Create a notification for this product.
    Red Hat Red Hat Ansible Automation Platform 2.6 Unaffected: 1787184682 , < * (rpm)
        cpe:/a:redhat:ansible_automation_platform:2.6::el9
    Create a notification for this product.
    Red Hat Red Hat Developer Hub 1.8 Unaffected: 1776784286 , < * (rpm)
        cpe:/a:redhat:rhdh:1.8::el9
    Create a notification for this product.
    Red Hat Red Hat Developer Hub 1.9 Unaffected: 1777903262 , < * (rpm)
        cpe:/a:redhat:rhdh:1.9::el9
    Create a notification for this product.
    Red Hat Red Hat Discovery 2 Unaffected: 1778156756 , < * (rpm)
        cpe:/a:redhat:discovery:2::el9
    Create a notification for this product.
    Red Hat Red Hat Migration Toolkit 1.8 Unaffected: 1783690532 , < * (rpm)
        cpe:/a:redhat:rhmt:1.8::el8
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 2.25 Unaffected: 1780467029 , < * (rpm)
        cpe:/a:redhat:openshift_ai:2.25::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 2.25 Unaffected: 1780467147 , < * (rpm)
        cpe:/a:redhat:openshift_ai:2.25::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 3.3 Unaffected: 1779189627 , < * (rpm)
        cpe:/a:redhat:openshift_ai:3.3::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 3.3 Unaffected: 1778473763 , < * (rpm)
        cpe:/a:redhat:openshift_ai:3.3::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 3.3 Unaffected: 1778666987 , < * (rpm)
        cpe:/a:redhat:openshift_ai:3.3::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Dev Spaces 3.27 Unaffected: 1776744110 , < * (rpm)
        cpe:/a:redhat:openshift_devspaces:3.27::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Dev Spaces 3.27 Unaffected: 1776795511 , < * (rpm)
        cpe:/a:redhat:openshift_devspaces:3.27::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 2.6 Unaffected: 1776202125 , < * (rpm)
        cpe:/a:redhat:service_mesh:2.6::el8
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 2.6 Unaffected: 1776191302 , < * (rpm)
        cpe:/a:redhat:service_mesh:2.6::el8
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 3.0 Unaffected: 1776151124 , < * (rpm)
        cpe:/a:redhat:service_mesh:3.0::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 3.0 Unaffected: 1776151272 , < * (rpm)
        cpe:/a:redhat:service_mesh:3.0::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 3.1 Unaffected: 1776151106 , < * (rpm)
        cpe:/a:redhat:service_mesh:3.1::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 3.1 Unaffected: 1776151270 , < * (rpm)
        cpe:/a:redhat:service_mesh:3.1::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 3.2 Unaffected: 1776155669 , < * (rpm)
        cpe:/a:redhat:service_mesh:3.2::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 3.2 Unaffected: 1776149682 , < * (rpm)
        cpe:/a:redhat:service_mesh:3.2::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 3.3 Unaffected: 1776151134 , < * (rpm)
        cpe:/a:redhat:service_mesh:3.3::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 3.3 Unaffected: 1776151277 , < * (rpm)
        cpe:/a:redhat:service_mesh:3.3::el9
    Create a notification for this product.
    Red Hat Red Hat Quay 3.10 Unaffected: 1779822261 , < * (rpm)
        cpe:/a:redhat:quay:3.10::el8
    Create a notification for this product.
    Red Hat Red Hat Quay 3.12 Unaffected: 1779811412 , < * (rpm)
        cpe:/a:redhat:quay:3.12::el8
    Create a notification for this product.
    Red Hat Red Hat Quay 3.14 Unaffected: 1779689392 , < * (rpm)
        cpe:/a:redhat:quay:3.14::el8
    Create a notification for this product.
    Red Hat Red Hat Quay 3.15 Unaffected: 1780891395 , < * (rpm)
        cpe:/a:redhat:quay:3.15::el8
    Create a notification for this product.
    Red Hat Red Hat Quay 3.16 Unaffected: 1779204086 , < * (rpm)
        cpe:/a:redhat:quay:3.16::el9
    Create a notification for this product.
    Red Hat Red Hat Quay 3.17 Unaffected: 1779922205 , < * (rpm)
        cpe:/a:redhat:quay:3.17::el9
    Create a notification for this product.
    Red Hat Red Hat Quay 3.9 Unaffected: 1779811473 , < * (rpm)
        cpe:/a:redhat:quay:3.9::el8
    Create a notification for this product.
    Red Hat Red Hat Trusted Artifact Signer 1.3 Unaffected: 1779971506 , < * (rpm)
        cpe:/a:redhat:trusted_artifact_signer:1.3::el9
    Create a notification for this product.
    Red Hat Cryostat 4     cpe:/a:redhat:cryostat:4
    Create a notification for this product.
    Red Hat Gatekeeper 3     cpe:/a:redhat:gatekeeper:3
    Create a notification for this product.
    Red Hat Migration Toolkit for Applications 8     cpe:/a:redhat:migration_toolkit_applications:8
    Create a notification for this product.
    Red Hat Multicluster Engine for Kubernetes     cpe:/a:redhat:multicluster_engine
    Create a notification for this product.
    Red Hat Network Observability Operator     cpe:/a:redhat:network_observ_optr:1
    Create a notification for this product.
    Red Hat OpenShift Pipelines     cpe:/a:redhat:openshift_pipelines:1
    Create a notification for this product.
    Red Hat OpenShift Service Mesh 2     cpe:/a:redhat:service_mesh:2
    Create a notification for this product.
    Red Hat OpenShift Service Mesh 3     cpe:/a:redhat:service_mesh:3
    Create a notification for this product.
    Red Hat Red Hat 3scale API Management Platform 2     cpe:/a:redhat:red_hat_3scale_amp:2
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Management for Kubernetes 2     cpe:/a:redhat:acm:2
    Create a notification for this product.
    Red Hat Red Hat Ansible Automation Platform 2     cpe:/a:redhat:ansible_automation_platform:2
    Create a notification for this product.
    Red Hat Red Hat build of Apache Camel - HawtIO 4     cpe:/a:redhat:apache_camel_hawtio:4
    Create a notification for this product.
    Red Hat Red Hat build of Apicurio Registry 2     cpe:/a:redhat:service_registry:2
    Create a notification for this product.
    Red Hat Red Hat build of Apicurio Registry 3     cpe:/a:redhat:apicurio_registry:3
    Create a notification for this product.
    Red Hat Red Hat Build of Kueue     cpe:/a:redhat:kueue_operator:1
    Create a notification for this product.
    Red Hat Red Hat Data Grid 8     cpe:/a:redhat:jboss_data_grid:8
    Create a notification for this product.
    Red Hat Red Hat Developer Hub     cpe:/a:redhat:rhdh:1
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 8     cpe:/o:redhat:enterprise_linux:8
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 9     cpe:/o:redhat:enterprise_linux:9
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux AI (RHEL AI) 3     cpe:/a:redhat:enterprise_linux_ai:3
    Create a notification for this product.
    Red Hat Red Hat Fuse 7     cpe:/a:redhat:jboss_fuse:7
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI (RHOAI)     cpe:/a:redhat:openshift_ai
    Create a notification for this product.
    Red Hat Red Hat OpenShift Container Platform 4     cpe:/a:redhat:openshift:4
    Create a notification for this product.
    Red Hat Red Hat OpenShift Virtualization 4     cpe:/a:redhat:container_native_virtualization:4
    Create a notification for this product.
    Red Hat Red Hat Process Automation 7     cpe:/a:redhat:jboss_enterprise_bpms_platform:7
    Create a notification for this product.
    Red Hat Red Hat Quay 3     cpe:/a:redhat:quay:3
    Create a notification for this product.
    Red Hat Red Hat Satellite 6     cpe:/a:redhat:satellite:6
    Create a notification for this product.
    Red Hat Red Hat Trusted Profile Analyzer     cpe:/a:redhat:trusted_profile_analyzer:2
    Create a notification for this product.
    Red Hat Self-service automation portal 2     cpe:/a:redhat:ansible_portal:2
    Create a notification for this product.
    Red Hat streams for Apache Kafka 2     cpe:/a:redhat:amq_streams:2
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2025-62718",
                    "options": [
                      {
                        "Exploitation": "poc"
                      },
                      {
                        "Automatable": "yes"
                      },
                      {
                        "Technical Impact": "partial"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-04-09T15:02:50.313939Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-04-09T16:15:31.322Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "references": [
              {
                "tags": [
                  "exploit"
                ],
                "url": "https://github.com/axios/axios/security/advisories/GHSA-3p68-rc4w-qgx5"
              }
            ],
            "title": "CISA ADP Vulnrichment"
          },
          {
            "affected": [
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2.5::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "automation-gateway",
                "product": "Red Hat Ansible Automation Platform 2.5 for RHEL 8",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:2.5.20260422-3.el8ap",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2.5::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "automation-gateway",
                "product": "Red Hat Ansible Automation Platform 2.5 for RHEL 9",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:2.5.20260422-3.el9ap",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:amq_streams:3.2::el9"
                ],
                "defaultStatus": "unaffected",
                "packageName": "axios",
                "product": "Streams for Apache Kafka 3.2.0",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9",
                "product": "Cluster Observability Operator 1.5.0",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1781116645",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9",
                "product": "Cluster Observability Operator 1.5.0",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1781116658",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9",
                "product": "Cluster Observability Operator 1.5.0",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1781116387",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "cluster-observability-operator/distributed-tracing-console-plugin-rhel9",
                "product": "Cluster Observability Operator 1.5.0",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1781116392",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "cluster-observability-operator/monitoring-console-plugin-pf5-rhel9",
                "product": "Cluster Observability Operator 1.5.0",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1781116667",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:multicluster_engine:2.6::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "multicluster-engine/console-mce-rhel9",
                "product": "multicluster engine for Kubernetes 2.6",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778511348",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:multicluster_engine:2.8::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "multicluster-engine/console-mce-rhel9",
                "product": "multicluster engine for Kubernetes 2.8",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778383863",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:network_observ_optr:1.11::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "network-observability/network-observability-console-plugin-compat-rhel9",
                "product": "Network Observability (NETOBSERV) 1.11.0",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778508956",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:network_observ_optr:1.11::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "network-observability/network-observability-console-plugin-rhel9",
                "product": "Network Observability (NETOBSERV) 1.11.0",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778510461",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:acm:2.14::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhacm2/console-rhel9",
                "product": "Red Hat Advanced Cluster Management for Kubernetes 2.14",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1783451729",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:advanced_cluster_security:4.9::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "advanced-cluster-security/rhacs-main-rhel8",
                "product": "Red Hat Advanced Cluster Security 4.9",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779371594",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:advanced_cluster_security:4.10::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "advanced-cluster-security/rhacs-main-rhel8",
                "product": "Red Hat Advanced Cluster Security for Kubernetes 4.10",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779293013",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2.5::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "ansible-automation-platform-25/lightspeed-rhel8",
                "product": "Red Hat Ansible Automation Platform 2.5",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1780082949",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2.6::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "ansible-automation-platform-26/lightspeed-rhel9",
                "product": "Red Hat Ansible Automation Platform 2.6",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779784904",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2.6::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "ansible-automation-platform-26/lightspeed-rhel9-operator",
                "product": "Red Hat Ansible Automation Platform 2.6",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1787184682",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:rhdh:1.8::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhdh/rhdh-hub-rhel9",
                "product": "Red Hat Developer Hub 1.8",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1776784286",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:rhdh:1.9::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhdh/rhdh-hub-rhel9",
                "product": "Red Hat Developer Hub 1.9",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1777903262",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:discovery:2::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "discovery/discovery-ui-rhel9",
                "product": "Red Hat Discovery 2",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778156756",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:rhmt:1.8::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "rhmtc/openshift-migration-ui-rhel8",
                "product": "Red Hat Migration Toolkit 1.8",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1783690532",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:2.25::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-dashboard-rhel9",
                "product": "Red Hat OpenShift AI 2.25",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1780467029",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:2.25::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-mod-arch-model-registry-rhel9",
                "product": "Red Hat OpenShift AI 2.25",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1780467147",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:3.3::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-dashboard-rhel9",
                "product": "Red Hat OpenShift AI 3.3",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779189627",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:3.3::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-mod-arch-gen-ai-rhel9",
                "product": "Red Hat OpenShift AI 3.3",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778473763",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:3.3::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-mod-arch-model-registry-rhel9",
                "product": "Red Hat OpenShift AI 3.3",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778666987",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_devspaces:3.27::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "devspaces/code-rhel9",
                "product": "Red Hat OpenShift Dev Spaces 3.27",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1776744110",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_devspaces:3.27::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "devspaces/dashboard-rhel9",
                "product": "Red Hat OpenShift Dev Spaces 3.27",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1776795511",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:2.6::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-ossmc-rhel8",
                "product": "Red Hat OpenShift Service Mesh 2.6",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1776202125",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:2.6::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-rhel8",
                "product": "Red Hat OpenShift Service Mesh 2.6",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1776191302",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3.0::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-ossmc-rhel9",
                "product": "Red Hat OpenShift Service Mesh 3.0",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1776151124",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3.0::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-rhel9",
                "product": "Red Hat OpenShift Service Mesh 3.0",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1776151272",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3.1::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-ossmc-rhel9",
                "product": "Red Hat OpenShift Service Mesh 3.1",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1776151106",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3.1::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-rhel9",
                "product": "Red Hat OpenShift Service Mesh 3.1",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1776151270",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3.2::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-ossmc-rhel9",
                "product": "Red Hat OpenShift Service Mesh 3.2",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1776155669",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3.2::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-rhel9",
                "product": "Red Hat OpenShift Service Mesh 3.2",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1776149682",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3.3::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-ossmc-rhel9",
                "product": "Red Hat OpenShift Service Mesh 3.3",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1776151134",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3.3::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-rhel9",
                "product": "Red Hat OpenShift Service Mesh 3.3",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1776151277",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.10::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel8",
                "product": "Red Hat Quay 3.10",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779822261",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.12::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel8",
                "product": "Red Hat Quay 3.12",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779811412",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.14::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel8",
                "product": "Red Hat Quay 3.14",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779689392",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.15::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel8",
                "product": "Red Hat Quay 3.15",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1780891395",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.16::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel9",
                "product": "Red Hat Quay 3.16",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779204086",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.17::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel9",
                "product": "Red Hat Quay 3.17",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779922205",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.9::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel8",
                "product": "Red Hat Quay 3.9",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779811473",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:trusted_artifact_signer:1.3::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhtas/rhtas-console-ui-rhel9",
                "product": "Red Hat Trusted Artifact Signer 1.3",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779971506",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:cryostat:4"
                ],
                "defaultStatus": "unaffected",
                "packageName": "axios",
                "product": "Cryostat 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:gatekeeper:3"
                ],
                "defaultStatus": "affected",
                "packageName": "redhat-user-workloads/gatekeeper-3-18",
                "product": "Gatekeeper 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:gatekeeper:3"
                ],
                "defaultStatus": "unaffected",
                "packageName": "redhat-user-workloads/gatekeeper-3-19",
                "product": "Gatekeeper 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:migration_toolkit_applications:8"
                ],
                "defaultStatus": "affected",
                "packageName": "mta/mta-ui-rhel8",
                "product": "Migration Toolkit for Applications 8",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:migration_toolkit_applications:8"
                ],
                "defaultStatus": "affected",
                "packageName": "mta/mta-ui-rhel9",
                "product": "Migration Toolkit for Applications 8",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:migration_toolkit_applications:8"
                ],
                "defaultStatus": "affected",
                "packageName": "redhat-user-workloads/art-images",
                "product": "Migration Toolkit for Applications 8",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:multicluster_engine"
                ],
                "defaultStatus": "affected",
                "packageName": "redhat-user-workloads/console-mce-mce-211",
                "product": "Multicluster Engine for Kubernetes",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:multicluster_engine"
                ],
                "defaultStatus": "affected",
                "packageName": "redhat-user-workloads/console-mce-mce-26",
                "product": "Multicluster Engine for Kubernetes",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:multicluster_engine"
                ],
                "defaultStatus": "affected",
                "packageName": "redhat-user-workloads/console-mce-mce-27",
                "product": "Multicluster Engine for Kubernetes",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:multicluster_engine"
                ],
                "defaultStatus": "affected",
                "packageName": "redhat-user-workloads/console-mce-mce-28",
                "product": "Multicluster Engine for Kubernetes",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:multicluster_engine"
                ],
                "defaultStatus": "affected",
                "packageName": "redhat-user-workloads/console-mce-mce-29",
                "product": "Multicluster Engine for Kubernetes",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:network_observ_optr:1"
                ],
                "defaultStatus": "affected",
                "packageName": "redhat-user-workloads/network-observability-console-plugin-zstream",
                "product": "Network Observability Operator",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_pipelines:1"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-pipelines/pipelines-hub-ui-rhel8",
                "product": "OpenShift Pipelines",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_pipelines:1"
                ],
                "defaultStatus": "affected",
                "packageName": "redhat-user-workloads/hub-ui-rhel9",
                "product": "OpenShift Pipelines",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_pipelines:1"
                ],
                "defaultStatus": "affected",
                "packageName": "redhat-user-workloads/pipelines-hub-ui-rhel9",
                "product": "OpenShift Pipelines",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:2"
                ],
                "defaultStatus": "affected",
                "packageName": "redhat-user-workloads/kiali-2-6-ossmc",
                "product": "OpenShift Service Mesh 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3"
                ],
                "defaultStatus": "affected",
                "packageName": "redhat-user-workloads/kiali-3-0",
                "product": "OpenShift Service Mesh 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3"
                ],
                "defaultStatus": "unaffected",
                "packageName": "redhat-user-workloads/kiali-3-0-bundle",
                "product": "OpenShift Service Mesh 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3"
                ],
                "defaultStatus": "unaffected",
                "packageName": "redhat-user-workloads/kiali-3-0-operator",
                "product": "OpenShift Service Mesh 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3"
                ],
                "defaultStatus": "affected",
                "packageName": "redhat-user-workloads/kiali-3-1",
                "product": "OpenShift Service Mesh 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3"
                ],
                "defaultStatus": "unaffected",
                "packageName": "redhat-user-workloads/kiali-3-1-bundle",
                "product": "OpenShift Service Mesh 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3"
                ],
                "defaultStatus": "unaffected",
                "packageName": "redhat-user-workloads/kiali-3-1-operator",
                "product": "OpenShift Service Mesh 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3"
                ],
                "defaultStatus": "affected",
                "packageName": "redhat-user-workloads/kiali-3-1-ossmc",
                "product": "OpenShift Service Mesh 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3"
                ],
                "defaultStatus": "affected",
                "packageName": "redhat-user-workloads/kiali-3-2",
                "product": "OpenShift Service Mesh 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3"
                ],
                "defaultStatus": "affected",
                "packageName": "redhat-user-workloads/kiali-3-2-ossmc",
                "product": "OpenShift Service Mesh 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3"
                ],
                "defaultStatus": "affected",
                "packageName": "redhat-user-workloads/kiali-3-3",
                "product": "OpenShift Service Mesh 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3"
                ],
                "defaultStatus": "affected",
                "packageName": "redhat-user-workloads/kiali-3-3-ossmc",
                "product": "OpenShift Service Mesh 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:red_hat_3scale_amp:2"
                ],
                "defaultStatus": "affected",
                "packageName": "3scale-amp21/system",
                "product": "Red Hat 3scale API Management Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:red_hat_3scale_amp:2"
                ],
                "defaultStatus": "affected",
                "packageName": "3scale-amp22/system",
                "product": "Red Hat 3scale API Management Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:red_hat_3scale_amp:2"
                ],
                "defaultStatus": "affected",
                "packageName": "3scale-amp2/system-rhel7",
                "product": "Red Hat 3scale API Management Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:red_hat_3scale_amp:2"
                ],
                "defaultStatus": "affected",
                "packageName": "3scale-amp2/system-rhel8",
                "product": "Red Hat 3scale API Management Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:red_hat_3scale_amp:2"
                ],
                "defaultStatus": "affected",
                "packageName": "3scale-amp2/system-rhel9",
                "product": "Red Hat 3scale API Management Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:acm:2"
                ],
                "defaultStatus": "affected",
                "packageName": "redhat-user-workloads/console-acm-215",
                "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:acm:2"
                ],
                "defaultStatus": "affected",
                "packageName": "redhat-user-workloads/console-acm-216",
                "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "affected",
                "packageName": "ansible-automation-platform-24/lightspeed-rhel8-operator",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "affected",
                "packageName": "automation-controller",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "affected",
                "packageName": "automation-hub",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "automation-platform-ui",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "python3.11-galaxy-ng",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "python3.12-galaxy-ng",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "python3x-galaxy-ng",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "python-galaxy-ng",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "affected",
                "packageName": "redhat-user-workloads/automation-reports",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "affected",
                "packageName": "redhat-user-workloads/gateway-rhel9",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:apache_camel_hawtio:4"
                ],
                "defaultStatus": "affected",
                "packageName": "axios",
                "product": "Red Hat build of Apache Camel - HawtIO 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:service_registry:2"
                ],
                "defaultStatus": "affected",
                "packageName": "axios",
                "product": "Red Hat build of Apicurio Registry 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:apicurio_registry:3"
                ],
                "defaultStatus": "affected",
                "packageName": "apicurio/apicurio-registry-ui-rhel8",
                "product": "Red Hat build of Apicurio Registry 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:apicurio_registry:3"
                ],
                "defaultStatus": "affected",
                "packageName": "apicurio/apicurio-registry-ui-rhel9",
                "product": "Red Hat build of Apicurio Registry 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:kueue_operator:1"
                ],
                "defaultStatus": "unaffected",
                "packageName": "redhat-user-workloads/kueue-0-12",
                "product": "Red Hat Build of Kueue",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:kueue_operator:1"
                ],
                "defaultStatus": "unaffected",
                "packageName": "redhat-user-workloads/kueue-bundle-1-1",
                "product": "Red Hat Build of Kueue",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:kueue_operator:1"
                ],
                "defaultStatus": "unaffected",
                "packageName": "redhat-user-workloads/kueue-must-gather-1-1",
                "product": "Red Hat Build of Kueue",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:kueue_operator:1"
                ],
                "defaultStatus": "unaffected",
                "packageName": "redhat-user-workloads/kueue-operator-1-1",
                "product": "Red Hat Build of Kueue",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:jboss_data_grid:8"
                ],
                "defaultStatus": "unaffected",
                "packageName": "axios",
                "product": "Red Hat Data Grid 8",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:rhdh:1"
                ],
                "defaultStatus": "affected",
                "packageName": "rhdh/backstage-community-plugin-catalog-backend-module-scaffolder-relation-processor",
                "product": "Red Hat Developer Hub",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:8"
                ],
                "defaultStatus": "unaffected",
                "packageName": "grafana",
                "product": "Red Hat Enterprise Linux 8",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:9"
                ],
                "defaultStatus": "unaffected",
                "packageName": "grafana",
                "product": "Red Hat Enterprise Linux 9",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:enterprise_linux_ai:3"
                ],
                "defaultStatus": "affected",
                "packageName": "rhelai3/bootc-cuda-rhel9",
                "product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:enterprise_linux_ai:3"
                ],
                "defaultStatus": "affected",
                "packageName": "rhelai3/bootc-rocm-rhel9",
                "product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:enterprise_linux_ai:3"
                ],
                "defaultStatus": "affected",
                "packageName": "rhelai3/disk-image-cuda-rhel9",
                "product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:jboss_fuse:7"
                ],
                "defaultStatus": "affected",
                "packageName": "axios",
                "product": "Red Hat Fuse 7",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "unaffected",
                "packageName": "rhoai/odh-dashboard-rhel8",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-mod-arch-maas-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift3/ose-console",
                "product": "Red Hat OpenShift Container Platform 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift4/ose-console",
                "product": "Red Hat OpenShift Container Platform 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4"
                ],
                "defaultStatus": "unaffected",
                "packageName": "openshift4/ose-console-rhel9",
                "product": "Red Hat OpenShift Container Platform 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4"
                ],
                "defaultStatus": "affected",
                "packageName": "redhat-user-workloads/art-images",
                "product": "Red Hat OpenShift Container Platform 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:container_native_virtualization:4"
                ],
                "defaultStatus": "affected",
                "packageName": "container-native-virtualization/kubevirt-console-plugin",
                "product": "Red Hat OpenShift Virtualization 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:container_native_virtualization:4"
                ],
                "defaultStatus": "affected",
                "packageName": "container-native-virtualization/kubevirt-console-plugin-rhel9",
                "product": "Red Hat OpenShift Virtualization 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:container_native_virtualization:4"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-virtualization/kubevirt-console-plugin-rhel9",
                "product": "Red Hat OpenShift Virtualization 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:jboss_enterprise_bpms_platform:7"
                ],
                "defaultStatus": "unaffected",
                "packageName": "axios",
                "product": "Red Hat Process Automation 7",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:quay:3"
                ],
                "defaultStatus": "affected",
                "packageName": "redhat-user-workloads/quay-quay-v3-12",
                "product": "Red Hat Quay 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:quay:3"
                ],
                "defaultStatus": "affected",
                "packageName": "redhat-user-workloads/quay-quay-v3-13",
                "product": "Red Hat Quay 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:quay:3"
                ],
                "defaultStatus": "affected",
                "packageName": "redhat-user-workloads/quay-quay-v3-14",
                "product": "Red Hat Quay 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:quay:3"
                ],
                "defaultStatus": "affected",
                "packageName": "redhat-user-workloads/quay-quay-v3-15",
                "product": "Red Hat Quay 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:quay:3"
                ],
                "defaultStatus": "affected",
                "packageName": "redhat-user-workloads/quay-quay-v3-16",
                "product": "Red Hat Quay 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:quay:3"
                ],
                "defaultStatus": "affected",
                "packageName": "redhat-user-workloads/quay-quay-v3-17",
                "product": "Red Hat Quay 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:quay:3"
                ],
                "defaultStatus": "affected",
                "packageName": "redhat-user-workloads/quay-quay-v3-9",
                "product": "Red Hat Quay 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:satellite:6"
                ],
                "defaultStatus": "affected",
                "packageName": "redhat-user-workloads/iop-advisor-frontend-sat-6-18",
                "product": "Red Hat Satellite 6",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:satellite:6"
                ],
                "defaultStatus": "affected",
                "packageName": "redhat-user-workloads/iop-host-inventory-frontend-sat-6-18",
                "product": "Red Hat Satellite 6",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:satellite:6"
                ],
                "defaultStatus": "unaffected",
                "packageName": "redhat-user-workloads/iop-vulnerability-frontend-sat-6-18",
                "product": "Red Hat Satellite 6",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:trusted_profile_analyzer:2"
                ],
                "defaultStatus": "affected",
                "packageName": "redhat-user-workloads/rhtpa-product-0-3-z",
                "product": "Red Hat Trusted Profile Analyzer",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:trusted_profile_analyzer:2"
                ],
                "defaultStatus": "affected",
                "packageName": "redhat-user-workloads/rhtpa-product-0-4-z",
                "product": "Red Hat Trusted Profile Analyzer",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:trusted_profile_analyzer:2"
                ],
                "defaultStatus": "affected",
                "packageName": "rhtpa/rhtpa-trustification-service-rhel9",
                "product": "Red Hat Trusted Profile Analyzer",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_portal:2"
                ],
                "defaultStatus": "affected",
                "packageName": "redhat-user-workloads/ansible-plugins",
                "product": "Self-service automation portal 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:amq_streams:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "axios",
                "product": "streams for Apache Kafka 2",
                "vendor": "Red Hat"
              }
            ],
            "datePublic": "2026-04-09T14:31:46.067Z",
            "descriptions": [
              {
                "lang": "en",
                "value": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not correctly handle hostname normalization when evaluating NO_PROXY rules. An attacker can exploit this by crafting requests to loopback addresses (e.g., localhost. or [::1]) which bypass the NO_PROXY configuration and are routed through the configured proxy. This can lead to Server-Side Request Forgery (SSRF) vulnerabilities, enabling attackers to access sensitive internal or loopback services that should otherwise be protected."
              }
            ],
            "metrics": [
              {
                "other": {
                  "content": {
                    "namespace": "https://access.redhat.com/security/updates/classification/",
                    "value": "Important"
                  },
                  "type": "Red Hat severity rating"
                }
              },
              {
                "cvssV3_1": {
                  "attackComplexity": "HIGH",
                  "attackVector": "NETWORK",
                  "availabilityImpact": "LOW",
                  "baseScore": 7,
                  "baseSeverity": "HIGH",
                  "confidentialityImpact": "HIGH",
                  "integrityImpact": "LOW",
                  "privilegesRequired": "NONE",
                  "scope": "UNCHANGED",
                  "userInteraction": "NONE",
                  "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L",
                  "version": "3.1"
                },
                "format": "CVSS"
              }
            ],
            "problemTypes": [
              {
                "descriptions": [
                  {
                    "cweId": "CWE-1289",
                    "description": "Improper Validation of Unsafe Equivalence in Input",
                    "lang": "en",
                    "type": "CWE"
                  }
                ]
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-09-10T12:04:48.730Z",
              "orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
              "shortName": "redhat-SADP"
            },
            "references": [
              {
                "tags": [
                  "vdb-entry",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/security/cve/CVE-2025-62718"
              },
              {
                "name": "RHBZ#2456913",
                "tags": [
                  "issue-tracking",
                  "x_refsource_REDHAT"
                ],
                "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456913"
              },
              {
                "tags": [
                  "x_sadp-csaf-vex"
                ],
                "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-62718.json"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:24761"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:26010"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:16874"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:36882"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:20938"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:20889"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:24766"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:59155"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:24866"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:9742"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:13826"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:14937"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:41928"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:24977"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:19712"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:10175"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:8483"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:8484"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:8490"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:8491"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:8493"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:22840"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:22629"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:21017"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:24853"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:19375"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:22465"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:23361"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:24471"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:13571"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:17657"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:17699"
              }
            ],
            "solutions": [
              {
                "lang": "en",
                "value": "RHSA-2026:24761: Red Hat Ansible Automation Platform 2.5 for RHEL 8, Red Hat Ansible Automation Platform 2.5 for RHEL 9"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:26010: Cluster Observability Operator 1.5.0"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:16874: Network Observability (NETOBSERV) 1.11.0"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:36882: Red Hat Advanced Cluster Management for Kubernetes 2.14"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:20938: Red Hat Advanced Cluster Security 4.9"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:20889: Red Hat Advanced Cluster Security for Kubernetes 4.10"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:24766: Red Hat Ansible Automation Platform 2.5"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:59155: Red Hat Ansible Automation Platform 2.6"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:24866: Red Hat Ansible Automation Platform 2.6"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:9742: Red Hat Developer Hub 1.8"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:13826: Red Hat Developer Hub 1.9"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:14937: Red Hat Discovery 2"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:41928: Red Hat Migration Toolkit 1.8"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:24977: Red Hat OpenShift AI 2.25"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:19712: Red Hat OpenShift AI 3.3"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:10175: Red Hat OpenShift Dev Spaces 3.27"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:8483: Red Hat OpenShift Service Mesh 2.6"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:8484: Red Hat OpenShift Service Mesh 3.0"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:8490: Red Hat OpenShift Service Mesh 3.1"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:8491: Red Hat OpenShift Service Mesh 3.2"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:8493: Red Hat OpenShift Service Mesh 3.3"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:22840: Red Hat Quay 3.10"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:22629: Red Hat Quay 3.12"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:21017: Red Hat Quay 3.14"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:24853: Red Hat Quay 3.15"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:19375: Red Hat Quay 3.16"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:22465: Red Hat Quay 3.17"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:23361: Red Hat Quay 3.9"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:24471: Red Hat Trusted Artifact Signer 1.3"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:13571: Streams for Apache Kafka 3.2.0"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:17657: multicluster engine for Kubernetes 2.6"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:17699: multicluster engine for Kubernetes 2.8"
              }
            ],
            "timeline": [
              {
                "lang": "en",
                "time": "2026-04-09T15:01:48.111Z",
                "value": "Reported to Red Hat."
              },
              {
                "lang": "en",
                "time": "2026-04-09T14:31:46.067Z",
                "value": "Made public."
              }
            ],
            "title": "axios: Axios: Server-Side Request Forgery and proxy bypass due to improper hostname normalization",
            "workarounds": [
              {
                "lang": "en",
                "value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."
              }
            ],
            "x_adpType": "supplier",
            "x_generator": {
              "engine": "sadp-cli 1.0.0"
            }
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "axios",
              "vendor": "axios",
              "versions": [
                {
                  "status": "affected",
                  "version": "\u003e= 1.0.0, \u003c 1.15.0"
                },
                {
                  "status": "affected",
                  "version": "\u003c 0.31.0"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "Axios is a promise based HTTP client for the browser and Node.js. Prior to 1.15.0 and 0.31.0, Axios does not correctly handle hostname normalization when checking NO_PROXY rules. Requests to loopback addresses like localhost. (with a trailing dot) or [::1] (IPv6 literal) skip NO_PROXY matching and go through the configured proxy. This goes against what developers expect and lets attackers force requests through a proxy, even if NO_PROXY is set up to protect loopback or internal services. This issue leads to the possibility of proxy bypass and SSRF vulnerabilities allowing attackers to reach sensitive loopback or internal services despite the configured protections. This vulnerability is fixed in 1.15.0 and 0.31.0."
            }
          ],
          "metrics": [
            {
              "cvssV4_0": {
                "attackComplexity": "LOW",
                "attackRequirements": "PRESENT",
                "attackVector": "NETWORK",
                "baseScore": 6.3,
                "baseSeverity": "MEDIUM",
                "privilegesRequired": "NONE",
                "subAvailabilityImpact": "NONE",
                "subConfidentialityImpact": "LOW",
                "subIntegrityImpact": "LOW",
                "userInteraction": "NONE",
                "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N",
                "version": "4.0",
                "vulnAvailabilityImpact": "NONE",
                "vulnConfidentialityImpact": "LOW",
                "vulnIntegrityImpact": "LOW"
              }
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-441",
                  "description": "CWE-441: Unintended Proxy or Intermediary (\u0027Confused Deputy\u0027)",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            },
            {
              "descriptions": [
                {
                  "cweId": "CWE-918",
                  "description": "CWE-918: Server-Side Request Forgery (SSRF)",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-04-16T18:44:20.705Z",
            "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
            "shortName": "GitHub_M"
          },
          "references": [
            {
              "name": "https://github.com/axios/axios/security/advisories/GHSA-3p68-rc4w-qgx5",
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "https://github.com/axios/axios/security/advisories/GHSA-3p68-rc4w-qgx5"
            },
            {
              "name": "https://github.com/axios/axios/pull/10661",
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "https://github.com/axios/axios/pull/10661"
            },
            {
              "name": "https://github.com/axios/axios/pull/10688",
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "https://github.com/axios/axios/pull/10688"
            },
            {
              "name": "https://github.com/axios/axios/commit/03cdfc99e8db32a390e12128208b6778492cee9c",
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "https://github.com/axios/axios/commit/03cdfc99e8db32a390e12128208b6778492cee9c"
            },
            {
              "name": "https://github.com/axios/axios/commit/fb3befb6daac6cad26b2e54094d0f2d9e47f24df",
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "https://github.com/axios/axios/commit/fb3befb6daac6cad26b2e54094d0f2d9e47f24df"
            },
            {
              "name": "https://datatracker.ietf.org/doc/html/rfc1034#section-3.1",
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "https://datatracker.ietf.org/doc/html/rfc1034#section-3.1"
            },
            {
              "name": "https://datatracker.ietf.org/doc/html/rfc3986#section-3.2.2",
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "https://datatracker.ietf.org/doc/html/rfc3986#section-3.2.2"
            },
            {
              "name": "https://github.com/axios/axios/releases/tag/v0.31.0",
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "https://github.com/axios/axios/releases/tag/v0.31.0"
            },
            {
              "name": "https://github.com/axios/axios/releases/tag/v1.15.0",
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "https://github.com/axios/axios/releases/tag/v1.15.0"
            }
          ],
          "source": {
            "advisory": "GHSA-3p68-rc4w-qgx5",
            "discovery": "UNKNOWN"
          },
          "title": "Axios has a NO_PROXY Hostname Normalization Bypass that Leads to SSRF"
        }
      },
      "cveMetadata": {
        "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "assignerShortName": "GitHub_M",
        "cveId": "CVE-2025-62718",
        "datePublished": "2026-04-09T14:31:46.067Z",
        "dateReserved": "2025-10-20T19:41:22.741Z",
        "dateUpdated": "2026-09-10T12:04:48.730Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2026-39892 (GCVE-0-2026-39892)

    Vulnerability from nvd – Published: 2026-04-08 20:49 – Updated: 2026-09-10 12:04
    VLAI
    Title
    cryptography has a buffer overflow if non-contiguous buffers were passed to APIs
    Summary
    cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. From 45.0.0 to before 46.0.7, if a non-contiguous buffer was passed to APIs which accepted Python buffers (e.g. Hash.update()), this could lead to buffer overflows. This vulnerability is fixed in 46.0.7.
    SSVC
    Exploitation: none Automatable: yes Technical Impact: partial
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-04-09 19:41 UTC
    CWE
    • CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer
    • CWE-131 - Incorrect Calculation of Buffer Size
    References
    URL Tags
    https://github.com/pyca/cryptography/security/adv… x_refsource_CONFIRM
    http://www.openwall.com/lists/oss-security/2026/0…
    https://access.redhat.com/security/cve/CVE-2026-39892 vdb-entryx_refsource_REDHAT
    https://bugzilla.redhat.com/show_bug.cgi?id=2456735 issue-trackingx_refsource_REDHAT
    https://security.access.redhat.com/data/csaf/v2/v… x_sadp-csaf-vex
    https://access.redhat.com/errata/RHSA-2026:24761 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:24762 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:30089 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:30088 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:24866 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:20338 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:43855 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:43854 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:43851 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:43670 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:43853 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:43651 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:46956 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:7295 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:42644 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:24977 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:37275 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:22840 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:22629 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:21017 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:24853 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:19375 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:22465 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:23361 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:24483 vendor-advisoryx_refsource_REDHAT
    Impacted products
    Vendor Product Version
    pyca cryptography Affected: >= 45.0.0, < 46.0.7
    Create a notification for this product.
    Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 8 Unaffected: 0:4.6.29-2.el8ap , < * (rpm)
        cpe:/a:redhat:ansible_automation_platform:2.5::el8
    Create a notification for this product.
    Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 8 Unaffected: 0:46.0.7-1.el8ap , < * (rpm)
        cpe:/a:redhat:ansible_automation_platform:2.5::el8
    Create a notification for this product.
    Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 9 Unaffected: 0:4.6.29-2.el9ap , < * (rpm)
        cpe:/a:redhat:ansible_automation_platform:2.5::el9
    Create a notification for this product.
    Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 9 Unaffected: 0:46.0.7-1.el9ap , < * (rpm)
        cpe:/a:redhat:ansible_automation_platform:2.5::el9
    Create a notification for this product.
    Red Hat Red Hat Ansible Automation Platform 2.6 for RHEL 9 Unaffected: 0:4.7.12-1.el9ap , < * (rpm)
        cpe:/a:redhat:ansible_automation_platform:2.6::el9
    Create a notification for this product.
    Red Hat Red Hat Ansible Automation Platform 2.6 for RHEL 9 Unaffected: 0:46.0.7-1.el9ap , < * (rpm)
        cpe:/a:redhat:ansible_automation_platform:2.6::el9
    Create a notification for this product.
    Red Hat Red Hat AI Inference Server 3.3 Unaffected: 1782353093 , < * (rpm)
        cpe:/a:redhat:ai_inference_server:3.3::el9
    Create a notification for this product.
    Red Hat Red Hat AI Inference Server 3.3 Unaffected: 1782352847 , < * (rpm)
        cpe:/a:redhat:ai_inference_server:3.3::el9
    Create a notification for this product.
    Red Hat Red Hat Ansible Automation Platform 2.6 Unaffected: 1779762270 , < * (rpm)
        cpe:/a:redhat:ansible_automation_platform:2.6::el9
    Create a notification for this product.
    Red Hat Red Hat Ansible Automation Platform 2.6 Unaffected: 1779759716 , < * (rpm)
        cpe:/a:redhat:ansible_automation_platform:2.6::el9
    Create a notification for this product.
    Red Hat Red Hat Ansible Automation Platform 2.6 Unaffected: 1779734628 , < * (rpm)
        cpe:/a:redhat:ansible_automation_platform:2.6::el9
    Create a notification for this product.
    Red Hat Red Hat Ansible Automation Platform 2.6 Unaffected: 1779773804 , < * (rpm)
        cpe:/a:redhat:ansible_automation_platform:2.6::el9
    Create a notification for this product.
    Red Hat Red Hat Ansible Automation Platform 2.6 Unaffected: 1779761061 , < * (rpm)
        cpe:/a:redhat:ansible_automation_platform:2.6::el9
    Create a notification for this product.
    Red Hat Red Hat Ansible Automation Platform 2.6 Unaffected: 1779760844 , < * (rpm)
        cpe:/a:redhat:ansible_automation_platform:2.6::el9
    Create a notification for this product.
    Red Hat Red Hat Discovery 2 Unaffected: 1779395228 , < * (rpm)
        cpe:/a:redhat:discovery:2::el9
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux AI 3.3 Unaffected: 1784670204 , < * (rpm)
        cpe:/a:redhat:enterprise_linux_ai:3.3::el9
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux AI 3.3 Unaffected: 1784669680 , < * (rpm)
        cpe:/a:redhat:enterprise_linux_ai:3.3::el9
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux AI 3.3 Unaffected: 1784736822 , < * (rpm)
        cpe:/a:redhat:enterprise_linux_ai:3.3::el9
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux AI 3.3 Unaffected: 1784736941 , < * (rpm)
        cpe:/a:redhat:enterprise_linux_ai:3.3::el9
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux AI 3.3 Unaffected: 1784736798 , < * (rpm)
        cpe:/a:redhat:enterprise_linux_ai:3.3::el9
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux AI 3.3 Unaffected: 1784736857 , < * (rpm)
        cpe:/a:redhat:enterprise_linux_ai:3.3::el9
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux AI 3.3 Unaffected: 1785163184 , < * (rpm)
        cpe:/a:redhat:enterprise_linux_ai:3.3::el9
    Create a notification for this product.
    Red Hat Red Hat Hardened Images Unaffected: 46.0.7-1.hum1 , < * (rpm)
        cpe:/a:redhat:hummingbird:1
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 2.25 Unaffected: 1780069069 , < * (rpm)
        cpe:/a:redhat:openshift_ai:2.25::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 2.25 Unaffected: 1783701598 , < * (rpm)
        cpe:/a:redhat:openshift_ai:2.25::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 3.3 Unaffected: 1782471587 , < * (rpm)
        cpe:/a:redhat:openshift_ai:3.3::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 3.3 Unaffected: 1782472374 , < * (rpm)
        cpe:/a:redhat:openshift_ai:3.3::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 3.3 Unaffected: 1782471606 , < * (rpm)
        cpe:/a:redhat:openshift_ai:3.3::el9
    Create a notification for this product.
    Red Hat Red Hat Quay 3.10 Unaffected: 1779822261 , < * (rpm)
        cpe:/a:redhat:quay:3.10::el8
    Create a notification for this product.
    Red Hat Red Hat Quay 3.12 Unaffected: 1779811412 , < * (rpm)
        cpe:/a:redhat:quay:3.12::el8
    Create a notification for this product.
    Red Hat Red Hat Quay 3.14 Unaffected: 1779689392 , < * (rpm)
        cpe:/a:redhat:quay:3.14::el8
    Create a notification for this product.
    Red Hat Red Hat Quay 3.15 Unaffected: 1780891395 , < * (rpm)
        cpe:/a:redhat:quay:3.15::el8
    Create a notification for this product.
    Red Hat Red Hat Quay 3.16 Unaffected: 1779204086 , < * (rpm)
        cpe:/a:redhat:quay:3.16::el9
    Create a notification for this product.
    Red Hat Red Hat Quay 3.17 Unaffected: 1779922205 , < * (rpm)
        cpe:/a:redhat:quay:3.17::el9
    Create a notification for this product.
    Red Hat Red Hat Quay 3.9 Unaffected: 1779811473 , < * (rpm)
        cpe:/a:redhat:quay:3.9::el8
    Create a notification for this product.
    Red Hat Red Hat Trusted Artifact Signer 1.4 Unaffected: 1780914886 , < * (rpm)
        cpe:/a:redhat:trusted_artifact_signer:1.4::el9
    Create a notification for this product.
    Red Hat Lightspeed Core     cpe:/a:redhat:lightspeed_core
    Create a notification for this product.
    Red Hat Migration Toolkit for Applications 8     cpe:/a:redhat:migration_toolkit_applications:8
    Create a notification for this product.
    Red Hat OpenShift Lightspeed     cpe:/a:redhat:openshift_lightspeed
    Create a notification for this product.
    Red Hat Red Hat AI Inference Server     cpe:/a:redhat:ai_inference_server:3
    Create a notification for this product.
    Red Hat Red Hat Ansible Automation Platform 2     cpe:/a:redhat:ansible_automation_platform:2
    Create a notification for this product.
    Red Hat Red Hat Ansible Automation Platform Ansible Core 2     cpe:/a:redhat:ansible_core:2
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 8     cpe:/o:redhat:enterprise_linux:8
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 9     cpe:/o:redhat:enterprise_linux:9
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux AI (RHEL AI) 3     cpe:/a:redhat:enterprise_linux_ai:3
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI (RHOAI)     cpe:/a:redhat:openshift_ai
    Create a notification for this product.
    Red Hat Red Hat Quay 3     cpe:/a:redhat:quay:3
    Create a notification for this product.
    Red Hat Red Hat Satellite 6     cpe:/a:redhat:satellite:6
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2026-04-08T21:16:07.164Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "url": "http://www.openwall.com/lists/oss-security/2026/04/08/12"
              }
            ],
            "title": "CVE Program Container"
          },
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-39892",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "yes"
                      },
                      {
                        "Technical Impact": "partial"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-04-09T19:41:57.662246Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-04-09T19:52:22.602Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          },
          {
            "affected": [
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2.5::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "automation-controller",
                "product": "Red Hat Ansible Automation Platform 2.5 for RHEL 8",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:4.6.29-2.el8ap",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2.5::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "python3.12-cryptography",
                "product": "Red Hat Ansible Automation Platform 2.5 for RHEL 8",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:46.0.7-1.el8ap",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2.5::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "automation-controller",
                "product": "Red Hat Ansible Automation Platform 2.5 for RHEL 9",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:4.6.29-2.el9ap",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2.5::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "python3.12-cryptography",
                "product": "Red Hat Ansible Automation Platform 2.5 for RHEL 9",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:46.0.7-1.el9ap",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2.6::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "automation-controller",
                "product": "Red Hat Ansible Automation Platform 2.6 for RHEL 9",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:4.7.12-1.el9ap",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2.6::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "python3.12-cryptography",
                "product": "Red Hat Ansible Automation Platform 2.6 for RHEL 9",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:46.0.7-1.el9ap",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:ai_inference_server:3.3::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhaiis/vllm-rocm-rhel9",
                "product": "Red Hat AI Inference Server 3.3",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782353093",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:ai_inference_server:3.3::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhaiis/vllm-cuda-rhel9",
                "product": "Red Hat AI Inference Server 3.3",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782352847",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2.6::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "ansible-automation-platform-26/controller-rhel9",
                "product": "Red Hat Ansible Automation Platform 2.6",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779762270",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2.6::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "ansible-automation-platform-26/eda-controller-rhel9",
                "product": "Red Hat Ansible Automation Platform 2.6",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779759716",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2.6::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "ansible-automation-platform-26/ee-supported-rhel9",
                "product": "Red Hat Ansible Automation Platform 2.6",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779734628",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2.6::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "ansible-automation-platform-26/gateway-rhel9",
                "product": "Red Hat Ansible Automation Platform 2.6",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779773804",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2.6::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "ansible-automation-platform-26/hub-rhel9",
                "product": "Red Hat Ansible Automation Platform 2.6",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779761061",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2.6::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "ansible-automation-platform-tech-preview/metrics-service-rhel9",
                "product": "Red Hat Ansible Automation Platform 2.6",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779760844",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:discovery:2::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "discovery/discovery-server-rhel9",
                "product": "Red Hat Discovery 2",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779395228",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:enterprise_linux_ai:3.3::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhelai3/bootc-rocm-rhel9",
                "product": "Red Hat Enterprise Linux AI 3.3",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1784670204",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:enterprise_linux_ai:3.3::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhelai3/bootc-cuda-rhel9",
                "product": "Red Hat Enterprise Linux AI 3.3",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1784669680",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:enterprise_linux_ai:3.3::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhelai3/bootc-azure-rocm-rhel9",
                "product": "Red Hat Enterprise Linux AI 3.3",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1784736822",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:enterprise_linux_ai:3.3::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhelai3/bootc-gcp-cuda-rhel9",
                "product": "Red Hat Enterprise Linux AI 3.3",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1784736941",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:enterprise_linux_ai:3.3::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhelai3/bootc-azure-cuda-rhel9",
                "product": "Red Hat Enterprise Linux AI 3.3",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1784736798",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:enterprise_linux_ai:3.3::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhelai3/bootc-aws-cuda-rhel9",
                "product": "Red Hat Enterprise Linux AI 3.3",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1784736857",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:enterprise_linux_ai:3.3::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhelai3/disk-image-cuda-rhel9",
                "product": "Red Hat Enterprise Linux AI 3.3",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1785163184",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:hummingbird:1"
                ],
                "defaultStatus": "affected",
                "packageName": "python-cryptography-main",
                "product": "Red Hat Hardened Images",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "46.0.7-1.hum1",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:2.25::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-vllm-gaudi-rhel9",
                "product": "Red Hat OpenShift AI 2.25",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1780069069",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:2.25::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-llama-stack-core-rhel9",
                "product": "Red Hat OpenShift AI 2.25",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1783701598",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:3.3::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-llama-stack-core-rhel9",
                "product": "Red Hat OpenShift AI 3.3",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782471587",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:3.3::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-trustyai-garak-lls-provider-dsp-rhel9",
                "product": "Red Hat OpenShift AI 3.3",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782472374",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:3.3::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-trustyai-nemo-guardrails-server-rhel9",
                "product": "Red Hat OpenShift AI 3.3",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782471606",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.10::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel8",
                "product": "Red Hat Quay 3.10",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779822261",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.12::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel8",
                "product": "Red Hat Quay 3.12",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779811412",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.14::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel8",
                "product": "Red Hat Quay 3.14",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779689392",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.15::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel8",
                "product": "Red Hat Quay 3.15",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1780891395",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.16::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel9",
                "product": "Red Hat Quay 3.16",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779204086",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.17::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel9",
                "product": "Red Hat Quay 3.17",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779922205",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.9::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel8",
                "product": "Red Hat Quay 3.9",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779811473",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:trusted_artifact_signer:1.4::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhtas/model-transparency-rhel9",
                "product": "Red Hat Trusted Artifact Signer 1.4",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1780914886",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:lightspeed_core"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-lightspeed-tech-preview/lightspeed-rag-tool-rhel9",
                "product": "Lightspeed Core",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:lightspeed_core"
                ],
                "defaultStatus": "affected",
                "packageName": "redhat-user-workloads/lightspeed-stack",
                "product": "Lightspeed Core",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:migration_toolkit_applications:8"
                ],
                "defaultStatus": "affected",
                "packageName": "redhat-user-workloads/art-images",
                "product": "Migration Toolkit for Applications 8",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_lightspeed"
                ],
                "defaultStatus": "unaffected",
                "packageName": "openshift-lightspeed/lightspeed-ocp-rag-rhel9",
                "product": "OpenShift Lightspeed",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_lightspeed"
                ],
                "defaultStatus": "unaffected",
                "packageName": "openshift-lightspeed/lightspeed-service-api-rhel9",
                "product": "OpenShift Lightspeed",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ai_inference_server:3"
                ],
                "defaultStatus": "affected",
                "packageName": "redhat-user-workloads/rhaiis-cpu-ubi9-3-3",
                "product": "Red Hat AI Inference Server",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ai_inference_server:3"
                ],
                "defaultStatus": "affected",
                "packageName": "redhat-user-workloads/rhaiis-rocm-ubi9-3-3",
                "product": "Red Hat AI Inference Server",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ai_inference_server:3"
                ],
                "defaultStatus": "affected",
                "packageName": "redhat-user-workloads/rhaiis-tpu-ubi9-3-3",
                "product": "Red Hat AI Inference Server",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "ansible-automation-platform-24/lightspeed-rhel8-operator",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "affected",
                "packageName": "ansible-automation-platform-25/lightspeed-chatbot-rhel8",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "ansible-automation-platform-26/lightspeed-rhel9-operator",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "affected",
                "packageName": "redhat-user-workloads/automation-reports",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "affected",
                "packageName": "redhat-user-workloads/ee-supported-rhel8",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "redhat-user-workloads/lightspeed-chatbot-rhel9",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "affected",
                "packageName": "redhat-user-workloads/mcp-tools-rhel9",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_core:2"
                ],
                "defaultStatus": "affected",
                "packageName": "redhat-user-workloads/ee-minimal-ansible-core-2-19-rhel-8-tech-preview",
                "product": "Red Hat Ansible Automation Platform Ansible Core 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_core:2"
                ],
                "defaultStatus": "affected",
                "packageName": "redhat-user-workloads/ee-minimal-ansible-core-2-19-rhel-9-tech-preview",
                "product": "Red Hat Ansible Automation Platform Ansible Core 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_core:2"
                ],
                "defaultStatus": "affected",
                "packageName": "redhat-user-workloads/ee-minimal-ansible-core-2-20-rhel-8-tech-preview",
                "product": "Red Hat Ansible Automation Platform Ansible Core 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_core:2"
                ],
                "defaultStatus": "affected",
                "packageName": "redhat-user-workloads/ee-minimal-ansible-core-2-20-rhel-9-tech-preview",
                "product": "Red Hat Ansible Automation Platform Ansible Core 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:8"
                ],
                "defaultStatus": "affected",
                "packageName": "fence-agents",
                "product": "Red Hat Enterprise Linux 8",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:9"
                ],
                "defaultStatus": "affected",
                "packageName": "fence-agents",
                "product": "Red Hat Enterprise Linux 9",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:enterprise_linux_ai:3"
                ],
                "defaultStatus": "affected",
                "packageName": "redhat-user-workloads/bootc-cuda-azure-3-3",
                "product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:enterprise_linux_ai:3"
                ],
                "defaultStatus": "affected",
                "packageName": "redhat-user-workloads/bootc-cuda-gcp-3-3",
                "product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:enterprise_linux_ai:3"
                ],
                "defaultStatus": "affected",
                "packageName": "redhat-user-workloads/bootc-rocm-azure-3-3",
                "product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-feature-server-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "unaffected",
                "packageName": "rhoai/odh-kserve-agent-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "unaffected",
                "packageName": "rhoai/odh-kserve-controller-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "unaffected",
                "packageName": "rhoai/odh-kserve-router-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-kserve-storage-initializer-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-mlflow-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-pipeline-runtime-minimal-cpu-py312-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-pipeline-runtime-pytorch-cuda-py312-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-pipeline-runtime-pytorch-llmcompressor-cuda-py312-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-pipeline-runtime-pytorch-rocm-py312-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-pipeline-runtime-tensorflow-cuda-py312-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-pipeline-runtime-tensorflow-rocm-py312-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-training-cuda128-torch29-py312-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-workbench-jupyter-datascience-cpu-py312-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-workbench-jupyter-minimal-cpu-py312-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-workbench-jupyter-minimal-cuda-py312-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-workbench-jupyter-minimal-rocm-py312-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-workbench-jupyter-pytorch-cuda-py312-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-workbench-jupyter-pytorch-llmcompressor-cuda-py312-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-workbench-jupyter-pytorch-rocm-py312-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-workbench-jupyter-tensorflow-cuda-py312-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-workbench-jupyter-tensorflow-rocm-py312-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-workbench-jupyter-trustyai-cpu-py312-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:quay:3"
                ],
                "defaultStatus": "affected",
                "packageName": "redhat-user-workloads/quay-quay-v3-12",
                "product": "Red Hat Quay 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:quay:3"
                ],
                "defaultStatus": "affected",
                "packageName": "redhat-user-workloads/quay-quay-v3-13",
                "product": "Red Hat Quay 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:quay:3"
                ],
                "defaultStatus": "affected",
                "packageName": "redhat-user-workloads/quay-quay-v3-14",
                "product": "Red Hat Quay 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:quay:3"
                ],
                "defaultStatus": "affected",
                "packageName": "redhat-user-workloads/quay-quay-v3-15",
                "product": "Red Hat Quay 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:quay:3"
                ],
                "defaultStatus": "affected",
                "packageName": "redhat-user-workloads/quay-quay-v3-16",
                "product": "Red Hat Quay 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:quay:3"
                ],
                "defaultStatus": "affected",
                "packageName": "redhat-user-workloads/quay-quay-v3-17",
                "product": "Red Hat Quay 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:quay:3"
                ],
                "defaultStatus": "affected",
                "packageName": "redhat-user-workloads/quay-quay-v3-9",
                "product": "Red Hat Quay 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:satellite:6"
                ],
                "defaultStatus": "affected",
                "packageName": "redhat-user-workloads/iop-advisor-engine",
                "product": "Red Hat Satellite 6",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:satellite:6"
                ],
                "defaultStatus": "unaffected",
                "packageName": "redhat-user-workloads/iop-host-inventory-sat-6-18",
                "product": "Red Hat Satellite 6",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:satellite:6"
                ],
                "defaultStatus": "affected",
                "packageName": "satellite/foreman-mcp-server-rhel9",
                "product": "Red Hat Satellite 6",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:satellite:6"
                ],
                "defaultStatus": "unaffected",
                "packageName": "satellite/iop-vmaas-rhel9",
                "product": "Red Hat Satellite 6",
                "vendor": "Red Hat"
              }
            ],
            "datePublic": "2026-04-08T20:49:41.967Z",
            "descriptions": [
              {
                "lang": "en",
                "value": "A flaw was found in the cryptography library. This vulnerability occurs when a non-contiguous buffer is passed to certain application programming interfaces (APIs) that accept Python buffers, such as Hash.update(). A remote attacker could exploit this to cause a buffer overflow, potentially leading to a denial of service."
              }
            ],
            "metrics": [
              {
                "other": {
                  "content": {
                    "namespace": "https://access.redhat.com/security/updates/classification/",
                    "value": "Important"
                  },
                  "type": "Red Hat severity rating"
                }
              },
              {
                "cvssV3_1": {
                  "attackComplexity": "LOW",
                  "attackVector": "NETWORK",
                  "availabilityImpact": "LOW",
                  "baseScore": 7.3,
                  "baseSeverity": "HIGH",
                  "confidentialityImpact": "LOW",
                  "integrityImpact": "LOW",
                  "privilegesRequired": "NONE",
                  "scope": "UNCHANGED",
                  "userInteraction": "NONE",
                  "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
                  "version": "3.1"
                },
                "format": "CVSS"
              }
            ],
            "problemTypes": [
              {
                "descriptions": [
                  {
                    "cweId": "CWE-131",
                    "description": "Incorrect Calculation of Buffer Size",
                    "lang": "en",
                    "type": "CWE"
                  }
                ]
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-09-10T12:04:47.954Z",
              "orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
              "shortName": "redhat-SADP"
            },
            "references": [
              {
                "tags": [
                  "vdb-entry",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/security/cve/CVE-2026-39892"
              },
              {
                "name": "RHBZ#2456735",
                "tags": [
                  "issue-tracking",
                  "x_refsource_REDHAT"
                ],
                "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456735"
              },
              {
                "tags": [
                  "x_sadp-csaf-vex"
                ],
                "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-39892.json"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:24761"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:24762"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:30089"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:30088"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:24866"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:20338"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:43855"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:43854"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:43851"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:43670"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:43853"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:43651"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:46956"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:7295"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:42644"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:24977"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:37275"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:22840"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:22629"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:21017"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:24853"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:19375"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:22465"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:23361"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:24483"
              }
            ],
            "solutions": [
              {
                "lang": "en",
                "value": "RHSA-2026:24761: Red Hat Ansible Automation Platform 2.5 for RHEL 8, Red Hat Ansible Automation Platform 2.5 for RHEL 9"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:24762: Red Hat Ansible Automation Platform 2.6 for RHEL 9"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:30089: Red Hat AI Inference Server 3.3"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:30088: Red Hat AI Inference Server 3.3"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:24866: Red Hat Ansible Automation Platform 2.6"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:20338: Red Hat Discovery 2"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:43855: Red Hat Enterprise Linux AI 3.3"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:43854: Red Hat Enterprise Linux AI 3.3"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:43851: Red Hat Enterprise Linux AI 3.3"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:43670: Red Hat Enterprise Linux AI 3.3"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:43853: Red Hat Enterprise Linux AI 3.3"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:43651: Red Hat Enterprise Linux AI 3.3"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:46956: Red Hat Enterprise Linux AI 3.3"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:7295: Red Hat Hardened Images"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:42644: Red Hat OpenShift AI 2.25"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:24977: Red Hat OpenShift AI 2.25"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:37275: Red Hat OpenShift AI 3.3"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:22840: Red Hat Quay 3.10"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:22629: Red Hat Quay 3.12"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:21017: Red Hat Quay 3.14"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:24853: Red Hat Quay 3.15"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:19375: Red Hat Quay 3.16"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:22465: Red Hat Quay 3.17"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:23361: Red Hat Quay 3.9"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:24483: Red Hat Trusted Artifact Signer 1.4"
              }
            ],
            "timeline": [
              {
                "lang": "en",
                "time": "2026-04-08T22:00:59.416Z",
                "value": "Reported to Red Hat."
              },
              {
                "lang": "en",
                "time": "2026-04-08T20:49:41.967Z",
                "value": "Made public."
              }
            ],
            "title": "cryptography: Cryptography: Buffer overflow via non-contiguous buffer in API",
            "workarounds": [
              {
                "lang": "en",
                "value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."
              }
            ],
            "x_adpType": "supplier",
            "x_generator": {
              "engine": "sadp-cli 1.0.0"
            }
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "cryptography",
              "vendor": "pyca",
              "versions": [
                {
                  "status": "affected",
                  "version": "\u003e= 45.0.0, \u003c 46.0.7"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. From 45.0.0 to before 46.0.7, if a non-contiguous buffer was passed to APIs which accepted Python buffers (e.g. Hash.update()), this could lead to buffer overflows. This vulnerability is fixed in 46.0.7."
            }
          ],
          "metrics": [
            {
              "cvssV4_0": {
                "attackComplexity": "LOW",
                "attackRequirements": "NONE",
                "attackVector": "NETWORK",
                "baseScore": 6.9,
                "baseSeverity": "MEDIUM",
                "privilegesRequired": "NONE",
                "subAvailabilityImpact": "NONE",
                "subConfidentialityImpact": "NONE",
                "subIntegrityImpact": "NONE",
                "userInteraction": "NONE",
                "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N",
                "version": "4.0",
                "vulnAvailabilityImpact": "LOW",
                "vulnConfidentialityImpact": "NONE",
                "vulnIntegrityImpact": "NONE"
              }
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-119",
                  "description": "CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-04-08T20:49:41.967Z",
            "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
            "shortName": "GitHub_M"
          },
          "references": [
            {
              "name": "https://github.com/pyca/cryptography/security/advisories/GHSA-p423-j2cm-9vmq",
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "https://github.com/pyca/cryptography/security/advisories/GHSA-p423-j2cm-9vmq"
            }
          ],
          "source": {
            "advisory": "GHSA-p423-j2cm-9vmq",
            "discovery": "UNKNOWN"
          },
          "title": "cryptography has a buffer overflow if non-contiguous buffers were passed to APIs"
        }
      },
      "cveMetadata": {
        "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "assignerShortName": "GitHub_M",
        "cveId": "CVE-2026-39892",
        "datePublished": "2026-04-08T20:49:41.967Z",
        "dateReserved": "2026-04-07T20:32:03.011Z",
        "dateUpdated": "2026-09-10T12:04:47.954Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2026-32591 (GCVE-0-2026-32591)

    Vulnerability from nvd – Published: 2026-04-08 17:06 – Updated: 2026-09-10 12:05
    VLAI
    Title
    Mirror-registry: quay: server-side request forgery in proxy cache upstream registry configuration
    Summary
    A flaw was found in Red Hat Quay's Proxy Cache configuration feature. When an organization administrator configures an upstream registry for proxy caching, Quay makes a network connection to the specified registry hostname without verifying that it points to a legitimate external service. An attacker with organization administrator privileges could supply a crafted hostname to force the Quay server to make requests to internal network services, cloud infrastructure endpoints, or other resources that should not be accessible from the Quay application.
    SSVC
    Exploitation: none Automatable: no Technical Impact: partial
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-04-10 20:34 UTC
    CWE
    • CWE-918 - Server-Side Request Forgery (SSRF)
    References
    URL Tags
    https://access.redhat.com/errata/RHSA-2026:24833 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:40262 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:41031 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:41066 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:42146 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:42796 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:43052 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:48085 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/security/cve/CVE-2026-32591 vdb-entryx_refsource_REDHAT
    https://bugzilla.redhat.com/show_bug.cgi?id=2446965 issue-trackingx_refsource_REDHAT
    https://security.access.redhat.com/data/csaf/v2/v… x_sadp-csaf-vex
    Impacted products
    Vendor Product Version
    Red Hat Red Hat Quay 3.10 Unaffected: 1783750447 , < * (rpm)
        cpe:/a:redhat:quay:3.10::el8
    Create a notification for this product.
    Red Hat Red Hat Quay 3.12 Unaffected: 1783751865 , < * (rpm)
        cpe:/a:redhat:quay:3.12::el8
    Create a notification for this product.
    Red Hat Red Hat Quay 3.12 Unaffected: 1784353904 , < * (rpm)
        cpe:/a:redhat:quay:3.12::el8
    Create a notification for this product.
    Red Hat Red Hat Quay 3.15 Unaffected: 1784351966 , < * (rpm)
        cpe:/a:redhat:quay:3.15::el8
    Create a notification for this product.
    Red Hat Red Hat Quay 3.16 Unaffected: 1783955846 , < * (rpm)
        cpe:/a:redhat:quay:3.16::el9
    Create a notification for this product.
    Red Hat Red Hat Quay 3.17 Unaffected: 1780604033 , < * (rpm)
        cpe:/a:redhat:quay:3.17::el9
    Create a notification for this product.
    Red Hat Red Hat Quay 3.18 Unaffected: 1784987273 , < * (rpm)
        cpe:/a:redhat:quay:3.18::el9
    Create a notification for this product.
    Red Hat Red Hat Quay 3.9 Unaffected: 1784125838 , < * (rpm)
        cpe:/a:redhat:quay:3.9::el8
    Create a notification for this product.
    Red Hat mirror registry for Red Hat OpenShift     cpe:/a:redhat:mirror_registry:1
    Create a notification for this product.
    Red Hat mirror registry for Red Hat OpenShift 2     cpe:/a:redhat:mirror_registry:2
    Create a notification for this product.
    Red Hat Red Hat Quay 3.12 Unaffected: 1783751865 , < * (rpm)
    Unaffected: 1784353904 , < * (rpm)
        cpe:/a:redhat:quay:3.12::el8
    Create a notification for this product.
    Date Public
    2026-04-08 00:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-32591",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "partial"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-04-10T20:34:13.210994Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-05-27T14:52:42.383Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          },
          {
            "affected": [
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.10::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel8",
                "product": "Red Hat Quay 3.10",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1783750447",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.12::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel8",
                "product": "Red Hat Quay 3.12",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1783751865",
                    "versionType": "rpm"
                  },
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1784353904",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.15::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel8",
                "product": "Red Hat Quay 3.15",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1784351966",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.16::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel9",
                "product": "Red Hat Quay 3.16",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1783955846",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.17::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel9",
                "product": "Red Hat Quay 3.17",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1780604033",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.18::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel9",
                "product": "Red Hat Quay 3.18",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1784987273",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.9::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel8",
                "product": "Red Hat Quay 3.9",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1784125838",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:mirror_registry:1"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift/mirror-registry-rhel8",
                "product": "mirror registry for Red Hat OpenShift",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:mirror_registry:2"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift/mirror-registry-rhel8",
                "product": "mirror registry for Red Hat OpenShift 2",
                "vendor": "Red Hat"
              }
            ],
            "datePublic": "2026-04-08T00:00:00.000Z",
            "descriptions": [
              {
                "lang": "en",
                "value": "A flaw was found in Red Hat Quay\u0027s Proxy Cache configuration feature. When an organization administrator configures an upstream registry for proxy caching, Quay makes a network connection to the specified registry hostname without verifying that it points to a legitimate external service. An attacker with organization administrator privileges could supply a crafted hostname to force the Quay server to make requests to internal network services, cloud infrastructure endpoints, or other resources that should not be accessible from the Quay application."
              }
            ],
            "metrics": [
              {
                "other": {
                  "content": {
                    "namespace": "https://access.redhat.com/security/updates/classification/",
                    "value": "Important"
                  },
                  "type": "Red Hat severity rating"
                }
              },
              {
                "cvssV3_1": {
                  "attackComplexity": "LOW",
                  "attackVector": "NETWORK",
                  "availabilityImpact": "NONE",
                  "baseScore": 5.2,
                  "baseSeverity": "MEDIUM",
                  "confidentialityImpact": "HIGH",
                  "integrityImpact": "LOW",
                  "privilegesRequired": "HIGH",
                  "scope": "UNCHANGED",
                  "userInteraction": "REQUIRED",
                  "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:L/A:N",
                  "version": "3.1"
                },
                "format": "CVSS"
              }
            ],
            "problemTypes": [
              {
                "descriptions": [
                  {
                    "cweId": "CWE-918",
                    "description": "Server-Side Request Forgery (SSRF)",
                    "lang": "en",
                    "type": "CWE"
                  }
                ]
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-09-10T12:05:07.380Z",
              "orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
              "shortName": "redhat-SADP"
            },
            "references": [
              {
                "tags": [
                  "vdb-entry",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/security/cve/CVE-2026-32591"
              },
              {
                "name": "RHBZ#2446965",
                "tags": [
                  "issue-tracking",
                  "x_refsource_REDHAT"
                ],
                "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2446965"
              },
              {
                "tags": [
                  "x_sadp-csaf-vex"
                ],
                "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-32591.json"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:41031"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:42146"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:43052"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:42796"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:41066"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:24833"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:48085"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:40262"
              }
            ],
            "solutions": [
              {
                "lang": "en",
                "value": "RHSA-2026:41031: Red Hat Quay 3.10"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:42146: Red Hat Quay 3.12"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:43052: Red Hat Quay 3.12"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:42796: Red Hat Quay 3.15"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:41066: Red Hat Quay 3.16"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:24833: Red Hat Quay 3.17"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:48085: Red Hat Quay 3.18"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:40262: Red Hat Quay 3.9"
              }
            ],
            "timeline": [
              {
                "lang": "en",
                "time": "2026-03-12T15:09:38.210Z",
                "value": "Reported to Red Hat."
              },
              {
                "lang": "en",
                "time": "2026-04-08T00:00:00.000Z",
                "value": "Made public."
              }
            ],
            "title": "mirror-registry: quay: server-side request forgery in proxy cache upstream registry configuration",
            "x_adpType": "supplier",
            "x_generator": {
              "engine": "sadp-cli 1.0.0"
            }
          }
        ],
        "cna": {
          "affected": [
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:quay:3.10::el8"
              ],
              "defaultStatus": "affected",
              "packageName": "quay/quay-rhel8",
              "product": "Red Hat Quay 3.10",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "1783750447",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:quay:3.12::el8"
              ],
              "defaultStatus": "affected",
              "packageName": "quay/quay-rhel8",
              "product": "Red Hat Quay 3.12",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "1783751865",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:quay:3.12::el8"
              ],
              "defaultStatus": "affected",
              "packageName": "quay/quay-rhel8",
              "product": "Red Hat Quay 3.12",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "1784353904",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:quay:3.15::el8"
              ],
              "defaultStatus": "affected",
              "packageName": "quay/quay-rhel8",
              "product": "Red Hat Quay 3.15",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "1784351966",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:quay:3.16::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "quay/quay-rhel9",
              "product": "Red Hat Quay 3.16",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "1783955846",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:quay:3.17::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "quay/quay-rhel9",
              "product": "Red Hat Quay 3.17",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "1780604033",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:quay:3.18::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "quay/quay-rhel9",
              "product": "Red Hat Quay 3.18",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "1784987273",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:quay:3.9::el8"
              ],
              "defaultStatus": "affected",
              "packageName": "quay/quay-rhel8",
              "product": "Red Hat Quay 3.9",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "1784125838",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:mirror_registry:1"
              ],
              "defaultStatus": "affected",
              "packageName": "openshift/mirror-registry-rhel8",
              "product": "mirror registry for Red Hat OpenShift",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:mirror_registry:2"
              ],
              "defaultStatus": "affected",
              "packageName": "openshift/mirror-registry-rhel8",
              "product": "mirror registry for Red Hat OpenShift 2",
              "vendor": "Red Hat"
            }
          ],
          "credits": [
            {
              "lang": "en",
              "value": "Red Hat would like to thank Antony Di Scala and Michael Whale for reporting this issue."
            }
          ],
          "datePublic": "2026-04-08T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "A flaw was found in Red Hat Quay\u0027s Proxy Cache configuration feature. When an organization administrator configures an upstream registry for proxy caching, Quay makes a network connection to the specified registry hostname without verifying that it points to a legitimate external service. An attacker with organization administrator privileges could supply a crafted hostname to force the Quay server to make requests to internal network services, cloud infrastructure endpoints, or other resources that should not be accessible from the Quay application."
            }
          ],
          "metrics": [
            {
              "other": {
                "content": {
                  "namespace": "https://access.redhat.com/security/updates/classification/",
                  "value": "Important"
                },
                "type": "Red Hat severity rating"
              }
            },
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "NONE",
                "baseScore": 5.2,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "LOW",
                "privilegesRequired": "HIGH",
                "scope": "UNCHANGED",
                "userInteraction": "REQUIRED",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:L/A:N",
                "version": "3.1"
              },
              "format": "CVSS"
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-918",
                  "description": "Server-Side Request Forgery (SSRF)",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-09-09T22:07:37.479Z",
            "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
            "shortName": "redhat"
          },
          "references": [
            {
              "name": "RHSA-2026:24833",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2026:24833"
            },
            {
              "name": "RHSA-2026:40262",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2026:40262"
            },
            {
              "name": "RHSA-2026:41031",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2026:41031"
            },
            {
              "name": "RHSA-2026:41066",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2026:41066"
            },
            {
              "name": "RHSA-2026:42146",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2026:42146"
            },
            {
              "name": "RHSA-2026:42796",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2026:42796"
            },
            {
              "name": "RHSA-2026:43052",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2026:43052"
            },
            {
              "name": "RHSA-2026:48085",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2026:48085"
            },
            {
              "tags": [
                "vdb-entry",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/security/cve/CVE-2026-32591"
            },
            {
              "name": "RHBZ#2446965",
              "tags": [
                "issue-tracking",
                "x_refsource_REDHAT"
              ],
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2446965"
            }
          ],
          "timeline": [
            {
              "lang": "en",
              "time": "2026-03-12T15:09:38.210Z",
              "value": "Reported to Red Hat."
            },
            {
              "lang": "en",
              "time": "2026-04-08T00:00:00.000Z",
              "value": "Made public."
            }
          ],
          "title": "Mirror-registry: quay: server-side request forgery in proxy cache upstream registry configuration",
          "x_generator": {
            "engine": "cvelib 1.8.0"
          },
          "x_redhatCweChain": "CWE-918: Server-Side Request Forgery (SSRF)"
        }
      },
      "cveMetadata": {
        "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "assignerShortName": "redhat",
        "cveId": "CVE-2026-32591",
        "datePublished": "2026-04-08T17:06:58.222Z",
        "dateReserved": "2026-03-12T14:39:53.657Z",
        "dateUpdated": "2026-09-10T12:05:07.380Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2026-32590 (GCVE-0-2026-32590)

    Vulnerability from nvd – Published: 2026-04-08 17:04 – Updated: 2026-09-09 22:38
    VLAI
    Title
    Mirror-registry: remote code execution using pickle deserialization
    Summary
    A flaw was found in Red Hat Quay's handling of resumable container image layer uploads. The upload process stores intermediate data in the database using a format that, if tampered with, could allow an attacker to execute arbitrary code on the Quay server.
    SSVC
    Exploitation: none Automatable: no Technical Impact: total
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-04-08 19:14 UTC
    CWE
    • CWE-502 - Deserialization of Untrusted Data
    References
    URL Tags
    https://access.redhat.com/errata/RHSA-2026:19375 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:21017 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:22465 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:22629 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:22840 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:23361 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:24833 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:24853 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:28441 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:48085 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/security/cve/CVE-2026-32590 vdb-entryx_refsource_REDHAT
    https://bugzilla.redhat.com/show_bug.cgi?id=2446964 issue-trackingx_refsource_REDHAT
    Impacted products
    Vendor Product Version
    Red Hat mirror registry for Red Hat OpenShift 2.0 Unaffected: 1782177012 , < * (rpm)
        cpe:/a:redhat:mirror_registry:2.0::el8
    Create a notification for this product.
    Red Hat Red Hat Quay 3.10 Unaffected: 1779822261 , < * (rpm)
        cpe:/a:redhat:quay:3.10::el8
    Create a notification for this product.
    Red Hat Red Hat Quay 3.12 Unaffected: 1779811412 , < * (rpm)
        cpe:/a:redhat:quay:3.12::el8
    Create a notification for this product.
    Red Hat Red Hat Quay 3.14 Unaffected: 1779689392 , < * (rpm)
        cpe:/a:redhat:quay:3.14::el8
    Create a notification for this product.
    Red Hat Red Hat Quay 3.15 Unaffected: 1780891395 , < * (rpm)
        cpe:/a:redhat:quay:3.15::el8
    Create a notification for this product.
    Red Hat Red Hat Quay 3.16 Unaffected: 1779204086 , < * (rpm)
        cpe:/a:redhat:quay:3.16::el9
    Create a notification for this product.
    Red Hat Red Hat Quay 3.17 Unaffected: 1779922205 , < * (rpm)
        cpe:/a:redhat:quay:3.17::el9
    Create a notification for this product.
    Red Hat Red Hat Quay 3.17 Unaffected: 1780604033 , < * (rpm)
        cpe:/a:redhat:quay:3.17::el9
    Create a notification for this product.
    Red Hat Red Hat Quay 3.18 Unaffected: 1784987273 , < * (rpm)
        cpe:/a:redhat:quay:3.18::el9
    Create a notification for this product.
    Red Hat Red Hat Quay 3.9 Unaffected: 1779811473 , < * (rpm)
        cpe:/a:redhat:quay:3.9::el8
    Create a notification for this product.
    Red Hat mirror registry for Red Hat OpenShift     cpe:/a:redhat:mirror_registry:1
    Create a notification for this product.
    Date Public
    2026-04-08 00:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-32590",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "total"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-04-08T19:14:47.764287Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-04-08T19:14:55.136Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:mirror_registry:2.0::el8"
              ],
              "defaultStatus": "affected",
              "packageName": "openshift/mirror-registry-rhel8",
              "product": "mirror registry for Red Hat OpenShift 2.0",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "1782177012",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:quay:3.10::el8"
              ],
              "defaultStatus": "affected",
              "packageName": "quay/quay-rhel8",
              "product": "Red Hat Quay 3.10",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "1779822261",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:quay:3.12::el8"
              ],
              "defaultStatus": "affected",
              "packageName": "quay/quay-rhel8",
              "product": "Red Hat Quay 3.12",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "1779811412",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:quay:3.14::el8"
              ],
              "defaultStatus": "affected",
              "packageName": "quay/quay-rhel8",
              "product": "Red Hat Quay 3.14",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "1779689392",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:quay:3.15::el8"
              ],
              "defaultStatus": "affected",
              "packageName": "quay/quay-rhel8",
              "product": "Red Hat Quay 3.15",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "1780891395",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:quay:3.16::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "quay/quay-rhel9",
              "product": "Red Hat Quay 3.16",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "1779204086",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:quay:3.17::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "quay/quay-rhel9",
              "product": "Red Hat Quay 3.17",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "1779922205",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:quay:3.17::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "quay/quay-rhel9",
              "product": "Red Hat Quay 3.17",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "1780604033",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:quay:3.18::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "quay/quay-rhel9",
              "product": "Red Hat Quay 3.18",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "1784987273",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:quay:3.9::el8"
              ],
              "defaultStatus": "affected",
              "packageName": "quay/quay-rhel8",
              "product": "Red Hat Quay 3.9",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "1779811473",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:mirror_registry:1"
              ],
              "defaultStatus": "affected",
              "packageName": "openshift/mirror-registry-rhel8",
              "product": "mirror registry for Red Hat OpenShift",
              "vendor": "Red Hat"
            }
          ],
          "credits": [
            {
              "lang": "en",
              "value": "Red Hat would like to thank Antony Di Scala and Michael Whale for reporting this issue."
            }
          ],
          "datePublic": "2026-04-08T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "A flaw was found in Red Hat Quay\u0027s handling of resumable container image layer uploads. The upload process stores intermediate data in the database using a format that, if tampered with, could allow an attacker to execute arbitrary code on the Quay server."
            }
          ],
          "metrics": [
            {
              "other": {
                "content": {
                  "namespace": "https://access.redhat.com/security/updates/classification/",
                  "value": "Moderate"
                },
                "type": "Red Hat severity rating"
              }
            },
            {
              "cvssV3_1": {
                "attackComplexity": "HIGH",
                "attackVector": "NETWORK",
                "availabilityImpact": "HIGH",
                "baseScore": 7.1,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "LOW",
                "scope": "UNCHANGED",
                "userInteraction": "REQUIRED",
                "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "format": "CVSS"
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-502",
                  "description": "Deserialization of Untrusted Data",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-09-09T22:38:17.267Z",
            "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
            "shortName": "redhat"
          },
          "references": [
            {
              "name": "RHSA-2026:19375",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2026:19375"
            },
            {
              "name": "RHSA-2026:21017",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2026:21017"
            },
            {
              "name": "RHSA-2026:22465",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2026:22465"
            },
            {
              "name": "RHSA-2026:22629",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2026:22629"
            },
            {
              "name": "RHSA-2026:22840",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2026:22840"
            },
            {
              "name": "RHSA-2026:23361",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2026:23361"
            },
            {
              "name": "RHSA-2026:24833",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2026:24833"
            },
            {
              "name": "RHSA-2026:24853",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2026:24853"
            },
            {
              "name": "RHSA-2026:28441",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2026:28441"
            },
            {
              "name": "RHSA-2026:48085",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2026:48085"
            },
            {
              "tags": [
                "vdb-entry",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/security/cve/CVE-2026-32590"
            },
            {
              "name": "RHBZ#2446964",
              "tags": [
                "issue-tracking",
                "x_refsource_REDHAT"
              ],
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2446964"
            }
          ],
          "timeline": [
            {
              "lang": "en",
              "time": "2026-03-12T14:43:11.443Z",
              "value": "Reported to Red Hat."
            },
            {
              "lang": "en",
              "time": "2026-04-08T00:00:00.000Z",
              "value": "Made public."
            }
          ],
          "title": "Mirror-registry: remote code execution using pickle deserialization",
          "x_generator": {
            "engine": "cvelib 1.8.0"
          },
          "x_redhatCweChain": "CWE-502: Deserialization of Untrusted Data"
        }
      },
      "cveMetadata": {
        "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "assignerShortName": "redhat",
        "cveId": "CVE-2026-32590",
        "datePublished": "2026-04-08T17:04:22.870Z",
        "dateReserved": "2026-03-12T14:39:53.657Z",
        "dateUpdated": "2026-09-09T22:38:17.267Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2026-32589 (GCVE-0-2026-32589)

    Vulnerability from nvd – Published: 2026-04-08 17:04 – Updated: 2026-09-10 12:05
    VLAI
    Title
    Mirror-registry: quay: insecure direct object reference in blobupload
    Summary
    A flaw was found in Red Hat Quay's container image upload process. An authenticated user with push access to any repository on the registry can interfere with image uploads in progress by other users, including those in repositories they do not have access to. This could allow the attacker to read, modify, or cancel another user's in-progress image upload.
    SSVC
    Exploitation: none Automatable: no Technical Impact: partial
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-04-08 18:01 UTC
    CWE
    • CWE-639 - Authorization Bypass Through User-Controlled Key
    References
    URL Tags
    https://access.redhat.com/errata/RHSA-2026:19375 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:21017 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:22465 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:22629 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:22840 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:23361 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:24853 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:28441 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/security/cve/CVE-2026-32589 vdb-entryx_refsource_REDHAT
    https://bugzilla.redhat.com/show_bug.cgi?id=2446963 issue-trackingx_refsource_REDHAT
    https://security.access.redhat.com/data/csaf/v2/v… x_sadp-csaf-vex
    Impacted products
    Vendor Product Version
    Red Hat mirror registry for Red Hat OpenShift 2.0 Unaffected: 1782177012 , < * (rpm)
        cpe:/a:redhat:mirror_registry:2.0::el8
    Create a notification for this product.
    Red Hat Red Hat Quay 3.10 Unaffected: 1779822261 , < * (rpm)
        cpe:/a:redhat:quay:3.10::el8
    Create a notification for this product.
    Red Hat Red Hat Quay 3.12 Unaffected: 1779811412 , < * (rpm)
        cpe:/a:redhat:quay:3.12::el8
    Create a notification for this product.
    Red Hat Red Hat Quay 3.14 Unaffected: 1779689392 , < * (rpm)
        cpe:/a:redhat:quay:3.14::el8
    Create a notification for this product.
    Red Hat Red Hat Quay 3.15 Unaffected: 1780891395 , < * (rpm)
        cpe:/a:redhat:quay:3.15::el8
    Create a notification for this product.
    Red Hat Red Hat Quay 3.16 Unaffected: 1779204086 , < * (rpm)
        cpe:/a:redhat:quay:3.16::el9
    Create a notification for this product.
    Red Hat Red Hat Quay 3.17 Unaffected: 1779922205 , < * (rpm)
        cpe:/a:redhat:quay:3.17::el9
    Create a notification for this product.
    Red Hat Red Hat Quay 3.9 Unaffected: 1779811473 , < * (rpm)
        cpe:/a:redhat:quay:3.9::el8
    Create a notification for this product.
    Red Hat mirror registry for Red Hat OpenShift     cpe:/a:redhat:mirror_registry:1
    Create a notification for this product.
    Date Public
    2026-04-08 00:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-32589",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "partial"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-04-08T18:01:21.450628Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-04-08T18:01:32.402Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          },
          {
            "affected": [
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:mirror_registry:2.0::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift/mirror-registry-rhel8",
                "product": "mirror registry for Red Hat OpenShift 2.0",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782177012",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.10::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel8",
                "product": "Red Hat Quay 3.10",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779822261",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.12::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel8",
                "product": "Red Hat Quay 3.12",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779811412",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.14::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel8",
                "product": "Red Hat Quay 3.14",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779689392",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.15::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel8",
                "product": "Red Hat Quay 3.15",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1780891395",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.16::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel9",
                "product": "Red Hat Quay 3.16",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779204086",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.17::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel9",
                "product": "Red Hat Quay 3.17",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779922205",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.9::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel8",
                "product": "Red Hat Quay 3.9",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779811473",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:mirror_registry:1"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift/mirror-registry-rhel8",
                "product": "mirror registry for Red Hat OpenShift",
                "vendor": "Red Hat"
              }
            ],
            "datePublic": "2026-04-08T00:00:00.000Z",
            "descriptions": [
              {
                "lang": "en",
                "value": "A flaw was found in Red Hat Quay\u0027s container image upload process. An authenticated user with push access to any repository on the registry can interfere with image uploads in progress by other users, including those in repositories they do not have access to. This could allow the attacker to read, modify, or cancel another user\u0027s in-progress image upload."
              }
            ],
            "metrics": [
              {
                "other": {
                  "content": {
                    "namespace": "https://access.redhat.com/security/updates/classification/",
                    "value": "Important"
                  },
                  "type": "Red Hat severity rating"
                }
              },
              {
                "cvssV3_1": {
                  "attackComplexity": "LOW",
                  "attackVector": "NETWORK",
                  "availabilityImpact": "LOW",
                  "baseScore": 7.4,
                  "baseSeverity": "HIGH",
                  "confidentialityImpact": "LOW",
                  "integrityImpact": "LOW",
                  "privilegesRequired": "LOW",
                  "scope": "CHANGED",
                  "userInteraction": "NONE",
                  "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L",
                  "version": "3.1"
                },
                "format": "CVSS"
              }
            ],
            "problemTypes": [
              {
                "descriptions": [
                  {
                    "cweId": "CWE-639",
                    "description": "Authorization Bypass Through User-Controlled Key",
                    "lang": "en",
                    "type": "CWE"
                  }
                ]
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-09-10T12:05:01.059Z",
              "orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
              "shortName": "redhat-SADP"
            },
            "references": [
              {
                "tags": [
                  "vdb-entry",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/security/cve/CVE-2026-32589"
              },
              {
                "name": "RHBZ#2446963",
                "tags": [
                  "issue-tracking",
                  "x_refsource_REDHAT"
                ],
                "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2446963"
              },
              {
                "tags": [
                  "x_sadp-csaf-vex"
                ],
                "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-32589.json"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:22840"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:22629"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:21017"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:24853"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:19375"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:22465"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:23361"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:28441"
              }
            ],
            "solutions": [
              {
                "lang": "en",
                "value": "RHSA-2026:22840: Red Hat Quay 3.10"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:22629: Red Hat Quay 3.12"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:21017: Red Hat Quay 3.14"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:24853: Red Hat Quay 3.15"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:19375: Red Hat Quay 3.16"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:22465: Red Hat Quay 3.17"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:23361: Red Hat Quay 3.9"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:28441: mirror registry for Red Hat OpenShift 2.0"
              }
            ],
            "timeline": [
              {
                "lang": "en",
                "time": "2026-03-12T14:43:07.878Z",
                "value": "Reported to Red Hat."
              },
              {
                "lang": "en",
                "time": "2026-04-08T00:00:00.000Z",
                "value": "Made public."
              }
            ],
            "title": "mirror-registry: quay: insecure direct object reference in BlobUpload",
            "x_adpType": "supplier",
            "x_generator": {
              "engine": "sadp-cli 1.0.0"
            }
          }
        ],
        "cna": {
          "affected": [
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:mirror_registry:2.0::el8"
              ],
              "defaultStatus": "affected",
              "packageName": "openshift/mirror-registry-rhel8",
              "product": "mirror registry for Red Hat OpenShift 2.0",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "1782177012",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:quay:3.10::el8"
              ],
              "defaultStatus": "affected",
              "packageName": "quay/quay-rhel8",
              "product": "Red Hat Quay 3.10",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "1779822261",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:quay:3.12::el8"
              ],
              "defaultStatus": "affected",
              "packageName": "quay/quay-rhel8",
              "product": "Red Hat Quay 3.12",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "1779811412",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:quay:3.14::el8"
              ],
              "defaultStatus": "affected",
              "packageName": "quay/quay-rhel8",
              "product": "Red Hat Quay 3.14",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "1779689392",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:quay:3.15::el8"
              ],
              "defaultStatus": "affected",
              "packageName": "quay/quay-rhel8",
              "product": "Red Hat Quay 3.15",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "1780891395",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:quay:3.16::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "quay/quay-rhel9",
              "product": "Red Hat Quay 3.16",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "1779204086",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:quay:3.17::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "quay/quay-rhel9",
              "product": "Red Hat Quay 3.17",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "1779922205",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:quay:3.9::el8"
              ],
              "defaultStatus": "affected",
              "packageName": "quay/quay-rhel8",
              "product": "Red Hat Quay 3.9",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "1779811473",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:mirror_registry:1"
              ],
              "defaultStatus": "affected",
              "packageName": "openshift/mirror-registry-rhel8",
              "product": "mirror registry for Red Hat OpenShift",
              "vendor": "Red Hat"
            }
          ],
          "credits": [
            {
              "lang": "en",
              "value": "Red Hat would like to thank Antony Di Scala and Michael Whale for reporting this issue."
            }
          ],
          "datePublic": "2026-04-08T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "A flaw was found in Red Hat Quay\u0027s container image upload process. An authenticated user with push access to any repository on the registry can interfere with image uploads in progress by other users, including those in repositories they do not have access to. This could allow the attacker to read, modify, or cancel another user\u0027s in-progress image upload."
            }
          ],
          "metrics": [
            {
              "other": {
                "content": {
                  "namespace": "https://access.redhat.com/security/updates/classification/",
                  "value": "Important"
                },
                "type": "Red Hat severity rating"
              }
            },
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "LOW",
                "baseScore": 7.4,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "LOW",
                "integrityImpact": "LOW",
                "privilegesRequired": "LOW",
                "scope": "CHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L",
                "version": "3.1"
              },
              "format": "CVSS"
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-639",
                  "description": "Authorization Bypass Through User-Controlled Key",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-09-09T22:07:32.906Z",
            "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
            "shortName": "redhat"
          },
          "references": [
            {
              "name": "RHSA-2026:19375",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2026:19375"
            },
            {
              "name": "RHSA-2026:21017",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2026:21017"
            },
            {
              "name": "RHSA-2026:22465",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2026:22465"
            },
            {
              "name": "RHSA-2026:22629",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2026:22629"
            },
            {
              "name": "RHSA-2026:22840",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2026:22840"
            },
            {
              "name": "RHSA-2026:23361",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2026:23361"
            },
            {
              "name": "RHSA-2026:24853",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2026:24853"
            },
            {
              "name": "RHSA-2026:28441",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2026:28441"
            },
            {
              "tags": [
                "vdb-entry",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/security/cve/CVE-2026-32589"
            },
            {
              "name": "RHBZ#2446963",
              "tags": [
                "issue-tracking",
                "x_refsource_REDHAT"
              ],
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2446963"
            }
          ],
          "timeline": [
            {
              "lang": "en",
              "time": "2026-03-12T14:43:07.878Z",
              "value": "Reported to Red Hat."
            },
            {
              "lang": "en",
              "time": "2026-04-08T00:00:00.000Z",
              "value": "Made public."
            }
          ],
          "title": "Mirror-registry: quay: insecure direct object reference in blobupload",
          "x_generator": {
            "engine": "cvelib 1.8.0"
          },
          "x_redhatCweChain": "CWE-639: Authorization Bypass Through User-Controlled Key"
        }
      },
      "cveMetadata": {
        "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "assignerShortName": "redhat",
        "cveId": "CVE-2026-32589",
        "datePublished": "2026-04-08T17:04:20.284Z",
        "dateReserved": "2026-03-12T14:39:53.657Z",
        "dateUpdated": "2026-09-10T12:05:01.059Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2026-15927 (GCVE-0-2026-15927)

    Vulnerability from cvelistv5 – Published: 2026-07-21 04:45 – Updated: 2026-09-09 22:05
    VLAI
    Title
    Quay: mirror-registry: ssrf: repo-level mirror accepts external_reference without url validation
    Summary
    A flaw was found in Red Hat Quay's repository-level mirror configuration feature. The POST and PUT handlers in endpoints/api/mirror.py accept an external_reference parameter without SSRF validation, unlike the organization-level mirror handlers which apply validate_external_registry_url(). A repository administrator can supply a crafted hostname that causes the Quay mirror worker to make requests via Skopeo to internal network services, cloud metadata endpoints, or other resources not intended to be reachable from the Quay application.
    SSVC
    Exploitation: none Automatable: no Technical Impact: partial
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-07-21 13:12 UTC
    CWE
    • CWE-918 - Server-Side Request Forgery (SSRF)
    References
    URL Tags
    https://access.redhat.com/errata/RHSA-2026:50931 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:52968 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:53520 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:54395 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:63307 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/security/cve/CVE-2026-15927 vdb-entryx_refsource_REDHAT
    https://bugzilla.redhat.com/show_bug.cgi?id=2501256 issue-trackingx_refsource_REDHAT
    Impacted products
    Vendor Product Version
    Red Hat Red Hat Quay 3.10 Unaffected: 1786395065 , < * (rpm)
        cpe:/a:redhat:quay:3.10::el8
    Create a notification for this product.
    Red Hat Red Hat Quay 3.12 Unaffected: 1786170635 , < * (rpm)
        cpe:/a:redhat:quay:3.12::el8
    Create a notification for this product.
    Red Hat Red Hat Quay 3.15 Unaffected: 1788191755 , < * (rpm)
        cpe:/a:redhat:quay:3.15::el8
    Create a notification for this product.
    Red Hat Red Hat Quay 3.17 Unaffected: 1786181981 , < * (rpm)
        cpe:/a:redhat:quay:3.17::el9
    Create a notification for this product.
    Red Hat Red Hat Quay 3.9 Unaffected: 1785950004 , < * (rpm)
        cpe:/a:redhat:quay:3.9::el8
    Create a notification for this product.
    Red Hat mirror registry for Red Hat OpenShift 2     cpe:/a:redhat:mirror_registry:2
    Create a notification for this product.
    Date Public
    2026-07-16 00:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-15927",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "partial"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-07-21T13:12:11.259508Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-07-21T14:55:42.159Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:quay:3.10::el8"
              ],
              "defaultStatus": "affected",
              "packageName": "quay/quay-rhel8",
              "product": "Red Hat Quay 3.10",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "1786395065",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:quay:3.12::el8"
              ],
              "defaultStatus": "affected",
              "packageName": "quay/quay-rhel8",
              "product": "Red Hat Quay 3.12",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "1786170635",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:quay:3.15::el8"
              ],
              "defaultStatus": "affected",
              "packageName": "quay/quay-rhel8",
              "product": "Red Hat Quay 3.15",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "1788191755",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:quay:3.17::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "quay/quay-rhel9",
              "product": "Red Hat Quay 3.17",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "1786181981",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:quay:3.9::el8"
              ],
              "defaultStatus": "affected",
              "packageName": "quay/quay-rhel8",
              "product": "Red Hat Quay 3.9",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "1785950004",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:mirror_registry:2"
              ],
              "defaultStatus": "affected",
              "packageName": "openshift/mirror-registry-rhel8",
              "product": "mirror registry for Red Hat OpenShift 2",
              "vendor": "Red Hat"
            }
          ],
          "credits": [
            {
              "lang": "en",
              "value": "This issue was discovered by Martin Brodeur and Shaon Hossain (Red Hat)."
            }
          ],
          "datePublic": "2026-07-16T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "A flaw was found in Red Hat Quay\u0027s repository-level mirror configuration\nfeature. The POST and PUT handlers in endpoints/api/mirror.py accept an\nexternal_reference parameter without SSRF validation, unlike the\norganization-level mirror handlers which apply validate_external_registry_url().\nA repository administrator can supply a crafted hostname that causes the Quay\nmirror worker to make requests via Skopeo to internal network services, cloud\nmetadata endpoints, or other resources not intended to be reachable from the\nQuay application."
            }
          ],
          "metrics": [
            {
              "other": {
                "content": {
                  "namespace": "https://access.redhat.com/security/updates/classification/",
                  "value": "Important"
                },
                "type": "Red Hat severity rating"
              }
            },
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "NONE",
                "baseScore": 6.8,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "NONE",
                "privilegesRequired": "HIGH",
                "scope": "CHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N",
                "version": "3.1"
              },
              "format": "CVSS"
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-918",
                  "description": "Server-Side Request Forgery (SSRF)",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-09-09T22:05:45.812Z",
            "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
            "shortName": "redhat"
          },
          "references": [
            {
              "name": "RHSA-2026:50931",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2026:50931"
            },
            {
              "name": "RHSA-2026:52968",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2026:52968"
            },
            {
              "name": "RHSA-2026:53520",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2026:53520"
            },
            {
              "name": "RHSA-2026:54395",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2026:54395"
            },
            {
              "name": "RHSA-2026:63307",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2026:63307"
            },
            {
              "tags": [
                "vdb-entry",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/security/cve/CVE-2026-15927"
            },
            {
              "name": "RHBZ#2501256",
              "tags": [
                "issue-tracking",
                "x_refsource_REDHAT"
              ],
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2501256"
            }
          ],
          "timeline": [
            {
              "lang": "en",
              "time": "2026-02-13T00:00:00.000Z",
              "value": "Reported to Red Hat."
            },
            {
              "lang": "en",
              "time": "2026-07-16T00:00:00.000Z",
              "value": "Made public."
            }
          ],
          "title": "Quay: mirror-registry: ssrf: repo-level mirror accepts external_reference without url validation",
          "workarounds": [
            {
              "lang": "en",
              "value": "Restrict network egress from Quay mirror worker pods/containers using network\npolicies or firewall rules to block access to internal network ranges\n(10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16) and cloud metadata endpoints\n(169.254.169.254, metadata.google.internal). Limit repository creation and\nadmin privileges to trusted users via Quay\u0027s RBAC configuration. If\nrepository-level mirroring is not required, disable the feature or restrict\naccess to the mirror API endpoints through a reverse proxy."
            }
          ],
          "x_generator": {
            "engine": "cvelib 1.8.0"
          },
          "x_redhatCweChain": "CWE-918: Server-Side Request Forgery (SSRF)"
        }
      },
      "cveMetadata": {
        "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "assignerShortName": "redhat",
        "cveId": "CVE-2026-15927",
        "datePublished": "2026-07-21T04:45:27.751Z",
        "dateReserved": "2026-07-16T06:31:41.405Z",
        "dateUpdated": "2026-09-09T22:05:45.812Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2026-39821 (GCVE-0-2026-39821)

    Vulnerability from cvelistv5 – Published: 2026-05-22 15:01 – Updated: 2026-09-10 12:05
    VLAI
    Title
    Invoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna
    Summary
    The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. For example, ToUnicode("xn--example-.com") incorrectly returns the name "example.com" rather than an error. This behavior can lead to privilege escalation in programs using the idna package. For example, a program which performs privilege checks on the ASCII hostname may reject "example.com" but permit "xn--example-.com". If that program subsequently converts the ASCII hostname to Unicode, it will inadvertently permits access to the Unicode name "example.com".
    SSVC
    Exploitation: none Automatable: no Technical Impact: total
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-05-23 03:55 UTC
    CWE
    • CWE-1289 - Improper Validation of Unsafe Equivalence in Input
    Assigner
    References
    URL Tags
    https://go.dev/cl/767220
    https://go.dev/issue/78760
    https://groups.google.com/g/golang-announce/c/iI-…
    https://groups.google.com/g/golang-announce/c/94p…
    https://pkg.go.dev/vuln/GO-2026-5026
    https://access.redhat.com/security/cve/CVE-2026-39821 vdb-entryx_refsource_REDHAT
    https://bugzilla.redhat.com/show_bug.cgi?id=2480756 issue-trackingx_refsource_REDHAT
    https://security.access.redhat.com/data/csaf/v2/v… x_sadp-csaf-vex
    https://access.redhat.com/errata/RHSA-2026:42079 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:42080 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:41019 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:54191 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:42078 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:54757 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:54580 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:34789 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:42082 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:36796 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:57845 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:62549 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:42150 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:42151 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:42240 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:49702 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:56143 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:59546 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:53413 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:63134 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:53374 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:51187 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:30855 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:46395 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:37436 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:35827 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:35826 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:65534 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:34357 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:39005 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:39573 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:38995 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:30853 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:35830 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:35831 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:66016 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:41930 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:61253 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:65359 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:61245 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:60354 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:57649 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:59549 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:53412 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:59562 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:60315 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:49712 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:51112 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:56223 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:52826 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:53415 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:57541 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:54401 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:30854 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:37435 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:35828 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:35829 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:65886 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:34359 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:65153 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:39879 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:54531 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:34342 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:36808 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:34364 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:56340 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:47952 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:50843 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:41030 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:44622 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:47149 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:53530 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:51033 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:43692 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:60387 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:30651 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:47737 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:26546 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:26547 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:36207 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:42132 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:42142 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:36651 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:40945 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:40118 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:33531 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:33524 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:23262 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:23264 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:54441 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:41928 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:50300 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:43038 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:42644 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:65126 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:60520 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:36648 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:41036 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:36820 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:35994 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:35993 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:33155 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:33160 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:33163 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:33173 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:33183 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:54287 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:54284 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:54286 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:54285 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:54274 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:54283 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:44624 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:56431 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:37387 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:41031 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:42146 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:43052 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:42796 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:41066 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:54395 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:40262 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:51341 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:51194 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:36797 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:42043 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:42047 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:42050 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:42051 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:42049 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:42048 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:42852 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:54435 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:57194 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:36105 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:36167 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:41055 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:47735 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:30650 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:36883 vendor-advisoryx_refsource_REDHAT
    Impacted products
    Vendor Product Version
    Go standard library net/http Affected: 0 , < 1.25.13 (semver)
    Affected: 1.26.0-0 , < 1.26.6 (semver)
    Affected: 1.27.0-0 , < 1.27.0-rc.3 (semver)
    Create a notification for this product.
    Go standard library net/http/internal/http2 Affected: 0 , < 1.25.13 (semver)
    Affected: 1.26.0-0 , < 1.26.6 (semver)
    Affected: 1.27.0-0 , < 1.27.0-rc.3 (semver)
    Create a notification for this product.
    golang.org/x/net golang.org/x/net/idna Affected: 0 , < 0.55.0 (semver)
    Create a notification for this product.
    Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 8 Unaffected: 0:1.6.6-1.el8ap , < * (rpm)
        cpe:/a:redhat:ansible_automation_platform:2.5::el8
    Create a notification for this product.
    Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 9 Unaffected: 0:1.6.6-1.el9ap , < * (rpm)
        cpe:/a:redhat:ansible_automation_platform:2.5::el9
    Create a notification for this product.
    Red Hat Red Hat Ansible Automation Platform 2.6 for RHEL 10 Unaffected: 0:1.6.6-1.el10ap , < * (rpm)
        cpe:/a:redhat:ansible_automation_platform:2.6::el10
    Create a notification for this product.
    Red Hat Red Hat Ansible Automation Platform 2.6 for RHEL 9 Unaffected: 0:1.6.6-1.el9ap , < * (rpm)
        cpe:/a:redhat:ansible_automation_platform:2.6::el9
    Create a notification for this product.
    Red Hat Red Hat Ansible Automation Platform 2.7 for RHEL 10 Unaffected: 0:1.6.6-1.el10ap , < * (rpm)
        cpe:/a:redhat:ansible_automation_platform:2.7::el10
    Create a notification for this product.
    Red Hat Red Hat Ansible Automation Platform 2.7 for RHEL 9 Unaffected: 0:1.6.6-1.el9ap , < * (rpm)
        cpe:/a:redhat:ansible_automation_platform:2.7::el9
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 10 Unaffected: 0:3.7.1-5.el10_2.5 , < * (rpm)
        cpe:/o:redhat:enterprise_linux:10.2
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 10 Unaffected: 0:0.152.1-1.el10_2 , < * (rpm)
        cpe:/o:redhat:enterprise_linux:10.2
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 10 Unaffected: 0:5.3.0-7.el10_2 , < * (rpm)
        cpe:/o:redhat:enterprise_linux:10.2
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 10 Unaffected: 0:10.2.6-27.el10_2 , < * (rpm)
        cpe:/o:redhat:enterprise_linux:10.2
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 10 Unaffected: 0:1.26.5-1.el10_2 , < * (rpm)
        cpe:/o:redhat:enterprise_linux:10.2
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 10 Unaffected: 1:0.3.8-6.el10_2 , < * (rpm)
        cpe:/o:redhat:enterprise_linux:10.2
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 10 Unaffected: 0:0.4.9.2-1.el10_2 , < * (rpm)
        cpe:/o:redhat:enterprise_linux:10.2
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 10 Unaffected: 0:1.0.1-2.el10_2.3 , < * (rpm)
        cpe:/o:redhat:enterprise_linux:10.2
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 10 Unaffected: 0:52.1-1.el10_2.2 , < * (rpm)
        cpe:/o:redhat:enterprise_linux:10.2
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 10.0 Extended Update Support Unaffected: 0:1.26.5-1.el10_0 , < * (rpm)
        cpe:/o:redhat:enterprise_linux_eus:10.0
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 10.0 Extended Update Support Unaffected: 0:0.4.7-5.el10_0 , < * (rpm)
        cpe:/o:redhat:enterprise_linux_eus:10.0
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 10.0 Extended Update Support Unaffected: 1:0.3.2-5.el10_0 , < * (rpm)
        cpe:/o:redhat:enterprise_linux_eus:10.0
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 10.0 Extended Update Support Unaffected: 0:0.152.1-1.el10_0 , < * (rpm)
        cpe:/o:redhat:enterprise_linux_eus:10.0
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 10.0 Extended Update Support Unaffected: 0:5.3.0-1.el10_0 , < * (rpm)
        cpe:/o:redhat:enterprise_linux_eus:10.0
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 10.0 Extended Update Support Unaffected: 0:2.21.0-2.el10_0.3 , < * (rpm)
        cpe:/o:redhat:enterprise_linux_eus:10.0
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 10.0 Extended Update Support Unaffected: 0:134.1-10.el10_0 , < * (rpm)
        cpe:/o:redhat:enterprise_linux_eus:10.0
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 7 Extended Lifecycle Support Unaffected: 0:0.11-1.el7_9 , < * (rpm)
        cpe:/o:redhat:rhel_els:7
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 8 Unaffected: 0:3.4.1-11.el8_10 , < * (rpm)
        cpe:/a:redhat:enterprise_linux:8
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 8 Unaffected: 0:9.2.10-31.el8_10 , < * (rpm)
        cpe:/a:redhat:enterprise_linux:8
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 8 Unaffected: 0:5.1.1-16.el8_10 , < * (rpm)
        cpe:/a:redhat:enterprise_linux:8
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 8 Unaffected: 8100020260710105056.a3795dee , < * (rpm)
        cpe:/a:redhat:enterprise_linux:8
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 8 Unaffected: 1:0.2.5-9.el8_10 , < * (rpm)
        cpe:/a:redhat:enterprise_linux:8
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 8 Unaffected: 0:101.5-2.el8_10 , < * (rpm)
        cpe:/a:redhat:enterprise_linux:8
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 9 Unaffected: 0:3.7.1-4.el9_8.1 , < * (rpm)
        cpe:/a:redhat:enterprise_linux:9
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 9 Unaffected: 0:0.152.1-1.el9_8 , < * (rpm)
        cpe:/a:redhat:enterprise_linux:9
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 9 Unaffected: 0:10.2.6-23.el9_8 , < * (rpm)
        cpe:/a:redhat:enterprise_linux:9
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 9 Unaffected: 0:5.1.1-17.el9_8 , < * (rpm)
        cpe:/a:redhat:enterprise_linux:9
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 9 Unaffected: 0:1.26.5-1.el9_8 , < * (rpm)
        cpe:/a:redhat:enterprise_linux:9
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 9 Unaffected: 1:0.2.7-8.el9_8 , < * (rpm)
        cpe:/a:redhat:enterprise_linux:9
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 9 Unaffected: 0:165.1-4.el9_8.1 , < * (rpm)
        cpe:/a:redhat:enterprise_linux:9
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 9 Unaffected: 0:52.1-1.el9_8.2 , < * (rpm)
        cpe:/a:redhat:enterprise_linux:9
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions Unaffected: 1:0.2.2-1.el9_2.4 , < * (rpm)
        cpe:/a:redhat:rhel_e4s:9.2
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions Unaffected: 0:76.1-7.el9_2 , < * (rpm)
        cpe:/a:redhat:rhel_e4s:9.2
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions Unaffected: 0:1.26.5-1.el9_2 , < * (rpm)
        cpe:/a:redhat:rhel_e4s:9.2
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions Unaffected: 0:2.15.0-2.el9_2.1 , < * (rpm)
        cpe:/a:redhat:rhel_e4s:9.2
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions Unaffected: 0:0.152.1-1.el9_4 , < * (rpm)
        cpe:/a:redhat:rhel_e4s:9.4
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions Unaffected: 0:1.26.5-1.el9_4 , < * (rpm)
        cpe:/a:redhat:rhel_e4s:9.4
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions Unaffected: 0:2.17.0-2.el9_4.1 , < * (rpm)
        cpe:/a:redhat:rhel_e4s:9.4
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions Unaffected: 0:101.3-4.el9_4.5 , < * (rpm)
        cpe:/a:redhat:rhel_e4s:9.4
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions Unaffected: 1:0.2.4-9.el9_4 , < * (rpm)
        cpe:/a:redhat:rhel_e4s:9.4
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 9.6 Extended Update Support Unaffected: 0:1.26.5-1.el9_6 , < * (rpm)
        cpe:/a:redhat:rhel_eus:9.6
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 9.6 Extended Update Support Unaffected: 0:10.2.6-22.el9_6 , < * (rpm)
        cpe:/a:redhat:rhel_eus:9.6
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 9.6 Extended Update Support Unaffected: 0:2.21.0-7.el9_6 , < * (rpm)
        cpe:/a:redhat:rhel_eus:9.6
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 9.6 Extended Update Support Unaffected: 0:0.152.1-1.el9_6 , < * (rpm)
        cpe:/a:redhat:rhel_eus:9.6
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 9.6 Extended Update Support Unaffected: 1:0.2.7-1.el9_6.5 , < * (rpm)
        cpe:/a:redhat:rhel_eus:9.6
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 9.6 Extended Update Support Unaffected: 0:5.1.1-15.el9_6 , < * (rpm)
        cpe:/a:redhat:rhel_eus:9.6
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 9.6 Extended Update Support Unaffected: 0:132.2-10.el9_6 , < * (rpm)
        cpe:/a:redhat:rhel_eus:9.6
    Create a notification for this product.
    Red Hat Red Hat OpenShift Container Platform 4.16 Unaffected: 0:4.16.69-202608202336.p0.g763478c.assembly.4.16.69.el9 , < * (rpm)
        cpe:/a:redhat:openshift:4.16::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Container Platform 4.16 Unaffected: 416.94.202609011112-0 , < * (rpm)
        cpe:/a:redhat:openshift:4.16::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Container Platform 4.20 Unaffected: 0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el8 , < * (rpm)
        cpe:/a:redhat:openshift:4.20::el8
    Create a notification for this product.
    Red Hat Red Hat OpenShift Container Platform 4.22 Unaffected: 0:4.22.0-202606291123.p2.ga17a3e3.assembly.stream.el8 , < * (rpm)
        cpe:/a:redhat:openshift:4.22::el8
    Create a notification for this product.
    Red Hat Red Hat OpenStack Platform 16.2 Unaffected: 0:3.3.23-22.el8ost , < * (rpm)
        cpe:/a:redhat:openstack:16.2::el8
    Create a notification for this product.
    Red Hat Red Hat Satellite 6.16 for RHEL 8 Unaffected: 0:0.0.4-1.el8sat , < * (rpm)
        cpe:/a:redhat:satellite:6.16::el8
    Create a notification for this product.
    Red Hat Red Hat Satellite 6.16 for RHEL 9 Unaffected: 0:0.0.4-1.el9sat , < * (rpm)
        cpe:/a:redhat:satellite:6.16::el9
    Create a notification for this product.
    Red Hat Red Hat Satellite 6.17 for RHEL 9 Unaffected: 0:0.0.4-1.el9sat , < * (rpm)
        cpe:/a:redhat:satellite:6.17::el9
    Create a notification for this product.
    Red Hat Red Hat Satellite 6.18 for RHEL 9 Unaffected: 0:0.0.4-1.el9sat , < * (rpm)
        cpe:/a:redhat:satellite:6.18::el9
    Create a notification for this product.
    Red Hat Red Hat Satellite 6.19 for RHEL 9 Unaffected: 0:0.0.4-1.el9sat , < * (rpm)
        cpe:/a:redhat:satellite:6.19::el9
    Create a notification for this product.
    Red Hat RHEM 1.0 for RHEL 9 Unaffected: 0:1.0.3-1.el9em , < * (rpm)
        cpe:/a:redhat:edge_manager:1.0::el9
    Create a notification for this product.
    Red Hat RHEM 1.1 for RHEL 10 Unaffected: 0:1.1.3-1.el10em , < * (rpm)
        cpe:/a:redhat:edge_manager:1.1::el10
    Create a notification for this product.
    Red Hat RHEM 1.1 for RHEL 9 Unaffected: 0:1.1.3-1.el9em , < * (rpm)
        cpe:/a:redhat:edge_manager:1.1::el9
    Create a notification for this product.
    Red Hat Streams for Apache Kafka 3.2.1 Unaffected: danielqsj-kafka_exporter , < * (rpm)
        cpe:/a:redhat:amq_streams:3.2::el9
    Create a notification for this product.
    Red Hat Cert Manager support for Red Hat OpenShift release 1.19 Unaffected: 1786613805 , < * (rpm)
        cpe:/a:redhat:cert_manager:1.19::el9
    Create a notification for this product.
    Red Hat Cluster Observability Operator 1.5.0 Unaffected: 1782840519 , < * (rpm)
        cpe:/a:redhat:cluster_observability_operator:1.5::el9
    Create a notification for this product.
    Red Hat Cluster Observability Operator 1.5.0 Unaffected: 1782839981 , < * (rpm)
        cpe:/a:redhat:cluster_observability_operator:1.5::el9
    Create a notification for this product.
    Red Hat Cluster Observability Operator 1.5.0 Unaffected: 1782839193 , < * (rpm)
        cpe:/a:redhat:cluster_observability_operator:1.5::el9
    Create a notification for this product.
    Red Hat Cluster Observability Operator 1.5.0 Unaffected: 1782838753 , < * (rpm)
        cpe:/a:redhat:cluster_observability_operator:1.5::el9
    Create a notification for this product.
    Red Hat Cluster Observability Operator 1.5.0 Unaffected: 1782839279 , < * (rpm)
        cpe:/a:redhat:cluster_observability_operator:1.5::el9
    Create a notification for this product.
    Red Hat Cluster Observability Operator 1.5.0 Unaffected: 1782840539 , < * (rpm)
        cpe:/a:redhat:cluster_observability_operator:1.5::el9
    Create a notification for this product.
    Red Hat Cluster Observability Operator 1.5.0 Unaffected: 1782844225 , < * (rpm)
        cpe:/a:redhat:cluster_observability_operator:1.5::el9
    Create a notification for this product.
    Red Hat Cluster Observability Operator 1.5.0 Unaffected: 1782839658 , < * (rpm)
        cpe:/a:redhat:cluster_observability_operator:1.5::el9
    Create a notification for this product.
    Red Hat Cluster Observability Operator 1.5.0 Unaffected: 1782838476 , < * (rpm)
        cpe:/a:redhat:cluster_observability_operator:1.5::el9
    Create a notification for this product.
    Red Hat DevWorkspace Operator 0.42 Unaffected: 1782401674 , < * (rpm)
        cpe:/a:redhat:devworkspace:0.42::el9
    Create a notification for this product.
    Red Hat Logging for Red Hat OpenShift 6 Unaffected: 1785418851 , < * (rpm)
        cpe:/a:redhat:logging:6.0::el9
    Create a notification for this product.
    Red Hat Logging for Red Hat OpenShift 6.2 Unaffected: 1784747813 , < * (rpm)
        cpe:/a:redhat:logging:6.2::el9
    Create a notification for this product.
    Red Hat Logging Subsystem for Red Hat OpenShift 6.4 Unaffected: 1782408807 , < * (rpm)
        cpe:/a:redhat:logging:6.4::el9
    Create a notification for this product.
    Red Hat Logging Subsystem for Red Hat OpenShift 6.5 Unaffected: 1786645107 , < * (rpm)
        cpe:/a:redhat:logging:6.5::el9
    Create a notification for this product.
    Red Hat multicluster engine for Kubernetes 2.11 Unaffected: 1786912006 , < * (rpm)
        cpe:/a:redhat:multicluster_engine:2.11::el9
    Create a notification for this product.
    Red Hat multicluster engine for Kubernetes 2.6 Unaffected: 1783332008 , < * (rpm)
        cpe:/a:redhat:multicluster_engine:2.6::el8
    Create a notification for this product.
    Red Hat multicluster engine for Kubernetes 2.6 Unaffected: 1783333268 , < * (rpm)
        cpe:/a:redhat:multicluster_engine:2.6::el9
    Create a notification for this product.
    Red Hat multicluster engine for Kubernetes 2.6 Unaffected: 1783985999 , < * (rpm)
        cpe:/a:redhat:multicluster_engine:2.6::el9
    Create a notification for this product.
    Red Hat multicluster engine for Kubernetes 2.8 Unaffected: 1782477094 , < * (rpm)
        cpe:/a:redhat:multicluster_engine:2.8::el9
    Create a notification for this product.
    Red Hat multicluster engine for Kubernetes 2.8 Unaffected: 1782308518 , < * (rpm)
        cpe:/a:redhat:multicluster_engine:2.8::el9
    Create a notification for this product.
    Red Hat multicluster engine for Kubernetes 2.8 Unaffected: 1784737366 , < * (rpm)
        cpe:/a:redhat:multicluster_engine:2.8::el9
    Create a notification for this product.
    Red Hat multicluster engine for Kubernetes 2.8 Unaffected: 1784306906 , < * (rpm)
        cpe:/a:redhat:multicluster_engine:2.8::el9
    Create a notification for this product.
    Red Hat multicluster engine for Kubernetes 2.9 Unaffected: 1783260894 , < * (rpm)
        cpe:/a:redhat:multicluster_engine:2.9::el9
    Create a notification for this product.
    Red Hat Multicluster Global Hub 1.4.5 Unaffected: 1784061472 , < * (rpm)
        cpe:/a:redhat:multicluster_globalhub:1.4::el9
    Create a notification for this product.
    Red Hat Multicluster Global Hub 1.6.5 Unaffected: 1784152046 , < * (rpm)
        cpe:/a:redhat:multicluster_globalhub:1.6::el9
    Create a notification for this product.
    Red Hat Multicluster Global Hub 1.7.0 Unaffected: 1784768332 , < * (rpm)
    Unaffected: 1785775948 , < * (rpm)
        cpe:/a:redhat:multicluster_globalhub:1.7::el9
    Create a notification for this product.
    Red Hat OpenShift API for Data Protection 1.3 Unaffected: 1785180878 , < * (rpm)
        cpe:/a:redhat:openshift_api_data_protection:1.3::el9
    Create a notification for this product.
    Red Hat OpenShift API for Data Protection 1.6 Unaffected: 1784058822 , < * (rpm)
        cpe:/a:redhat:openshift_api_data_protection:1.6::el9
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.11 Unaffected: 1787685239 , < * (rpm)
        cpe:/a:redhat:acm:2.11::el9
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.13 Unaffected: 1782383730 , < * (rpm)
        cpe:/a:redhat:acm:2.13::el9
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.13 Unaffected: 1782156698 , < * (rpm)
        cpe:/a:redhat:acm:2.13::el9
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.13 Unaffected: 1782157632 , < * (rpm)
        cpe:/a:redhat:acm:2.13::el9
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.13 Unaffected: 1782157829 , < * (rpm)
        cpe:/a:redhat:acm:2.13::el9
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.13 Unaffected: 1782157630 , < * (rpm)
        cpe:/a:redhat:acm:2.13::el9
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.13 Unaffected: 1782382580 , < * (rpm)
        cpe:/a:redhat:acm:2.13::el9
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.13 Unaffected: 1782383255 , < * (rpm)
        cpe:/a:redhat:acm:2.13::el9
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.13 Unaffected: 1782488873 , < * (rpm)
        cpe:/a:redhat:acm:2.13::el9
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.13 Unaffected: 1782157507 , < * (rpm)
        cpe:/a:redhat:acm:2.13::el9
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.13 Unaffected: 1782396604 , < * (rpm)
        cpe:/a:redhat:acm:2.13::el9
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.13 Unaffected: 1782382711 , < * (rpm)
        cpe:/a:redhat:acm:2.13::el9
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.13 Unaffected: 1782157546 , < * (rpm)
        cpe:/a:redhat:acm:2.13::el9
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.13 Unaffected: 1782157471 , < * (rpm)
        cpe:/a:redhat:acm:2.13::el9
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.13 Unaffected: 1782157018 , < * (rpm)
        cpe:/a:redhat:acm:2.13::el9
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.13 Unaffected: 1782156920 , < * (rpm)
        cpe:/a:redhat:acm:2.13::el9
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.13 Unaffected: 1782374537 , < * (rpm)
        cpe:/a:redhat:acm:2.13::el9
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.13 Unaffected: 1782383676 , < * (rpm)
        cpe:/a:redhat:acm:2.13::el9
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.13 Unaffected: 1782156860 , < * (rpm)
        cpe:/a:redhat:acm:2.13::el9
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.13 Unaffected: 1782465412 , < * (rpm)
        cpe:/a:redhat:acm:2.13::el9
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.13 Unaffected: 1784652040 , < * (rpm)
        cpe:/a:redhat:acm:2.13::el9
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.13 Unaffected: 1784638644 , < * (rpm)
        cpe:/a:redhat:acm:2.13::el9
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.13 Unaffected: 1784740143 , < * (rpm)
        cpe:/a:redhat:acm:2.13::el9
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Security 4.9 Unaffected: 1781686446 , < * (rpm)
        cpe:/a:redhat:advanced_cluster_security:4.9::el8
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Security for Kubernetes 4.10 Unaffected: 1781686458 , < * (rpm)
        cpe:/a:redhat:advanced_cluster_security:4.10::el8
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Security for Kubernetes 4.11 Unaffected: 1783352589 , < * (rpm)
        cpe:/a:redhat:advanced_cluster_security:4.11::el9
    Create a notification for this product.
    Red Hat Red Hat Ansible Automation Platform 2.6 Unaffected: 1783962464 , < * (rpm)
        cpe:/a:redhat:ansible_automation_platform:2.6::el9
    Create a notification for this product.
    Red Hat Red Hat Ansible Automation Platform 2.7 Unaffected: 1783917963 , < * (rpm)
        cpe:/a:redhat:ansible_automation_platform:2.7::el9
    Create a notification for this product.
    Red Hat Red Hat Edge Manager 1.0 Unaffected: 1783502438 , < * (rpm)
        cpe:/a:redhat:edge_manager:1.0::el9
    Create a notification for this product.
    Red Hat Red Hat Edge Manager 1.1 Unaffected: 1784194574 , < * (rpm)
        cpe:/a:redhat:edge_manager:1.1::el10
    Create a notification for this product.
    Red Hat Red Hat Edge Manager 1.1 Unaffected: 1784127736 , < * (rpm)
        cpe:/a:redhat:edge_manager:1.1::el9
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux AI 3.4 Unaffected: 1782804957 , < * (rpm)
        cpe:/a:redhat:enterprise_linux_ai:3.4::el9
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux AI 3.4 Unaffected: 1782758407 , < * (rpm)
        cpe:/a:redhat:enterprise_linux_ai:3.4::el9
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux AI 3.4 Unaffected: 1782758410 , < * (rpm)
        cpe:/a:redhat:enterprise_linux_ai:3.4::el9
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux AI 3.4 Unaffected: 1782754093 , < * (rpm)
        cpe:/a:redhat:enterprise_linux_ai:3.4::el9
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux AI 3.4 Unaffected: 1782744816 , < * (rpm)
        cpe:/a:redhat:enterprise_linux_ai:3.4::el9
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux AI 3.4 Unaffected: 1782758409 , < * (rpm)
        cpe:/a:redhat:enterprise_linux_ai:3.4::el9
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux AI 3.4 Unaffected: 1782744830 , < * (rpm)
        cpe:/a:redhat:enterprise_linux_ai:3.4::el9
    Create a notification for this product.
    Red Hat Red Hat Hardened Images Unaffected: 1.25.11-2.hum1 , < * (rpm)
        cpe:/a:redhat:hummingbird:1
    Create a notification for this product.
    Red Hat Red Hat Hardened Images Unaffected: 1.26.4-2.hum1 , < * (rpm)
        cpe:/a:redhat:hummingbird:1
    Create a notification for this product.
    Red Hat Red Hat Lightspeed (formerly Insights) for Runtimes 1.0 Unaffected: 1786483782 , < * (rpm)
        cpe:/a:redhat:lightspeed_for_runtimes:1.0::el9
    Create a notification for this product.
    Red Hat Red Hat Migration Toolkit 1.8 Unaffected: 1783953372 , < * (rpm)
        cpe:/a:redhat:rhmt:1.8::el8
    Create a notification for this product.
    Red Hat Red Hat Migration Toolkit for Applications 8.1 Unaffected: 1785171639 , < * (rpm)
        cpe:/a:redhat:migration_toolkit_applications:8.1::el9
    Create a notification for this product.
    Red Hat Red Hat Migration Toolkit for Applications 8.2 Unaffected: 1784211378 , < * (rpm)
        cpe:/a:redhat:migration_toolkit_applications:8.2::el9
    Create a notification for this product.
    Red Hat Red Hat multicluster global hub 1.5.3 Unaffected: 1784127491 , < * (rpm)
        cpe:/a:redhat:multicluster_globalhub:1.5::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 2.25 Unaffected: 1783544461 , < * (rpm)
        cpe:/a:redhat:openshift_ai:2.25::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 2.25 Unaffected: 1784004914 , < * (rpm)
        cpe:/a:redhat:openshift_ai:2.25::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 2.25 Unaffected: 1783946386 , < * (rpm)
        cpe:/a:redhat:openshift_ai:2.25::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 2.25 Unaffected: 1788312157 , < * (rpm)
        cpe:/a:redhat:openshift_ai:2.25::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 2.25 Unaffected: 1787330073 , < * (rpm)
        cpe:/a:redhat:openshift_ai:2.25::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 3.4 Unaffected: 1787051722 , < * (rpm)
        cpe:/a:redhat:openshift_ai:3.4::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 3.4 Unaffected: 1787102977 , < * (rpm)
        cpe:/a:redhat:openshift_ai:3.4::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 3.4 Unaffected: 1786630755 , < * (rpm)
        cpe:/a:redhat:openshift_ai:3.4::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 3.4 Unaffected: 1786630724 , < * (rpm)
        cpe:/a:redhat:openshift_ai:3.4::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 3.4 Unaffected: 1786630124 , < * (rpm)
        cpe:/a:redhat:openshift_ai:3.4::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 3.4 Unaffected: 1786611780 , < * (rpm)
        cpe:/a:redhat:openshift_ai:3.4::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 3.4 Unaffected: 1786612055 , < * (rpm)
        cpe:/a:redhat:openshift_ai:3.4::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 3.4 Unaffected: 1787153683 , < * (rpm)
        cpe:/a:redhat:openshift_ai:3.4::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 3.4 Unaffected: 1787088234 , < * (rpm)
        cpe:/a:redhat:openshift_ai:3.4::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 3.4 Unaffected: 1787250508 , < * (rpm)
        cpe:/a:redhat:openshift_ai:3.4::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 3.4 Unaffected: 1787251550 , < * (rpm)
        cpe:/a:redhat:openshift_ai:3.4::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 3.4 Unaffected: 1786611759 , < * (rpm)
        cpe:/a:redhat:openshift_ai:3.4::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 3.4 Unaffected: 1787251250 , < * (rpm)
        cpe:/a:redhat:openshift_ai:3.4::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 3.4 Unaffected: 1786612219 , < * (rpm)
        cpe:/a:redhat:openshift_ai:3.4::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 3.4 Unaffected: 1787250617 , < * (rpm)
        cpe:/a:redhat:openshift_ai:3.4::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 3.4 Unaffected: 1787090180 , < * (rpm)
        cpe:/a:redhat:openshift_ai:3.4::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 3.4 Unaffected: 1787089049 , < * (rpm)
        cpe:/a:redhat:openshift_ai:3.4::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 3.4 Unaffected: 1787361677 , < * (rpm)
        cpe:/a:redhat:openshift_ai:3.4::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Builds 1.7.3 Unaffected: 1783057515 , < * (rpm)
        cpe:/a:redhat:openshift_builds:1.7::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Builds 1.7.3 Unaffected: 1783057868 , < * (rpm)
        cpe:/a:redhat:openshift_builds:1.7::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Builds 1.8.1 Unaffected: 1784121108 , < * (rpm)
        cpe:/a:redhat:openshift_builds:1.8::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Builds 1.8.1 Unaffected: 1783612119 , < * (rpm)
        cpe:/a:redhat:openshift_builds:1.8::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.18 Unaffected: 1786705347 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.18::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.18 Unaffected: 1786706101 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.18::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.18 Unaffected: 1786705558 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.18::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.18 Unaffected: 1786705646 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.18::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.18 Unaffected: 1786706138 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.18::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.18 Unaffected: 1786705741 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.18::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.18 Unaffected: 1786705777 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.18::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.18 Unaffected: 1786705802 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.18::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.18 Unaffected: 1786705938 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.18::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.18 Unaffected: 1786706577 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.18::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.18 Unaffected: 1786706125 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.18::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.18 Unaffected: 1786706177 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.18::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.18 Unaffected: 1786706188 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.18::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.18 Unaffected: 1786706679 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.18::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.18 Unaffected: 1786706357 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.18::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.18 Unaffected: 1786706612 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.18::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.18 Unaffected: 1786706644 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.18::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.18 Unaffected: 1786706659 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.18::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.18 Unaffected: 1786706880 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.18::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.22 Unaffected: 1782932114 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.22::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.22 Unaffected: 1782931768 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.22::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.22 Unaffected: 1782932104 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.22::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.22 Unaffected: 1783536000 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.22::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.22 Unaffected: 1783535989 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.22::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.22 Unaffected: 1783536515 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.22::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.22 Unaffected: 1782932521 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.22::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.22 Unaffected: 1783018461 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.22::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.22 Unaffected: 1783018421 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.22::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.22 Unaffected: 1782932812 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.22::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.22 Unaffected: 1783537001 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.22::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.22 Unaffected: 1782932919 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.22::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.22 Unaffected: 1783537586 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.22::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.22 Unaffected: 1782932969 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.22::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.22 Unaffected: 1782933015 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.22::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.22 Unaffected: 1782933042 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.22::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.22 Unaffected: 1783537392 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.22::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.22 Unaffected: 1782933235 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.22::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.22 Unaffected: 1782933251 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.22::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.22 Unaffected: 1783537955 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.22::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.22 Unaffected: 1782933417 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.22::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.22 Unaffected: 1783537742 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.22::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.22 Unaffected: 1782933602 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.22::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.22 Unaffected: 1783019377 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.22::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.22 Unaffected: 1782934054 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.22::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.22 Unaffected: 1782934036 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.22::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.22 Unaffected: 1782934284 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.22::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Dev Spaces 3.29 Unaffected: 1782991491 , < * (rpm)
        cpe:/a:redhat:openshift_devspaces:3.29::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift distributed tracing 3.10.2 Unaffected: 1784775772 , < * (rpm)
        cpe:/a:redhat:openshift_distributed_tracing:3.10::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift distributed tracing 3.10.2 Unaffected: 1784775770 , < * (rpm)
        cpe:/a:redhat:openshift_distributed_tracing:3.10::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift distributed tracing 3.10.2 Unaffected: 1784775834 , < * (rpm)
        cpe:/a:redhat:openshift_distributed_tracing:3.10::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift distributed tracing 3.10.2 Unaffected: 1784777166 , < * (rpm)
        cpe:/a:redhat:openshift_distributed_tracing:3.10::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift distributed tracing 3.10.2 Unaffected: 1784775793 , < * (rpm)
        cpe:/a:redhat:openshift_distributed_tracing:3.10::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift distributed tracing 3.10.2 Unaffected: 1784775768 , < * (rpm)
        cpe:/a:redhat:openshift_distributed_tracing:3.10::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift distributed tracing 3.10.2 Unaffected: 1784775782 , < * (rpm)
        cpe:/a:redhat:openshift_distributed_tracing:3.10::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift GitOps 1.19 Unaffected: 1782292352 , < * (rpm)
        cpe:/a:redhat:openshift_gitops:1.19::el8
    Create a notification for this product.
    Red Hat Red Hat OpenShift GitOps 1.20 Unaffected: 1782383826 , < * (rpm)
        cpe:/a:redhat:openshift_gitops:1.20::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 2.6 Unaffected: 1782287580 , < * (rpm)
        cpe:/a:redhat:service_mesh:2.6::el8
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 3.0 Unaffected: 1782201833 , < * (rpm)
        cpe:/a:redhat:service_mesh:3.0::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 3.1 Unaffected: 1782201537 , < * (rpm)
        cpe:/a:redhat:service_mesh:3.1::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 3.2 Unaffected: 1782201812 , < * (rpm)
        cpe:/a:redhat:service_mesh:3.2::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 3.3 Unaffected: 1782201466 , < * (rpm)
        cpe:/a:redhat:service_mesh:3.3::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Workload Availability 0.12 Unaffected: 1785202723 , < * (rpm)
        cpe:/a:redhat:workload_availability_nhc:0.12::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Workload Availability 0.13 Unaffected: 1785203036 , < * (rpm)
        cpe:/a:redhat:workload_availability_snr:0.13::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Workload Availability 0.3 Unaffected: 1785203474 , < * (rpm)
        cpe:/a:redhat:workload_availability_sbr:0.3::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Workload Availability 0.7 Unaffected: 1785203508 , < * (rpm)
        cpe:/a:redhat:workload_availability_mdr:0.7::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Workload Availability 0.8 Unaffected: 1785203079 , < * (rpm)
        cpe:/a:redhat:workload_availability_far:0.8::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Workload Availability 5.7 Unaffected: 1785202847 , < * (rpm)
        cpe:/a:redhat:workload_availability_nmo:5.7::el9
    Create a notification for this product.
    Red Hat Red Hat Quay 3.10 Unaffected: 1783750447 , < * (rpm)
        cpe:/a:redhat:quay:3.10::el8
    Create a notification for this product.
    Red Hat Red Hat Quay 3.12 Unaffected: 1783751865 , < * (rpm)
    Unaffected: 1784353904 , < * (rpm)
        cpe:/a:redhat:quay:3.12::el8
    Create a notification for this product.
    Red Hat Red Hat Quay 3.15 Unaffected: 1784351966 , < * (rpm)
        cpe:/a:redhat:quay:3.15::el8
    Create a notification for this product.
    Red Hat Red Hat Quay 3.16 Unaffected: 1783955846 , < * (rpm)
        cpe:/a:redhat:quay:3.16::el9
    Create a notification for this product.
    Red Hat Red Hat Quay 3.17 Unaffected: 1786181981 , < * (rpm)
        cpe:/a:redhat:quay:3.17::el9
    Create a notification for this product.
    Red Hat Red Hat Quay 3.9 Unaffected: 1784125838 , < * (rpm)
        cpe:/a:redhat:quay:3.9::el8
    Create a notification for this product.
    Red Hat Red Hat Satellite 6.18 Unaffected: 1785923308 , < * (rpm)
        cpe:/a:redhat:satellite:6.18::el9
    Create a notification for this product.
    Red Hat Red Hat Satellite 6.19 Unaffected: 1785929994 , < * (rpm)
        cpe:/a:redhat:satellite:6.19::el9
    Create a notification for this product.
    Red Hat Red Hat Trusted Artifact Signer 1.4 Unaffected: 4-1.4.2 , < * (rpm)
    Unaffected: 4-1.4.3 , < * (rpm)
        cpe:/a:redhat:trusted_artifact_signer:1.4::el9
    Create a notification for this product.
    Red Hat Red Hat Web Terminal 1.11 Unaffected: 1784296203 , < * (rpm)
        cpe:/a:redhat:webterminal:1.11::el9
    Create a notification for this product.
    Red Hat Red Hat Web Terminal 1.12 Unaffected: 1784247610 , < * (rpm)
        cpe:/a:redhat:webterminal:1.12::el9
    Create a notification for this product.
    Red Hat Red Hat Web Terminal 1.13 Unaffected: 1784296127 , < * (rpm)
        cpe:/a:redhat:webterminal:1.13::el9
    Create a notification for this product.
    Red Hat Red Hat Web Terminal 1.14 Unaffected: 1784296114 , < * (rpm)
        cpe:/a:redhat:webterminal:1.14::el9
    Create a notification for this product.
    Red Hat Red Hat Web Terminal 1.15 Unaffected: 1784296033 , < * (rpm)
        cpe:/a:redhat:webterminal:1.15::el9
    Create a notification for this product.
    Red Hat Red Hat Web Terminal 1.16 Unaffected: 1784295767 , < * (rpm)
        cpe:/a:redhat:webterminal:1.16::el9
    Create a notification for this product.
    Red Hat Assisted Installer for Red Hat OpenShift Container Platform 2     cpe:/a:redhat:assisted_installer:2
    Create a notification for this product.
    Red Hat Compliance Operator     cpe:/a:redhat:openshift_compliance_operator:1
    Create a notification for this product.
    Red Hat Confidential Compute Attestation     cpe:/a:redhat:confidential_compute_attestation:1
    Create a notification for this product.
    Red Hat Cryostat 4     cpe:/a:redhat:cryostat:4
    Create a notification for this product.
    Red Hat Deployment Validation Operator     cpe:/a:redhat:deployment_validator_operator
    Create a notification for this product.
    Red Hat ExternalDNS Operator     cpe:/a:redhat:ext_dns_optr:1
    Create a notification for this product.
    Red Hat External Secrets Operator for Red Hat OpenShift     cpe:/a:redhat:external_secrets_operator:1
    Create a notification for this product.
    Red Hat Fence Agents Remediation Operator     cpe:/a:redhat:workload_availability_far:0
    Create a notification for this product.
    Red Hat File Integrity Operator     cpe:/a:redhat:openshift_file_integrity_operator:1
    Create a notification for this product.
    Red Hat Gatekeeper 3     cpe:/a:redhat:gatekeeper:3
    Create a notification for this product.
    Red Hat Logical Volume Manager Storage     cpe:/a:redhat:lvms:4
        cpe:/a:redhat:lvms:5
    Create a notification for this product.
    Red Hat Logical Volume Manager Storage     cpe:/a:redhat:lvms:4
    Create a notification for this product.
    Red Hat Machine Deletion Remediation Operator     cpe:/a:redhat:workload_availability_mdr:0
    Create a notification for this product.
    Red Hat Multiarch Tuning Operator     cpe:/a:redhat:multiarch_tuning_operator
    Create a notification for this product.
    Red Hat Multicluster Engine for Kubernetes     cpe:/a:redhat:multicluster_engine
    Create a notification for this product.
    Red Hat Network Observability Operator     cpe:/a:redhat:network_observ_optr:1
    Create a notification for this product.
    Red Hat Node HealthCheck Operator     cpe:/a:redhat:workload_availability_nhc:0
    Create a notification for this product.
    Red Hat OpenShift API for Data Protection     cpe:/a:redhat:openshift_api_data_protection:1
    Create a notification for this product.
    Red Hat OpenShift Developer Tools and Services     cpe:/a:redhat:ocp_tools
    Create a notification for this product.
    Red Hat OpenShift Lightspeed     cpe:/a:redhat:openshift_lightspeed
    Create a notification for this product.
    Red Hat OpenShift Pipelines     cpe:/a:redhat:openshift_pipelines:1
    Create a notification for this product.
    Red Hat OpenShift Serverless     cpe:/a:redhat:serverless:1
    Create a notification for this product.
    Red Hat Power monitoring for Red Hat OpenShift     cpe:/a:redhat:openshift_power_monitoring
    Create a notification for this product.
    Red Hat Red Hat 3scale API Management Platform 2     cpe:/a:redhat:red_hat_3scale_amp:2
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Management for Kubernetes 2     cpe:/a:redhat:acm:2
    Create a notification for this product.
    Red Hat Red Hat Ansible Automation Platform 2     cpe:/a:redhat:ansible_automation_platform:2
    Create a notification for this product.
    Red Hat Red Hat Ceph Storage 5     cpe:/a:redhat:ceph_storage:5
    Create a notification for this product.
    Red Hat Red Hat Ceph Storage 6     cpe:/a:redhat:ceph_storage:6
    Create a notification for this product.
    Red Hat Red Hat Ceph Storage 8     cpe:/a:redhat:ceph_storage:8
    Create a notification for this product.
    Red Hat Red Hat Ceph Storage 9     cpe:/a:redhat:ceph_storage:9
    Create a notification for this product.
    Red Hat Red Hat Certification Program for Red Hat Enterprise Linux 9     cpe:/a:redhat:certifications:9
    Create a notification for this product.
    Red Hat Red Hat Connectivity Link 1     cpe:/a:redhat:connectivity_link:1
    Create a notification for this product.
    Red Hat Red Hat Developer Hub     cpe:/a:redhat:rhdh:1
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 10     cpe:/o:redhat:enterprise_linux:10
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 7     cpe:/o:redhat:enterprise_linux:7
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 8     cpe:/o:redhat:enterprise_linux:8
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 9     cpe:/o:redhat:enterprise_linux:9
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux AI (RHEL AI) 3     cpe:/a:redhat:enterprise_linux_ai:3
    Create a notification for this product.
    Red Hat Red Hat Hardened Images     cpe:/a:redhat:hummingbird:1
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI (RHOAI)     cpe:/a:redhat:openshift_ai
    Create a notification for this product.
    Red Hat Red Hat OpenShift Cluster Manager CLI     cpe:/a:redhat:openshift_cluster_manager_cli:1
    Create a notification for this product.
    Red Hat Red Hat OpenShift Container Platform 4     cpe:/a:redhat:openshift:4
    Create a notification for this product.
    Red Hat Red Hat OpenShift distributed tracing 3     cpe:/a:redhat:openshift_distributed_tracing:3
    Create a notification for this product.
    Red Hat Red Hat OpenShift for Windows Containers     cpe:/a:redhat:windows_machine_config
    Create a notification for this product.
    Red Hat Red Hat OpenShift on AWS     cpe:/a:redhat:openshift_service_on_aws:1
    Create a notification for this product.
    Red Hat Red Hat OpenShift Virtualization 4     cpe:/a:redhat:container_native_virtualization:4
    Create a notification for this product.
    Red Hat Red Hat OpenStack Platform 16.2     cpe:/a:redhat:openstack:16.2
    Create a notification for this product.
    Red Hat Red Hat OpenStack Platform 17.1     cpe:/a:redhat:openstack:17.1
    Create a notification for this product.
    Red Hat Red Hat OpenStack Platform 18.0     cpe:/a:redhat:openstack:18.0
    Create a notification for this product.
    Red Hat Red Hat Satellite 6     cpe:/a:redhat:satellite:6
    Create a notification for this product.
    Red Hat Red Hat Service Interconnect 1     cpe:/a:redhat:service_interconnect:1
    Create a notification for this product.
    Red Hat Red Hat Service Interconnect 2     cpe:/a:redhat:service_interconnect:2
    Create a notification for this product.
    Red Hat Security Profiles Operator     cpe:/a:redhat:openshift_security_profiles_operator:1
    Create a notification for this product.
    Red Hat Zero Trust Workload Identity Manager     cpe:/a:redhat:zero_trust_workload_identity_manager:1
    Create a notification for this product.
    Red Hat Zero Trust Workload Identity Manager - Tech Preview     cpe:/a:redhat:zero_trust_workload_identity_manager:0
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "cvssV3_1": {
                  "attackComplexity": "LOW",
                  "attackVector": "NETWORK",
                  "availabilityImpact": "NONE",
                  "baseScore": 9.6,
                  "baseSeverity": "CRITICAL",
                  "confidentialityImpact": "HIGH",
                  "integrityImpact": "HIGH",
                  "privilegesRequired": "LOW",
                  "scope": "CHANGED",
                  "userInteraction": "NONE",
                  "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N",
                  "version": "3.1"
                }
              },
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-39821",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "total"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-05-23T03:55:58.522682Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "problemTypes": [
              {
                "descriptions": [
                  {
                    "cweId": "CWE-1289",
                    "description": "CWE-1289 Improper Validation of Unsafe Equivalence in Input",
                    "lang": "en",
                    "type": "CWE"
                  }
                ]
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-05-27T13:13:15.606Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          },
          {
            "affected": [
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2.5::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "receptor",
                "product": "Red Hat Ansible Automation Platform 2.5 for RHEL 8",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:1.6.6-1.el8ap",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2.5::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "receptor",
                "product": "Red Hat Ansible Automation Platform 2.5 for RHEL 9",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:1.6.6-1.el9ap",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2.6::el10"
                ],
                "defaultStatus": "affected",
                "packageName": "receptor",
                "product": "Red Hat Ansible Automation Platform 2.6 for RHEL 10",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:1.6.6-1.el10ap",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2.6::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "receptor",
                "product": "Red Hat Ansible Automation Platform 2.6 for RHEL 9",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:1.6.6-1.el9ap",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2.7::el10"
                ],
                "defaultStatus": "affected",
                "packageName": "receptor",
                "product": "Red Hat Ansible Automation Platform 2.7 for RHEL 10",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:1.6.6-1.el10ap",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2.7::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "receptor",
                "product": "Red Hat Ansible Automation Platform 2.7 for RHEL 9",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:1.6.6-1.el9ap",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:10.2"
                ],
                "defaultStatus": "affected",
                "packageName": "git-lfs",
                "product": "Red Hat Enterprise Linux 10",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:3.7.1-5.el10_2.5",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:10.2"
                ],
                "defaultStatus": "affected",
                "packageName": "opentelemetry-collector",
                "product": "Red Hat Enterprise Linux 10",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:0.152.1-1.el10_2",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:10.2"
                ],
                "defaultStatus": "affected",
                "packageName": "grafana-pcp",
                "product": "Red Hat Enterprise Linux 10",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:5.3.0-7.el10_2",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:10.2"
                ],
                "defaultStatus": "affected",
                "packageName": "grafana",
                "product": "Red Hat Enterprise Linux 10",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:10.2.6-27.el10_2",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:10.2"
                ],
                "defaultStatus": "affected",
                "packageName": "golang",
                "product": "Red Hat Enterprise Linux 10",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:1.26.5-1.el10_2",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:10.2"
                ],
                "defaultStatus": "affected",
                "packageName": "rhc",
                "product": "Red Hat Enterprise Linux 10",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1:0.3.8-6.el10_2",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:10.2"
                ],
                "defaultStatus": "affected",
                "packageName": "yggdrasil",
                "product": "Red Hat Enterprise Linux 10",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:0.4.9.2-1.el10_2",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:10.2"
                ],
                "defaultStatus": "affected",
                "packageName": "go-fdo-server",
                "product": "Red Hat Enterprise Linux 10",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:1.0.1-2.el10_2.3",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:10.2"
                ],
                "defaultStatus": "affected",
                "packageName": "image-builder",
                "product": "Red Hat Enterprise Linux 10",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:52.1-1.el10_2.2",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux_eus:10.0"
                ],
                "defaultStatus": "affected",
                "packageName": "golang",
                "product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:1.26.5-1.el10_0",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux_eus:10.0"
                ],
                "defaultStatus": "affected",
                "packageName": "yggdrasil",
                "product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:0.4.7-5.el10_0",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux_eus:10.0"
                ],
                "defaultStatus": "affected",
                "packageName": "rhc",
                "product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1:0.3.2-5.el10_0",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux_eus:10.0"
                ],
                "defaultStatus": "affected",
                "packageName": "opentelemetry-collector",
                "product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:0.152.1-1.el10_0",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux_eus:10.0"
                ],
                "defaultStatus": "affected",
                "packageName": "grafana-pcp",
                "product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:5.3.0-1.el10_0",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux_eus:10.0"
                ],
                "defaultStatus": "affected",
                "packageName": "ignition",
                "product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:2.21.0-2.el10_0.3",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux_eus:10.0"
                ],
                "defaultStatus": "affected",
                "packageName": "osbuild-composer",
                "product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:134.1-10.el10_0",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/o:redhat:rhel_els:7"
                ],
                "defaultStatus": "affected",
                "packageName": "rhc-worker-script",
                "product": "Red Hat Enterprise Linux 7 Extended Lifecycle Support",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:0.11-1.el7_9",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:enterprise_linux:8"
                ],
                "defaultStatus": "affected",
                "packageName": "git-lfs",
                "product": "Red Hat Enterprise Linux 8",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:3.4.1-11.el8_10",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:enterprise_linux:8"
                ],
                "defaultStatus": "affected",
                "packageName": "grafana",
                "product": "Red Hat Enterprise Linux 8",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:9.2.10-31.el8_10",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:enterprise_linux:8"
                ],
                "defaultStatus": "affected",
                "packageName": "grafana-pcp",
                "product": "Red Hat Enterprise Linux 8",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:5.1.1-16.el8_10",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:enterprise_linux:8"
                ],
                "defaultStatus": "affected",
                "packageName": "go-toolset:rhel8",
                "product": "Red Hat Enterprise Linux 8",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "8100020260710105056.a3795dee",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:enterprise_linux:8"
                ],
                "defaultStatus": "affected",
                "packageName": "rhc",
                "product": "Red Hat Enterprise Linux 8",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1:0.2.5-9.el8_10",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:enterprise_linux:8"
                ],
                "defaultStatus": "affected",
                "packageName": "osbuild-composer",
                "product": "Red Hat Enterprise Linux 8",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:101.5-2.el8_10",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:enterprise_linux:9"
                ],
                "defaultStatus": "affected",
                "packageName": "git-lfs",
                "product": "Red Hat Enterprise Linux 9",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:3.7.1-4.el9_8.1",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:enterprise_linux:9"
                ],
                "defaultStatus": "affected",
                "packageName": "opentelemetry-collector",
                "product": "Red Hat Enterprise Linux 9",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:0.152.1-1.el9_8",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:enterprise_linux:9"
                ],
                "defaultStatus": "affected",
                "packageName": "grafana",
                "product": "Red Hat Enterprise Linux 9",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:10.2.6-23.el9_8",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:enterprise_linux:9"
                ],
                "defaultStatus": "affected",
                "packageName": "grafana-pcp",
                "product": "Red Hat Enterprise Linux 9",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:5.1.1-17.el9_8",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:enterprise_linux:9"
                ],
                "defaultStatus": "affected",
                "packageName": "golang",
                "product": "Red Hat Enterprise Linux 9",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:1.26.5-1.el9_8",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:enterprise_linux:9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhc",
                "product": "Red Hat Enterprise Linux 9",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1:0.2.7-8.el9_8",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:enterprise_linux:9"
                ],
                "defaultStatus": "affected",
                "packageName": "osbuild-composer",
                "product": "Red Hat Enterprise Linux 9",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:165.1-4.el9_8.1",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:enterprise_linux:9"
                ],
                "defaultStatus": "affected",
                "packageName": "image-builder",
                "product": "Red Hat Enterprise Linux 9",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:52.1-1.el9_8.2",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:rhel_e4s:9.2"
                ],
                "defaultStatus": "affected",
                "packageName": "rhc",
                "product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1:0.2.2-1.el9_2.4",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:rhel_e4s:9.2"
                ],
                "defaultStatus": "affected",
                "packageName": "osbuild-composer",
                "product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:76.1-7.el9_2",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:rhel_e4s:9.2"
                ],
                "defaultStatus": "affected",
                "packageName": "golang",
                "product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:1.26.5-1.el9_2",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:rhel_e4s:9.2"
                ],
                "defaultStatus": "affected",
                "packageName": "ignition",
                "product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:2.15.0-2.el9_2.1",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:rhel_e4s:9.4"
                ],
                "defaultStatus": "affected",
                "packageName": "opentelemetry-collector",
                "product": "Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:0.152.1-1.el9_4",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:rhel_e4s:9.4"
                ],
                "defaultStatus": "affected",
                "packageName": "golang",
                "product": "Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:1.26.5-1.el9_4",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:rhel_e4s:9.4"
                ],
                "defaultStatus": "affected",
                "packageName": "ignition",
                "product": "Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:2.17.0-2.el9_4.1",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:rhel_e4s:9.4"
                ],
                "defaultStatus": "affected",
                "packageName": "osbuild-composer",
                "product": "Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:101.3-4.el9_4.5",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:rhel_e4s:9.4"
                ],
                "defaultStatus": "affected",
                "packageName": "rhc",
                "product": "Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1:0.2.4-9.el9_4",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:rhel_eus:9.6"
                ],
                "defaultStatus": "affected",
                "packageName": "golang",
                "product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:1.26.5-1.el9_6",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:rhel_eus:9.6"
                ],
                "defaultStatus": "affected",
                "packageName": "grafana",
                "product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:10.2.6-22.el9_6",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:rhel_eus:9.6"
                ],
                "defaultStatus": "affected",
                "packageName": "ignition",
                "product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:2.21.0-7.el9_6",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:rhel_eus:9.6"
                ],
                "defaultStatus": "affected",
                "packageName": "opentelemetry-collector",
                "product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:0.152.1-1.el9_6",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:rhel_eus:9.6"
                ],
                "defaultStatus": "affected",
                "packageName": "rhc",
                "product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1:0.2.7-1.el9_6.5",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:rhel_eus:9.6"
                ],
                "defaultStatus": "affected",
                "packageName": "grafana-pcp",
                "product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:5.1.1-15.el9_6",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:rhel_eus:9.6"
                ],
                "defaultStatus": "affected",
                "packageName": "osbuild-composer",
                "product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:132.2-10.el9_6",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4.16::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "microshift",
                "product": "Red Hat OpenShift Container Platform 4.16",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:4.16.69-202608202336.p0.g763478c.assembly.4.16.69.el9",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4.16::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhcos",
                "product": "Red Hat OpenShift Container Platform 4.16",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "416.94.202609011112-0",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4.20::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-clients",
                "product": "Red Hat OpenShift Container Platform 4.20",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el8",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4.22::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "ose-azure-acr-image-credential-provider",
                "product": "Red Hat OpenShift Container Platform 4.22",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:4.22.0-202606291123.p2.ga17a3e3.assembly.stream.el8",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openstack:16.2::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "etcd",
                "product": "Red Hat OpenStack Platform 16.2",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:3.3.23-22.el8ost",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:satellite:6.16::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "yggdrasil-worker-forwarder",
                "product": "Red Hat Satellite 6.16 for RHEL 8",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:0.0.4-1.el8sat",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:satellite:6.16::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "yggdrasil-worker-forwarder",
                "product": "Red Hat Satellite 6.16 for RHEL 9",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:0.0.4-1.el9sat",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:satellite:6.17::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "yggdrasil-worker-forwarder",
                "product": "Red Hat Satellite 6.17 for RHEL 9",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:0.0.4-1.el9sat",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:satellite:6.18::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "yggdrasil-worker-forwarder",
                "product": "Red Hat Satellite 6.18 for RHEL 9",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:0.0.4-1.el9sat",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:satellite:6.19::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "yggdrasil-worker-forwarder",
                "product": "Red Hat Satellite 6.19 for RHEL 9",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:0.0.4-1.el9sat",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:edge_manager:1.0::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "flightctl",
                "product": "RHEM 1.0 for RHEL 9",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:1.0.3-1.el9em",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:edge_manager:1.1::el10"
                ],
                "defaultStatus": "affected",
                "packageName": "flightctl",
                "product": "RHEM 1.1 for RHEL 10",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:1.1.3-1.el10em",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:edge_manager:1.1::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "flightctl",
                "product": "RHEM 1.1 for RHEL 9",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:1.1.3-1.el9em",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:amq_streams:3.2::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "golang-github",
                "product": "Streams for Apache Kafka 3.2.1",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "danielqsj-kafka_exporter",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:cert_manager:1.19::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "cert-manager/jetstack-cert-manager-rhel9",
                "product": "Cert Manager support for Red Hat OpenShift release 1.19",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786613805",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9",
                "product": "Cluster Observability Operator 1.5.0",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782840519",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9",
                "product": "Cluster Observability Operator 1.5.0",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782839981",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9",
                "product": "Cluster Observability Operator 1.5.0",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782839193",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "cluster-observability-operator/distributed-tracing-console-plugin-rhel9",
                "product": "Cluster Observability Operator 1.5.0",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782838753",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "cluster-observability-operator/logging-console-plugin-pf4-rhel9",
                "product": "Cluster Observability Operator 1.5.0",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782839279",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "cluster-observability-operator/logging-console-plugin-pf5-rhel9",
                "product": "Cluster Observability Operator 1.5.0",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782840539",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "cluster-observability-operator/monitoring-console-plugin-pf5-rhel9",
                "product": "Cluster Observability Operator 1.5.0",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782844225",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "cluster-observability-operator/monitoring-console-plugin-pf6-rhel9",
                "product": "Cluster Observability Operator 1.5.0",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782839658",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "cluster-observability-operator/monitoring-console-plugin-rhel9",
                "product": "Cluster Observability Operator 1.5.0",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782838476",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:devworkspace:0.42::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "devworkspace/devworkspace-rhel9-operator",
                "product": "DevWorkspace Operator 0.42",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782401674",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:logging:6.0::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-logging/eventrouter-rhel9",
                "product": "Logging for Red Hat OpenShift 6",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1785418851",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:logging:6.2::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-logging/eventrouter-rhel9",
                "product": "Logging for Red Hat OpenShift 6.2",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1784747813",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:logging:6.4::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-logging/eventrouter-rhel9",
                "product": "Logging Subsystem for Red Hat OpenShift 6.4",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782408807",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:logging:6.5::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-logging/eventrouter-rhel9",
                "product": "Logging Subsystem for Red Hat OpenShift 6.5",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786645107",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:multicluster_engine:2.11::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "multicluster-engine/hypershift-addon-rhel9-operator",
                "product": "multicluster engine for Kubernetes 2.11",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786912006",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:multicluster_engine:2.6::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "multicluster-engine/assisted-service-8-rhel8",
                "product": "multicluster engine for Kubernetes 2.6",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1783332008",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:multicluster_engine:2.6::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "multicluster-engine/assisted-service-9-rhel9",
                "product": "multicluster engine for Kubernetes 2.6",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1783333268",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:multicluster_engine:2.6::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "multicluster-engine/discovery-rhel9",
                "product": "multicluster engine for Kubernetes 2.6",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1783985999",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:multicluster_engine:2.8::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "multicluster-engine/kube-rbac-proxy-mce-rhel9",
                "product": "multicluster engine for Kubernetes 2.8",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782477094",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:multicluster_engine:2.8::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "multicluster-engine/multicloud-manager-rhel9",
                "product": "multicluster engine for Kubernetes 2.8",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782308518",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:multicluster_engine:2.8::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "multicluster-engine/backplane-rhel9-operator",
                "product": "multicluster engine for Kubernetes 2.8",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1784737366",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:multicluster_engine:2.8::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "multicluster-engine/discovery-rhel9",
                "product": "multicluster engine for Kubernetes 2.8",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1784306906",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:multicluster_engine:2.9::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "multicluster-engine/discovery-rhel9",
                "product": "multicluster engine for Kubernetes 2.9",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1783260894",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:multicluster_globalhub:1.4::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "multicluster-globalhub/multicluster-globalhub-agent-rhel9",
                "product": "Multicluster Global Hub 1.4.5",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1784061472",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:multicluster_globalhub:1.6::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "multicluster-globalhub/multicluster-globalhub-agent-rhel9",
                "product": "Multicluster Global Hub 1.6.5",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1784152046",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:multicluster_globalhub:1.7::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "multicluster-globalhub/multicluster-globalhub-agent-rhel9",
                "product": "Multicluster Global Hub 1.7.0",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1784768332",
                    "versionType": "rpm"
                  },
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1785775948",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_api_data_protection:1.3::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "oadp/oadp-velero-rhel9",
                "product": "OpenShift API for Data Protection 1.3",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1785180878",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_api_data_protection:1.6::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "oadp/oadp-velero-rhel9",
                "product": "OpenShift API for Data Protection 1.6",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1784058822",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:acm:2.11::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhacm2/thanos-rhel9",
                "product": "Red Hat Advanced Cluster Management for Kubernetes 2.11",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1787685239",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:acm:2.13::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhacm2/acm-grafana-rhel9",
                "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782383730",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:acm:2.13::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhacm2/acm-multicluster-observability-addon-rhel9",
                "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782156698",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:acm:2.13::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhacm2/acm-prometheus-config-reloader-rhel9",
                "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782157632",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:acm:2.13::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhacm2/acm-prometheus-rhel9",
                "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782157829",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:acm:2.13::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhacm2/cluster-backup-rhel9-operator",
                "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782157630",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:acm:2.13::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhacm2/endpoint-monitoring-rhel9-operator",
                "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782382580",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:acm:2.13::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhacm2/grafana-dashboard-loader-rhel9",
                "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782383255",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:acm:2.13::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhacm2/kube-rbac-proxy-rhel9",
                "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782488873",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:acm:2.13::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhacm2/kube-state-metrics-rhel9",
                "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782157507",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:acm:2.13::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhacm2/metrics-collector-rhel9",
                "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782396604",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:acm:2.13::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhacm2/multicluster-observability-rhel9-operator",
                "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782382711",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:acm:2.13::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhacm2/node-exporter-rhel9",
                "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782157546",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:acm:2.13::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhacm2/observatorium-rhel9",
                "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782157471",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:acm:2.13::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhacm2/observatorium-rhel9-operator",
                "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782157018",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:acm:2.13::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhacm2/prometheus-alertmanager-rhel9",
                "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782156920",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:acm:2.13::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhacm2/prometheus-rhel9",
                "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782374537",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:acm:2.13::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhacm2/rbac-query-proxy-rhel9",
                "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782383676",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:acm:2.13::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhacm2/thanos-receive-controller-rhel9",
                "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782156860",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:acm:2.13::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhacm2/thanos-rhel9",
                "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782465412",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:acm:2.13::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhacm2/multicloud-integrations-rhel9",
                "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1784652040",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:acm:2.13::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhacm2/multiclusterhub-rhel9",
                "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1784638644",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:acm:2.13::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhacm2/multicluster-operators-subscription-rhel9",
                "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1784740143",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:advanced_cluster_security:4.9::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "advanced-cluster-security/rhacs-main-rhel8",
                "product": "Red Hat Advanced Cluster Security 4.9",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1781686446",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:advanced_cluster_security:4.10::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "advanced-cluster-security/rhacs-main-rhel8",
                "product": "Red Hat Advanced Cluster Security for Kubernetes 4.10",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1781686458",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:advanced_cluster_security:4.11::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "advanced-cluster-security/rhacs-main-rhel9",
                "product": "Red Hat Advanced Cluster Security for Kubernetes 4.11",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1783352589",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2.6::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "ansible-automation-platform-26/receptor-rhel9",
                "product": "Red Hat Ansible Automation Platform 2.6",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1783962464",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2.7::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "ansible-automation-platform-27/receptor-rhel9",
                "product": "Red Hat Ansible Automation Platform 2.7",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1783917963",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:edge_manager:1.0::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhem/flightctl-ui-rhel9",
                "product": "Red Hat Edge Manager 1.0",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1783502438",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:edge_manager:1.1::el10"
                ],
                "defaultStatus": "affected",
                "packageName": "rhem/flightctl-ui-rhel10",
                "product": "Red Hat Edge Manager 1.1",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1784194574",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:edge_manager:1.1::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhem/flightctl-ui-rhel9",
                "product": "Red Hat Edge Manager 1.1",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1784127736",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:enterprise_linux_ai:3.4::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhelai3/disk-image-cuda-rhel9",
                "product": "Red Hat Enterprise Linux AI 3.4",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782804957",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:enterprise_linux_ai:3.4::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhelai3/bootc-aws-cuda-rhel9",
                "product": "Red Hat Enterprise Linux AI 3.4",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782758407",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:enterprise_linux_ai:3.4::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhelai3/bootc-azure-cuda-rhel9",
                "product": "Red Hat Enterprise Linux AI 3.4",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782758410",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:enterprise_linux_ai:3.4::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhelai3/bootc-azure-rocm-rhel9",
                "product": "Red Hat Enterprise Linux AI 3.4",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782754093",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:enterprise_linux_ai:3.4::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhelai3/bootc-cuda-rhel9",
                "product": "Red Hat Enterprise Linux AI 3.4",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782744816",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:enterprise_linux_ai:3.4::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhelai3/bootc-gcp-cuda-rhel9",
                "product": "Red Hat Enterprise Linux AI 3.4",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782758409",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:enterprise_linux_ai:3.4::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhelai3/bootc-rocm-rhel9",
                "product": "Red Hat Enterprise Linux AI 3.4",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782744830",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:hummingbird:1"
                ],
                "defaultStatus": "affected",
                "packageName": "golang1-25-main",
                "product": "Red Hat Hardened Images",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1.25.11-2.hum1",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:hummingbird:1"
                ],
                "defaultStatus": "affected",
                "packageName": "golang1-26-main",
                "product": "Red Hat Hardened Images",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1.26.4-2.hum1",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:lightspeed_for_runtimes:1.0::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator",
                "product": "Red Hat Lightspeed (formerly Insights) for Runtimes 1.0",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786483782",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:rhmt:1.8::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "rhmtc/openshift-migration-controller-rhel8",
                "product": "Red Hat Migration Toolkit 1.8",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1783953372",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:migration_toolkit_applications:8.1::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "mta/mta-cli-rhel9",
                "product": "Red Hat Migration Toolkit for Applications 8.1",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1785171639",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:migration_toolkit_applications:8.2::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "mta/mta-cli-rhel9",
                "product": "Red Hat Migration Toolkit for Applications 8.2",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1784211378",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:multicluster_globalhub:1.5::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "multicluster-globalhub/multicluster-globalhub-agent-rhel9",
                "product": "Red Hat multicluster global hub 1.5.3",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1784127491",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:2.25::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-kueue-controller-rhel9",
                "product": "Red Hat OpenShift AI 2.25",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1783544461",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:2.25::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-rhel9-operator",
                "product": "Red Hat OpenShift AI 2.25",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1784004914",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:2.25::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-training-operator-rhel9",
                "product": "Red Hat OpenShift AI 2.25",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1783946386",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:2.25::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-mod-arch-model-registry-rhel9",
                "product": "Red Hat OpenShift AI 2.25",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1788312157",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:2.25::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-trustyai-service-operator-rhel9",
                "product": "Red Hat OpenShift AI 2.25",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1787330073",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:3.4::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-feast-operator-rhel9",
                "product": "Red Hat OpenShift AI 3.4",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1787051722",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:3.4::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-kube-auth-proxy-rhel9",
                "product": "Red Hat OpenShift AI 3.4",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1787102977",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:3.4::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-llm-d-batch-gateway-apiserver-rhel9",
                "product": "Red Hat OpenShift AI 3.4",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786630755",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:3.4::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-llm-d-batch-gateway-gc-rhel9",
                "product": "Red Hat OpenShift AI 3.4",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786630724",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:3.4::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-llm-d-batch-gateway-processor-rhel9",
                "product": "Red Hat OpenShift AI 3.4",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786630124",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:3.4::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-llm-d-inference-scheduler-rhel9",
                "product": "Red Hat OpenShift AI 3.4",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786611780",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:3.4::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-llm-d-routing-sidecar-rhel9",
                "product": "Red Hat OpenShift AI 3.4",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786612055",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:3.4::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-maas-api-rhel9",
                "product": "Red Hat OpenShift AI 3.4",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1787153683",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:3.4::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-mlflow-operator-rhel9",
                "product": "Red Hat OpenShift AI 3.4",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1787088234",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:3.4::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-mod-arch-automl-rhel9",
                "product": "Red Hat OpenShift AI 3.4",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1787250508",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:3.4::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-mod-arch-autorag-rhel9",
                "product": "Red Hat OpenShift AI 3.4",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1787251550",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:3.4::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-mod-arch-gen-ai-rhel9",
                "product": "Red Hat OpenShift AI 3.4",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786611759",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:3.4::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-mod-arch-maas-rhel9",
                "product": "Red Hat OpenShift AI 3.4",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1787251250",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:3.4::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-mod-arch-mlflow-rhel9",
                "product": "Red Hat OpenShift AI 3.4",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786612219",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:3.4::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-mod-arch-model-registry-rhel9",
                "product": "Red Hat OpenShift AI 3.4",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1787250617",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:3.4::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-spark-operator-rhel9",
                "product": "Red Hat OpenShift AI 3.4",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1787090180",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:3.4::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-trainer-rhel9",
                "product": "Red Hat OpenShift AI 3.4",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1787089049",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:3.4::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-training-operator-rhel9",
                "product": "Red Hat OpenShift AI 3.4",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1787361677",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_builds:1.7::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-builds/openshift-builds-controller-rhel9",
                "product": "Red Hat OpenShift Builds 1.7.3",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1783057515",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_builds:1.7::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-builds/openshift-builds-waiters-rhel9",
                "product": "Red Hat OpenShift Builds 1.7.3",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1783057868",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_builds:1.8::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-builds/openshift-builds-rhel9-operator",
                "product": "Red Hat OpenShift Builds 1.8.1",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1784121108",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_builds:1.8::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-builds/openshift-builds-waiters-rhel9",
                "product": "Red Hat OpenShift Builds 1.8.1",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1783612119",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/cephcsi-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.18",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786705347",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/cephcsi-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.18",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786706101",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/mcg-core-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.18",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786705558",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/mcg-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.18",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786705646",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/ocs-client-console-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.18",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786706138",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/ocs-client-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.18",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786705741",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/ocs-metrics-exporter-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.18",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786705777",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/ocs-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.18",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786705802",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-cli-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.18",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786705938",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-console-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.18",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786706577",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-cosi-sidecar-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.18",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786706125",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-csi-addons-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.18",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786706177",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-csi-addons-sidecar-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.18",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786706188",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-multicluster-console-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.18",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786706679",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-multicluster-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.18",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786706357",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-must-gather-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.18",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786706612",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.18",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786706644",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odr-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.18",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786706659",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/rook-ceph-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.18",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786706880",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/cephcsi-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.22",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782932114",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/cephcsi-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.22",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782931768",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/devicefinder-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.22",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782932104",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/mcg-core-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.22",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1783536000",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/mcg-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.22",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1783535989",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/ocs-client-console-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.22",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1783536515",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/ocs-client-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.22",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782932521",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/ocs-metrics-exporter-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.22",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1783018461",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/ocs-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.22",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1783018421",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-blackbox-exporter-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.22",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782932812",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-cli-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.22",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1783537001",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-cloudnative-pg-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.22",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782932919",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-console-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.22",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1783537586",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-cosi-sidecar-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.22",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782932969",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-csi-addons-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.22",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782933015",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-csi-addons-sidecar-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.22",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782933042",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-drbd-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.22",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1783537392",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-external-snapshotter-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.22",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782933235",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-external-snapshotter-sidecar-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.22",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782933251",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-multicluster-console-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.22",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1783537955",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-multicluster-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.22",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782933417",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-must-gather-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.22",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1783537742",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.22",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782933602",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odr-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.22",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1783019377",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odr-volsync-plugin-mover-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.22",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782934054",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odr-volsync-plugin-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.22",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782934036",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/rook-ceph-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.22",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782934284",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_devspaces:3.29::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "devspaces/udi-rhel9",
                "product": "Red Hat OpenShift Dev Spaces 3.29",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782991491",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_distributed_tracing:3.10::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhosdt/tempo-gateway-opa-rhel9",
                "product": "Red Hat OpenShift distributed tracing 3.10.2",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1784775772",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_distributed_tracing:3.10::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhosdt/tempo-gateway-rhel9",
                "product": "Red Hat OpenShift distributed tracing 3.10.2",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1784775770",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_distributed_tracing:3.10::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhosdt/tempo-jaeger-query-rhel9",
                "product": "Red Hat OpenShift distributed tracing 3.10.2",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1784775834",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_distributed_tracing:3.10::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhosdt/tempo-operator-bundle",
                "product": "Red Hat OpenShift distributed tracing 3.10.2",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1784777166",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_distributed_tracing:3.10::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhosdt/tempo-query-rhel9",
                "product": "Red Hat OpenShift distributed tracing 3.10.2",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1784775793",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_distributed_tracing:3.10::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhosdt/tempo-rhel9",
                "product": "Red Hat OpenShift distributed tracing 3.10.2",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1784775768",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_distributed_tracing:3.10::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhosdt/tempo-rhel9-operator",
                "product": "Red Hat OpenShift distributed tracing 3.10.2",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1784775782",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_gitops:1.19::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-gitops-1/dex-rhel8",
                "product": "Red Hat OpenShift GitOps 1.19",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782292352",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_gitops:1.20::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-gitops-1/dex-rhel9",
                "product": "Red Hat OpenShift GitOps 1.20",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782383826",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:2.6::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-rhel8",
                "product": "Red Hat OpenShift Service Mesh 2.6",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782287580",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3.0::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-rhel9",
                "product": "Red Hat OpenShift Service Mesh 3.0",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782201833",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3.1::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-rhel9",
                "product": "Red Hat OpenShift Service Mesh 3.1",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782201537",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3.2::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-rhel9",
                "product": "Red Hat OpenShift Service Mesh 3.2",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782201812",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3.3::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-rhel9",
                "product": "Red Hat OpenShift Service Mesh 3.3",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782201466",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:workload_availability_nhc:0.12::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "workload-availability/node-healthcheck-rhel9-operator",
                "product": "Red Hat OpenShift Workload Availability 0.12",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1785202723",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:workload_availability_snr:0.13::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "workload-availability/self-node-remediation-rhel9-operator",
                "product": "Red Hat OpenShift Workload Availability 0.13",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1785203036",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:workload_availability_sbr:0.3::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "workload-availability/storage-based-remediation-rhel9-operator",
                "product": "Red Hat OpenShift Workload Availability 0.3",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1785203474",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:workload_availability_mdr:0.7::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "workload-availability/machine-deletion-remediation-rhel9-operator",
                "product": "Red Hat OpenShift Workload Availability 0.7",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1785203508",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:workload_availability_far:0.8::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "workload-availability/fence-agents-remediation-rhel9-operator",
                "product": "Red Hat OpenShift Workload Availability 0.8",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1785203079",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:workload_availability_nmo:5.7::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "workload-availability/node-maintenance-rhel9-operator",
                "product": "Red Hat OpenShift Workload Availability 5.7",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1785202847",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.10::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel8",
                "product": "Red Hat Quay 3.10",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1783750447",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.12::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel8",
                "product": "Red Hat Quay 3.12",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1783751865",
                    "versionType": "rpm"
                  },
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1784353904",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.15::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel8",
                "product": "Red Hat Quay 3.15",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1784351966",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.16::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel9",
                "product": "Red Hat Quay 3.16",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1783955846",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.17::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel9",
                "product": "Red Hat Quay 3.17",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786181981",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.9::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel8",
                "product": "Red Hat Quay 3.9",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1784125838",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:satellite:6.18::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "satellite/iop-vmaas-rhel9",
                "product": "Red Hat Satellite 6.18",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1785923308",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:satellite:6.19::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "satellite/iop-vmaas-rhel9",
                "product": "Red Hat Satellite 6.19",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1785929994",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:trusted_artifact_signer:1.4::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "conforma-cli-stack-v1",
                "product": "Red Hat Trusted Artifact Signer 1.4",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "4-1.4.2",
                    "versionType": "rpm"
                  },
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "4-1.4.3",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:webterminal:1.11::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "web-terminal/web-terminal-exec-rhel9",
                "product": "Red Hat Web Terminal 1.11",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1784296203",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:webterminal:1.12::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "web-terminal/web-terminal-exec-rhel9",
                "product": "Red Hat Web Terminal 1.12",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1784247610",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:webterminal:1.13::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "web-terminal/web-terminal-exec-rhel9",
                "product": "Red Hat Web Terminal 1.13",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1784296127",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:webterminal:1.14::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "web-terminal/web-terminal-exec-rhel9",
                "product": "Red Hat Web Terminal 1.14",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1784296114",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:webterminal:1.15::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "web-terminal/web-terminal-exec-rhel9",
                "product": "Red Hat Web Terminal 1.15",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1784296033",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:webterminal:1.16::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "web-terminal/web-terminal-exec-rhel9",
                "product": "Red Hat Web Terminal 1.16",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1784295767",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:assisted_installer:2"
                ],
                "defaultStatus": "affected",
                "packageName": "rhai/assisted-installer-rhel9",
                "product": "Assisted Installer for Red Hat OpenShift Container Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_compliance_operator:1"
                ],
                "defaultStatus": "affected",
                "packageName": "compliance/openshift-compliance-operator-bundle",
                "product": "Compliance Operator",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:confidential_compute_attestation:1"
                ],
                "defaultStatus": "affected",
                "packageName": "build-of-trustee/trustee-rhel9-operator",
                "product": "Confidential Compute Attestation",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:confidential_compute_attestation:1"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-sandboxed-containers/osc-monitor-rhel9",
                "product": "Confidential Compute Attestation",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:cryostat:4"
                ],
                "defaultStatus": "unaffected",
                "packageName": "cryostat/cryostat-storage-rhel9",
                "product": "Cryostat 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:deployment_validator_operator"
                ],
                "defaultStatus": "affected",
                "packageName": "dvo/deployment-validation-rhel8-operator",
                "product": "Deployment Validation Operator",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ext_dns_optr:1"
                ],
                "defaultStatus": "affected",
                "packageName": "edo/external-dns-rhel9",
                "product": "ExternalDNS Operator",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ext_dns_optr:1"
                ],
                "defaultStatus": "affected",
                "packageName": "edo/external-dns-rhel9-operator",
                "product": "ExternalDNS Operator",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:external_secrets_operator:1"
                ],
                "defaultStatus": "affected",
                "packageName": "external-secrets-operator/external-secrets-rhel9",
                "product": "External Secrets Operator for Red Hat OpenShift",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:workload_availability_far:0"
                ],
                "defaultStatus": "affected",
                "packageName": "redhat-user-workloads/far-operator-0-8",
                "product": "Fence Agents Remediation Operator",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_file_integrity_operator:1"
                ],
                "defaultStatus": "affected",
                "packageName": "compliance/openshift-compliance-operator-bundle",
                "product": "File Integrity Operator",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:gatekeeper:3"
                ],
                "defaultStatus": "affected",
                "packageName": "gatekeeper/gatekeeper-rhel9-operator",
                "product": "Gatekeeper 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:lvms:4",
                  "cpe:/a:redhat:lvms:5"
                ],
                "defaultStatus": "unaffected",
                "packageName": "lvms4/lvms-rhel9-operator",
                "product": "Logical Volume Manager Storage",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:lvms:4"
                ],
                "defaultStatus": "unaffected",
                "packageName": "lvms4/topolvm-rhel8",
                "product": "Logical Volume Manager Storage",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:lvms:4"
                ],
                "defaultStatus": "unaffected",
                "packageName": "lvms4/topolvm-rhel9",
                "product": "Logical Volume Manager Storage",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:workload_availability_mdr:0"
                ],
                "defaultStatus": "affected",
                "packageName": "redhat-user-workloads/mdr-operator-0-7",
                "product": "Machine Deletion Remediation Operator",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:multiarch_tuning_operator"
                ],
                "defaultStatus": "affected",
                "packageName": "multiarch-tuning/multiarch-tuning-rhel9-operator",
                "product": "Multiarch Tuning Operator",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:multicluster_engine"
                ],
                "defaultStatus": "affected",
                "packageName": "multicluster-engine/addon-manager-rhel9",
                "product": "Multicluster Engine for Kubernetes",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:multicluster_engine"
                ],
                "defaultStatus": "affected",
                "packageName": "multicluster-engine/assisted-installer-agent-rhel9",
                "product": "Multicluster Engine for Kubernetes",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:multicluster_engine"
                ],
                "defaultStatus": "affected",
                "packageName": "multicluster-engine/assisted-installer-controller-rhel9",
                "product": "Multicluster Engine for Kubernetes",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:multicluster_engine"
                ],
                "defaultStatus": "affected",
                "packageName": "multicluster-engine/assisted-installer-rhel9",
                "product": "Multicluster Engine for Kubernetes",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:multicluster_engine"
                ],
                "defaultStatus": "affected",
                "packageName": "multicluster-engine/cluster-api-provider-agent-rhel9",
                "product": "Multicluster Engine for Kubernetes",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:multicluster_engine"
                ],
                "defaultStatus": "affected",
                "packageName": "multicluster-engine/cluster-api-provider-kubevirt-rhel9",
                "product": "Multicluster Engine for Kubernetes",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:multicluster_engine"
                ],
                "defaultStatus": "affected",
                "packageName": "multicluster-engine/clusterclaims-controller-rhel9",
                "product": "Multicluster Engine for Kubernetes",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:multicluster_engine"
                ],
                "defaultStatus": "affected",
                "packageName": "multicluster-engine/cluster-curator-controller-rhel9",
                "product": "Multicluster Engine for Kubernetes",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:multicluster_engine"
                ],
                "defaultStatus": "affected",
                "packageName": "multicluster-engine/cluster-image-set-controller-rhel9",
                "product": "Multicluster Engine for Kubernetes",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:multicluster_engine"
                ],
                "defaultStatus": "affected",
                "packageName": "multicluster-engine/clusterlifecycle-state-metrics-rhel9",
                "product": "Multicluster Engine for Kubernetes",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:multicluster_engine"
                ],
                "defaultStatus": "affected",
                "packageName": "multicluster-engine/cluster-proxy-rhel9",
                "product": "Multicluster Engine for Kubernetes",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:multicluster_engine"
                ],
                "defaultStatus": "affected",
                "packageName": "multicluster-engine/image-based-install-rhel9",
                "product": "Multicluster Engine for Kubernetes",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:multicluster_engine"
                ],
                "defaultStatus": "affected",
                "packageName": "multicluster-engine/placement-rhel9",
                "product": "Multicluster Engine for Kubernetes",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:multicluster_engine"
                ],
                "defaultStatus": "affected",
                "packageName": "multicluster-engine/provider-credential-controller-rhel9",
                "product": "Multicluster Engine for Kubernetes",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:multicluster_engine"
                ],
                "defaultStatus": "affected",
                "packageName": "multicluster-engine/registration-operator-rhel9",
                "product": "Multicluster Engine for Kubernetes",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:multicluster_engine"
                ],
                "defaultStatus": "affected",
                "packageName": "multicluster-engine/registration-rhel9",
                "product": "Multicluster Engine for Kubernetes",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:multicluster_engine"
                ],
                "defaultStatus": "affected",
                "packageName": "multicluster-engine/work-rhel9",
                "product": "Multicluster Engine for Kubernetes",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:network_observ_optr:1"
                ],
                "defaultStatus": "affected",
                "packageName": "network-observability/network-observability-cli-rhel9",
                "product": "Network Observability Operator",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:workload_availability_nhc:0"
                ],
                "defaultStatus": "affected",
                "packageName": "node-healthcheck-operator-tech-preview/node-healthcheck-rhel8-operator",
                "product": "Node HealthCheck Operator",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:workload_availability_nhc:0"
                ],
                "defaultStatus": "affected",
                "packageName": "redhat-user-workloads/nhc-operator-0-12",
                "product": "Node HealthCheck Operator",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:workload_availability_nhc:0"
                ],
                "defaultStatus": "affected",
                "packageName": "workload-availability/node-healthcheck-rhel8-operator",
                "product": "Node HealthCheck Operator",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_api_data_protection:1"
                ],
                "defaultStatus": "unaffected",
                "packageName": "multicluster-engine/hypershift-addon-rhel9-operator",
                "product": "OpenShift API for Data Protection",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_api_data_protection:1"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift4/ose-hypershift-rhel9",
                "product": "OpenShift API for Data Protection",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ocp_tools"
                ],
                "defaultStatus": "affected",
                "packageName": "helm",
                "product": "OpenShift Developer Tools and Services",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_lightspeed"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-lightspeed/lightspeed-rhel9-operator",
                "product": "OpenShift Lightspeed",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_pipelines:1"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-pipelines-client",
                "product": "OpenShift Pipelines",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_pipelines:1"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-pipelines/pipelines-scheduler-rhel9",
                "product": "OpenShift Pipelines",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:serverless:1"
                ],
                "defaultStatus": "affected",
                "packageName": "kn-workflow-plugin",
                "product": "OpenShift Serverless",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:serverless:1"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-serverless-1/kn-plugin-event-sender-rhel9",
                "product": "OpenShift Serverless",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:serverless:1"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-serverless-1/logic-rhel9-operator",
                "product": "OpenShift Serverless",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:serverless:1"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-serverless-clients",
                "product": "OpenShift Serverless",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_power_monitoring"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-power-monitoring/kepler-rhel9",
                "product": "Power monitoring for Red Hat OpenShift",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:red_hat_3scale_amp:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "3scale-amp2/3scale-rhel7-operator",
                "product": "Red Hat 3scale API Management Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:red_hat_3scale_amp:2"
                ],
                "defaultStatus": "affected",
                "packageName": "3scale-amp2/3scale-rhel9-operator",
                "product": "Red Hat 3scale API Management Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:acm:2"
                ],
                "defaultStatus": "affected",
                "packageName": "multicluster-engine/cluster-permission-rhel9",
                "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:acm:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "rhacm2/acm-cli-rhel9",
                "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:acm:2"
                ],
                "defaultStatus": "affected",
                "packageName": "rhacm2/acm-cluster-permission-rhel9",
                "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:acm:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "rhacm2/acm-governance-policy-addon-controller-rhel9",
                "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:acm:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "rhacm2/acm-governance-policy-framework-addon-rhel9",
                "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:acm:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "rhacm2/acm-must-gather-rhel9",
                "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:acm:2"
                ],
                "defaultStatus": "affected",
                "packageName": "rhacm2/acm-search-indexer-rhel9",
                "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:acm:2"
                ],
                "defaultStatus": "affected",
                "packageName": "rhacm2/acm-search-v2-api-rhel9",
                "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:acm:2"
                ],
                "defaultStatus": "affected",
                "packageName": "rhacm2/acm-search-v2-rhel9",
                "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:acm:2"
                ],
                "defaultStatus": "affected",
                "packageName": "rhacm2/acm-volsync-addon-controller-rhel9",
                "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:acm:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "rhacm2/cert-policy-controller-rhel9",
                "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:acm:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "rhacm2/config-policy-controller-rhel9",
                "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:acm:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "rhacm2/governance-policy-propagator-rhel9",
                "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:acm:2"
                ],
                "defaultStatus": "affected",
                "packageName": "rhacm2/insights-client-rhel9",
                "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:acm:2"
                ],
                "defaultStatus": "affected",
                "packageName": "rhacm2/insights-metrics-rhel9",
                "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:acm:2"
                ],
                "defaultStatus": "affected",
                "packageName": "rhacm2/klusterlet-addon-controller-rhel9",
                "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:acm:2"
                ],
                "defaultStatus": "affected",
                "packageName": "rhacm2/memcached-exporter-rhel9",
                "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:acm:2"
                ],
                "defaultStatus": "affected",
                "packageName": "rhacm2/multicluster-operators-application-rhel9",
                "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:acm:2"
                ],
                "defaultStatus": "affected",
                "packageName": "rhacm2/multicluster-operators-channel-rhel9",
                "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:acm:2"
                ],
                "defaultStatus": "affected",
                "packageName": "rhacm2/search-collector-rhel9",
                "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:acm:2"
                ],
                "defaultStatus": "affected",
                "packageName": "rhacm2/subctl-rhel9",
                "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:acm:2"
                ],
                "defaultStatus": "affected",
                "packageName": "rhacm2/submariner-addon-rhel9",
                "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "ansible-automation-platform/platform-operator-bundle",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "automation-gateway-proxy",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "automation-gateway-proxy-openssl30",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "automation-gateway-proxy-openssl32",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "python3.11-galaxy-ng",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "python3.12-galaxy-ng",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ceph_storage:5"
                ],
                "defaultStatus": "affected",
                "packageName": "rhceph/rhceph-5-dashboard-rhel8",
                "product": "Red Hat Ceph Storage 5",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ceph_storage:6"
                ],
                "defaultStatus": "affected",
                "packageName": "rhceph/rhceph-6-dashboard-rhel9",
                "product": "Red Hat Ceph Storage 6",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ceph_storage:8"
                ],
                "defaultStatus": "affected",
                "packageName": "rhceph/grafana-rhel9",
                "product": "Red Hat Ceph Storage 8",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ceph_storage:9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhceph/alloy-rhel10",
                "product": "Red Hat Ceph Storage 9",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:certifications:9"
                ],
                "defaultStatus": "affected",
                "packageName": "redhat-certification-preflight",
                "product": "Red Hat Certification Program for Red Hat Enterprise Linux 9",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:connectivity_link:1"
                ],
                "defaultStatus": "affected",
                "packageName": "rhcl-1/authorino-rhel9",
                "product": "Red Hat Connectivity Link 1",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:rhdh:1"
                ],
                "defaultStatus": "unknown",
                "packageName": "rhdh/rhdh-rhel9-operator",
                "product": "Red Hat Developer Hub",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:10"
                ],
                "defaultStatus": "unaffected",
                "packageName": "buildah",
                "product": "Red Hat Enterprise Linux 10",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:10"
                ],
                "defaultStatus": "unaffected",
                "packageName": "butane",
                "product": "Red Hat Enterprise Linux 10",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:10"
                ],
                "defaultStatus": "unaffected",
                "packageName": "delve",
                "product": "Red Hat Enterprise Linux 10",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:10"
                ],
                "defaultStatus": "affected",
                "packageName": "go-fdo-client",
                "product": "Red Hat Enterprise Linux 10",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:10"
                ],
                "defaultStatus": "affected",
                "packageName": "golang-github-openprinting-ipp-usb",
                "product": "Red Hat Enterprise Linux 10",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:10"
                ],
                "defaultStatus": "affected",
                "packageName": "gvisor-tap-vsock",
                "product": "Red Hat Enterprise Linux 10",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:10"
                ],
                "defaultStatus": "affected",
                "packageName": "ignition",
                "product": "Red Hat Enterprise Linux 10",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:10"
                ],
                "defaultStatus": "affected",
                "packageName": "osbuild-composer",
                "product": "Red Hat Enterprise Linux 10",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:10"
                ],
                "defaultStatus": "unaffected",
                "packageName": "podman",
                "product": "Red Hat Enterprise Linux 10",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:10"
                ],
                "defaultStatus": "affected",
                "packageName": "rhc-worker-playbook",
                "product": "Red Hat Enterprise Linux 10",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:10"
                ],
                "defaultStatus": "affected",
                "packageName": "rhel10/bootc-image-builder",
                "product": "Red Hat Enterprise Linux 10",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:10"
                ],
                "defaultStatus": "affected",
                "packageName": "rhel10-eus/rhel-10.0-bootc-image-builder",
                "product": "Red Hat Enterprise Linux 10",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:10"
                ],
                "defaultStatus": "unaffected",
                "packageName": "skopeo",
                "product": "Red Hat Enterprise Linux 10",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:10"
                ],
                "defaultStatus": "unaffected",
                "packageName": "toolbox",
                "product": "Red Hat Enterprise Linux 10",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:10"
                ],
                "defaultStatus": "unaffected",
                "packageName": "trustee",
                "product": "Red Hat Enterprise Linux 10",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:10"
                ],
                "defaultStatus": "affected",
                "packageName": "trustee-guest-components",
                "product": "Red Hat Enterprise Linux 10",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:7"
                ],
                "defaultStatus": "unaffected",
                "packageName": "host-metering",
                "product": "Red Hat Enterprise Linux 7",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:7"
                ],
                "defaultStatus": "affected",
                "packageName": "rhc",
                "product": "Red Hat Enterprise Linux 7",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:8"
                ],
                "defaultStatus": "unaffected",
                "packageName": "container-tools:rhel8/buildah",
                "product": "Red Hat Enterprise Linux 8",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:8"
                ],
                "defaultStatus": "unaffected",
                "packageName": "container-tools:rhel8/conmon",
                "product": "Red Hat Enterprise Linux 8",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:8"
                ],
                "defaultStatus": "unaffected",
                "packageName": "container-tools:rhel8/containernetworking-plugins",
                "product": "Red Hat Enterprise Linux 8",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:8"
                ],
                "defaultStatus": "unaffected",
                "packageName": "container-tools:rhel8/podman",
                "product": "Red Hat Enterprise Linux 8",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:8"
                ],
                "defaultStatus": "unaffected",
                "packageName": "container-tools:rhel8/skopeo",
                "product": "Red Hat Enterprise Linux 8",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:8"
                ],
                "defaultStatus": "unaffected",
                "packageName": "container-tools:rhel8/toolbox",
                "product": "Red Hat Enterprise Linux 8",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:8"
                ],
                "defaultStatus": "affected",
                "packageName": "golang",
                "product": "Red Hat Enterprise Linux 8",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:8"
                ],
                "defaultStatus": "unaffected",
                "packageName": "weldr-client",
                "product": "Red Hat Enterprise Linux 8",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:9"
                ],
                "defaultStatus": "unaffected",
                "packageName": "buildah",
                "product": "Red Hat Enterprise Linux 9",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:9"
                ],
                "defaultStatus": "unaffected",
                "packageName": "butane",
                "product": "Red Hat Enterprise Linux 9",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:9"
                ],
                "defaultStatus": "unaffected",
                "packageName": "conmon",
                "product": "Red Hat Enterprise Linux 9",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:9"
                ],
                "defaultStatus": "unaffected",
                "packageName": "containernetworking-plugins",
                "product": "Red Hat Enterprise Linux 9",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:9"
                ],
                "defaultStatus": "affected",
                "packageName": "gvisor-tap-vsock",
                "product": "Red Hat Enterprise Linux 9",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:9"
                ],
                "defaultStatus": "affected",
                "packageName": "ignition",
                "product": "Red Hat Enterprise Linux 9",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:9"
                ],
                "defaultStatus": "unaffected",
                "packageName": "podman",
                "product": "Red Hat Enterprise Linux 9",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhel9/bootc-image-builder",
                "product": "Red Hat Enterprise Linux 9",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhel9-eus/rhel-9.6-bootc-image-builder",
                "product": "Red Hat Enterprise Linux 9",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:9"
                ],
                "defaultStatus": "unaffected",
                "packageName": "skopeo",
                "product": "Red Hat Enterprise Linux 9",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:9"
                ],
                "defaultStatus": "unaffected",
                "packageName": "toolbox",
                "product": "Red Hat Enterprise Linux 9",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:9"
                ],
                "defaultStatus": "affected",
                "packageName": "trustee-guest-components",
                "product": "Red Hat Enterprise Linux 9",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:9"
                ],
                "defaultStatus": "unaffected",
                "packageName": "weldr-client",
                "product": "Red Hat Enterprise Linux 9",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:enterprise_linux_ai:3"
                ],
                "defaultStatus": "affected",
                "packageName": "golang",
                "product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:hummingbird:1"
                ],
                "defaultStatus": "unaffected",
                "packageName": "golang-fips1.25",
                "product": "Red Hat Hardened Images",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-ai-gateway-payload-processing-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-codeflare-operator-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-data-science-pipelines-argo-argoexec-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-data-science-pipelines-operator-controller-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "unaffected",
                "packageName": "rhoai/odh-eval-hub-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-kf-notebook-controller-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-kserve-llmisvc-controller-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-kuberay-operator-controller-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "unaffected",
                "packageName": "rhoai/odh-llama-stack-k8s-operator-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-maas-controller-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-ml-pipelines-api-server-v2-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-ml-pipelines-driver-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-ml-pipelines-launcher-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-mm-rest-proxy-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "unaffected",
                "packageName": "rhoai/odh-mod-arch-eval-hub-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-model-controller-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-modelmesh-runtime-adapter-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-modelmesh-serving-controller-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "unaffected",
                "packageName": "rhoai/odh-model-registry-operator-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "unaffected",
                "packageName": "rhoai/odh-model-registry-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-model-serving-api-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-notebook-controller-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-rhaii-cluster-validator-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "unaffected",
                "packageName": "rhoai/odh-rhel8-operator",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-workload-variant-autoscaler-controller-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/rhai-cli-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_cluster_manager_cli:1"
                ],
                "defaultStatus": "affected",
                "packageName": "ocm-cli-clients/ocm-cli-rhel9",
                "product": "Red Hat OpenShift Cluster Manager CLI",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4"
                ],
                "defaultStatus": "unaffected",
                "packageName": "atomic-openshift-service-idler",
                "product": "Red Hat OpenShift Container Platform 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4"
                ],
                "defaultStatus": "affected",
                "packageName": "butane",
                "product": "Red Hat OpenShift Container Platform 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4"
                ],
                "defaultStatus": "unaffected",
                "packageName": "conmon",
                "product": "Red Hat OpenShift Container Platform 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4"
                ],
                "defaultStatus": "unaffected",
                "packageName": "conmon-rs",
                "product": "Red Hat OpenShift Container Platform 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4"
                ],
                "defaultStatus": "unaffected",
                "packageName": "containernetworking-plugins",
                "product": "Red Hat OpenShift Container Platform 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4"
                ],
                "defaultStatus": "unaffected",
                "packageName": "cri-o",
                "product": "Red Hat OpenShift Container Platform 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4"
                ],
                "defaultStatus": "affected",
                "packageName": "cri-tools",
                "product": "Red Hat OpenShift Container Platform 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4"
                ],
                "defaultStatus": "affected",
                "packageName": "golang-github-prometheus-promu",
                "product": "Red Hat OpenShift Container Platform 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4"
                ],
                "defaultStatus": "affected",
                "packageName": "ignition",
                "product": "Red Hat OpenShift Container Platform 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4"
                ],
                "defaultStatus": "affected",
                "packageName": "kata-containers",
                "product": "Red Hat OpenShift Container Platform 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4"
                ],
                "defaultStatus": "unaffected",
                "packageName": "openshift",
                "product": "Red Hat OpenShift Container Platform 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift4/frr-rhel9",
                "product": "Red Hat OpenShift Container Platform 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift4/ose-cli",
                "product": "Red Hat OpenShift Container Platform 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4"
                ],
                "defaultStatus": "unaffected",
                "packageName": "openshift4/ose-hypershift-rhel9",
                "product": "Red Hat OpenShift Container Platform 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4"
                ],
                "defaultStatus": "unaffected",
                "packageName": "openshift-kuryr",
                "product": "Red Hat OpenShift Container Platform 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4"
                ],
                "defaultStatus": "affected",
                "packageName": "ose-aws-ecr-image-credential-provider",
                "product": "Red Hat OpenShift Container Platform 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4"
                ],
                "defaultStatus": "affected",
                "packageName": "ose-gcp-gcr-image-credential-provider",
                "product": "Red Hat OpenShift Container Platform 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4"
                ],
                "defaultStatus": "unaffected",
                "packageName": "podman",
                "product": "Red Hat OpenShift Container Platform 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4"
                ],
                "defaultStatus": "affected",
                "packageName": "rh-osbs/openshift-golang-builder",
                "product": "Red Hat OpenShift Container Platform 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4"
                ],
                "defaultStatus": "unaffected",
                "packageName": "skopeo",
                "product": "Red Hat OpenShift Container Platform 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_distributed_tracing:3"
                ],
                "defaultStatus": "affected",
                "packageName": "rhosdt/opentelemetry-rhel9-operator",
                "product": "Red Hat OpenShift distributed tracing 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:windows_machine_config"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift4-wincw/windows-machine-config-rhel9-operator",
                "product": "Red Hat OpenShift for Windows Containers",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_service_on_aws:1"
                ],
                "defaultStatus": "affected",
                "packageName": "rosa",
                "product": "Red Hat OpenShift on AWS",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:container_native_virtualization:4"
                ],
                "defaultStatus": "unaffected",
                "packageName": "container-native-virtualization/kubevirt-apiserver-proxy-rhel9",
                "product": "Red Hat OpenShift Virtualization 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:container_native_virtualization:4"
                ],
                "defaultStatus": "affected",
                "packageName": "kubevirt",
                "product": "Red Hat OpenShift Virtualization 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openstack:16.2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "golang-github-infrawatch-apputils",
                "product": "Red Hat OpenStack Platform 16.2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openstack:16.2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "rhosp-rhel8/osp-director-agent",
                "product": "Red Hat OpenStack Platform 16.2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openstack:17.1"
                ],
                "defaultStatus": "unaffected",
                "packageName": "collectd-libpod-stats",
                "product": "Red Hat OpenStack Platform 17.1",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openstack:17.1"
                ],
                "defaultStatus": "affected",
                "packageName": "etcd",
                "product": "Red Hat OpenStack Platform 17.1",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openstack:17.1"
                ],
                "defaultStatus": "unaffected",
                "packageName": "golang-github-infrawatch-apputils",
                "product": "Red Hat OpenStack Platform 17.1",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openstack:17.1"
                ],
                "defaultStatus": "unaffected",
                "packageName": "rhosp-rhel9/osp-director-agent",
                "product": "Red Hat OpenStack Platform 17.1",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openstack:18.0"
                ],
                "defaultStatus": "unaffected",
                "packageName": "golang-github-openstack-k8s-operators-os-diff",
                "product": "Red Hat OpenStack Platform 18.0",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openstack:18.0"
                ],
                "defaultStatus": "unaffected",
                "packageName": "rhoso-operators/ovn-rhel9-operator",
                "product": "Red Hat OpenStack Platform 18.0",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:satellite:6"
                ],
                "defaultStatus": "affected",
                "packageName": "satellite:el8/yggdrasil-worker-forwarder",
                "product": "Red Hat Satellite 6",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:service_interconnect:1"
                ],
                "defaultStatus": "unaffected",
                "packageName": "skupper-cli",
                "product": "Red Hat Service Interconnect 1",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:service_interconnect:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "skupper-cli",
                "product": "Red Hat Service Interconnect 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_security_profiles_operator:1"
                ],
                "defaultStatus": "affected",
                "packageName": "compliance/openshift-security-profiles-rhel8-operator",
                "product": "Security Profiles Operator",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:zero_trust_workload_identity_manager:1"
                ],
                "defaultStatus": "affected",
                "packageName": "zero-trust-workload-identity-manager/spiffe-csi-driver-rhel9",
                "product": "Zero Trust Workload Identity Manager",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:zero_trust_workload_identity_manager:0"
                ],
                "defaultStatus": "affected",
                "packageName": "zero-trust-workload-identity-manager/spiffe-spire-agent-rhel9",
                "product": "Zero Trust Workload Identity Manager - Tech Preview",
                "vendor": "Red Hat"
              }
            ],
            "datePublic": "2026-05-22T15:01:21.462Z",
            "descriptions": [
              {
                "lang": "en",
                "value": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected."
              }
            ],
            "metrics": [
              {
                "other": {
                  "content": {
                    "namespace": "https://access.redhat.com/security/updates/classification/",
                    "value": "Important"
                  },
                  "type": "Red Hat severity rating"
                }
              },
              {
                "cvssV3_1": {
                  "attackComplexity": "HIGH",
                  "attackVector": "NETWORK",
                  "availabilityImpact": "NONE",
                  "baseScore": 8.2,
                  "baseSeverity": "HIGH",
                  "confidentialityImpact": "HIGH",
                  "integrityImpact": "HIGH",
                  "privilegesRequired": "LOW",
                  "scope": "CHANGED",
                  "userInteraction": "NONE",
                  "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
                  "version": "3.1"
                },
                "format": "CVSS"
              }
            ],
            "problemTypes": [
              {
                "descriptions": [
                  {
                    "cweId": "CWE-1289",
                    "description": "Improper Validation of Unsafe Equivalence in Input",
                    "lang": "en",
                    "type": "CWE"
                  }
                ]
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-09-10T12:05:04.748Z",
              "orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
              "shortName": "redhat-SADP"
            },
            "references": [
              {
                "tags": [
                  "vdb-entry",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/security/cve/CVE-2026-39821"
              },
              {
                "name": "RHBZ#2480756",
                "tags": [
                  "issue-tracking",
                  "x_refsource_REDHAT"
                ],
                "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
              },
              {
                "tags": [
                  "x_sadp-csaf-vex"
                ],
                "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-39821.json"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:42079"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:42080"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:41019"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:54191"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:42078"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:54757"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:54580"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:34789"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:42082"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:36796"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:57845"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:62549"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:42150"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:42151"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:42240"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:49702"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:56143"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:59546"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:53413"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:63134"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:53374"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:51187"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:30855"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:46395"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:37436"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:35827"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:35826"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:65534"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:34357"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:39005"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:39573"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:38995"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:30853"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:35830"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:35831"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:66016"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:41930"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:61253"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:65359"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:61245"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:60354"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:57649"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:59549"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:53412"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:59562"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:60315"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:49712"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:51112"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:56223"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:52826"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:53415"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:57541"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:54401"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:30854"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:37435"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:35828"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:35829"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:65886"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:34359"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:65153"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:39879"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:54531"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:34342"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:36808"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:34364"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:56340"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:47952"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:50843"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:41030"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:44622"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:47149"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:53530"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:51033"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:43692"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:60387"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:30651"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:47737"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:26546"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:26547"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:36207"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:42132"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:42142"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:36651"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:40945"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:40118"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:33531"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:33524"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:23262"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:23264"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:54441"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:41928"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:50300"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:43038"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:42644"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:65126"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:60520"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:36648"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:41036"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:36820"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:35994"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:35993"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:33155"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:33160"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:33163"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:33173"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:33183"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:54287"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:54284"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:54286"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:54285"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:54274"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:54283"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:44624"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:56431"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:37387"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:41031"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:42146"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:43052"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:42796"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:41066"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:54395"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:40262"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:51341"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:51194"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:36797"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:42043"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:42047"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:42050"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:42051"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:42049"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:42048"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:42852"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:54435"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:57194"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:36105"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:36167"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:41055"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:47735"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:30650"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:36883"
              }
            ],
            "solutions": [
              {
                "lang": "en",
                "value": "RHSA-2026:42079: Red Hat Ansible Automation Platform 2.6 for RHEL 10, Red Hat Ansible Automation Platform 2.6 for RHEL 9"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:42080: Red Hat Ansible Automation Platform 2.7 for RHEL 10, Red Hat Ansible Automation Platform 2.7 for RHEL 9"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:41019: RHEM 1.1 for RHEL 10, RHEM 1.1 for RHEL 9"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:54191: Red Hat Enterprise Linux Server (v. 7 ELS)"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:42078: Red Hat Ansible Automation Platform 2.5 for RHEL 8, Red Hat Ansible Automation Platform 2.5 for RHEL 9"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:54757: Red Hat OpenStack Platform 16.2"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:54580: Red Hat OpenShift Container Platform 4.20"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:34789: Red Hat OpenShift Container Platform 4.22"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:42082: Red Hat Satellite 6.16 for RHEL 8, Red Hat Satellite 6.16 for RHEL 9"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:36796: RHEM 1.0 for RHEL 9"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:57845: Red Hat OpenShift Container Platform 4.16"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:62549: Red Hat OpenShift Container Platform 4.16"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:42150: Red Hat Satellite 6.17 for RHEL 9"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:42151: Red Hat Satellite 6.18 for RHEL 9"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:42240: Red Hat Satellite 6.19 for RHEL 9"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:49702: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:56143: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:59546: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:53413: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:63134: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:53374: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:51187: Red Hat Enterprise Linux AppStream EUS (v. 10.0), Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:30855: Red Hat Enterprise Linux AppStream (v. 10)"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:46395: Red Hat Enterprise Linux AppStream (v. 10)"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:37436: Red Hat Enterprise Linux AppStream (v. 10)"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:35827: Red Hat Enterprise Linux AppStream (v. 10)"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:35826: Red Hat Enterprise Linux AppStream (v. 10)"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:65534: Red Hat Enterprise Linux AppStream (v. 10)"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:34357: Red Hat Enterprise Linux AppStream (v. 10)"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:39005: Red Hat Enterprise Linux AppStream (v. 10)"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:39573: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:38995: Red Hat Enterprise Linux AppStream (v. 8)"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:30853: Red Hat Enterprise Linux AppStream (v. 8)"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:35830: Red Hat Enterprise Linux AppStream (v. 8)"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:35831: Red Hat Enterprise Linux AppStream (v. 8)"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:66016: Red Hat Enterprise Linux AppStream (v. 8)"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:41930: Red Hat Enterprise Linux AppStream (v. 8)"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:61253: Red Hat Enterprise Linux AppStream E4S (v.9.2)"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:65359: Red Hat Enterprise Linux AppStream E4S (v.9.2)"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:61245: Red Hat Enterprise Linux AppStream E4S (v.9.2)"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:60354: Red Hat Enterprise Linux AppStream E4S (v.9.2)"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:57649: Red Hat Enterprise Linux AppStream E4S (v.9.4)"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:59549: Red Hat Enterprise Linux AppStream E4S (v.9.4)"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:53412: Red Hat Enterprise Linux AppStream E4S (v.9.4)"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:59562: Red Hat Enterprise Linux AppStream E4S (v.9.4)"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:60315: Red Hat Enterprise Linux AppStream E4S (v.9.4)"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:49712: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:51112: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:56223: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:52826: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:53415: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:57541: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:54401: Red Hat CodeReady Linux Builder EUS (v.9.6), Red Hat Enterprise Linux AppStream EUS (v.9.6)"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:30854: Red Hat Enterprise Linux AppStream (v. 9)"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:37435: Red Hat Enterprise Linux AppStream (v. 9)"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:35828: Red Hat Enterprise Linux AppStream (v. 9)"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:35829: Red Hat Enterprise Linux AppStream (v. 9)"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:65886: Red Hat Enterprise Linux AppStream (v. 9)"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:34359: Red Hat Enterprise Linux AppStream (v. 9)"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:65153: Red Hat Enterprise Linux AppStream (v. 9)"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:39879: Red Hat Enterprise Linux AppStream (v. 9), Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:54531: Cert Manager support for Red Hat OpenShift release 1.19"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:34342: Cluster Observability Operator 1.5.0"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:36808: DevWorkspace Operator 0.42"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:34364: Logging Subsystem for Red Hat OpenShift 6.4"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:56340: Logging Subsystem for Red Hat OpenShift 6.5"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:47952: Logging for Red Hat OpenShift 6.2"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:50843: Logging for Red Hat OpenShift 6"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:41030: Multicluster Global Hub 1.4.5"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:44622: Multicluster Global Hub 1.6.5"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:47149: Multicluster Global Hub 1.7.0"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:53530: Multicluster Global Hub 1.7.0"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:51033: OpenShift API for Data Protection 1.3"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:43692: OpenShift API for Data Protection 1.6"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:60387: Red Hat Advanced Cluster Management for Kubernetes 2.11"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:30651: Red Hat Advanced Cluster Management for Kubernetes 2.13"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:47737: Red Hat Advanced Cluster Management for Kubernetes 2.13"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:26546: Red Hat Advanced Cluster Security 4.9"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:26547: Red Hat Advanced Cluster Security for Kubernetes 4.10"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:36207: Red Hat Advanced Cluster Security for Kubernetes 4.11"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:42132: Red Hat Ansible Automation Platform 2.6"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:42142: Red Hat Ansible Automation Platform 2.7"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:36651: Red Hat Edge Manager 1.0"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:40945: Red Hat Edge Manager 1.1"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:40118: Red Hat Edge Manager 1.1"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:33531: Red Hat Enterprise Linux AI 3.4"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:33524: Red Hat Enterprise Linux AI 3.4"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:23262: Red Hat Hardened Images"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:23264: Red Hat Hardened Images"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:54441: Red Hat Lightspeed (formerly Insights) for Runtimes 1.0"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:41928: Red Hat Migration Toolkit 1.8"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:50300: Red Hat Migration Toolkit for Applications 8.1"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:43038: Red Hat Migration Toolkit for Applications 8.2"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:42644: Red Hat OpenShift AI 2.25"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:65126: Red Hat OpenShift AI 2.25"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:60520: Red Hat OpenShift AI 3.4"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:36648: Red Hat OpenShift Builds 1.7.3"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:41036: Red Hat OpenShift Builds 1.8.1"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:36820: Red Hat OpenShift Dev Spaces 3.29"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:35994: Red Hat OpenShift GitOps 1.19"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:35993: Red Hat OpenShift GitOps 1.20"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:33155: Red Hat OpenShift Service Mesh 2.6"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:33160: Red Hat OpenShift Service Mesh 3.0"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:33163: Red Hat OpenShift Service Mesh 3.1"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:33173: Red Hat OpenShift Service Mesh 3.2"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:33183: Red Hat OpenShift Service Mesh 3.3"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:54287: Red Hat OpenShift Workload Availability 0.12"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:54284: Red Hat OpenShift Workload Availability 0.13"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:54286: Red Hat OpenShift Workload Availability 0.3"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:54285: Red Hat OpenShift Workload Availability 0.7"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:54274: Red Hat OpenShift Workload Availability 0.8"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:54283: Red Hat OpenShift Workload Availability 5.7"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:44624: Red Hat OpenShift distributed tracing 3.10.2"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:56431: Red Hat Openshift Data Foundation 4.18"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:37387: Red Hat Openshift Data Foundation 4.22"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:41031: Red Hat Quay 3.10"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:42146: Red Hat Quay 3.12"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:43052: Red Hat Quay 3.12"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:42796: Red Hat Quay 3.15"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:41066: Red Hat Quay 3.16"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:54395: Red Hat Quay 3.17"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:40262: Red Hat Quay 3.9"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:51341: Red Hat Satellite 6.18"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:51194: Red Hat Satellite 6.19"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:36797: Red Hat Trusted Artifact Signer 1.4"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:42043: Red Hat Web Terminal 1.11"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:42047: Red Hat Web Terminal 1.12"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:42050: Red Hat Web Terminal 1.13"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:42051: Red Hat Web Terminal 1.14"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:42049: Red Hat Web Terminal 1.15"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:42048: Red Hat Web Terminal 1.16"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:42852: Red Hat multicluster global hub 1.5.3"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:54435: Streams for Apache Kafka 3.2.1"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:57194: multicluster engine for Kubernetes 2.11"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:36105: multicluster engine for Kubernetes 2.6"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:36167: multicluster engine for Kubernetes 2.6"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:41055: multicluster engine for Kubernetes 2.6"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:47735: multicluster engine for Kubernetes 2.8"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:30650: multicluster engine for Kubernetes 2.8"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:36883: multicluster engine for Kubernetes 2.9"
              }
            ],
            "timeline": [
              {
                "lang": "en",
                "time": "2026-05-22T16:00:52.844Z",
                "value": "Reported to Red Hat."
              },
              {
                "lang": "en",
                "time": "2026-05-22T15:01:21.462Z",
                "value": "Made public."
              }
            ],
            "title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
            "workarounds": [
              {
                "lang": "en",
                "value": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds."
              }
            ],
            "x_adpType": "supplier",
            "x_generator": {
              "engine": "sadp-cli 1.0.0"
            }
          }
        ],
        "cna": {
          "affected": [
            {
              "collectionURL": "https://pkg.go.dev",
              "defaultStatus": "unaffected",
              "packageName": "net/http",
              "product": "net/http",
              "programRoutines": [
                {
                  "name": "idnaASCII"
                },
                {
                  "name": "Client.CloseIdleConnections"
                },
                {
                  "name": "Client.Do"
                },
                {
                  "name": "Client.Get"
                },
                {
                  "name": "Client.Head"
                },
                {
                  "name": "Client.Post"
                },
                {
                  "name": "Client.PostForm"
                },
                {
                  "name": "ClientConn.Close"
                },
                {
                  "name": "ClientConn.RoundTrip"
                },
                {
                  "name": "Get"
                },
                {
                  "name": "Head"
                },
                {
                  "name": "Post"
                },
                {
                  "name": "PostForm"
                },
                {
                  "name": "Transport.CloseIdleConnections"
                },
                {
                  "name": "Transport.NewClientConn"
                },
                {
                  "name": "Transport.RoundTrip"
                },
                {
                  "name": "http1ClientConn.Close"
                },
                {
                  "name": "http1ClientConn.RoundTrip"
                },
                {
                  "name": "http2ClientConn.RoundTrip"
                },
                {
                  "name": "http2RoundTripper.RoundTrip"
                }
              ],
              "vendor": "Go standard library",
              "versions": [
                {
                  "lessThan": "1.25.13",
                  "status": "affected",
                  "version": "0",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.26.6",
                  "status": "affected",
                  "version": "1.26.0-0",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.27.0-rc.3",
                  "status": "affected",
                  "version": "1.27.0-0",
                  "versionType": "semver"
                }
              ]
            },
            {
              "collectionURL": "https://pkg.go.dev",
              "defaultStatus": "unaffected",
              "packageName": "net/http/internal/http2",
              "product": "net/http/internal/http2",
              "programRoutines": [
                {
                  "name": "authorityAddr"
                },
                {
                  "name": "Transport.AddConn"
                },
                {
                  "name": "Transport.RoundTrip"
                },
                {
                  "name": "Transport.RoundTripOpt"
                }
              ],
              "vendor": "Go standard library",
              "versions": [
                {
                  "lessThan": "1.25.13",
                  "status": "affected",
                  "version": "0",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.26.6",
                  "status": "affected",
                  "version": "1.26.0-0",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.27.0-rc.3",
                  "status": "affected",
                  "version": "1.27.0-0",
                  "versionType": "semver"
                }
              ]
            },
            {
              "collectionURL": "https://pkg.go.dev",
              "defaultStatus": "unaffected",
              "packageName": "golang.org/x/net/idna",
              "product": "golang.org/x/net/idna",
              "programRoutines": [
                {
                  "name": "Profile.process"
                },
                {
                  "name": "Profile.ToASCII"
                },
                {
                  "name": "Profile.ToUnicode"
                },
                {
                  "name": "ToASCII"
                },
                {
                  "name": "ToUnicode"
                }
              ],
              "vendor": "golang.org/x/net",
              "versions": [
                {
                  "lessThan": "0.55.0",
                  "status": "affected",
                  "version": "0",
                  "versionType": "semver"
                }
              ]
            }
          ],
          "credits": [
            {
              "lang": "en",
              "value": "KC1zs4 (https://github.com/KC1zs4)"
            },
            {
              "lang": "en",
              "value": "Longwei Wang (https://github.com/gn00295120)"
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. For example, ToUnicode(\"xn--example-.com\") incorrectly returns the name \"example.com\" rather than an error. This behavior can lead to privilege escalation in programs using the idna package. For example, a program which performs privilege checks on the ASCII hostname may reject \"example.com\" but permit \"xn--example-.com\". If that program subsequently converts the ASCII hostname to Unicode, it will inadvertently permits access to the Unicode name \"example.com\"."
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "description": "CWE-1289: Improper Validation of Unsafe Equivalence in Input",
                  "lang": "en"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-08-21T21:01:48.612Z",
            "orgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
            "shortName": "Go"
          },
          "references": [
            {
              "url": "https://go.dev/cl/767220"
            },
            {
              "url": "https://go.dev/issue/78760"
            },
            {
              "url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
            },
            {
              "url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
            },
            {
              "url": "https://pkg.go.dev/vuln/GO-2026-5026"
            }
          ],
          "title": "Invoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna"
        }
      },
      "cveMetadata": {
        "assignerOrgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
        "assignerShortName": "Go",
        "cveId": "CVE-2026-39821",
        "datePublished": "2026-05-22T15:01:21.462Z",
        "dateReserved": "2026-04-07T18:13:03.526Z",
        "dateUpdated": "2026-09-10T12:05:04.748Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2026-6322 (GCVE-0-2026-6322)

    Vulnerability from cvelistv5 – Published: 2026-05-05 10:29 – Updated: 2026-09-10 12:04
    VLAI
    Title
    fast-uri vulnerable to host confusion via percent-encoded authority delimiters
    Summary
    fast-uri normalize() decoded percent-encoded authority delimiters inside the host component and then re-emitted them as raw delimiters during serialization. A host that combined an allowed domain, an encoded at-sign, and a different domain was re-emitted with the at-sign as a raw userinfo separator, changing the URI's authority to the second domain. Applications that normalize untrusted URLs before host allowlist checks, redirect validation, or outbound request routing can be steered to a different authority than the input appeared to specify. Versions <= 3.1.1 are affected. Update to 3.1.2 or later.
    SSVC
    Exploitation: none Automatable: yes Technical Impact: partial
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-05-05 12:55 UTC
    CWE
    • CWE-436 - Interpretation Conflict
    • CWE-140 - Improper Neutralization of Delimiters
    References
    URL Tags
    https://github.com/fastify/fast-uri/security/advi…
    https://cna.openjsf.org/security-advisories.html
    https://access.redhat.com/security/cve/CVE-2026-6322 vdb-entryx_refsource_REDHAT
    https://bugzilla.redhat.com/show_bug.cgi?id=2466684 issue-trackingx_refsource_REDHAT
    https://security.access.redhat.com/data/csaf/v2/v… x_sadp-csaf-vex
    https://access.redhat.com/errata/RHSA-2026:42078 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:34160 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:34342 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:37385 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:25273 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:34374 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:42142 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:41951 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:36754 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:26234 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:29197 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:61783 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:36651 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:40945 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:40118 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:60855 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:41928 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:43038 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:60520 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:57487 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:54555 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:34766 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:37628 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:29800 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:34770 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:37186 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:29834 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:29796 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:29795 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:56431 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:56366 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:57013 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:56968 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:56928 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:33683 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:30076 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:41066 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:54395 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:28571 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:26225 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:25271 vendor-advisoryx_refsource_REDHAT
    Impacted products
    Vendor Product Version
    fast-uri fast-uri Affected: 0 , < 3.1.2 (semver)
    Unaffected: 3.1.2 (semver)
    Create a notification for this product.
    Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 8 Unaffected: 0:2.5.20260715-1.el8ap , < * (rpm)
        cpe:/a:redhat:ansible_automation_platform:2.5::el8
    Create a notification for this product.
    Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 9 Unaffected: 0:2.5.20260715-1.el9ap , < * (rpm)
        cpe:/a:redhat:ansible_automation_platform:2.5::el9
    Create a notification for this product.
    Red Hat Red Hat Ansible Automation Platform 2.6 for RHEL 9 Unaffected: 0:2.6.10-1.el9ap , < * (rpm)
        cpe:/a:redhat:ansible_automation_platform:2.6::el9
    Create a notification for this product.
    Red Hat Red Hat Data Grid 8.6.2     cpe:/a:redhat:jboss_data_grid:8
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 10 Unaffected: 0:1.1.1-1.el10_2 , < * (rpm)
        cpe:/o:redhat:enterprise_linux:10.2
    Create a notification for this product.
    Red Hat Cluster Observability Operator 1.5.0 Unaffected: 1782840519 , < * (rpm)
        cpe:/a:redhat:cluster_observability_operator:1.5::el9
    Create a notification for this product.
    Red Hat Cluster Observability Operator 1.5.0 Unaffected: 1782839981 , < * (rpm)
        cpe:/a:redhat:cluster_observability_operator:1.5::el9
    Create a notification for this product.
    Red Hat Cluster Observability Operator 1.5.0 Unaffected: 1782839193 , < * (rpm)
        cpe:/a:redhat:cluster_observability_operator:1.5::el9
    Create a notification for this product.
    Red Hat Cluster Observability Operator 1.5.0 Unaffected: 1782838753 , < * (rpm)
        cpe:/a:redhat:cluster_observability_operator:1.5::el9
    Create a notification for this product.
    Red Hat Cluster Observability Operator 1.5.0 Unaffected: 1782839279 , < * (rpm)
        cpe:/a:redhat:cluster_observability_operator:1.5::el9
    Create a notification for this product.
    Red Hat Cluster Observability Operator 1.5.0 Unaffected: 1782840539 , < * (rpm)
        cpe:/a:redhat:cluster_observability_operator:1.5::el9
    Create a notification for this product.
    Red Hat Cluster Observability Operator 1.5.0 Unaffected: 1782841925 , < * (rpm)
        cpe:/a:redhat:cluster_observability_operator:1.5::el9
    Create a notification for this product.
    Red Hat Cluster Observability Operator 1.5.0 Unaffected: 1782838476 , < * (rpm)
        cpe:/a:redhat:cluster_observability_operator:1.5::el9
    Create a notification for this product.
    Red Hat Cluster Observability Operator 1.5.0 Unaffected: 1782839996 , < * (rpm)
        cpe:/a:redhat:cluster_observability_operator:1.5::el9
    Create a notification for this product.
    Red Hat Cluster Observability Operator 1.5.0 Unaffected: 1782839494 , < * (rpm)
        cpe:/a:redhat:cluster_observability_operator:1.5::el9
    Create a notification for this product.
    Red Hat multicluster engine for Kubernetes 2.11 Unaffected: 1780910888 , < * (rpm)
        cpe:/a:redhat:multicluster_engine:2.11::el9
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.16 Unaffected: 1780600823 , < * (rpm)
        cpe:/a:redhat:acm:2.16::el9
    Create a notification for this product.
    Red Hat Red Hat Ansible Automation Platform 2.6 Unaffected: 1782761510 , < * (rpm)
        cpe:/a:redhat:ansible_automation_platform:2.6::el9
    Create a notification for this product.
    Red Hat Red Hat Ansible Automation Platform 2.6 Unaffected: 1782721130 , < * (rpm)
        cpe:/a:redhat:ansible_automation_platform:2.6::el9
    Create a notification for this product.
    Red Hat Red Hat Ansible Automation Platform 2.7 Unaffected: 1783919486 , < * (rpm)
        cpe:/a:redhat:ansible_automation_platform:2.7::el9
    Create a notification for this product.
    Red Hat Red Hat Developer Hub 1.10 Unaffected: 1783448184 , < * (rpm)
        cpe:/a:redhat:rhdh:1.10::el9
    Create a notification for this product.
    Red Hat Red Hat Developer Hub 1.9 Unaffected: 1781187342 , < * (rpm)
        cpe:/a:redhat:rhdh:1.9::el9
    Create a notification for this product.
    Red Hat Red Hat Discovery 2 Unaffected: 1782166952 , < * (rpm)
    Unaffected: 1788206196 , < * (rpm)
        cpe:/a:redhat:discovery:2::el9
    Create a notification for this product.
    Red Hat Red Hat Edge Manager 1.0 Unaffected: 1783502765 , < * (rpm)
        cpe:/a:redhat:edge_manager:1.0::el9
    Create a notification for this product.
    Red Hat Red Hat Edge Manager 1.0 Unaffected: 1783502438 , < * (rpm)
        cpe:/a:redhat:edge_manager:1.0::el9
    Create a notification for this product.
    Red Hat Red Hat Edge Manager 1.1 Unaffected: 1784194938 , < * (rpm)
        cpe:/a:redhat:edge_manager:1.1::el10
    Create a notification for this product.
    Red Hat Red Hat Edge Manager 1.1 Unaffected: 1784194574 , < * (rpm)
        cpe:/a:redhat:edge_manager:1.1::el10
    Create a notification for this product.
    Red Hat Red Hat Edge Manager 1.1 Unaffected: 1784126822 , < * (rpm)
        cpe:/a:redhat:edge_manager:1.1::el9
    Create a notification for this product.
    Red Hat Red Hat Edge Manager 1.1 Unaffected: 1784127736 , < * (rpm)
        cpe:/a:redhat:edge_manager:1.1::el9
    Create a notification for this product.
    Red Hat Red Hat Hardened Images Unaffected: 13.1.3-0.3.hum1 , < * (rpm)
        cpe:/a:redhat:hummingbird:1
    Create a notification for this product.
    Red Hat Red Hat Migration Toolkit 1.8 Unaffected: 1783690532 , < * (rpm)
        cpe:/a:redhat:rhmt:1.8::el8
    Create a notification for this product.
    Red Hat Red Hat Migration Toolkit for Applications 8.2 Unaffected: 1784109883 , < * (rpm)
        cpe:/a:redhat:migration_toolkit_applications:8.2::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 3.4 Unaffected: 1787347991 , < * (rpm)
        cpe:/a:redhat:openshift_ai:3.4::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 3.4 Unaffected: 1787250508 , < * (rpm)
        cpe:/a:redhat:openshift_ai:3.4::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 3.4 Unaffected: 1787251550 , < * (rpm)
        cpe:/a:redhat:openshift_ai:3.4::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 3.4 Unaffected: 1786611759 , < * (rpm)
        cpe:/a:redhat:openshift_ai:3.4::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 3.4 Unaffected: 1787251250 , < * (rpm)
        cpe:/a:redhat:openshift_ai:3.4::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 3.4 Unaffected: 1786612219 , < * (rpm)
        cpe:/a:redhat:openshift_ai:3.4::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 3.4 Unaffected: 1787250617 , < * (rpm)
        cpe:/a:redhat:openshift_ai:3.4::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 3.4 Unaffected: 1787121387 , < * (rpm)
        cpe:/a:redhat:openshift_ai:3.4::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Container Platform 4.18 Unaffected: 1787031447 , < * (rpm)
        cpe:/a:redhat:openshift:4.18::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Container Platform 4.19 Unaffected: 1782880472 , < * (rpm)
        cpe:/a:redhat:openshift:4.19::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Container Platform 4.19 Unaffected: 1786486822 , < * (rpm)
        cpe:/a:redhat:openshift:4.19::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Container Platform 4.20 Unaffected: 1782313844 , < * (rpm)
        cpe:/a:redhat:openshift:4.20::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Container Platform 4.20 Unaffected: 1783602326 , < * (rpm)
        cpe:/a:redhat:openshift:4.20::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Container Platform 4.21 Unaffected: 1782308519 , < * (rpm)
        cpe:/a:redhat:openshift:4.21::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Container Platform 4.21 Unaffected: 1782914001 , < * (rpm)
        cpe:/a:redhat:openshift:4.21::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Container Platform 4.21 Unaffected: 1783502338 , < * (rpm)
        cpe:/a:redhat:openshift:4.21::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Container Platform 4.22 Unaffected: 1782224390 , < * (rpm)
        cpe:/a:redhat:openshift:4.22::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Container Platform 4.22 Unaffected: 1782224316 , < * (rpm)
        cpe:/a:redhat:openshift:4.22::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Container Platform 4.22 Unaffected: 1782224099 , < * (rpm)
        cpe:/a:redhat:openshift:4.22::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.18 Unaffected: 1786705347 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.18::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.18 Unaffected: 1786706101 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.18::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.18 Unaffected: 1786705558 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.18::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.18 Unaffected: 1786705646 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.18::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.18 Unaffected: 1786706138 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.18::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.18 Unaffected: 1786705741 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.18::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.18 Unaffected: 1786705777 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.18::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.18 Unaffected: 1786705802 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.18::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.18 Unaffected: 1786705938 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.18::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.18 Unaffected: 1786706577 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.18::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.18 Unaffected: 1786706125 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.18::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.18 Unaffected: 1786706177 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.18::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.18 Unaffected: 1786706188 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.18::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.18 Unaffected: 1786706679 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.18::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.18 Unaffected: 1786706357 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.18::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.18 Unaffected: 1786706612 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.18::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.18 Unaffected: 1786706644 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.18::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.18 Unaffected: 1786706659 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.18::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.18 Unaffected: 1786706880 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.18::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.19 Unaffected: 1786701839 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.19::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.19 Unaffected: 1786701555 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.19::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.19 Unaffected: 1786702052 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.19::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.19 Unaffected: 1786702559 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.19::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.19 Unaffected: 1786702713 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.19::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.19 Unaffected: 1786702264 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.19::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.19 Unaffected: 1786702448 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.19::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.19 Unaffected: 1786702276 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.19::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.19 Unaffected: 1786702440 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.19::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.19 Unaffected: 1786702315 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.19::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.19 Unaffected: 1786703071 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.19::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.19 Unaffected: 1786702563 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.19::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.19 Unaffected: 1786702636 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.19::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.19 Unaffected: 1786702623 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.19::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.19 Unaffected: 1786703137 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.19::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.19 Unaffected: 1786702716 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.19::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.19 Unaffected: 1786702872 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.19::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.19 Unaffected: 1786702949 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.19::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.19 Unaffected: 1786702917 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.19::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.19 Unaffected: 1786703143 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.19::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.20 Unaffected: 1786627460 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.20::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.20 Unaffected: 1786626399 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.20::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.20 Unaffected: 1786628235 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.20::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.20 Unaffected: 1786627106 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.20::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.20 Unaffected: 1786629761 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.20::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.20 Unaffected: 1786627559 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.20::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.20 Unaffected: 1786687918 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.20::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.20 Unaffected: 1786629478 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.20::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.20 Unaffected: 1786628142 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.20::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.20 Unaffected: 1786631508 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.20::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.20 Unaffected: 1786628053 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.20::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.20 Unaffected: 1786627382 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.20::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.20 Unaffected: 1786627430 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.20::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.20 Unaffected: 1786629076 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.20::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.20 Unaffected: 1786627469 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.20::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.20 Unaffected: 1786644072 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.20::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.20 Unaffected: 1786688215 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.20::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.20 Unaffected: 1786628340 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.20::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.20 Unaffected: 1786628623 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.20::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.20 Unaffected: 1786632256 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.20::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.20 Unaffected: 1786628935 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.20::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.20 Unaffected: 1786629548 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.20::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.21 Unaffected: 1786627281 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.21::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.21 Unaffected: 1786627168 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.21::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.21 Unaffected: 1786628067 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.21::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.21 Unaffected: 1786628657 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.21::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.21 Unaffected: 1786627792 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.21::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.21 Unaffected: 1786698066 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.21::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.21 Unaffected: 1786627823 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.21::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.21 Unaffected: 1786628998 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.21::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.21 Unaffected: 1786697443 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.21::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.21 Unaffected: 1786628916 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.21::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.21 Unaffected: 1786630412 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.21::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.21 Unaffected: 1786629773 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.21::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.21 Unaffected: 1786630739 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.21::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.21 Unaffected: 1786628303 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.21::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.21 Unaffected: 1786629324 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.21::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.21 Unaffected: 1786628605 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.21::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.21 Unaffected: 1786631438 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.21::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.21 Unaffected: 1786697305 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.21::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.21 Unaffected: 1786644678 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.21::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.21 Unaffected: 1786634168 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.21::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.21 Unaffected: 1786633448 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.21::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.21 Unaffected: 1786634233 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.21::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.21 Unaffected: 1786633986 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.21::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.21 Unaffected: 1786633677 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.21::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.21 Unaffected: 1786644362 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.21::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.22 Unaffected: 1787057250 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.22::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.22 Unaffected: 1787057964 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.22::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.22 Unaffected: 1787057603 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.22::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.22 Unaffected: 1787058450 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.22::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.22 Unaffected: 1787057989 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.22::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.22 Unaffected: 1787059853 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.22::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.22 Unaffected: 1787057849 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.22::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.22 Unaffected: 1787060257 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.22::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.22 Unaffected: 1787058278 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.22::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.22 Unaffected: 1787058658 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.22::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.22 Unaffected: 1787058706 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.22::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.22 Unaffected: 1787058403 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.22::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.22 Unaffected: 1787059072 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.22::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.22 Unaffected: 1787058807 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.22::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.22 Unaffected: 1787058588 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.22::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.22 Unaffected: 1787058970 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.22::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.22 Unaffected: 1787059538 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.22::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.22 Unaffected: 1787059616 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.22::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.22 Unaffected: 1787061098 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.22::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.22 Unaffected: 1787059085 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.22::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.22 Unaffected: 1787059621 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.22::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.22 Unaffected: 1787059386 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.22::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.22 Unaffected: 1787060080 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.22::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.22 Unaffected: 1787060105 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.22::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.22 Unaffected: 1787059493 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.22::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.22 Unaffected: 1787060201 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.22::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.22 Unaffected: 1787060274 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.22::el9
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4.22 Unaffected: 1787061554 , < * (rpm)
        cpe:/a:redhat:openshift_data_foundation:4.22::el9
    Create a notification for this product.
    Red Hat Red Hat Quay 3.10 Unaffected: 1782487717 , < * (rpm)
        cpe:/a:redhat:quay:3.10::el8
    Create a notification for this product.
    Red Hat Red Hat Quay 3.12 Unaffected: 1781937357 , < * (rpm)
        cpe:/a:redhat:quay:3.12::el8
    Create a notification for this product.
    Red Hat Red Hat Quay 3.16 Unaffected: 1783955846 , < * (rpm)
        cpe:/a:redhat:quay:3.16::el9
    Create a notification for this product.
    Red Hat Red Hat Quay 3.17 Unaffected: 1786181981 , < * (rpm)
        cpe:/a:redhat:quay:3.17::el9
    Create a notification for this product.
    Red Hat Red Hat Quay 3.9 Unaffected: 1781878070 , < * (rpm)
        cpe:/a:redhat:quay:3.9::el8
    Create a notification for this product.
    Red Hat Red Hat Satellite 6.18 Unaffected: 1781032495 , < * (rpm)
        cpe:/a:redhat:satellite:6.18::el9
    Create a notification for this product.
    Red Hat Confidential Compute Attestation     cpe:/a:redhat:confidential_compute_attestation:1
    Create a notification for this product.
    Red Hat Cryostat 4     cpe:/a:redhat:cryostat:4
    Create a notification for this product.
    Red Hat Network Observability Operator     cpe:/a:redhat:network_observ_optr:1
    Create a notification for this product.
    Red Hat OpenShift Lightspeed     cpe:/a:redhat:openshift_lightspeed
    Create a notification for this product.
    Red Hat OpenShift Pipelines     cpe:/a:redhat:openshift_pipelines:1
    Create a notification for this product.
    Red Hat OpenShift Serverless     cpe:/a:redhat:serverless:1
    Create a notification for this product.
    Red Hat Red Hat AMQ Broker 7     cpe:/a:redhat:amq_broker:7
    Create a notification for this product.
    Red Hat Red Hat Ansible Automation Platform 2     cpe:/a:redhat:ansible_automation_platform:2
    Create a notification for this product.
    Red Hat Red Hat build of Apache Camel - HawtIO 4     cpe:/a:redhat:apache_camel_hawtio:4
    Create a notification for this product.
    Red Hat Red Hat Build of Podman Desktop     cpe:/a:redhat:podman_desktop:1
    Create a notification for this product.
    Red Hat Red Hat Build of Podman Desktop - Tech Preview     cpe:/a:redhat:podman_desktop:0
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 9     cpe:/o:redhat:enterprise_linux:9
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux AI (RHEL AI) 3     cpe:/a:redhat:enterprise_linux_ai:3
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI (RHOAI)     cpe:/a:redhat:openshift_ai
    Create a notification for this product.
    Red Hat Red Hat OpenShift Container Platform 4     cpe:/a:redhat:openshift:4
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4     cpe:/a:redhat:openshift_data_foundation:4
    Create a notification for this product.
    Red Hat Red Hat OpenShift Dev Spaces     cpe:/a:redhat:openshift_devspaces:3
    Create a notification for this product.
    Red Hat Red Hat OpenShift Virtualization 4     cpe:/a:redhat:container_native_virtualization:4
    Create a notification for this product.
    Red Hat Red Hat Satellite 6     cpe:/a:redhat:satellite:6
    Create a notification for this product.
    Red Hat Self-service automation portal 2     cpe:/a:redhat:ansible_portal:2
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-6322",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "yes"
                      },
                      {
                        "Technical Impact": "partial"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-05-05T12:55:25.956279Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-05-05T12:55:43.750Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          },
          {
            "affected": [
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2.5::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "automation-gateway",
                "product": "Red Hat Ansible Automation Platform 2.5 for RHEL 8",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:2.5.20260715-1.el8ap",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2.5::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "automation-gateway",
                "product": "Red Hat Ansible Automation Platform 2.5 for RHEL 9",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:2.5.20260715-1.el9ap",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2.6::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "automation-platform-ui",
                "product": "Red Hat Ansible Automation Platform 2.6 for RHEL 9",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:2.6.10-1.el9ap",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:jboss_data_grid:8"
                ],
                "defaultStatus": "unaffected",
                "packageName": "fast-uri",
                "product": "Red Hat Data Grid 8.6.2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:10.2"
                ],
                "defaultStatus": "affected",
                "packageName": "rh-podman-desktop",
                "product": "Red Hat Enterprise Linux 10",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:1.1.1-1.el10_2",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9",
                "product": "Cluster Observability Operator 1.5.0",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782840519",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9",
                "product": "Cluster Observability Operator 1.5.0",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782839981",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9",
                "product": "Cluster Observability Operator 1.5.0",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782839193",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "cluster-observability-operator/distributed-tracing-console-plugin-rhel9",
                "product": "Cluster Observability Operator 1.5.0",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782838753",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "cluster-observability-operator/logging-console-plugin-pf4-rhel9",
                "product": "Cluster Observability Operator 1.5.0",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782839279",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "cluster-observability-operator/logging-console-plugin-pf5-rhel9",
                "product": "Cluster Observability Operator 1.5.0",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782840539",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "cluster-observability-operator/logging-console-plugin-rhel9",
                "product": "Cluster Observability Operator 1.5.0",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782841925",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "cluster-observability-operator/monitoring-console-plugin-rhel9",
                "product": "Cluster Observability Operator 1.5.0",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782838476",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9",
                "product": "Cluster Observability Operator 1.5.0",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782839996",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9",
                "product": "Cluster Observability Operator 1.5.0",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782839494",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:multicluster_engine:2.11::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "multicluster-engine/console-mce-rhel9",
                "product": "multicluster engine for Kubernetes 2.11",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1780910888",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:acm:2.16::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhacm2/console-rhel9",
                "product": "Red Hat Advanced Cluster Management for Kubernetes 2.16",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1780600823",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2.6::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "ansible-automation-platform-26/gateway-rhel9",
                "product": "Red Hat Ansible Automation Platform 2.6",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782761510",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2.6::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "ansible-automation-platform-tech-preview/mcp-server-rhel9",
                "product": "Red Hat Ansible Automation Platform 2.6",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782721130",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2.7::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "ansible-automation-platform-27/gateway-rhel9",
                "product": "Red Hat Ansible Automation Platform 2.7",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1783919486",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:rhdh:1.10::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhdh/rhdh-hub-rhel9",
                "product": "Red Hat Developer Hub 1.10",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1783448184",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:rhdh:1.9::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhdh/rhdh-hub-rhel9",
                "product": "Red Hat Developer Hub 1.9",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1781187342",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:discovery:2::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "discovery/discovery-ui-rhel9",
                "product": "Red Hat Discovery 2",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782166952",
                    "versionType": "rpm"
                  },
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1788206196",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:edge_manager:1.0::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhem/flightctl-ui-ocp-rhel9",
                "product": "Red Hat Edge Manager 1.0",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1783502765",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:edge_manager:1.0::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhem/flightctl-ui-rhel9",
                "product": "Red Hat Edge Manager 1.0",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1783502438",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:edge_manager:1.1::el10"
                ],
                "defaultStatus": "affected",
                "packageName": "rhem/flightctl-ui-ocp-rhel10",
                "product": "Red Hat Edge Manager 1.1",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1784194938",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:edge_manager:1.1::el10"
                ],
                "defaultStatus": "affected",
                "packageName": "rhem/flightctl-ui-rhel10",
                "product": "Red Hat Edge Manager 1.1",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1784194574",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:edge_manager:1.1::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhem/flightctl-ui-ocp-rhel9",
                "product": "Red Hat Edge Manager 1.1",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1784126822",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:edge_manager:1.1::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhem/flightctl-ui-rhel9",
                "product": "Red Hat Edge Manager 1.1",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1784127736",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:hummingbird:1"
                ],
                "defaultStatus": "affected",
                "packageName": "grafana13-1-main",
                "product": "Red Hat Hardened Images",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "13.1.3-0.3.hum1",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:rhmt:1.8::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "rhmtc/openshift-migration-ui-rhel8",
                "product": "Red Hat Migration Toolkit 1.8",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1783690532",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:migration_toolkit_applications:8.2::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "mta/mta-solution-server-rhel9",
                "product": "Red Hat Migration Toolkit for Applications 8.2",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1784109883",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:3.4::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-dashboard-rhel9",
                "product": "Red Hat OpenShift AI 3.4",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1787347991",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:3.4::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-mod-arch-automl-rhel9",
                "product": "Red Hat OpenShift AI 3.4",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1787250508",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:3.4::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-mod-arch-autorag-rhel9",
                "product": "Red Hat OpenShift AI 3.4",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1787251550",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:3.4::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-mod-arch-gen-ai-rhel9",
                "product": "Red Hat OpenShift AI 3.4",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786611759",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:3.4::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-mod-arch-maas-rhel9",
                "product": "Red Hat OpenShift AI 3.4",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1787251250",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:3.4::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-mod-arch-mlflow-rhel9",
                "product": "Red Hat OpenShift AI 3.4",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786612219",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:3.4::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-mod-arch-model-registry-rhel9",
                "product": "Red Hat OpenShift AI 3.4",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1787250617",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:3.4::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9",
                "product": "Red Hat OpenShift AI 3.4",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1787121387",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4.18::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift4/ose-console-rhel9",
                "product": "Red Hat OpenShift Container Platform 4.18",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1787031447",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4.19::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift4/ose-monitoring-plugin-rhel9",
                "product": "Red Hat OpenShift Container Platform 4.19",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782880472",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4.19::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift4/ose-console-rhel9",
                "product": "Red Hat OpenShift Container Platform 4.19",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786486822",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4.20::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift4/ose-monitoring-plugin-rhel9",
                "product": "Red Hat OpenShift Container Platform 4.20",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782313844",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4.20::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift4/ose-console-rhel9",
                "product": "Red Hat OpenShift Container Platform 4.20",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1783602326",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4.21::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift4/ose-monitoring-plugin-rhel9",
                "product": "Red Hat OpenShift Container Platform 4.21",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782308519",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4.21::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift4/nmstate-console-plugin-rhel9",
                "product": "Red Hat OpenShift Container Platform 4.21",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782914001",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4.21::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift4/ose-console-rhel9",
                "product": "Red Hat OpenShift Container Platform 4.21",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1783502338",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4.22::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift4/ose-console-rhel9",
                "product": "Red Hat OpenShift Container Platform 4.22",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782224390",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4.22::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift4/ose-monitoring-plugin-rhel9",
                "product": "Red Hat OpenShift Container Platform 4.22",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782224316",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4.22::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift4/nmstate-console-plugin-rhel9",
                "product": "Red Hat OpenShift Container Platform 4.22",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782224099",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/cephcsi-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.18",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786705347",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/cephcsi-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.18",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786706101",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/mcg-core-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.18",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786705558",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/mcg-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.18",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786705646",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/ocs-client-console-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.18",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786706138",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/ocs-client-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.18",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786705741",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/ocs-metrics-exporter-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.18",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786705777",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/ocs-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.18",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786705802",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-cli-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.18",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786705938",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-console-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.18",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786706577",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-cosi-sidecar-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.18",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786706125",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-csi-addons-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.18",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786706177",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-csi-addons-sidecar-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.18",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786706188",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-multicluster-console-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.18",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786706679",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-multicluster-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.18",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786706357",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-must-gather-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.18",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786706612",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.18",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786706644",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odr-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.18",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786706659",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/rook-ceph-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.18",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786706880",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.19::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/cephcsi-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.19",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786701839",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.19::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/cephcsi-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.19",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786701555",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.19::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/mcg-core-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.19",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786702052",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.19::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/mcg-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.19",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786702559",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.19::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/ocs-client-console-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.19",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786702713",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.19::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/ocs-client-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.19",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786702264",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.19::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/ocs-metrics-exporter-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.19",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786702448",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.19::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/ocs-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.19",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786702276",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.19::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-cli-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.19",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786702440",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.19::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-cloudnative-pg-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.19",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786702315",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.19::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-console-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.19",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786703071",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.19::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-cosi-sidecar-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.19",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786702563",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.19::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-csi-addons-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.19",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786702636",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.19::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-csi-addons-sidecar-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.19",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786702623",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.19::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-multicluster-console-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.19",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786703137",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.19::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-multicluster-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.19",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786702716",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.19::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-must-gather-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.19",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786702872",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.19::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.19",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786702949",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.19::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odr-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.19",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786702917",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.19::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/rook-ceph-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.19",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786703143",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/cephcsi-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.20",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786627460",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/cephcsi-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.20",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786626399",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/mcg-core-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.20",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786628235",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/mcg-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.20",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786627106",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/ocs-client-console-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.20",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786629761",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/ocs-client-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.20",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786627559",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/ocs-metrics-exporter-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.20",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786687918",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/ocs-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.20",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786629478",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-cli-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.20",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786628142",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-cloudnative-pg-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.20",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786631508",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-console-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.20",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786628053",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-cosi-sidecar-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.20",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786627382",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-csi-addons-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.20",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786627430",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-csi-addons-sidecar-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.20",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786629076",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-external-snapshotter-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.20",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786627469",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-external-snapshotter-sidecar-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.20",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786644072",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-multicluster-console-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.20",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786688215",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-multicluster-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.20",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786628340",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-must-gather-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.20",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786628623",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.20",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786632256",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odr-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.20",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786628935",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/rook-ceph-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.20",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786629548",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.21::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/cephcsi-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.21",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786627281",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.21::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/cephcsi-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.21",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786627168",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.21::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/devicefinder-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.21",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786628067",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.21::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/mcg-core-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.21",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786628657",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.21::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/mcg-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.21",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786627792",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.21::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/ocs-client-console-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.21",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786698066",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.21::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/ocs-client-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.21",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786627823",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.21::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/ocs-metrics-exporter-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.21",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786628998",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.21::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/ocs-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.21",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786697443",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.21::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-blackbox-exporter-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.21",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786628916",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.21::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-cli-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.21",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786630412",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.21::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-cloudnative-pg-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.21",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786629773",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.21::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-console-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.21",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786630739",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.21::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-cosi-sidecar-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.21",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786628303",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.21::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-csi-addons-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.21",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786629324",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.21::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-csi-addons-sidecar-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.21",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786628605",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.21::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-external-snapshotter-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.21",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786631438",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.21::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-external-snapshotter-sidecar-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.21",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786697305",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.21::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-lightspeed-rag-content-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.21",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786644678",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.21::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-multicluster-console-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.21",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786634168",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.21::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-multicluster-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.21",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786633448",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.21::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-must-gather-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.21",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786634233",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.21::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.21",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786633986",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.21::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odr-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.21",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786633677",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.21::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/rook-ceph-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.21",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786644362",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/cephcsi-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.22",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1787057250",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/cephcsi-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.22",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1787057964",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/devicefinder-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.22",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1787057603",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/mcg-core-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.22",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1787058450",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/mcg-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.22",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1787057989",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/ocs-client-console-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.22",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1787059853",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/ocs-client-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.22",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1787057849",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/ocs-metrics-exporter-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.22",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1787060257",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/ocs-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.22",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1787058278",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-blackbox-exporter-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.22",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1787058658",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-cli-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.22",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1787058706",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-cloudnative-pg-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.22",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1787058403",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-console-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.22",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1787059072",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-cosi-sidecar-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.22",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1787058807",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-csi-addons-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.22",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1787058588",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-csi-addons-sidecar-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.22",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1787058970",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-drbd-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.22",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1787059538",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-external-snapshotter-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.22",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1787059616",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-external-snapshotter-sidecar-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.22",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1787061098",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-lightspeed-rag-content-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.22",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1787059085",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-multicluster-console-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.22",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1787059621",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-multicluster-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.22",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1787059386",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-must-gather-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.22",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1787060080",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odf-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.22",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1787060105",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odr-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.22",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1787059493",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odr-volsync-plugin-mover-rhel9",
                "product": "Red Hat Openshift Data Foundation 4.22",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1787060201",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/odr-volsync-plugin-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.22",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1787060274",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "odf4/rook-ceph-rhel9-operator",
                "product": "Red Hat Openshift Data Foundation 4.22",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1787061554",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.10::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel8",
                "product": "Red Hat Quay 3.10",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782487717",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.12::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel8",
                "product": "Red Hat Quay 3.12",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1781937357",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.16::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel9",
                "product": "Red Hat Quay 3.16",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1783955846",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.17::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel9",
                "product": "Red Hat Quay 3.17",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786181981",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.9::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel8",
                "product": "Red Hat Quay 3.9",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1781878070",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:satellite:6.18::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "satellite/iop-vulnerability-frontend-rhel9",
                "product": "Red Hat Satellite 6.18",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1781032495",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:confidential_compute_attestation:1"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-sandboxed-containers/osc-pccs",
                "product": "Confidential Compute Attestation",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:cryostat:4"
                ],
                "defaultStatus": "unaffected",
                "packageName": "cryostat-openshift-console-plugin-npm",
                "product": "Cryostat 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:cryostat:4"
                ],
                "defaultStatus": "unaffected",
                "packageName": "grafana-infinity-datasource-npm",
                "product": "Cryostat 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:network_observ_optr:1"
                ],
                "defaultStatus": "affected",
                "packageName": "network-observability/network-observability-console-plugin-rhel9",
                "product": "Network Observability Operator",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_lightspeed"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-lightspeed/lightspeed-console-plugin-419-rhel9",
                "product": "OpenShift Lightspeed",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_lightspeed"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-lightspeed/lightspeed-console-plugin-pf5-rhel9",
                "product": "OpenShift Lightspeed",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_lightspeed"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-lightspeed/lightspeed-console-plugin-rhel9",
                "product": "OpenShift Lightspeed",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_pipelines:1"
                ],
                "defaultStatus": "unaffected",
                "packageName": "openshift-pipelines/pipelines-console-plugin-pf5-rhel9",
                "product": "OpenShift Pipelines",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_pipelines:1"
                ],
                "defaultStatus": "unaffected",
                "packageName": "openshift-pipelines/pipelines-console-plugin-rhel8",
                "product": "OpenShift Pipelines",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_pipelines:1"
                ],
                "defaultStatus": "unaffected",
                "packageName": "openshift-pipelines/pipelines-console-plugin-rhel9",
                "product": "OpenShift Pipelines",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_pipelines:1"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-pipelines/pipelines-hub-ui-rhel8",
                "product": "OpenShift Pipelines",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_pipelines:1"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-pipelines/pipelines-hub-ui-rhel9",
                "product": "OpenShift Pipelines",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:serverless:1"
                ],
                "defaultStatus": "unaffected",
                "packageName": "openshift-serverless-1/kn-eventing-integrations-aws-ddb-streams-source-rhel9",
                "product": "OpenShift Serverless",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:serverless:1"
                ],
                "defaultStatus": "unaffected",
                "packageName": "openshift-serverless-1/kn-eventing-integrations-aws-s3-sink-rhel9",
                "product": "OpenShift Serverless",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:serverless:1"
                ],
                "defaultStatus": "unaffected",
                "packageName": "openshift-serverless-1/kn-eventing-integrations-aws-s3-source-rhel9",
                "product": "OpenShift Serverless",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:serverless:1"
                ],
                "defaultStatus": "unaffected",
                "packageName": "openshift-serverless-1/kn-eventing-integrations-aws-sns-sink-rhel9",
                "product": "OpenShift Serverless",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:serverless:1"
                ],
                "defaultStatus": "unaffected",
                "packageName": "openshift-serverless-1/kn-eventing-integrations-aws-sqs-sink-rhel9",
                "product": "OpenShift Serverless",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:serverless:1"
                ],
                "defaultStatus": "unaffected",
                "packageName": "openshift-serverless-1/kn-eventing-integrations-aws-sqs-source-rhel9",
                "product": "OpenShift Serverless",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:serverless:1"
                ],
                "defaultStatus": "unaffected",
                "packageName": "openshift-serverless-1/kn-eventing-integrations-log-sink-rhel9",
                "product": "OpenShift Serverless",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:serverless:1"
                ],
                "defaultStatus": "unaffected",
                "packageName": "openshift-serverless-1/kn-eventing-integrations-timer-source-rhel9",
                "product": "OpenShift Serverless",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:serverless:1"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-serverless-1/kn-eventing-integrations-transform-jsonata-rhel9",
                "product": "OpenShift Serverless",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:amq_broker:7"
                ],
                "defaultStatus": "unaffected",
                "packageName": "fast-uri",
                "product": "Red Hat AMQ Broker 7",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "affected",
                "packageName": "ansible-automation-platform-24/lightspeed-rhel8",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "affected",
                "packageName": "ansible-automation-platform-25/lightspeed-rhel8",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "affected",
                "packageName": "ansible-automation-platform-26/lightspeed-rhel9",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "ansible-automation-platform-27/lightspeed-rhel9",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:apache_camel_hawtio:4"
                ],
                "defaultStatus": "unaffected",
                "packageName": "fast-uri",
                "product": "Red Hat build of Apache Camel - HawtIO 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:podman_desktop:1"
                ],
                "defaultStatus": "affected",
                "packageName": "rh-podman-desktop.git",
                "product": "Red Hat Build of Podman Desktop",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:podman_desktop:0"
                ],
                "defaultStatus": "affected",
                "packageName": "rhdesktop/rh-podman-desktop-ext-bootc-rhel10",
                "product": "Red Hat Build of Podman Desktop - Tech Preview",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:9"
                ],
                "defaultStatus": "affected",
                "packageName": "linux-sgx",
                "product": "Red Hat Enterprise Linux 9",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:enterprise_linux_ai:3"
                ],
                "defaultStatus": "affected",
                "packageName": "rhelai3/bootc-cuda-rhel9",
                "product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:enterprise_linux_ai:3"
                ],
                "defaultStatus": "affected",
                "packageName": "rhelai3/bootc-gaudi-rhel9",
                "product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:enterprise_linux_ai:3"
                ],
                "defaultStatus": "affected",
                "packageName": "rhelai3/bootc-rocm-rhel9",
                "product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:enterprise_linux_ai:3"
                ],
                "defaultStatus": "affected",
                "packageName": "rhelai3/disk-image-cuda-rhel9",
                "product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "unaffected",
                "packageName": "rhoai/odh-dashboard-rhel8",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "unaffected",
                "packageName": "rhoai/odh-mlflow-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-mod-arch-eval-hub-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4"
                ],
                "defaultStatus": "affected",
                "packageName": "redhat-user-workloads/art-images",
                "product": "Red Hat OpenShift Container Platform 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4"
                ],
                "defaultStatus": "affected",
                "packageName": "rhceph-dev/odf4-mcg-core-rhel9",
                "product": "Red Hat Openshift Data Foundation 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_devspaces:3"
                ],
                "defaultStatus": "affected",
                "packageName": "devspaces/dashboard-rhel9",
                "product": "Red Hat OpenShift Dev Spaces",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:container_native_virtualization:4"
                ],
                "defaultStatus": "unaffected",
                "packageName": "container-native-virtualization/kubevirt-console-plugin-rhel9",
                "product": "Red Hat OpenShift Virtualization 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:satellite:6"
                ],
                "defaultStatus": "unaffected",
                "packageName": "nodejs-compression-webpack-plugin",
                "product": "Red Hat Satellite 6",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:satellite:6"
                ],
                "defaultStatus": "unaffected",
                "packageName": "nodejs-mini-css-extract-plugin",
                "product": "Red Hat Satellite 6",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:satellite:6"
                ],
                "defaultStatus": "unaffected",
                "packageName": "nodejs-webpack",
                "product": "Red Hat Satellite 6",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:satellite:6"
                ],
                "defaultStatus": "unaffected",
                "packageName": "satellite/iop-host-inventory-frontend-rhel9",
                "product": "Red Hat Satellite 6",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_portal:2"
                ],
                "defaultStatus": "affected",
                "packageName": "ansible-automation-platform/automation-portal",
                "product": "Self-service automation portal 2",
                "vendor": "Red Hat"
              }
            ],
            "datePublic": "2026-05-05T10:29:16.378Z",
            "descriptions": [
              {
                "lang": "en",
                "value": "A flaw was found in fast-uri. A remote attacker could exploit this vulnerability by crafting a malicious Uniform Resource Identifier (URI) that contains percent-encoded authority delimiters. The fast-uri library incorrectly decodes these delimiters during normalization and then re-emits them as raw separators, which can change the URI\u0027s intended authority. This issue allows applications that perform host allowlist checks, redirect validation, or outbound request routing to be steered to a different authority than specified, potentially bypassing security controls."
              }
            ],
            "metrics": [
              {
                "other": {
                  "content": {
                    "namespace": "https://access.redhat.com/security/updates/classification/",
                    "value": "Important"
                  },
                  "type": "Red Hat severity rating"
                }
              },
              {
                "cvssV3_1": {
                  "attackComplexity": "LOW",
                  "attackVector": "NETWORK",
                  "availabilityImpact": "NONE",
                  "baseScore": 7.5,
                  "baseSeverity": "HIGH",
                  "confidentialityImpact": "NONE",
                  "integrityImpact": "HIGH",
                  "privilegesRequired": "NONE",
                  "scope": "UNCHANGED",
                  "userInteraction": "NONE",
                  "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
                  "version": "3.1"
                },
                "format": "CVSS"
              }
            ],
            "problemTypes": [
              {
                "descriptions": [
                  {
                    "cweId": "CWE-140",
                    "description": "Improper Neutralization of Delimiters",
                    "lang": "en",
                    "type": "CWE"
                  }
                ]
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-09-10T12:04:48.155Z",
              "orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
              "shortName": "redhat-SADP"
            },
            "references": [
              {
                "tags": [
                  "vdb-entry",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/security/cve/CVE-2026-6322"
              },
              {
                "name": "RHBZ#2466684",
                "tags": [
                  "issue-tracking",
                  "x_refsource_REDHAT"
                ],
                "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466684"
              },
              {
                "tags": [
                  "x_sadp-csaf-vex"
                ],
                "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6322.json"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:42078"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:34160"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:34342"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:37385"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:25273"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:34374"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:42142"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:41951"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:36754"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:26234"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:29197"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:61783"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:36651"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:40945"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:40118"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:60855"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:41928"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:43038"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:60520"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:57487"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:54555"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:34766"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:37628"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:29800"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:34770"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:37186"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:29834"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:29796"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:29795"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:56431"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:56366"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:57013"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:56968"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:56928"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:33683"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:30076"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:41066"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:54395"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:28571"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:26225"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:25271"
              }
            ],
            "solutions": [
              {
                "lang": "en",
                "value": "RHSA-2026:42078: Red Hat Ansible Automation Platform 2.5 for RHEL 8, Red Hat Ansible Automation Platform 2.5 for RHEL 9"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:34160: Red Hat Ansible Automation Platform 2.6 for RHEL 9"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:34342: Cluster Observability Operator 1.5.0"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:37385: Red Hat Enterprise Linux Extensions Channel (v. 10)"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:25273: Red Hat Advanced Cluster Management for Kubernetes 2.16"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:34374: Red Hat Ansible Automation Platform 2.6"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:42142: Red Hat Ansible Automation Platform 2.7"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:41951: Red Hat Data Grid 8.6.2"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:36754: Red Hat Developer Hub 1.10"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:26234: Red Hat Developer Hub 1.9"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:29197: Red Hat Discovery 2"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:61783: Red Hat Discovery 2"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:36651: Red Hat Edge Manager 1.0"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:40945: Red Hat Edge Manager 1.1"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:40118: Red Hat Edge Manager 1.1"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:60855: Red Hat Hardened Images"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:41928: Red Hat Migration Toolkit 1.8"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:43038: Red Hat Migration Toolkit for Applications 8.2"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:60520: Red Hat OpenShift AI 3.4"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:57487: Red Hat OpenShift Container Platform 4.18"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:54555: Red Hat OpenShift Container Platform 4.19"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:34766: Red Hat OpenShift Container Platform 4.19"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:37628: Red Hat OpenShift Container Platform 4.20"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:29800: Red Hat OpenShift Container Platform 4.20"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:34770: Red Hat OpenShift Container Platform 4.21"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:37186: Red Hat OpenShift Container Platform 4.21"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:29834: Red Hat OpenShift Container Platform 4.21"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:29796: Red Hat OpenShift Container Platform 4.22"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:29795: Red Hat OpenShift Container Platform 4.22"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:56431: Red Hat Openshift Data Foundation 4.18"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:56366: Red Hat Openshift Data Foundation 4.19"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:57013: Red Hat Openshift Data Foundation 4.20"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:56968: Red Hat Openshift Data Foundation 4.21"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:56928: Red Hat Openshift Data Foundation 4.22"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:33683: Red Hat Quay 3.10"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:30076: Red Hat Quay 3.12"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:41066: Red Hat Quay 3.16"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:54395: Red Hat Quay 3.17"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:28571: Red Hat Quay 3.9"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:26225: Red Hat Satellite 6.18"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:25271: multicluster engine for Kubernetes 2.11"
              }
            ],
            "timeline": [
              {
                "lang": "en",
                "time": "2026-05-05T11:01:00.332Z",
                "value": "Reported to Red Hat."
              },
              {
                "lang": "en",
                "time": "2026-05-05T10:29:16.378Z",
                "value": "Made public."
              }
            ],
            "title": "fast-uri: fast-uri: URI authority bypass due to improper delimiter handling",
            "x_adpType": "supplier",
            "x_generator": {
              "engine": "sadp-cli 1.0.0"
            }
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "unaffected",
              "packageURL": "pkg:npm/fast-uri",
              "product": "fast-uri",
              "vendor": "fast-uri",
              "versions": [
                {
                  "lessThan": "3.1.2",
                  "status": "affected",
                  "version": "0",
                  "versionType": "semver"
                },
                {
                  "status": "unaffected",
                  "version": "3.1.2",
                  "versionType": "semver"
                }
              ]
            }
          ],
          "credits": [
            {
              "lang": "en",
              "type": "reporter",
              "value": "Jvr"
            },
            {
              "lang": "en",
              "type": "remediation developer",
              "value": "Matteo Collina"
            },
            {
              "lang": "en",
              "type": "remediation developer",
              "value": "Ulises Gasc\u00f3n"
            },
            {
              "lang": "en",
              "type": "remediation reviewer",
              "value": "KaKa"
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "supportingMedia": [
                {
                  "base64": false,
                  "type": "text/html",
                  "value": "fast-uri normalize() decoded percent-encoded authority delimiters inside the host component and then re-emitted them as raw delimiters during serialization. A host that combined an allowed domain, an encoded at-sign, and a different domain was re-emitted with the at-sign as a raw userinfo separator, changing the URI\u0027s authority to the second domain. Applications that normalize untrusted URLs before host allowlist checks, redirect validation, or outbound request routing can be steered to a different authority than the input appeared to specify. Versions \u003c= 3.1.1 are affected. Update to 3.1.2 or later."
                }
              ],
              "value": "fast-uri normalize() decoded percent-encoded authority delimiters inside the host component and then re-emitted them as raw delimiters during serialization. A host that combined an allowed domain, an encoded at-sign, and a different domain was re-emitted with the at-sign as a raw userinfo separator, changing the URI\u0027s authority to the second domain. Applications that normalize untrusted URLs before host allowlist checks, redirect validation, or outbound request routing can be steered to a different authority than the input appeared to specify. Versions \u003c= 3.1.1 are affected. Update to 3.1.2 or later."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "baseScore": 7.5,
                "baseSeverity": "HIGH",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
                "version": "3.1"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-436",
                  "description": "CWE-436: Interpretation Conflict",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-05-05T10:29:16.378Z",
            "orgId": "ce714d77-add3-4f53-aff5-83d477b104bb",
            "shortName": "openjs"
          },
          "references": [
            {
              "url": "https://github.com/fastify/fast-uri/security/advisories/GHSA-v39h-62p7-jpjc"
            },
            {
              "url": "https://cna.openjsf.org/security-advisories.html"
            }
          ],
          "title": "fast-uri vulnerable to host confusion via percent-encoded authority delimiters",
          "x_generator": {
            "engine": "cve-kit 1.0.0"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "ce714d77-add3-4f53-aff5-83d477b104bb",
        "assignerShortName": "openjs",
        "cveId": "CVE-2026-6322",
        "datePublished": "2026-05-05T10:29:16.378Z",
        "dateReserved": "2026-04-14T20:28:09.160Z",
        "dateUpdated": "2026-09-10T12:04:48.155Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2026-42039 (GCVE-0-2026-42039)

    Vulnerability from cvelistv5 – Published: 2026-04-24 18:01 – Updated: 2026-09-10 12:04
    VLAI
    Title
    Axios: unbounded recursion in toFormData causes DoS via deeply nested request data
    Summary
    Axios is a promise based HTTP client for the browser and Node.js. Prior to 1.15.1 and 0.31.1, toFormData recursively walks nested objects with no depth limit, so a deeply nested value passed as request data crashes the Node.js process with a RangeError. This vulnerability is fixed in 1.15.1 and 0.31.1.
    SSVC
    Exploitation: poc Automatable: yes Technical Impact: partial
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-04-24 18:14 UTC
    CWE
    • CWE-674 - Uncontrolled Recursion
    • CWE-770 - Allocation of Resources Without Limits or Throttling
    References
    URL Tags
    https://github.com/axios/axios/security/advisorie… x_refsource_CONFIRM
    https://access.redhat.com/security/cve/CVE-2026-42039 vdb-entryx_refsource_REDHAT
    https://bugzilla.redhat.com/show_bug.cgi?id=2461630 issue-trackingx_refsource_REDHAT
    https://security.access.redhat.com/data/csaf/v2/v… x_sadp-csaf-vex
    https://access.redhat.com/errata/RHSA-2026:25089 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:16874 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:24473 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:36882 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:24539 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:25273 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:20938 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:20889 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:22619 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:21338 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:33574 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:14937 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:25041 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:50300 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:24977 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:17468 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:17474 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:48670 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:21772 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:16476 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:16534 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:16532 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:16535 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:16542 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:22840 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:22629 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:21017 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:24853 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:19375 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:22465 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:48085 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:23361 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:26214 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:26225 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:25271 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:24536 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:17657 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:17699 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:19109 vendor-advisoryx_refsource_REDHAT
    Impacted products
    Vendor Product Version
    axios axios Affected: >= 1.0.0, < 1.15.1
    Affected: < 0.31.1
    Create a notification for this product.
    Red Hat HawtIO HawtIO 4.4.0     cpe:/a:redhat:apache_camel_hawtio:4.4::el9
    Create a notification for this product.
    Red Hat Red Hat Data Grid 8.6.1     cpe:/a:redhat:jboss_data_grid:8
    Create a notification for this product.
    Red Hat multicluster engine for Kubernetes 2.1 Unaffected: 1780917531 , < * (rpm)
        cpe:/a:redhat:multicluster_engine:2.10::el9
    Create a notification for this product.
    Red Hat multicluster engine for Kubernetes 2.11 Unaffected: 1780910888 , < * (rpm)
        cpe:/a:redhat:multicluster_engine:2.11::el9
    Create a notification for this product.
    Red Hat multicluster engine for Kubernetes 2.6 Unaffected: 1778511348 , < * (rpm)
        cpe:/a:redhat:multicluster_engine:2.6::el9
    Create a notification for this product.
    Red Hat multicluster engine for Kubernetes 2.8 Unaffected: 1778383863 , < * (rpm)
        cpe:/a:redhat:multicluster_engine:2.8::el9
    Create a notification for this product.
    Red Hat multicluster engine for Kubernetes 2.9 Unaffected: 1778532610 , < * (rpm)
        cpe:/a:redhat:multicluster_engine:2.9::el9
    Create a notification for this product.
    Red Hat Network Observability (NETOBSERV) 1.11.0 Unaffected: 1778510461 , < * (rpm)
        cpe:/a:redhat:network_observ_optr:1.11::el9
    Create a notification for this product.
    Red Hat Network Observability (NETOBSERV) 1.12.2 Unaffected: 1780920979 , < * (rpm)
        cpe:/a:redhat:network_observ_optr:1.12::el9
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.14 Unaffected: 1783451729 , < * (rpm)
        cpe:/a:redhat:acm:2.14::el9
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.15 Unaffected: 1780876734 , < * (rpm)
        cpe:/a:redhat:acm:2.15::el9
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.16 Unaffected: 1780600823 , < * (rpm)
        cpe:/a:redhat:acm:2.16::el9
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Security 4.9 Unaffected: 1779371594 , < * (rpm)
        cpe:/a:redhat:advanced_cluster_security:4.9::el8
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Security for Kubernetes 4.10 Unaffected: 1779293013 , < * (rpm)
        cpe:/a:redhat:advanced_cluster_security:4.10::el8
    Create a notification for this product.
    Red Hat Red Hat Developer Hub 1.8 Unaffected: 1779841586 , < * (rpm)
        cpe:/a:redhat:rhdh:1.8::el9
    Create a notification for this product.
    Red Hat Red Hat Developer Hub 1.9 Unaffected: 1782761244 , < * (rpm)
        cpe:/a:redhat:rhdh:1.9::el9
    Create a notification for this product.
    Red Hat Red Hat Discovery 2 Unaffected: 1778156756 , < * (rpm)
        cpe:/a:redhat:discovery:2::el9
    Create a notification for this product.
    Red Hat Red Hat Migration Toolkit 1.8 Unaffected: 1780590717 , < * (rpm)
        cpe:/a:redhat:rhmt:1.8::el8
    Create a notification for this product.
    Red Hat Red Hat Migration Toolkit for Applications 8.1 Unaffected: 1785169013 , < * (rpm)
        cpe:/a:redhat:migration_toolkit_applications:8.1::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 2.25 Unaffected: 1780467029 , < * (rpm)
        cpe:/a:redhat:openshift_ai:2.25::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 2.25 Unaffected: 1780467147 , < * (rpm)
        cpe:/a:redhat:openshift_ai:2.25::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Container Platform 4.20 Unaffected: 1778645099 , < * (rpm)
        cpe:/a:redhat:openshift:4.20::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Container Platform 4.21 Unaffected: 1778539338 , < * (rpm)
        cpe:/a:redhat:openshift:4.21::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Container Platform 4.21 Unaffected: 1785354128 , < * (rpm)
        cpe:/a:redhat:openshift:4.21::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Dev Spaces 3.28 Unaffected: 1779814592 , < * (rpm)
        cpe:/a:redhat:openshift_devspaces:3.28::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Dev Spaces 3.28 Unaffected: 1779341289 , < * (rpm)
        cpe:/a:redhat:openshift_devspaces:3.28::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 2.6 Unaffected: 1778191473 , < * (rpm)
        cpe:/a:redhat:service_mesh:2.6::el8
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 2.6 Unaffected: 1778191378 , < * (rpm)
        cpe:/a:redhat:service_mesh:2.6::el8
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 3.0 Unaffected: 1778163785 , < * (rpm)
        cpe:/a:redhat:service_mesh:3.0::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 3.0 Unaffected: 1778164208 , < * (rpm)
        cpe:/a:redhat:service_mesh:3.0::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 3.1 Unaffected: 1778163935 , < * (rpm)
        cpe:/a:redhat:service_mesh:3.1::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 3.1 Unaffected: 1778164042 , < * (rpm)
        cpe:/a:redhat:service_mesh:3.1::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 3.2 Unaffected: 1778163792 , < * (rpm)
        cpe:/a:redhat:service_mesh:3.2::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 3.2 Unaffected: 1778163909 , < * (rpm)
        cpe:/a:redhat:service_mesh:3.2::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 3.3 Unaffected: 1778163785 , < * (rpm)
        cpe:/a:redhat:service_mesh:3.3::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 3.3 Unaffected: 1778163986 , < * (rpm)
        cpe:/a:redhat:service_mesh:3.3::el9
    Create a notification for this product.
    Red Hat Red Hat Quay 3.10 Unaffected: 1779822261 , < * (rpm)
        cpe:/a:redhat:quay:3.10::el8
    Create a notification for this product.
    Red Hat Red Hat Quay 3.12 Unaffected: 1779811412 , < * (rpm)
        cpe:/a:redhat:quay:3.12::el8
    Create a notification for this product.
    Red Hat Red Hat Quay 3.14 Unaffected: 1779689392 , < * (rpm)
        cpe:/a:redhat:quay:3.14::el8
    Create a notification for this product.
    Red Hat Red Hat Quay 3.15 Unaffected: 1780891395 , < * (rpm)
        cpe:/a:redhat:quay:3.15::el8
    Create a notification for this product.
    Red Hat Red Hat Quay 3.16 Unaffected: 1779204086 , < * (rpm)
        cpe:/a:redhat:quay:3.16::el9
    Create a notification for this product.
    Red Hat Red Hat Quay 3.17 Unaffected: 1779922205 , < * (rpm)
        cpe:/a:redhat:quay:3.17::el9
    Create a notification for this product.
    Red Hat Red Hat Quay 3.18 Unaffected: 1784987273 , < * (rpm)
        cpe:/a:redhat:quay:3.18::el9
    Create a notification for this product.
    Red Hat Red Hat Quay 3.9 Unaffected: 1779811473 , < * (rpm)
        cpe:/a:redhat:quay:3.9::el8
    Create a notification for this product.
    Red Hat Red Hat Satellite 6.18 Unaffected: 1781181673 , < * (rpm)
        cpe:/a:redhat:satellite:6.18::el9
    Create a notification for this product.
    Red Hat Red Hat Satellite 6.18 Unaffected: 1781032495 , < * (rpm)
        cpe:/a:redhat:satellite:6.18::el9
    Create a notification for this product.
    Red Hat Cryostat 4     cpe:/a:redhat:cryostat:4
    Create a notification for this product.
    Red Hat Gatekeeper 3     cpe:/a:redhat:gatekeeper:3
    Create a notification for this product.
    Red Hat Migration Toolkit for Applications 8     cpe:/a:redhat:migration_toolkit_applications:8
    Create a notification for this product.
    Red Hat Network Observability Operator     cpe:/a:redhat:network_observ_optr:1
    Create a notification for this product.
    Red Hat OpenShift Pipelines     cpe:/a:redhat:openshift_pipelines:1
    Create a notification for this product.
    Red Hat OpenShift Service Mesh 3     cpe:/a:redhat:service_mesh:3
    Create a notification for this product.
    Red Hat Red Hat 3scale API Management Platform 2     cpe:/a:redhat:red_hat_3scale_amp:2
    Create a notification for this product.
    Red Hat Red Hat Ansible Automation Platform 2     cpe:/a:redhat:ansible_automation_platform:2
    Create a notification for this product.
    Red Hat Red Hat build of Apicurio Registry 2     cpe:/a:redhat:service_registry:2
    Create a notification for this product.
    Red Hat Red Hat build of Apicurio Registry 3     cpe:/a:redhat:apicurio_registry:3
    Create a notification for this product.
    Red Hat Red Hat Build of Podman Desktop - Tech Preview     cpe:/a:redhat:podman_desktop:0
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 8     cpe:/o:redhat:enterprise_linux:8
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 9     cpe:/o:redhat:enterprise_linux:9
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux AI (RHEL AI) 3     cpe:/a:redhat:enterprise_linux_ai:3
    Create a notification for this product.
    Red Hat Red Hat Fuse 7     cpe:/a:redhat:jboss_fuse:7
    Create a notification for this product.
    Red Hat Red Hat Hardened Images     cpe:/a:redhat:hummingbird:1
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI (RHOAI)     cpe:/a:redhat:openshift_ai
    Create a notification for this product.
    Red Hat Red Hat OpenShift Container Platform 4     cpe:/a:redhat:openshift:4
    Create a notification for this product.
    Red Hat Red Hat OpenShift Virtualization 4     cpe:/a:redhat:container_native_virtualization:4
    Create a notification for this product.
    Red Hat Red Hat Process Automation 7     cpe:/a:redhat:jboss_enterprise_bpms_platform:7
    Create a notification for this product.
    Red Hat Red Hat Satellite 6     cpe:/a:redhat:satellite:6
    Create a notification for this product.
    Red Hat Red Hat Trusted Artifact Signer     cpe:/a:redhat:trusted_artifact_signer:1
    Create a notification for this product.
    Red Hat Red Hat Trusted Profile Analyzer     cpe:/a:redhat:trusted_profile_analyzer:2
    Create a notification for this product.
    Red Hat Self-service automation portal 2     cpe:/a:redhat:ansible_portal:2
    Create a notification for this product.
    Red Hat streams for Apache Kafka 2     cpe:/a:redhat:amq_streams:2
    Create a notification for this product.
    Red Hat streams for Apache Kafka 3     cpe:/a:redhat:amq_streams:3
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-42039",
                    "options": [
                      {
                        "Exploitation": "poc"
                      },
                      {
                        "Automatable": "yes"
                      },
                      {
                        "Technical Impact": "partial"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-04-24T18:14:11.509943Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-04-24T18:14:37.802Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "references": [
              {
                "tags": [
                  "exploit"
                ],
                "url": "https://github.com/axios/axios/security/advisories/GHSA-62hf-57xw-28j9"
              }
            ],
            "title": "CISA ADP Vulnrichment"
          },
          {
            "affected": [
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:apache_camel_hawtio:4.4::el9"
                ],
                "defaultStatus": "unaffected",
                "packageName": "axios",
                "product": "HawtIO HawtIO 4.4.0",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:jboss_data_grid:8"
                ],
                "defaultStatus": "unaffected",
                "packageName": "axios",
                "product": "Red Hat Data Grid 8.6.1",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:multicluster_engine:2.10::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "multicluster-engine/console-mce-rhel9",
                "product": "multicluster engine for Kubernetes 2.1",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1780917531",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:multicluster_engine:2.11::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "multicluster-engine/console-mce-rhel9",
                "product": "multicluster engine for Kubernetes 2.11",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1780910888",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:multicluster_engine:2.6::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "multicluster-engine/console-mce-rhel9",
                "product": "multicluster engine for Kubernetes 2.6",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778511348",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:multicluster_engine:2.8::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "multicluster-engine/console-mce-rhel9",
                "product": "multicluster engine for Kubernetes 2.8",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778383863",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:multicluster_engine:2.9::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "multicluster-engine/console-mce-rhel9",
                "product": "multicluster engine for Kubernetes 2.9",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778532610",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:network_observ_optr:1.11::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "network-observability/network-observability-console-plugin-rhel9",
                "product": "Network Observability (NETOBSERV) 1.11.0",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778510461",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:network_observ_optr:1.12::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "network-observability/network-observability-console-plugin-pf4-rhel9",
                "product": "Network Observability (NETOBSERV) 1.12.2",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1780920979",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:acm:2.14::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhacm2/console-rhel9",
                "product": "Red Hat Advanced Cluster Management for Kubernetes 2.14",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1783451729",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:acm:2.15::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhacm2/console-rhel9",
                "product": "Red Hat Advanced Cluster Management for Kubernetes 2.15",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1780876734",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:acm:2.16::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhacm2/console-rhel9",
                "product": "Red Hat Advanced Cluster Management for Kubernetes 2.16",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1780600823",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:advanced_cluster_security:4.9::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "advanced-cluster-security/rhacs-main-rhel8",
                "product": "Red Hat Advanced Cluster Security 4.9",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779371594",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:advanced_cluster_security:4.10::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "advanced-cluster-security/rhacs-main-rhel8",
                "product": "Red Hat Advanced Cluster Security for Kubernetes 4.10",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779293013",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:rhdh:1.8::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhdh/rhdh-hub-rhel9",
                "product": "Red Hat Developer Hub 1.8",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779841586",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:rhdh:1.9::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhdh/rhdh-hub-rhel9",
                "product": "Red Hat Developer Hub 1.9",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782761244",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:discovery:2::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "discovery/discovery-ui-rhel9",
                "product": "Red Hat Discovery 2",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778156756",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:rhmt:1.8::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "rhmtc/openshift-migration-ui-rhel8",
                "product": "Red Hat Migration Toolkit 1.8",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1780590717",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:migration_toolkit_applications:8.1::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "mta/mta-ui-rhel9",
                "product": "Red Hat Migration Toolkit for Applications 8.1",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1785169013",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:2.25::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-dashboard-rhel9",
                "product": "Red Hat OpenShift AI 2.25",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1780467029",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:2.25::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-mod-arch-model-registry-rhel9",
                "product": "Red Hat OpenShift AI 2.25",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1780467147",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4.20::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift4/ose-agent-installer-ui-rhel9",
                "product": "Red Hat OpenShift Container Platform 4.20",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778645099",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4.21::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift4/ose-agent-installer-ui-rhel9",
                "product": "Red Hat OpenShift Container Platform 4.21",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778539338",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4.21::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift4/ose-monitoring-plugin-rhel9",
                "product": "Red Hat OpenShift Container Platform 4.21",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1785354128",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_devspaces:3.28::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "devspaces/code-rhel9",
                "product": "Red Hat OpenShift Dev Spaces 3.28",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779814592",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_devspaces:3.28::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "devspaces/dashboard-rhel9",
                "product": "Red Hat OpenShift Dev Spaces 3.28",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779341289",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:2.6::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-ossmc-rhel8",
                "product": "Red Hat OpenShift Service Mesh 2.6",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778191473",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:2.6::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-rhel8",
                "product": "Red Hat OpenShift Service Mesh 2.6",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778191378",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3.0::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-ossmc-rhel9",
                "product": "Red Hat OpenShift Service Mesh 3.0",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778163785",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3.0::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-rhel9",
                "product": "Red Hat OpenShift Service Mesh 3.0",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778164208",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3.1::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-ossmc-rhel9",
                "product": "Red Hat OpenShift Service Mesh 3.1",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778163935",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3.1::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-rhel9",
                "product": "Red Hat OpenShift Service Mesh 3.1",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778164042",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3.2::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-ossmc-rhel9",
                "product": "Red Hat OpenShift Service Mesh 3.2",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778163792",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3.2::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-rhel9",
                "product": "Red Hat OpenShift Service Mesh 3.2",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778163909",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3.3::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-ossmc-rhel9",
                "product": "Red Hat OpenShift Service Mesh 3.3",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778163785",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3.3::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-rhel9",
                "product": "Red Hat OpenShift Service Mesh 3.3",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778163986",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.10::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel8",
                "product": "Red Hat Quay 3.10",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779822261",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.12::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel8",
                "product": "Red Hat Quay 3.12",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779811412",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.14::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel8",
                "product": "Red Hat Quay 3.14",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779689392",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.15::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel8",
                "product": "Red Hat Quay 3.15",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1780891395",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.16::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel9",
                "product": "Red Hat Quay 3.16",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779204086",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.17::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel9",
                "product": "Red Hat Quay 3.17",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779922205",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.18::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel9",
                "product": "Red Hat Quay 3.18",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1784987273",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.9::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel8",
                "product": "Red Hat Quay 3.9",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779811473",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:satellite:6.18::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "satellite/iop-advisor-frontend-rhel9",
                "product": "Red Hat Satellite 6.18",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1781181673",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:satellite:6.18::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "satellite/iop-vulnerability-frontend-rhel9",
                "product": "Red Hat Satellite 6.18",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1781032495",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:cryostat:4"
                ],
                "defaultStatus": "unaffected",
                "packageName": "axios",
                "product": "Cryostat 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:gatekeeper:3"
                ],
                "defaultStatus": "unaffected",
                "packageName": "gatekeeper/gatekeeper-rhel9",
                "product": "Gatekeeper 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:migration_toolkit_applications:8"
                ],
                "defaultStatus": "affected",
                "packageName": "mta/mta-ui-rhel8",
                "product": "Migration Toolkit for Applications 8",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:network_observ_optr:1"
                ],
                "defaultStatus": "affected",
                "packageName": "network-observability/network-observability-console-plugin-compat-rhel9",
                "product": "Network Observability Operator",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_pipelines:1"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-pipelines/pipelines-hub-ui-rhel8",
                "product": "OpenShift Pipelines",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_pipelines:1"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-pipelines/pipelines-hub-ui-rhel9",
                "product": "OpenShift Pipelines",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3"
                ],
                "defaultStatus": "unaffected",
                "packageName": "openshift-service-mesh/kiali-operator-bundle",
                "product": "OpenShift Service Mesh 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3"
                ],
                "defaultStatus": "unaffected",
                "packageName": "openshift-service-mesh/kiali-rhel9-operator",
                "product": "OpenShift Service Mesh 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:red_hat_3scale_amp:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "3scale-amp21/system",
                "product": "Red Hat 3scale API Management Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:red_hat_3scale_amp:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "3scale-amp22/system",
                "product": "Red Hat 3scale API Management Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:red_hat_3scale_amp:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "3scale-amp2/system-rhel7",
                "product": "Red Hat 3scale API Management Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:red_hat_3scale_amp:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "3scale-amp2/system-rhel8",
                "product": "Red Hat 3scale API Management Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:red_hat_3scale_amp:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "3scale-amp2/system-rhel9",
                "product": "Red Hat 3scale API Management Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "ansible-automation-platform-26/gateway-rhel9",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "affected",
                "packageName": "ansible-automation-platform/automation-dashboard-rhel9",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "affected",
                "packageName": "automation-controller",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "automation-gateway",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "affected",
                "packageName": "automation-hub",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "automation-platform-ui",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "python3.11-galaxy-ng",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "python3.12-galaxy-ng",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "python3x-galaxy-ng",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "python-galaxy-ng",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:service_registry:2"
                ],
                "defaultStatus": "affected",
                "packageName": "axios",
                "product": "Red Hat build of Apicurio Registry 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:apicurio_registry:3"
                ],
                "defaultStatus": "affected",
                "packageName": "apicurio/apicurio-registry-ui-rhel8",
                "product": "Red Hat build of Apicurio Registry 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:apicurio_registry:3"
                ],
                "defaultStatus": "affected",
                "packageName": "apicurio/apicurio-registry-ui-rhel9",
                "product": "Red Hat build of Apicurio Registry 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:podman_desktop:0"
                ],
                "defaultStatus": "affected",
                "packageName": "rhdesktop/rh-podman-desktop-ext-openshift-local-rhel10",
                "product": "Red Hat Build of Podman Desktop - Tech Preview",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:8"
                ],
                "defaultStatus": "affected",
                "packageName": "grafana",
                "product": "Red Hat Enterprise Linux 8",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:9"
                ],
                "defaultStatus": "unaffected",
                "packageName": "grafana",
                "product": "Red Hat Enterprise Linux 9",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:enterprise_linux_ai:3"
                ],
                "defaultStatus": "affected",
                "packageName": "rhelai3/bootc-cuda-rhel9",
                "product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:enterprise_linux_ai:3"
                ],
                "defaultStatus": "affected",
                "packageName": "rhelai3/bootc-rocm-rhel9",
                "product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:enterprise_linux_ai:3"
                ],
                "defaultStatus": "affected",
                "packageName": "rhelai3/disk-image-cuda-rhel9",
                "product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:jboss_fuse:7"
                ],
                "defaultStatus": "unaffected",
                "packageName": "axios",
                "product": "Red Hat Fuse 7",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:hummingbird:1"
                ],
                "defaultStatus": "unaffected",
                "packageName": "boost",
                "product": "Red Hat Hardened Images",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "unaffected",
                "packageName": "rhoai/odh-dashboard-rhel8",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-mod-arch-gen-ai-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-mod-arch-maas-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift3/ose-console",
                "product": "Red Hat OpenShift Container Platform 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift4/ose-console",
                "product": "Red Hat OpenShift Container Platform 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift4/ose-console-rhel9",
                "product": "Red Hat OpenShift Container Platform 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:container_native_virtualization:4"
                ],
                "defaultStatus": "unaffected",
                "packageName": "container-native-virtualization/kubevirt-console-plugin",
                "product": "Red Hat OpenShift Virtualization 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:container_native_virtualization:4"
                ],
                "defaultStatus": "unaffected",
                "packageName": "container-native-virtualization/kubevirt-console-plugin-rhel9",
                "product": "Red Hat OpenShift Virtualization 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:jboss_enterprise_bpms_platform:7"
                ],
                "defaultStatus": "unaffected",
                "packageName": "axios",
                "product": "Red Hat Process Automation 7",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:satellite:6"
                ],
                "defaultStatus": "affected",
                "packageName": "satellite/iop-host-inventory-frontend-rhel9",
                "product": "Red Hat Satellite 6",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:trusted_artifact_signer:1"
                ],
                "defaultStatus": "unaffected",
                "packageName": "rhtas/rhtas-console-ui-rhel9",
                "product": "Red Hat Trusted Artifact Signer",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:trusted_profile_analyzer:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "rhtpa/rhtpa-trustification-service-rhel9",
                "product": "Red Hat Trusted Profile Analyzer",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_portal:2"
                ],
                "defaultStatus": "affected",
                "packageName": "ansible-automation-platform/automation-portal",
                "product": "Self-service automation portal 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:amq_streams:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "axios",
                "product": "streams for Apache Kafka 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:amq_streams:3"
                ],
                "defaultStatus": "unaffected",
                "packageName": "axios",
                "product": "streams for Apache Kafka 3",
                "vendor": "Red Hat"
              }
            ],
            "datePublic": "2026-04-24T18:01:30.775Z",
            "descriptions": [
              {
                "lang": "en",
                "value": "A flaw was found in Axios, a promise-based HTTP client for browsers and Node.js. This vulnerability occurs because the `toFormData` function recursively processes nested objects without a depth limit. A remote attacker can exploit this by sending deeply nested request data, which causes the Node.js process to crash due to a RangeError, leading to a potential Denial of Service (DoS) if the process crashes."
              }
            ],
            "metrics": [
              {
                "other": {
                  "content": {
                    "namespace": "https://access.redhat.com/security/updates/classification/",
                    "value": "Important"
                  },
                  "type": "Red Hat severity rating"
                }
              },
              {
                "cvssV3_1": {
                  "attackComplexity": "LOW",
                  "attackVector": "NETWORK",
                  "availabilityImpact": "HIGH",
                  "baseScore": 7.5,
                  "baseSeverity": "HIGH",
                  "confidentialityImpact": "NONE",
                  "integrityImpact": "NONE",
                  "privilegesRequired": "NONE",
                  "scope": "UNCHANGED",
                  "userInteraction": "NONE",
                  "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "version": "3.1"
                },
                "format": "CVSS"
              }
            ],
            "problemTypes": [
              {
                "descriptions": [
                  {
                    "cweId": "CWE-770",
                    "description": "Allocation of Resources Without Limits or Throttling",
                    "lang": "en",
                    "type": "CWE"
                  }
                ]
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-09-10T12:04:56.504Z",
              "orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
              "shortName": "redhat-SADP"
            },
            "references": [
              {
                "tags": [
                  "vdb-entry",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/security/cve/CVE-2026-42039"
              },
              {
                "name": "RHBZ#2461630",
                "tags": [
                  "issue-tracking",
                  "x_refsource_REDHAT"
                ],
                "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2461630"
              },
              {
                "tags": [
                  "x_sadp-csaf-vex"
                ],
                "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42039.json"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:25089"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:16874"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:24473"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:36882"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:24539"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:25273"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:20938"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:20889"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:22619"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:21338"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:33574"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:14937"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:25041"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:50300"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:24977"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:17468"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:17474"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:48670"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:21772"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:16476"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:16534"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:16532"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:16535"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:16542"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:22840"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:22629"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:21017"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:24853"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:19375"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:22465"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:48085"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:23361"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:26214"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:26225"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:25271"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:24536"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:17657"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:17699"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:19109"
              }
            ],
            "solutions": [
              {
                "lang": "en",
                "value": "RHSA-2026:25089: HawtIO HawtIO 4.4.0"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:16874: Network Observability (NETOBSERV) 1.11.0"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:24473: Network Observability (NETOBSERV) 1.12.2"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:36882: Red Hat Advanced Cluster Management for Kubernetes 2.14"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:24539: Red Hat Advanced Cluster Management for Kubernetes 2.15"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:25273: Red Hat Advanced Cluster Management for Kubernetes 2.16"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:20938: Red Hat Advanced Cluster Security 4.9"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:20889: Red Hat Advanced Cluster Security for Kubernetes 4.10"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:22619: Red Hat Data Grid 8.6.1"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:21338: Red Hat Developer Hub 1.8"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:33574: Red Hat Developer Hub 1.9"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:14937: Red Hat Discovery 2"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:25041: Red Hat Migration Toolkit 1.8"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:50300: Red Hat Migration Toolkit for Applications 8.1"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:24977: Red Hat OpenShift AI 2.25"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:17468: Red Hat OpenShift Container Platform 4.20"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:17474: Red Hat OpenShift Container Platform 4.21"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:48670: Red Hat OpenShift Container Platform 4.21"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:21772: Red Hat OpenShift Dev Spaces 3.28"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:16476: Red Hat OpenShift Service Mesh 2.6"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:16534: Red Hat OpenShift Service Mesh 3.0"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:16532: Red Hat OpenShift Service Mesh 3.1"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:16535: Red Hat OpenShift Service Mesh 3.2"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:16542: Red Hat OpenShift Service Mesh 3.3"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:22840: Red Hat Quay 3.10"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:22629: Red Hat Quay 3.12"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:21017: Red Hat Quay 3.14"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:24853: Red Hat Quay 3.15"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:19375: Red Hat Quay 3.16"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:22465: Red Hat Quay 3.17"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:48085: Red Hat Quay 3.18"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:23361: Red Hat Quay 3.9"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:26214: Red Hat Satellite 6.18"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:26225: Red Hat Satellite 6.18"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:25271: multicluster engine for Kubernetes 2.11"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:24536: multicluster engine for Kubernetes 2.1"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:17657: multicluster engine for Kubernetes 2.6"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:17699: multicluster engine for Kubernetes 2.8"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:19109: multicluster engine for Kubernetes 2.9"
              }
            ],
            "timeline": [
              {
                "lang": "en",
                "time": "2026-04-24T19:01:44.887Z",
                "value": "Reported to Red Hat."
              },
              {
                "lang": "en",
                "time": "2026-04-24T18:01:30.775Z",
                "value": "Made public."
              }
            ],
            "title": "axios: Node.js: Axios: Denial of Service via unbounded recursion in toFormData with deeply nested request data",
            "x_adpType": "supplier",
            "x_generator": {
              "engine": "sadp-cli 1.0.0"
            }
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "axios",
              "vendor": "axios",
              "versions": [
                {
                  "status": "affected",
                  "version": "\u003e= 1.0.0, \u003c 1.15.1"
                },
                {
                  "status": "affected",
                  "version": "\u003c 0.31.1"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "Axios is a promise based HTTP client for the browser and Node.js. Prior to 1.15.1 and 0.31.1, toFormData recursively walks nested objects with no depth limit, so a deeply nested value passed as request data crashes the Node.js process with a RangeError. This vulnerability is fixed in 1.15.1 and 0.31.1."
            }
          ],
          "metrics": [
            {
              "cvssV4_0": {
                "attackComplexity": "LOW",
                "attackRequirements": "NONE",
                "attackVector": "NETWORK",
                "baseScore": 6.9,
                "baseSeverity": "MEDIUM",
                "privilegesRequired": "NONE",
                "subAvailabilityImpact": "NONE",
                "subConfidentialityImpact": "NONE",
                "subIntegrityImpact": "NONE",
                "userInteraction": "NONE",
                "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N",
                "version": "4.0",
                "vulnAvailabilityImpact": "LOW",
                "vulnConfidentialityImpact": "NONE",
                "vulnIntegrityImpact": "NONE"
              }
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-674",
                  "description": "CWE-674: Uncontrolled Recursion",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-04-24T18:01:30.775Z",
            "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
            "shortName": "GitHub_M"
          },
          "references": [
            {
              "name": "https://github.com/axios/axios/security/advisories/GHSA-62hf-57xw-28j9",
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "https://github.com/axios/axios/security/advisories/GHSA-62hf-57xw-28j9"
            }
          ],
          "source": {
            "advisory": "GHSA-62hf-57xw-28j9",
            "discovery": "UNKNOWN"
          },
          "title": "Axios: unbounded recursion in toFormData causes DoS via deeply nested request data"
        }
      },
      "cveMetadata": {
        "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "assignerShortName": "GitHub_M",
        "cveId": "CVE-2026-42039",
        "datePublished": "2026-04-24T18:01:30.775Z",
        "dateReserved": "2026-04-23T16:05:01.709Z",
        "dateUpdated": "2026-09-10T12:04:56.504Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2026-42041 (GCVE-0-2026-42041)

    Vulnerability from cvelistv5 – Published: 2026-04-24 17:55 – Updated: 2026-09-10 12:04
    VLAI
    Title
    Axios: Authentication Bypass via Prototype Pollution Gadget in `validateStatus` Merge Strategy
    Summary
    Axios is a promise based HTTP client for the browser and Node.js. Prior to 1.15.1 and 0.31.1, the Axios library is vulnerable to a Prototype Pollution "Gadget" attack that allows any Object.prototype pollution to silently suppress all HTTP error responses (401, 403, 500, etc.), causing them to be treated as successful responses. This completely bypasses application-level authentication and error handling. The root cause is that validateStatus is the only config property using the mergeDirectKeys merge strategy, which uses JavaScript's in operator — an operator that inherently traverses the prototype chain. When Object.prototype.validateStatus is polluted with () => true, all HTTP status codes are accepted as success. This vulnerability is fixed in 1.15.1 and 0.31.1.
    SSVC
    Exploitation: poc Automatable: no Technical Impact: partial
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-04-24 18:29 UTC
    CWE
    • CWE-287 - Improper Authentication
    • CWE-1321 - Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
    • CWE-915 - Improperly Controlled Modification of Dynamically-Determined Object Attributes
    References
    URL Tags
    https://github.com/axios/axios/security/advisorie… x_refsource_CONFIRM
    https://access.redhat.com/security/cve/CVE-2026-42041 vdb-entryx_refsource_REDHAT
    https://bugzilla.redhat.com/show_bug.cgi?id=2461629 issue-trackingx_refsource_REDHAT
    https://security.access.redhat.com/data/csaf/v2/v… x_sadp-csaf-vex
    https://access.redhat.com/errata/RHSA-2026:25089 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:16874 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:36882 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:24539 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:25273 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:20938 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:20889 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:22619 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:21338 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:33574 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:14937 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:25041 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:50300 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:24977 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:17468 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:17474 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:21772 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:16476 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:16534 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:16532 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:16535 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:16542 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:22840 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:22629 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:21017 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:24853 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:19375 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:22465 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:23361 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:26214 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:26232 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:26225 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:25271 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:24536 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:17657 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:17699 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:19109 vendor-advisoryx_refsource_REDHAT
    Impacted products
    Vendor Product Version
    axios axios Affected: >= 1.0.0, < 1.15.1
    Affected: < 0.31.1
    Create a notification for this product.
    Red Hat HawtIO HawtIO 4.4.0     cpe:/a:redhat:apache_camel_hawtio:4.4::el9
    Create a notification for this product.
    Red Hat Red Hat Data Grid 8.6.1     cpe:/a:redhat:jboss_data_grid:8
    Create a notification for this product.
    Red Hat multicluster engine for Kubernetes 2.1 Unaffected: 1780917531 , < * (rpm)
        cpe:/a:redhat:multicluster_engine:2.10::el9
    Create a notification for this product.
    Red Hat multicluster engine for Kubernetes 2.11 Unaffected: 1780910888 , < * (rpm)
        cpe:/a:redhat:multicluster_engine:2.11::el9
    Create a notification for this product.
    Red Hat multicluster engine for Kubernetes 2.6 Unaffected: 1778511348 , < * (rpm)
        cpe:/a:redhat:multicluster_engine:2.6::el9
    Create a notification for this product.
    Red Hat multicluster engine for Kubernetes 2.8 Unaffected: 1778383863 , < * (rpm)
        cpe:/a:redhat:multicluster_engine:2.8::el9
    Create a notification for this product.
    Red Hat multicluster engine for Kubernetes 2.9 Unaffected: 1778532610 , < * (rpm)
        cpe:/a:redhat:multicluster_engine:2.9::el9
    Create a notification for this product.
    Red Hat Network Observability (NETOBSERV) 1.11.0 Unaffected: 1778508956 , < * (rpm)
        cpe:/a:redhat:network_observ_optr:1.11::el9
    Create a notification for this product.
    Red Hat Network Observability (NETOBSERV) 1.11.0 Unaffected: 1778510461 , < * (rpm)
        cpe:/a:redhat:network_observ_optr:1.11::el9
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.14 Unaffected: 1783451729 , < * (rpm)
        cpe:/a:redhat:acm:2.14::el9
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.15 Unaffected: 1780876734 , < * (rpm)
        cpe:/a:redhat:acm:2.15::el9
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.16 Unaffected: 1780600823 , < * (rpm)
        cpe:/a:redhat:acm:2.16::el9
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Security 4.9 Unaffected: 1779371594 , < * (rpm)
        cpe:/a:redhat:advanced_cluster_security:4.9::el8
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Security for Kubernetes 4.10 Unaffected: 1779293013 , < * (rpm)
        cpe:/a:redhat:advanced_cluster_security:4.10::el8
    Create a notification for this product.
    Red Hat Red Hat Developer Hub 1.8 Unaffected: 1779841586 , < * (rpm)
        cpe:/a:redhat:rhdh:1.8::el9
    Create a notification for this product.
    Red Hat Red Hat Developer Hub 1.9 Unaffected: 1782761244 , < * (rpm)
        cpe:/a:redhat:rhdh:1.9::el9
    Create a notification for this product.
    Red Hat Red Hat Discovery 2 Unaffected: 1778156756 , < * (rpm)
        cpe:/a:redhat:discovery:2::el9
    Create a notification for this product.
    Red Hat Red Hat Migration Toolkit 1.8 Unaffected: 1780590717 , < * (rpm)
        cpe:/a:redhat:rhmt:1.8::el8
    Create a notification for this product.
    Red Hat Red Hat Migration Toolkit for Applications 8.1 Unaffected: 1785169013 , < * (rpm)
        cpe:/a:redhat:migration_toolkit_applications:8.1::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 2.25 Unaffected: 1780467029 , < * (rpm)
        cpe:/a:redhat:openshift_ai:2.25::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 2.25 Unaffected: 1780467147 , < * (rpm)
        cpe:/a:redhat:openshift_ai:2.25::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Container Platform 4.20 Unaffected: 1778645099 , < * (rpm)
        cpe:/a:redhat:openshift:4.20::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Container Platform 4.21 Unaffected: 1778539338 , < * (rpm)
        cpe:/a:redhat:openshift:4.21::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Dev Spaces 3.28 Unaffected: 1779814592 , < * (rpm)
        cpe:/a:redhat:openshift_devspaces:3.28::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Dev Spaces 3.28 Unaffected: 1779341289 , < * (rpm)
        cpe:/a:redhat:openshift_devspaces:3.28::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 2.6 Unaffected: 1778191473 , < * (rpm)
        cpe:/a:redhat:service_mesh:2.6::el8
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 2.6 Unaffected: 1778191378 , < * (rpm)
        cpe:/a:redhat:service_mesh:2.6::el8
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 3.0 Unaffected: 1778163785 , < * (rpm)
        cpe:/a:redhat:service_mesh:3.0::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 3.0 Unaffected: 1778164208 , < * (rpm)
        cpe:/a:redhat:service_mesh:3.0::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 3.1 Unaffected: 1778163935 , < * (rpm)
        cpe:/a:redhat:service_mesh:3.1::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 3.1 Unaffected: 1778164042 , < * (rpm)
        cpe:/a:redhat:service_mesh:3.1::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 3.2 Unaffected: 1778163792 , < * (rpm)
        cpe:/a:redhat:service_mesh:3.2::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 3.2 Unaffected: 1778163909 , < * (rpm)
        cpe:/a:redhat:service_mesh:3.2::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 3.3 Unaffected: 1778163785 , < * (rpm)
        cpe:/a:redhat:service_mesh:3.3::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 3.3 Unaffected: 1778163986 , < * (rpm)
        cpe:/a:redhat:service_mesh:3.3::el9
    Create a notification for this product.
    Red Hat Red Hat Quay 3.10 Unaffected: 1779822261 , < * (rpm)
        cpe:/a:redhat:quay:3.10::el8
    Create a notification for this product.
    Red Hat Red Hat Quay 3.12 Unaffected: 1779811412 , < * (rpm)
        cpe:/a:redhat:quay:3.12::el8
    Create a notification for this product.
    Red Hat Red Hat Quay 3.14 Unaffected: 1779689392 , < * (rpm)
        cpe:/a:redhat:quay:3.14::el8
    Create a notification for this product.
    Red Hat Red Hat Quay 3.15 Unaffected: 1780891395 , < * (rpm)
        cpe:/a:redhat:quay:3.15::el8
    Create a notification for this product.
    Red Hat Red Hat Quay 3.16 Unaffected: 1779204086 , < * (rpm)
        cpe:/a:redhat:quay:3.16::el9
    Create a notification for this product.
    Red Hat Red Hat Quay 3.17 Unaffected: 1779922205 , < * (rpm)
        cpe:/a:redhat:quay:3.17::el9
    Create a notification for this product.
    Red Hat Red Hat Quay 3.9 Unaffected: 1779811473 , < * (rpm)
        cpe:/a:redhat:quay:3.9::el8
    Create a notification for this product.
    Red Hat Red Hat Satellite 6.18 Unaffected: 1781181673 , < * (rpm)
        cpe:/a:redhat:satellite:6.18::el9
    Create a notification for this product.
    Red Hat Red Hat Satellite 6.18 Unaffected: 1781032495 , < * (rpm)
        cpe:/a:redhat:satellite:6.18::el9
    Create a notification for this product.
    Red Hat Red Hat Satellite 6.18 Unaffected: 1780105179 , < * (rpm)
        cpe:/a:redhat:satellite:6.18::el9
    Create a notification for this product.
    Red Hat Cryostat 4     cpe:/a:redhat:cryostat:4
    Create a notification for this product.
    Red Hat Gatekeeper 3     cpe:/a:redhat:gatekeeper:3
    Create a notification for this product.
    Red Hat Migration Toolkit for Applications 8     cpe:/a:redhat:migration_toolkit_applications:8
    Create a notification for this product.
    Red Hat OpenShift Pipelines     cpe:/a:redhat:openshift_pipelines:1
    Create a notification for this product.
    Red Hat OpenShift Service Mesh 3     cpe:/a:redhat:service_mesh:3
    Create a notification for this product.
    Red Hat Red Hat 3scale API Management Platform 2     cpe:/a:redhat:red_hat_3scale_amp:2
    Create a notification for this product.
    Red Hat Red Hat Ansible Automation Platform 2     cpe:/a:redhat:ansible_automation_platform:2
    Create a notification for this product.
    Red Hat Red Hat build of Apicurio Registry 2     cpe:/a:redhat:service_registry:2
    Create a notification for this product.
    Red Hat Red Hat build of Apicurio Registry 3     cpe:/a:redhat:apicurio_registry:3
    Create a notification for this product.
    Red Hat Red Hat Build of Podman Desktop - Tech Preview     cpe:/a:redhat:podman_desktop:0
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 8     cpe:/o:redhat:enterprise_linux:8
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 9     cpe:/o:redhat:enterprise_linux:9
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux AI (RHEL AI) 3     cpe:/a:redhat:enterprise_linux_ai:3
    Create a notification for this product.
    Red Hat Red Hat Fuse 7     cpe:/a:redhat:jboss_fuse:7
    Create a notification for this product.
    Red Hat Red Hat Hardened Images     cpe:/a:redhat:hummingbird:1
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI (RHOAI)     cpe:/a:redhat:openshift_ai
    Create a notification for this product.
    Red Hat Red Hat OpenShift Container Platform 4     cpe:/a:redhat:openshift:4
    Create a notification for this product.
    Red Hat Red Hat OpenShift Virtualization 4     cpe:/a:redhat:container_native_virtualization:4
    Create a notification for this product.
    Red Hat Red Hat Process Automation 7     cpe:/a:redhat:jboss_enterprise_bpms_platform:7
    Create a notification for this product.
    Red Hat Red Hat Trusted Artifact Signer     cpe:/a:redhat:trusted_artifact_signer:1
    Create a notification for this product.
    Red Hat Red Hat Trusted Profile Analyzer     cpe:/a:redhat:trusted_profile_analyzer:2
    Create a notification for this product.
    Red Hat Self-service automation portal 2     cpe:/a:redhat:ansible_portal:2
    Create a notification for this product.
    Red Hat streams for Apache Kafka 2     cpe:/a:redhat:amq_streams:2
    Create a notification for this product.
    Red Hat streams for Apache Kafka 3     cpe:/a:redhat:amq_streams:3
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-42041",
                    "options": [
                      {
                        "Exploitation": "poc"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "partial"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-04-24T18:29:47.107016Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-04-24T18:32:58.115Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "references": [
              {
                "tags": [
                  "exploit"
                ],
                "url": "https://github.com/axios/axios/security/advisories/GHSA-w9j2-pvgh-6h63"
              }
            ],
            "title": "CISA ADP Vulnrichment"
          },
          {
            "affected": [
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:apache_camel_hawtio:4.4::el9"
                ],
                "defaultStatus": "unaffected",
                "packageName": "axios",
                "product": "HawtIO HawtIO 4.4.0",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:jboss_data_grid:8"
                ],
                "defaultStatus": "unaffected",
                "packageName": "axios",
                "product": "Red Hat Data Grid 8.6.1",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:multicluster_engine:2.10::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "multicluster-engine/console-mce-rhel9",
                "product": "multicluster engine for Kubernetes 2.1",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1780917531",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:multicluster_engine:2.11::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "multicluster-engine/console-mce-rhel9",
                "product": "multicluster engine for Kubernetes 2.11",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1780910888",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:multicluster_engine:2.6::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "multicluster-engine/console-mce-rhel9",
                "product": "multicluster engine for Kubernetes 2.6",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778511348",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:multicluster_engine:2.8::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "multicluster-engine/console-mce-rhel9",
                "product": "multicluster engine for Kubernetes 2.8",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778383863",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:multicluster_engine:2.9::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "multicluster-engine/console-mce-rhel9",
                "product": "multicluster engine for Kubernetes 2.9",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778532610",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:network_observ_optr:1.11::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "network-observability/network-observability-console-plugin-compat-rhel9",
                "product": "Network Observability (NETOBSERV) 1.11.0",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778508956",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:network_observ_optr:1.11::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "network-observability/network-observability-console-plugin-rhel9",
                "product": "Network Observability (NETOBSERV) 1.11.0",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778510461",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:acm:2.14::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhacm2/console-rhel9",
                "product": "Red Hat Advanced Cluster Management for Kubernetes 2.14",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1783451729",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:acm:2.15::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhacm2/console-rhel9",
                "product": "Red Hat Advanced Cluster Management for Kubernetes 2.15",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1780876734",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:acm:2.16::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhacm2/console-rhel9",
                "product": "Red Hat Advanced Cluster Management for Kubernetes 2.16",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1780600823",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:advanced_cluster_security:4.9::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "advanced-cluster-security/rhacs-main-rhel8",
                "product": "Red Hat Advanced Cluster Security 4.9",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779371594",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:advanced_cluster_security:4.10::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "advanced-cluster-security/rhacs-main-rhel8",
                "product": "Red Hat Advanced Cluster Security for Kubernetes 4.10",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779293013",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:rhdh:1.8::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhdh/rhdh-hub-rhel9",
                "product": "Red Hat Developer Hub 1.8",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779841586",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:rhdh:1.9::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhdh/rhdh-hub-rhel9",
                "product": "Red Hat Developer Hub 1.9",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782761244",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:discovery:2::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "discovery/discovery-ui-rhel9",
                "product": "Red Hat Discovery 2",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778156756",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:rhmt:1.8::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "rhmtc/openshift-migration-ui-rhel8",
                "product": "Red Hat Migration Toolkit 1.8",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1780590717",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:migration_toolkit_applications:8.1::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "mta/mta-ui-rhel9",
                "product": "Red Hat Migration Toolkit for Applications 8.1",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1785169013",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:2.25::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-dashboard-rhel9",
                "product": "Red Hat OpenShift AI 2.25",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1780467029",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:2.25::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-mod-arch-model-registry-rhel9",
                "product": "Red Hat OpenShift AI 2.25",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1780467147",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4.20::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift4/ose-agent-installer-ui-rhel9",
                "product": "Red Hat OpenShift Container Platform 4.20",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778645099",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4.21::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift4/ose-agent-installer-ui-rhel9",
                "product": "Red Hat OpenShift Container Platform 4.21",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778539338",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_devspaces:3.28::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "devspaces/code-rhel9",
                "product": "Red Hat OpenShift Dev Spaces 3.28",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779814592",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_devspaces:3.28::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "devspaces/dashboard-rhel9",
                "product": "Red Hat OpenShift Dev Spaces 3.28",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779341289",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:2.6::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-ossmc-rhel8",
                "product": "Red Hat OpenShift Service Mesh 2.6",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778191473",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:2.6::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-rhel8",
                "product": "Red Hat OpenShift Service Mesh 2.6",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778191378",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3.0::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-ossmc-rhel9",
                "product": "Red Hat OpenShift Service Mesh 3.0",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778163785",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3.0::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-rhel9",
                "product": "Red Hat OpenShift Service Mesh 3.0",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778164208",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3.1::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-ossmc-rhel9",
                "product": "Red Hat OpenShift Service Mesh 3.1",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778163935",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3.1::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-rhel9",
                "product": "Red Hat OpenShift Service Mesh 3.1",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778164042",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3.2::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-ossmc-rhel9",
                "product": "Red Hat OpenShift Service Mesh 3.2",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778163792",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3.2::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-rhel9",
                "product": "Red Hat OpenShift Service Mesh 3.2",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778163909",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3.3::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-ossmc-rhel9",
                "product": "Red Hat OpenShift Service Mesh 3.3",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778163785",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3.3::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-rhel9",
                "product": "Red Hat OpenShift Service Mesh 3.3",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778163986",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.10::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel8",
                "product": "Red Hat Quay 3.10",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779822261",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.12::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel8",
                "product": "Red Hat Quay 3.12",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779811412",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.14::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel8",
                "product": "Red Hat Quay 3.14",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779689392",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.15::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel8",
                "product": "Red Hat Quay 3.15",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1780891395",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.16::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel9",
                "product": "Red Hat Quay 3.16",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779204086",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.17::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel9",
                "product": "Red Hat Quay 3.17",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779922205",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.9::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel8",
                "product": "Red Hat Quay 3.9",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779811473",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:satellite:6.18::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "satellite/iop-advisor-frontend-rhel9",
                "product": "Red Hat Satellite 6.18",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1781181673",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:satellite:6.18::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "satellite/iop-vulnerability-frontend-rhel9",
                "product": "Red Hat Satellite 6.18",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1781032495",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:satellite:6.18::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "satellite/iop-host-inventory-frontend-rhel9",
                "product": "Red Hat Satellite 6.18",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1780105179",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:cryostat:4"
                ],
                "defaultStatus": "unaffected",
                "packageName": "axios",
                "product": "Cryostat 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:gatekeeper:3"
                ],
                "defaultStatus": "unaffected",
                "packageName": "gatekeeper/gatekeeper-rhel9",
                "product": "Gatekeeper 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:migration_toolkit_applications:8"
                ],
                "defaultStatus": "affected",
                "packageName": "mta/mta-ui-rhel8",
                "product": "Migration Toolkit for Applications 8",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_pipelines:1"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-pipelines/pipelines-hub-ui-rhel8",
                "product": "OpenShift Pipelines",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_pipelines:1"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-pipelines/pipelines-hub-ui-rhel9",
                "product": "OpenShift Pipelines",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3"
                ],
                "defaultStatus": "unaffected",
                "packageName": "openshift-service-mesh/kiali-operator-bundle",
                "product": "OpenShift Service Mesh 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3"
                ],
                "defaultStatus": "unaffected",
                "packageName": "openshift-service-mesh/kiali-rhel9-operator",
                "product": "OpenShift Service Mesh 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:red_hat_3scale_amp:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "3scale-amp21/system",
                "product": "Red Hat 3scale API Management Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:red_hat_3scale_amp:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "3scale-amp22/system",
                "product": "Red Hat 3scale API Management Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:red_hat_3scale_amp:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "3scale-amp2/system-rhel7",
                "product": "Red Hat 3scale API Management Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:red_hat_3scale_amp:2"
                ],
                "defaultStatus": "affected",
                "packageName": "3scale-amp2/system-rhel8",
                "product": "Red Hat 3scale API Management Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:red_hat_3scale_amp:2"
                ],
                "defaultStatus": "affected",
                "packageName": "3scale-amp2/system-rhel9",
                "product": "Red Hat 3scale API Management Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "ansible-automation-platform-26/gateway-rhel9",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "affected",
                "packageName": "ansible-automation-platform/automation-dashboard-rhel9",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "affected",
                "packageName": "automation-controller",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "automation-gateway",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "affected",
                "packageName": "automation-hub",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "automation-platform-ui",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "python3.11-galaxy-ng",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "python3.12-galaxy-ng",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "python3x-galaxy-ng",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "python-galaxy-ng",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:service_registry:2"
                ],
                "defaultStatus": "affected",
                "packageName": "axios",
                "product": "Red Hat build of Apicurio Registry 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:apicurio_registry:3"
                ],
                "defaultStatus": "affected",
                "packageName": "apicurio/apicurio-registry-ui-rhel8",
                "product": "Red Hat build of Apicurio Registry 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:apicurio_registry:3"
                ],
                "defaultStatus": "affected",
                "packageName": "apicurio/apicurio-registry-ui-rhel9",
                "product": "Red Hat build of Apicurio Registry 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:podman_desktop:0"
                ],
                "defaultStatus": "affected",
                "packageName": "rhdesktop/rh-podman-desktop-ext-openshift-local-rhel10",
                "product": "Red Hat Build of Podman Desktop - Tech Preview",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:8"
                ],
                "defaultStatus": "affected",
                "packageName": "grafana",
                "product": "Red Hat Enterprise Linux 8",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:9"
                ],
                "defaultStatus": "unaffected",
                "packageName": "grafana",
                "product": "Red Hat Enterprise Linux 9",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:enterprise_linux_ai:3"
                ],
                "defaultStatus": "affected",
                "packageName": "rhelai3/bootc-cuda-rhel9",
                "product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:enterprise_linux_ai:3"
                ],
                "defaultStatus": "affected",
                "packageName": "rhelai3/bootc-rocm-rhel9",
                "product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:enterprise_linux_ai:3"
                ],
                "defaultStatus": "affected",
                "packageName": "rhelai3/disk-image-cuda-rhel9",
                "product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:jboss_fuse:7"
                ],
                "defaultStatus": "unaffected",
                "packageName": "axios",
                "product": "Red Hat Fuse 7",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:hummingbird:1"
                ],
                "defaultStatus": "unaffected",
                "packageName": "boost",
                "product": "Red Hat Hardened Images",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "unaffected",
                "packageName": "rhoai/odh-dashboard-rhel8",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-mod-arch-gen-ai-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-mod-arch-maas-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift3/ose-console",
                "product": "Red Hat OpenShift Container Platform 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift4/ose-console",
                "product": "Red Hat OpenShift Container Platform 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4"
                ],
                "defaultStatus": "unaffected",
                "packageName": "openshift4/ose-console-rhel9",
                "product": "Red Hat OpenShift Container Platform 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift4/ose-monitoring-plugin-rhel9",
                "product": "Red Hat OpenShift Container Platform 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:container_native_virtualization:4"
                ],
                "defaultStatus": "unaffected",
                "packageName": "container-native-virtualization/kubevirt-console-plugin",
                "product": "Red Hat OpenShift Virtualization 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:container_native_virtualization:4"
                ],
                "defaultStatus": "unaffected",
                "packageName": "container-native-virtualization/kubevirt-console-plugin-rhel9",
                "product": "Red Hat OpenShift Virtualization 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:jboss_enterprise_bpms_platform:7"
                ],
                "defaultStatus": "unaffected",
                "packageName": "axios",
                "product": "Red Hat Process Automation 7",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:trusted_artifact_signer:1"
                ],
                "defaultStatus": "unaffected",
                "packageName": "rhtas/rhtas-console-ui-rhel9",
                "product": "Red Hat Trusted Artifact Signer",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:trusted_profile_analyzer:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "rhtpa/rhtpa-trustification-service-rhel9",
                "product": "Red Hat Trusted Profile Analyzer",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_portal:2"
                ],
                "defaultStatus": "affected",
                "packageName": "ansible-automation-platform/automation-portal",
                "product": "Self-service automation portal 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:amq_streams:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "axios",
                "product": "streams for Apache Kafka 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:amq_streams:3"
                ],
                "defaultStatus": "unaffected",
                "packageName": "axios",
                "product": "streams for Apache Kafka 3",
                "vendor": "Red Hat"
              }
            ],
            "datePublic": "2026-04-24T17:55:30.036Z",
            "descriptions": [
              {
                "lang": "en",
                "value": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability, a Prototype Pollution \"Gadget\" attack, allows an attacker to manipulate the `Object.prototype.validateStatus` property. By polluting this property, all HTTP error responses (such as 401, 403, or 500) are silently treated as successful responses. This can lead to a complete bypass of application-level authentication and error handling, potentially granting unauthorized access."
              }
            ],
            "metrics": [
              {
                "other": {
                  "content": {
                    "namespace": "https://access.redhat.com/security/updates/classification/",
                    "value": "Important"
                  },
                  "type": "Red Hat severity rating"
                }
              },
              {
                "cvssV3_1": {
                  "attackComplexity": "LOW",
                  "attackVector": "NETWORK",
                  "availabilityImpact": "NONE",
                  "baseScore": 8.2,
                  "baseSeverity": "HIGH",
                  "confidentialityImpact": "LOW",
                  "integrityImpact": "HIGH",
                  "privilegesRequired": "NONE",
                  "scope": "UNCHANGED",
                  "userInteraction": "NONE",
                  "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N",
                  "version": "3.1"
                },
                "format": "CVSS"
              }
            ],
            "problemTypes": [
              {
                "descriptions": [
                  {
                    "cweId": "CWE-915",
                    "description": "Improperly Controlled Modification of Dynamically-Determined Object Attributes",
                    "lang": "en",
                    "type": "CWE"
                  }
                ]
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-09-10T12:04:53.539Z",
              "orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
              "shortName": "redhat-SADP"
            },
            "references": [
              {
                "tags": [
                  "vdb-entry",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/security/cve/CVE-2026-42041"
              },
              {
                "name": "RHBZ#2461629",
                "tags": [
                  "issue-tracking",
                  "x_refsource_REDHAT"
                ],
                "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2461629"
              },
              {
                "tags": [
                  "x_sadp-csaf-vex"
                ],
                "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42041.json"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:25089"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:16874"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:36882"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:24539"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:25273"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:20938"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:20889"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:22619"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:21338"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:33574"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:14937"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:25041"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:50300"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:24977"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:17468"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:17474"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:21772"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:16476"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:16534"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:16532"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:16535"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:16542"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:22840"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:22629"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:21017"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:24853"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:19375"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:22465"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:23361"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:26214"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:26232"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:26225"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:25271"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:24536"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:17657"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:17699"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:19109"
              }
            ],
            "solutions": [
              {
                "lang": "en",
                "value": "RHSA-2026:25089: HawtIO HawtIO 4.4.0"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:16874: Network Observability (NETOBSERV) 1.11.0"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:36882: Red Hat Advanced Cluster Management for Kubernetes 2.14"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:24539: Red Hat Advanced Cluster Management for Kubernetes 2.15"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:25273: Red Hat Advanced Cluster Management for Kubernetes 2.16"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:20938: Red Hat Advanced Cluster Security 4.9"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:20889: Red Hat Advanced Cluster Security for Kubernetes 4.10"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:22619: Red Hat Data Grid 8.6.1"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:21338: Red Hat Developer Hub 1.8"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:33574: Red Hat Developer Hub 1.9"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:14937: Red Hat Discovery 2"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:25041: Red Hat Migration Toolkit 1.8"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:50300: Red Hat Migration Toolkit for Applications 8.1"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:24977: Red Hat OpenShift AI 2.25"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:17468: Red Hat OpenShift Container Platform 4.20"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:17474: Red Hat OpenShift Container Platform 4.21"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:21772: Red Hat OpenShift Dev Spaces 3.28"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:16476: Red Hat OpenShift Service Mesh 2.6"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:16534: Red Hat OpenShift Service Mesh 3.0"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:16532: Red Hat OpenShift Service Mesh 3.1"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:16535: Red Hat OpenShift Service Mesh 3.2"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:16542: Red Hat OpenShift Service Mesh 3.3"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:22840: Red Hat Quay 3.10"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:22629: Red Hat Quay 3.12"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:21017: Red Hat Quay 3.14"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:24853: Red Hat Quay 3.15"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:19375: Red Hat Quay 3.16"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:22465: Red Hat Quay 3.17"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:23361: Red Hat Quay 3.9"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:26214: Red Hat Satellite 6.18"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:26232: Red Hat Satellite 6.18"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:26225: Red Hat Satellite 6.18"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:25271: multicluster engine for Kubernetes 2.11"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:24536: multicluster engine for Kubernetes 2.1"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:17657: multicluster engine for Kubernetes 2.6"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:17699: multicluster engine for Kubernetes 2.8"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:19109: multicluster engine for Kubernetes 2.9"
              }
            ],
            "timeline": [
              {
                "lang": "en",
                "time": "2026-04-24T19:01:41.034Z",
                "value": "Reported to Red Hat."
              },
              {
                "lang": "en",
                "time": "2026-04-24T17:55:30.036Z",
                "value": "Made public."
              }
            ],
            "title": "axios: Axios: Authentication bypass due to prototype pollution of HTTP error handling",
            "x_adpType": "supplier",
            "x_generator": {
              "engine": "sadp-cli 1.0.0"
            }
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "axios",
              "vendor": "axios",
              "versions": [
                {
                  "status": "affected",
                  "version": "\u003e= 1.0.0, \u003c 1.15.1"
                },
                {
                  "status": "affected",
                  "version": "\u003c 0.31.1"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "Axios is a promise based HTTP client for the browser and Node.js. Prior to 1.15.1 and 0.31.1, the Axios library is vulnerable to a Prototype Pollution \"Gadget\" attack that allows any Object.prototype pollution to silently suppress all HTTP error responses (401, 403, 500, etc.), causing them to be treated as successful responses. This completely bypasses application-level authentication and error handling. The root cause is that validateStatus is the only config property using the mergeDirectKeys merge strategy, which uses JavaScript\u0027s in operator \u2014 an operator that inherently traverses the prototype chain. When Object.prototype.validateStatus is polluted with () =\u003e true, all HTTP status codes are accepted as success. This vulnerability is fixed in 1.15.1 and 0.31.1."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "HIGH",
                "attackVector": "NETWORK",
                "availabilityImpact": "NONE",
                "baseScore": 4.8,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "LOW",
                "integrityImpact": "LOW",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
                "version": "3.1"
              }
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-287",
                  "description": "CWE-287: Improper Authentication",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            },
            {
              "descriptions": [
                {
                  "cweId": "CWE-1321",
                  "description": "CWE-1321: Improperly Controlled Modification of Object Prototype Attributes (\u0027Prototype Pollution\u0027)",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-04-24T17:55:30.036Z",
            "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
            "shortName": "GitHub_M"
          },
          "references": [
            {
              "name": "https://github.com/axios/axios/security/advisories/GHSA-w9j2-pvgh-6h63",
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "https://github.com/axios/axios/security/advisories/GHSA-w9j2-pvgh-6h63"
            }
          ],
          "source": {
            "advisory": "GHSA-w9j2-pvgh-6h63",
            "discovery": "UNKNOWN"
          },
          "title": "Axios: Authentication Bypass via Prototype Pollution Gadget in `validateStatus` Merge Strategy"
        }
      },
      "cveMetadata": {
        "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "assignerShortName": "GitHub_M",
        "cveId": "CVE-2026-42041",
        "datePublished": "2026-04-24T17:55:30.036Z",
        "dateReserved": "2026-04-23T16:05:01.709Z",
        "dateUpdated": "2026-09-10T12:04:53.539Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2026-42043 (GCVE-0-2026-42043)

    Vulnerability from cvelistv5 – Published: 2026-04-24 17:54 – Updated: 2026-09-10 12:04
    VLAI
    Title
    Axios: Incomplete Fix for CVE-2025-62718 — NO_PROXY Protection Bypassed via RFC 1122 Loopback Subnet (127.0.0.0/8) in Axios 1.15.0
    Summary
    Axios is a promise based HTTP client for the browser and Node.js. Prior to 1.15.1 and 0.31.1, an attacker who can influence the target URL of an Axios request can use any address in the 127.0.0.0/8 range (other than 127.0.0.1) to completely bypass the NO_PROXY protection. This vulnerability is due to an incomplete for CVE-2025-62718, This vulnerability is fixed in 1.15.1 and 0.31.1.
    SSVC
    Exploitation: poc Automatable: yes Technical Impact: partial
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-04-27 13:47 UTC
    CWE
    • CWE-183 - Permissive List of Allowed Inputs
    • CWE-441 - Unintended Proxy or Intermediary ('Confused Deputy')
    • CWE-918 - Server-Side Request Forgery (SSRF)
    References
    URL Tags
    https://github.com/axios/axios/security/advisorie… x_refsource_CONFIRM
    https://access.redhat.com/security/cve/CVE-2026-42043 vdb-entryx_refsource_REDHAT
    https://bugzilla.redhat.com/show_bug.cgi?id=2461626 issue-trackingx_refsource_REDHAT
    https://security.access.redhat.com/data/csaf/v2/v… x_sadp-csaf-vex
    https://access.redhat.com/errata/RHSA-2026:25089 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:16874 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:36882 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:24539 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:25273 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:20938 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:20889 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:22619 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:21338 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:33574 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:14937 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:25041 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:24977 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:17468 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:17474 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:48670 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:21772 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:16476 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:16534 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:16532 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:16535 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:16542 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:22840 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:22629 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:21017 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:24853 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:19375 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:22465 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:23361 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:26214 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:26232 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:26225 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:25271 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:24536 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:17657 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:17699 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:19109 vendor-advisoryx_refsource_REDHAT
    Impacted products
    Vendor Product Version
    axios axios Affected: >= 1.0.0, < 1.15.1
    Affected: < 0.31.1
    Create a notification for this product.
    Red Hat HawtIO HawtIO 4.4.0     cpe:/a:redhat:apache_camel_hawtio:4.4::el9
    Create a notification for this product.
    Red Hat Red Hat Data Grid 8.6.1     cpe:/a:redhat:jboss_data_grid:8
    Create a notification for this product.
    Red Hat multicluster engine for Kubernetes 2.1 Unaffected: 1780917531 , < * (rpm)
        cpe:/a:redhat:multicluster_engine:2.10::el9
    Create a notification for this product.
    Red Hat multicluster engine for Kubernetes 2.11 Unaffected: 1780910888 , < * (rpm)
        cpe:/a:redhat:multicluster_engine:2.11::el9
    Create a notification for this product.
    Red Hat multicluster engine for Kubernetes 2.6 Unaffected: 1778511348 , < * (rpm)
        cpe:/a:redhat:multicluster_engine:2.6::el9
    Create a notification for this product.
    Red Hat multicluster engine for Kubernetes 2.8 Unaffected: 1778383863 , < * (rpm)
        cpe:/a:redhat:multicluster_engine:2.8::el9
    Create a notification for this product.
    Red Hat multicluster engine for Kubernetes 2.9 Unaffected: 1778532610 , < * (rpm)
        cpe:/a:redhat:multicluster_engine:2.9::el9
    Create a notification for this product.
    Red Hat Network Observability (NETOBSERV) 1.11.0 Unaffected: 1778508956 , < * (rpm)
        cpe:/a:redhat:network_observ_optr:1.11::el9
    Create a notification for this product.
    Red Hat Network Observability (NETOBSERV) 1.11.0 Unaffected: 1778510461 , < * (rpm)
        cpe:/a:redhat:network_observ_optr:1.11::el9
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.14 Unaffected: 1783451729 , < * (rpm)
        cpe:/a:redhat:acm:2.14::el9
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.15 Unaffected: 1780876734 , < * (rpm)
        cpe:/a:redhat:acm:2.15::el9
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.16 Unaffected: 1780600823 , < * (rpm)
        cpe:/a:redhat:acm:2.16::el9
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Security 4.9 Unaffected: 1779371594 , < * (rpm)
        cpe:/a:redhat:advanced_cluster_security:4.9::el8
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Security for Kubernetes 4.10 Unaffected: 1779293013 , < * (rpm)
        cpe:/a:redhat:advanced_cluster_security:4.10::el8
    Create a notification for this product.
    Red Hat Red Hat Developer Hub 1.8 Unaffected: 1779841586 , < * (rpm)
        cpe:/a:redhat:rhdh:1.8::el9
    Create a notification for this product.
    Red Hat Red Hat Developer Hub 1.9 Unaffected: 1782761244 , < * (rpm)
        cpe:/a:redhat:rhdh:1.9::el9
    Create a notification for this product.
    Red Hat Red Hat Discovery 2 Unaffected: 1778156756 , < * (rpm)
        cpe:/a:redhat:discovery:2::el9
    Create a notification for this product.
    Red Hat Red Hat Migration Toolkit 1.8 Unaffected: 1780590717 , < * (rpm)
        cpe:/a:redhat:rhmt:1.8::el8
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 2.25 Unaffected: 1780467029 , < * (rpm)
        cpe:/a:redhat:openshift_ai:2.25::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 2.25 Unaffected: 1780467147 , < * (rpm)
        cpe:/a:redhat:openshift_ai:2.25::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Container Platform 4.20 Unaffected: 1778645099 , < * (rpm)
        cpe:/a:redhat:openshift:4.20::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Container Platform 4.21 Unaffected: 1778539338 , < * (rpm)
        cpe:/a:redhat:openshift:4.21::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Container Platform 4.21 Unaffected: 1785354128 , < * (rpm)
        cpe:/a:redhat:openshift:4.21::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Dev Spaces 3.28 Unaffected: 1779814592 , < * (rpm)
        cpe:/a:redhat:openshift_devspaces:3.28::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Dev Spaces 3.28 Unaffected: 1779341289 , < * (rpm)
        cpe:/a:redhat:openshift_devspaces:3.28::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 2.6 Unaffected: 1778191473 , < * (rpm)
        cpe:/a:redhat:service_mesh:2.6::el8
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 2.6 Unaffected: 1778191378 , < * (rpm)
        cpe:/a:redhat:service_mesh:2.6::el8
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 3.0 Unaffected: 1778163785 , < * (rpm)
        cpe:/a:redhat:service_mesh:3.0::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 3.0 Unaffected: 1778164208 , < * (rpm)
        cpe:/a:redhat:service_mesh:3.0::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 3.1 Unaffected: 1778163935 , < * (rpm)
        cpe:/a:redhat:service_mesh:3.1::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 3.1 Unaffected: 1778164042 , < * (rpm)
        cpe:/a:redhat:service_mesh:3.1::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 3.2 Unaffected: 1778163792 , < * (rpm)
        cpe:/a:redhat:service_mesh:3.2::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 3.2 Unaffected: 1778163909 , < * (rpm)
        cpe:/a:redhat:service_mesh:3.2::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 3.3 Unaffected: 1778163785 , < * (rpm)
        cpe:/a:redhat:service_mesh:3.3::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 3.3 Unaffected: 1778163986 , < * (rpm)
        cpe:/a:redhat:service_mesh:3.3::el9
    Create a notification for this product.
    Red Hat Red Hat Quay 3.10 Unaffected: 1779822261 , < * (rpm)
        cpe:/a:redhat:quay:3.10::el8
    Create a notification for this product.
    Red Hat Red Hat Quay 3.12 Unaffected: 1779811412 , < * (rpm)
        cpe:/a:redhat:quay:3.12::el8
    Create a notification for this product.
    Red Hat Red Hat Quay 3.14 Unaffected: 1779689392 , < * (rpm)
        cpe:/a:redhat:quay:3.14::el8
    Create a notification for this product.
    Red Hat Red Hat Quay 3.15 Unaffected: 1780891395 , < * (rpm)
        cpe:/a:redhat:quay:3.15::el8
    Create a notification for this product.
    Red Hat Red Hat Quay 3.16 Unaffected: 1779204086 , < * (rpm)
        cpe:/a:redhat:quay:3.16::el9
    Create a notification for this product.
    Red Hat Red Hat Quay 3.17 Unaffected: 1779922205 , < * (rpm)
        cpe:/a:redhat:quay:3.17::el9
    Create a notification for this product.
    Red Hat Red Hat Quay 3.9 Unaffected: 1779811473 , < * (rpm)
        cpe:/a:redhat:quay:3.9::el8
    Create a notification for this product.
    Red Hat Red Hat Satellite 6.18 Unaffected: 1781181673 , < * (rpm)
        cpe:/a:redhat:satellite:6.18::el9
    Create a notification for this product.
    Red Hat Red Hat Satellite 6.18 Unaffected: 1781032495 , < * (rpm)
        cpe:/a:redhat:satellite:6.18::el9
    Create a notification for this product.
    Red Hat Red Hat Satellite 6.18 Unaffected: 1780105179 , < * (rpm)
        cpe:/a:redhat:satellite:6.18::el9
    Create a notification for this product.
    Red Hat Cryostat 4     cpe:/a:redhat:cryostat:4
    Create a notification for this product.
    Red Hat Gatekeeper 3     cpe:/a:redhat:gatekeeper:3
    Create a notification for this product.
    Red Hat Migration Toolkit for Applications 8     cpe:/a:redhat:migration_toolkit_applications:8
    Create a notification for this product.
    Red Hat OpenShift Pipelines     cpe:/a:redhat:openshift_pipelines:1
    Create a notification for this product.
    Red Hat OpenShift Service Mesh 3     cpe:/a:redhat:service_mesh:3
    Create a notification for this product.
    Red Hat Red Hat 3scale API Management Platform 2     cpe:/a:redhat:red_hat_3scale_amp:2
    Create a notification for this product.
    Red Hat Red Hat Ansible Automation Platform 2     cpe:/a:redhat:ansible_automation_platform:2
    Create a notification for this product.
    Red Hat Red Hat build of Apicurio Registry 2     cpe:/a:redhat:service_registry:2
    Create a notification for this product.
    Red Hat Red Hat build of Apicurio Registry 3     cpe:/a:redhat:apicurio_registry:3
    Create a notification for this product.
    Red Hat Red Hat Build of Podman Desktop - Tech Preview     cpe:/a:redhat:podman_desktop:0
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 8     cpe:/o:redhat:enterprise_linux:8
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 9     cpe:/o:redhat:enterprise_linux:9
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux AI (RHEL AI) 3     cpe:/a:redhat:enterprise_linux_ai:3
    Create a notification for this product.
    Red Hat Red Hat Fuse 7     cpe:/a:redhat:jboss_fuse:7
    Create a notification for this product.
    Red Hat Red Hat Hardened Images     cpe:/a:redhat:hummingbird:1
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI (RHOAI)     cpe:/a:redhat:openshift_ai
    Create a notification for this product.
    Red Hat Red Hat OpenShift Container Platform 4     cpe:/a:redhat:openshift:4
    Create a notification for this product.
    Red Hat Red Hat OpenShift Virtualization 4     cpe:/a:redhat:container_native_virtualization:4
    Create a notification for this product.
    Red Hat Red Hat Process Automation 7     cpe:/a:redhat:jboss_enterprise_bpms_platform:7
    Create a notification for this product.
    Red Hat Red Hat Trusted Artifact Signer     cpe:/a:redhat:trusted_artifact_signer:1
    Create a notification for this product.
    Red Hat Red Hat Trusted Profile Analyzer     cpe:/a:redhat:trusted_profile_analyzer:2
    Create a notification for this product.
    Red Hat Self-service automation portal 2     cpe:/a:redhat:ansible_portal:2
    Create a notification for this product.
    Red Hat streams for Apache Kafka 2     cpe:/a:redhat:amq_streams:2
    Create a notification for this product.
    Red Hat streams for Apache Kafka 3     cpe:/a:redhat:amq_streams:3
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-42043",
                    "options": [
                      {
                        "Exploitation": "poc"
                      },
                      {
                        "Automatable": "yes"
                      },
                      {
                        "Technical Impact": "partial"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-04-27T13:47:20.443878Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-04-27T13:47:24.724Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "references": [
              {
                "tags": [
                  "exploit"
                ],
                "url": "https://github.com/axios/axios/security/advisories/GHSA-pmwg-cvhr-8vh7"
              }
            ],
            "title": "CISA ADP Vulnrichment"
          },
          {
            "affected": [
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:apache_camel_hawtio:4.4::el9"
                ],
                "defaultStatus": "unaffected",
                "packageName": "axios",
                "product": "HawtIO HawtIO 4.4.0",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:jboss_data_grid:8"
                ],
                "defaultStatus": "unaffected",
                "packageName": "axios",
                "product": "Red Hat Data Grid 8.6.1",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:multicluster_engine:2.10::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "multicluster-engine/console-mce-rhel9",
                "product": "multicluster engine for Kubernetes 2.1",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1780917531",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:multicluster_engine:2.11::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "multicluster-engine/console-mce-rhel9",
                "product": "multicluster engine for Kubernetes 2.11",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1780910888",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:multicluster_engine:2.6::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "multicluster-engine/console-mce-rhel9",
                "product": "multicluster engine for Kubernetes 2.6",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778511348",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:multicluster_engine:2.8::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "multicluster-engine/console-mce-rhel9",
                "product": "multicluster engine for Kubernetes 2.8",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778383863",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:multicluster_engine:2.9::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "multicluster-engine/console-mce-rhel9",
                "product": "multicluster engine for Kubernetes 2.9",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778532610",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:network_observ_optr:1.11::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "network-observability/network-observability-console-plugin-compat-rhel9",
                "product": "Network Observability (NETOBSERV) 1.11.0",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778508956",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:network_observ_optr:1.11::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "network-observability/network-observability-console-plugin-rhel9",
                "product": "Network Observability (NETOBSERV) 1.11.0",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778510461",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:acm:2.14::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhacm2/console-rhel9",
                "product": "Red Hat Advanced Cluster Management for Kubernetes 2.14",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1783451729",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:acm:2.15::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhacm2/console-rhel9",
                "product": "Red Hat Advanced Cluster Management for Kubernetes 2.15",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1780876734",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:acm:2.16::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhacm2/console-rhel9",
                "product": "Red Hat Advanced Cluster Management for Kubernetes 2.16",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1780600823",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:advanced_cluster_security:4.9::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "advanced-cluster-security/rhacs-main-rhel8",
                "product": "Red Hat Advanced Cluster Security 4.9",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779371594",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:advanced_cluster_security:4.10::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "advanced-cluster-security/rhacs-main-rhel8",
                "product": "Red Hat Advanced Cluster Security for Kubernetes 4.10",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779293013",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:rhdh:1.8::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhdh/rhdh-hub-rhel9",
                "product": "Red Hat Developer Hub 1.8",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779841586",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:rhdh:1.9::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhdh/rhdh-hub-rhel9",
                "product": "Red Hat Developer Hub 1.9",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782761244",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:discovery:2::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "discovery/discovery-ui-rhel9",
                "product": "Red Hat Discovery 2",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778156756",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:rhmt:1.8::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "rhmtc/openshift-migration-ui-rhel8",
                "product": "Red Hat Migration Toolkit 1.8",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1780590717",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:2.25::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-dashboard-rhel9",
                "product": "Red Hat OpenShift AI 2.25",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1780467029",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:2.25::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-mod-arch-model-registry-rhel9",
                "product": "Red Hat OpenShift AI 2.25",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1780467147",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4.20::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift4/ose-agent-installer-ui-rhel9",
                "product": "Red Hat OpenShift Container Platform 4.20",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778645099",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4.21::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift4/ose-agent-installer-ui-rhel9",
                "product": "Red Hat OpenShift Container Platform 4.21",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778539338",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4.21::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift4/ose-monitoring-plugin-rhel9",
                "product": "Red Hat OpenShift Container Platform 4.21",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1785354128",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_devspaces:3.28::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "devspaces/code-rhel9",
                "product": "Red Hat OpenShift Dev Spaces 3.28",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779814592",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_devspaces:3.28::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "devspaces/dashboard-rhel9",
                "product": "Red Hat OpenShift Dev Spaces 3.28",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779341289",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:2.6::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-ossmc-rhel8",
                "product": "Red Hat OpenShift Service Mesh 2.6",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778191473",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:2.6::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-rhel8",
                "product": "Red Hat OpenShift Service Mesh 2.6",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778191378",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3.0::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-ossmc-rhel9",
                "product": "Red Hat OpenShift Service Mesh 3.0",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778163785",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3.0::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-rhel9",
                "product": "Red Hat OpenShift Service Mesh 3.0",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778164208",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3.1::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-ossmc-rhel9",
                "product": "Red Hat OpenShift Service Mesh 3.1",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778163935",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3.1::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-rhel9",
                "product": "Red Hat OpenShift Service Mesh 3.1",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778164042",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3.2::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-ossmc-rhel9",
                "product": "Red Hat OpenShift Service Mesh 3.2",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778163792",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3.2::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-rhel9",
                "product": "Red Hat OpenShift Service Mesh 3.2",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778163909",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3.3::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-ossmc-rhel9",
                "product": "Red Hat OpenShift Service Mesh 3.3",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778163785",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3.3::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-rhel9",
                "product": "Red Hat OpenShift Service Mesh 3.3",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778163986",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.10::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel8",
                "product": "Red Hat Quay 3.10",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779822261",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.12::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel8",
                "product": "Red Hat Quay 3.12",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779811412",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.14::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel8",
                "product": "Red Hat Quay 3.14",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779689392",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.15::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel8",
                "product": "Red Hat Quay 3.15",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1780891395",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.16::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel9",
                "product": "Red Hat Quay 3.16",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779204086",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.17::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel9",
                "product": "Red Hat Quay 3.17",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779922205",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.9::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel8",
                "product": "Red Hat Quay 3.9",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779811473",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:satellite:6.18::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "satellite/iop-advisor-frontend-rhel9",
                "product": "Red Hat Satellite 6.18",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1781181673",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:satellite:6.18::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "satellite/iop-vulnerability-frontend-rhel9",
                "product": "Red Hat Satellite 6.18",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1781032495",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:satellite:6.18::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "satellite/iop-host-inventory-frontend-rhel9",
                "product": "Red Hat Satellite 6.18",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1780105179",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:cryostat:4"
                ],
                "defaultStatus": "unaffected",
                "packageName": "axios",
                "product": "Cryostat 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:gatekeeper:3"
                ],
                "defaultStatus": "unaffected",
                "packageName": "gatekeeper/gatekeeper-rhel9",
                "product": "Gatekeeper 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:migration_toolkit_applications:8"
                ],
                "defaultStatus": "unaffected",
                "packageName": "mta/mta-ui-rhel8",
                "product": "Migration Toolkit for Applications 8",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:migration_toolkit_applications:8"
                ],
                "defaultStatus": "unaffected",
                "packageName": "mta/mta-ui-rhel9",
                "product": "Migration Toolkit for Applications 8",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_pipelines:1"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-pipelines/pipelines-hub-ui-rhel8",
                "product": "OpenShift Pipelines",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_pipelines:1"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-pipelines/pipelines-hub-ui-rhel9",
                "product": "OpenShift Pipelines",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3"
                ],
                "defaultStatus": "unaffected",
                "packageName": "openshift-service-mesh/kiali-operator-bundle",
                "product": "OpenShift Service Mesh 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3"
                ],
                "defaultStatus": "unaffected",
                "packageName": "openshift-service-mesh/kiali-rhel9-operator",
                "product": "OpenShift Service Mesh 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:red_hat_3scale_amp:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "3scale-amp21/system",
                "product": "Red Hat 3scale API Management Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:red_hat_3scale_amp:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "3scale-amp22/system",
                "product": "Red Hat 3scale API Management Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:red_hat_3scale_amp:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "3scale-amp2/system-rhel7",
                "product": "Red Hat 3scale API Management Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:red_hat_3scale_amp:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "3scale-amp2/system-rhel8",
                "product": "Red Hat 3scale API Management Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:red_hat_3scale_amp:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "3scale-amp2/system-rhel9",
                "product": "Red Hat 3scale API Management Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "ansible-automation-platform-26/gateway-rhel9",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "affected",
                "packageName": "ansible-automation-platform/automation-dashboard-rhel9",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "affected",
                "packageName": "automation-controller",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "automation-gateway",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "affected",
                "packageName": "automation-hub",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "automation-platform-ui",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "python3.11-galaxy-ng",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "python3.12-galaxy-ng",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "python3x-galaxy-ng",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "python-galaxy-ng",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:service_registry:2"
                ],
                "defaultStatus": "affected",
                "packageName": "axios",
                "product": "Red Hat build of Apicurio Registry 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:apicurio_registry:3"
                ],
                "defaultStatus": "affected",
                "packageName": "apicurio/apicurio-registry-ui-rhel8",
                "product": "Red Hat build of Apicurio Registry 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:apicurio_registry:3"
                ],
                "defaultStatus": "affected",
                "packageName": "apicurio/apicurio-registry-ui-rhel9",
                "product": "Red Hat build of Apicurio Registry 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:podman_desktop:0"
                ],
                "defaultStatus": "affected",
                "packageName": "rhdesktop/rh-podman-desktop-ext-openshift-local-rhel10",
                "product": "Red Hat Build of Podman Desktop - Tech Preview",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:8"
                ],
                "defaultStatus": "affected",
                "packageName": "grafana",
                "product": "Red Hat Enterprise Linux 8",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:9"
                ],
                "defaultStatus": "unaffected",
                "packageName": "grafana",
                "product": "Red Hat Enterprise Linux 9",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:enterprise_linux_ai:3"
                ],
                "defaultStatus": "affected",
                "packageName": "rhelai3/bootc-cuda-rhel9",
                "product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:enterprise_linux_ai:3"
                ],
                "defaultStatus": "affected",
                "packageName": "rhelai3/bootc-rocm-rhel9",
                "product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:enterprise_linux_ai:3"
                ],
                "defaultStatus": "affected",
                "packageName": "rhelai3/disk-image-cuda-rhel9",
                "product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:jboss_fuse:7"
                ],
                "defaultStatus": "unaffected",
                "packageName": "axios",
                "product": "Red Hat Fuse 7",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:hummingbird:1"
                ],
                "defaultStatus": "unaffected",
                "packageName": "boost",
                "product": "Red Hat Hardened Images",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "unaffected",
                "packageName": "rhoai/odh-dashboard-rhel8",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-mod-arch-gen-ai-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-mod-arch-maas-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift3/ose-console",
                "product": "Red Hat OpenShift Container Platform 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift4/ose-console",
                "product": "Red Hat OpenShift Container Platform 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift4/ose-console-rhel9",
                "product": "Red Hat OpenShift Container Platform 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:container_native_virtualization:4"
                ],
                "defaultStatus": "unaffected",
                "packageName": "container-native-virtualization/kubevirt-console-plugin",
                "product": "Red Hat OpenShift Virtualization 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:container_native_virtualization:4"
                ],
                "defaultStatus": "unaffected",
                "packageName": "container-native-virtualization/kubevirt-console-plugin-rhel9",
                "product": "Red Hat OpenShift Virtualization 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:jboss_enterprise_bpms_platform:7"
                ],
                "defaultStatus": "unaffected",
                "packageName": "axios",
                "product": "Red Hat Process Automation 7",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:trusted_artifact_signer:1"
                ],
                "defaultStatus": "unaffected",
                "packageName": "rhtas/rhtas-console-ui-rhel9",
                "product": "Red Hat Trusted Artifact Signer",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:trusted_profile_analyzer:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "rhtpa/rhtpa-trustification-service-rhel9",
                "product": "Red Hat Trusted Profile Analyzer",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_portal:2"
                ],
                "defaultStatus": "affected",
                "packageName": "ansible-automation-platform/automation-portal",
                "product": "Self-service automation portal 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:amq_streams:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "axios",
                "product": "streams for Apache Kafka 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:amq_streams:3"
                ],
                "defaultStatus": "unaffected",
                "packageName": "axios",
                "product": "streams for Apache Kafka 3",
                "vendor": "Red Hat"
              }
            ],
            "datePublic": "2026-04-24T17:54:42.668Z",
            "descriptions": [
              {
                "lang": "en",
                "value": "A flaw was found in Axios, a promise-based HTTP client. An attacker who can control the destination address of an Axios request can exploit this vulnerability. By using specific internal network addresses (within the 127.0.0.0/8 range, excluding 127.0.0.1), the attacker can completely bypass the NO_PROXY protection, potentially leading to unauthorized access or information disclosure within the network. This issue is an incomplete fix for a previous vulnerability."
              }
            ],
            "metrics": [
              {
                "other": {
                  "content": {
                    "namespace": "https://access.redhat.com/security/updates/classification/",
                    "value": "Important"
                  },
                  "type": "Red Hat severity rating"
                }
              },
              {
                "cvssV3_1": {
                  "attackComplexity": "LOW",
                  "attackVector": "NETWORK",
                  "availabilityImpact": "NONE",
                  "baseScore": 7.2,
                  "baseSeverity": "HIGH",
                  "confidentialityImpact": "LOW",
                  "integrityImpact": "LOW",
                  "privilegesRequired": "NONE",
                  "scope": "CHANGED",
                  "userInteraction": "NONE",
                  "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
                  "version": "3.1"
                },
                "format": "CVSS"
              }
            ],
            "problemTypes": [
              {
                "descriptions": [
                  {
                    "cweId": "CWE-918",
                    "description": "Server-Side Request Forgery (SSRF)",
                    "lang": "en",
                    "type": "CWE"
                  }
                ]
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-09-10T12:04:53.581Z",
              "orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
              "shortName": "redhat-SADP"
            },
            "references": [
              {
                "tags": [
                  "vdb-entry",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/security/cve/CVE-2026-42043"
              },
              {
                "name": "RHBZ#2461626",
                "tags": [
                  "issue-tracking",
                  "x_refsource_REDHAT"
                ],
                "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2461626"
              },
              {
                "tags": [
                  "x_sadp-csaf-vex"
                ],
                "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42043.json"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:25089"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:16874"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:36882"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:24539"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:25273"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:20938"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:20889"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:22619"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:21338"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:33574"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:14937"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:25041"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:24977"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:17468"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:17474"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:48670"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:21772"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:16476"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:16534"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:16532"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:16535"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:16542"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:22840"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:22629"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:21017"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:24853"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:19375"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:22465"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:23361"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:26214"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:26232"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:26225"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:25271"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:24536"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:17657"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:17699"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:19109"
              }
            ],
            "solutions": [
              {
                "lang": "en",
                "value": "RHSA-2026:25089: HawtIO HawtIO 4.4.0"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:16874: Network Observability (NETOBSERV) 1.11.0"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:36882: Red Hat Advanced Cluster Management for Kubernetes 2.14"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:24539: Red Hat Advanced Cluster Management for Kubernetes 2.15"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:25273: Red Hat Advanced Cluster Management for Kubernetes 2.16"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:20938: Red Hat Advanced Cluster Security 4.9"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:20889: Red Hat Advanced Cluster Security for Kubernetes 4.10"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:22619: Red Hat Data Grid 8.6.1"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:21338: Red Hat Developer Hub 1.8"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:33574: Red Hat Developer Hub 1.9"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:14937: Red Hat Discovery 2"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:25041: Red Hat Migration Toolkit 1.8"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:24977: Red Hat OpenShift AI 2.25"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:17468: Red Hat OpenShift Container Platform 4.20"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:17474: Red Hat OpenShift Container Platform 4.21"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:48670: Red Hat OpenShift Container Platform 4.21"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:21772: Red Hat OpenShift Dev Spaces 3.28"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:16476: Red Hat OpenShift Service Mesh 2.6"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:16534: Red Hat OpenShift Service Mesh 3.0"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:16532: Red Hat OpenShift Service Mesh 3.1"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:16535: Red Hat OpenShift Service Mesh 3.2"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:16542: Red Hat OpenShift Service Mesh 3.3"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:22840: Red Hat Quay 3.10"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:22629: Red Hat Quay 3.12"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:21017: Red Hat Quay 3.14"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:24853: Red Hat Quay 3.15"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:19375: Red Hat Quay 3.16"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:22465: Red Hat Quay 3.17"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:23361: Red Hat Quay 3.9"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:26214: Red Hat Satellite 6.18"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:26232: Red Hat Satellite 6.18"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:26225: Red Hat Satellite 6.18"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:25271: multicluster engine for Kubernetes 2.11"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:24536: multicluster engine for Kubernetes 2.1"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:17657: multicluster engine for Kubernetes 2.6"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:17699: multicluster engine for Kubernetes 2.8"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:19109: multicluster engine for Kubernetes 2.9"
              }
            ],
            "timeline": [
              {
                "lang": "en",
                "time": "2026-04-24T19:01:22.552Z",
                "value": "Reported to Red Hat."
              },
              {
                "lang": "en",
                "time": "2026-04-24T17:54:42.668Z",
                "value": "Made public."
              }
            ],
            "title": "axios: Axios: NO_PROXY bypass via crafted URL",
            "x_adpType": "supplier",
            "x_generator": {
              "engine": "sadp-cli 1.0.0"
            }
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "axios",
              "vendor": "axios",
              "versions": [
                {
                  "status": "affected",
                  "version": "\u003e= 1.0.0, \u003c 1.15.1"
                },
                {
                  "status": "affected",
                  "version": "\u003c 0.31.1"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "Axios is a promise based HTTP client for the browser and Node.js. Prior to 1.15.1 and 0.31.1, an attacker who can influence the target URL of an Axios request can use any address in the 127.0.0.0/8 range (other than 127.0.0.1) to completely bypass the NO_PROXY protection. This vulnerability is due to an incomplete for CVE-2025-62718, This vulnerability is fixed in 1.15.1 and 0.31.1."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "NONE",
                "baseScore": 7.2,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "LOW",
                "integrityImpact": "LOW",
                "privilegesRequired": "NONE",
                "scope": "CHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
                "version": "3.1"
              }
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-183",
                  "description": "CWE-183: Permissive List of Allowed Inputs",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            },
            {
              "descriptions": [
                {
                  "cweId": "CWE-441",
                  "description": "CWE-441: Unintended Proxy or Intermediary (\u0027Confused Deputy\u0027)",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            },
            {
              "descriptions": [
                {
                  "cweId": "CWE-918",
                  "description": "CWE-918: Server-Side Request Forgery (SSRF)",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-04-24T17:54:42.668Z",
            "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
            "shortName": "GitHub_M"
          },
          "references": [
            {
              "name": "https://github.com/axios/axios/security/advisories/GHSA-pmwg-cvhr-8vh7",
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "https://github.com/axios/axios/security/advisories/GHSA-pmwg-cvhr-8vh7"
            }
          ],
          "source": {
            "advisory": "GHSA-pmwg-cvhr-8vh7",
            "discovery": "UNKNOWN"
          },
          "title": "Axios: Incomplete Fix for CVE-2025-62718 \u2014 NO_PROXY  Protection Bypassed via RFC 1122 Loopback Subnet (127.0.0.0/8)  in Axios 1.15.0"
        }
      },
      "cveMetadata": {
        "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "assignerShortName": "GitHub_M",
        "cveId": "CVE-2026-42043",
        "datePublished": "2026-04-24T17:54:42.668Z",
        "dateReserved": "2026-04-23T16:05:01.709Z",
        "dateUpdated": "2026-09-10T12:04:53.581Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2026-42044 (GCVE-0-2026-42044)

    Vulnerability from cvelistv5 – Published: 2026-04-24 17:49 – Updated: 2026-09-10 12:04
    VLAI
    Title
    Axios: Invisible JSON Response Tampering via Prototype Pollution Gadget in `parseReviver`
    Summary
    Axios is a promise based HTTP client for the browser and Node.js. From 1.0.0 to before 1.15.2, he Axios library is vulnerable to a Prototype Pollution "Gadget" attack that allows any Object.prototype pollution in the application's dependency tree to be escalated into surgical, invisible modification of all JSON API responses — including privilege escalation, balance manipulation, and authorization bypass. The default transformResponse function at lib/defaults/index.js:124 calls JSON.parse(data, this.parseReviver), where this is the merged config object. Because parseReviver is not present in Axios defaults, not validated by assertOptions, and not subject to any constraints, a polluted Object.prototype.parseReviver function is called for every key-value pair in every JSON response, allowing the attacker to selectively modify individual values while leaving the rest of the response intact. This vulnerability is fixed in 1.15.2.
    SSVC
    Exploitation: poc Automatable: no Technical Impact: partial
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-04-24 18:11 UTC
    CWE
    • CWE-915 - Improperly Controlled Modification of Dynamically-Determined Object Attributes
    • CWE-1321 - Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
    References
    URL Tags
    https://github.com/axios/axios/security/advisorie… x_refsource_CONFIRM
    https://access.redhat.com/security/cve/CVE-2026-42044 vdb-entryx_refsource_REDHAT
    https://bugzilla.redhat.com/show_bug.cgi?id=2461624 issue-trackingx_refsource_REDHAT
    https://security.access.redhat.com/data/csaf/v2/v… x_sadp-csaf-vex
    https://access.redhat.com/errata/RHSA-2026:42078 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:25089 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:24473 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:36882 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:24539 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:25273 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:20938 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:20889 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:36107 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:21338 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:33574 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:20338 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:25041 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:50300 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:21772 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:20454 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:16534 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:16532 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:16535 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:16542 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:22840 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:22629 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:21017 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:24853 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:19375 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:41066 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:22465 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:23361 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:26214 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:26232 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:26225 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:24471 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:34608 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:25271 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:24536 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:17657 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:17699 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:19109 vendor-advisoryx_refsource_REDHAT
    Impacted products
    Vendor Product Version
    axios axios Affected: >= 1.0.0, < 1.15.2
    Create a notification for this product.
    Red Hat HawtIO HawtIO 4.4.0     cpe:/a:redhat:apache_camel_hawtio:4.4::el9
    Create a notification for this product.
    Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 8 Unaffected: 0:2.5.20260715-1.el8ap , < * (rpm)
        cpe:/a:redhat:ansible_automation_platform:2.5::el8
    Create a notification for this product.
    Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 9 Unaffected: 0:2.5.20260715-1.el9ap , < * (rpm)
        cpe:/a:redhat:ansible_automation_platform:2.5::el9
    Create a notification for this product.
    Red Hat Streams for Apache Kafka 2.9.4     cpe:/a:redhat:amq_streams:2.9::el9
    Create a notification for this product.
    Red Hat multicluster engine for Kubernetes 2.1 Unaffected: 1780917531 , < * (rpm)
        cpe:/a:redhat:multicluster_engine:2.10::el9
    Create a notification for this product.
    Red Hat multicluster engine for Kubernetes 2.11 Unaffected: 1780910888 , < * (rpm)
        cpe:/a:redhat:multicluster_engine:2.11::el9
    Create a notification for this product.
    Red Hat multicluster engine for Kubernetes 2.6 Unaffected: 1778511348 , < * (rpm)
        cpe:/a:redhat:multicluster_engine:2.6::el9
    Create a notification for this product.
    Red Hat multicluster engine for Kubernetes 2.8 Unaffected: 1778383863 , < * (rpm)
        cpe:/a:redhat:multicluster_engine:2.8::el9
    Create a notification for this product.
    Red Hat multicluster engine for Kubernetes 2.9 Unaffected: 1778532610 , < * (rpm)
        cpe:/a:redhat:multicluster_engine:2.9::el9
    Create a notification for this product.
    Red Hat Network Observability (NETOBSERV) 1.12.2 Unaffected: 1780920979 , < * (rpm)
        cpe:/a:redhat:network_observ_optr:1.12::el9
    Create a notification for this product.
    Red Hat Network Observability (NETOBSERV) 1.12.2 Unaffected: 1780556069 , < * (rpm)
        cpe:/a:redhat:network_observ_optr:1.12::el9
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.14 Unaffected: 1783451729 , < * (rpm)
        cpe:/a:redhat:acm:2.14::el9
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.15 Unaffected: 1780876734 , < * (rpm)
        cpe:/a:redhat:acm:2.15::el9
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.16 Unaffected: 1780600823 , < * (rpm)
        cpe:/a:redhat:acm:2.16::el9
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Security 4.9 Unaffected: 1779371594 , < * (rpm)
        cpe:/a:redhat:advanced_cluster_security:4.9::el8
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Security for Kubernetes 4.10 Unaffected: 1779293013 , < * (rpm)
        cpe:/a:redhat:advanced_cluster_security:4.10::el8
    Create a notification for this product.
    Red Hat Red Hat Container Native Virtualization 4.15 Unaffected: 1782917983 , < * (rpm)
        cpe:/a:redhat:container_native_virtualization:4.15::el9
    Create a notification for this product.
    Red Hat Red Hat Developer Hub 1.8 Unaffected: 1779841586 , < * (rpm)
        cpe:/a:redhat:rhdh:1.8::el9
    Create a notification for this product.
    Red Hat Red Hat Developer Hub 1.9 Unaffected: 1782761244 , < * (rpm)
        cpe:/a:redhat:rhdh:1.9::el9
    Create a notification for this product.
    Red Hat Red Hat Discovery 2 Unaffected: 1779395188 , < * (rpm)
        cpe:/a:redhat:discovery:2::el9
    Create a notification for this product.
    Red Hat Red Hat Migration Toolkit 1.8 Unaffected: 1780590717 , < * (rpm)
        cpe:/a:redhat:rhmt:1.8::el8
    Create a notification for this product.
    Red Hat Red Hat Migration Toolkit for Applications 8.1 Unaffected: 1785169013 , < * (rpm)
        cpe:/a:redhat:migration_toolkit_applications:8.1::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Dev Spaces 3.28 Unaffected: 1779814592 , < * (rpm)
        cpe:/a:redhat:openshift_devspaces:3.28::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Dev Spaces 3.28 Unaffected: 1779341289 , < * (rpm)
        cpe:/a:redhat:openshift_devspaces:3.28::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 2.6 Unaffected: 1779520355 , < * (rpm)
        cpe:/a:redhat:service_mesh:2.6::el8
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 2.6 Unaffected: 1779520348 , < * (rpm)
        cpe:/a:redhat:service_mesh:2.6::el8
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 3.0 Unaffected: 1778163785 , < * (rpm)
        cpe:/a:redhat:service_mesh:3.0::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 3.0 Unaffected: 1778164208 , < * (rpm)
        cpe:/a:redhat:service_mesh:3.0::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 3.1 Unaffected: 1778163935 , < * (rpm)
        cpe:/a:redhat:service_mesh:3.1::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 3.1 Unaffected: 1778164042 , < * (rpm)
        cpe:/a:redhat:service_mesh:3.1::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 3.2 Unaffected: 1778163792 , < * (rpm)
        cpe:/a:redhat:service_mesh:3.2::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 3.2 Unaffected: 1778163909 , < * (rpm)
        cpe:/a:redhat:service_mesh:3.2::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 3.3 Unaffected: 1778163785 , < * (rpm)
        cpe:/a:redhat:service_mesh:3.3::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 3.3 Unaffected: 1778163986 , < * (rpm)
        cpe:/a:redhat:service_mesh:3.3::el9
    Create a notification for this product.
    Red Hat Red Hat Quay 3.10 Unaffected: 1779822261 , < * (rpm)
        cpe:/a:redhat:quay:3.10::el8
    Create a notification for this product.
    Red Hat Red Hat Quay 3.12 Unaffected: 1779811412 , < * (rpm)
        cpe:/a:redhat:quay:3.12::el8
    Create a notification for this product.
    Red Hat Red Hat Quay 3.14 Unaffected: 1779689392 , < * (rpm)
        cpe:/a:redhat:quay:3.14::el8
    Create a notification for this product.
    Red Hat Red Hat Quay 3.15 Unaffected: 1780891395 , < * (rpm)
        cpe:/a:redhat:quay:3.15::el8
    Create a notification for this product.
    Red Hat Red Hat Quay 3.16 Unaffected: 1779204086 , < * (rpm)
    Unaffected: 1783955846 , < * (rpm)
        cpe:/a:redhat:quay:3.16::el9
    Create a notification for this product.
    Red Hat Red Hat Quay 3.17 Unaffected: 1779922205 , < * (rpm)
        cpe:/a:redhat:quay:3.17::el9
    Create a notification for this product.
    Red Hat Red Hat Quay 3.9 Unaffected: 1779811473 , < * (rpm)
        cpe:/a:redhat:quay:3.9::el8
    Create a notification for this product.
    Red Hat Red Hat Satellite 6.18 Unaffected: 1781181673 , < * (rpm)
        cpe:/a:redhat:satellite:6.18::el9
    Create a notification for this product.
    Red Hat Red Hat Satellite 6.18 Unaffected: 1781032495 , < * (rpm)
        cpe:/a:redhat:satellite:6.18::el9
    Create a notification for this product.
    Red Hat Red Hat Satellite 6.18 Unaffected: 1780105179 , < * (rpm)
        cpe:/a:redhat:satellite:6.18::el9
    Create a notification for this product.
    Red Hat Red Hat Trusted Artifact Signer 1.3 Unaffected: 1779971506 , < * (rpm)
        cpe:/a:redhat:trusted_artifact_signer:1.3::el9
    Create a notification for this product.
    Red Hat Cryostat 4     cpe:/a:redhat:cryostat:4
    Create a notification for this product.
    Red Hat Gatekeeper 3     cpe:/a:redhat:gatekeeper:3
    Create a notification for this product.
    Red Hat Migration Toolkit for Applications 8     cpe:/a:redhat:migration_toolkit_applications:8
    Create a notification for this product.
    Red Hat Network Observability Operator     cpe:/a:redhat:network_observ_optr:1
    Create a notification for this product.
    Red Hat OpenShift Pipelines     cpe:/a:redhat:openshift_pipelines:1
    Create a notification for this product.
    Red Hat OpenShift Service Mesh 3     cpe:/a:redhat:service_mesh:3
    Create a notification for this product.
    Red Hat Red Hat 3scale API Management Platform 2     cpe:/a:redhat:red_hat_3scale_amp:2
    Create a notification for this product.
    Red Hat Red Hat Ansible Automation Platform 2     cpe:/a:redhat:ansible_automation_platform:2
    Create a notification for this product.
    Red Hat Red Hat build of Apicurio Registry 2     cpe:/a:redhat:service_registry:2
    Create a notification for this product.
    Red Hat Red Hat build of Apicurio Registry 3     cpe:/a:redhat:apicurio_registry:3
    Create a notification for this product.
    Red Hat Red Hat Build of Podman Desktop - Tech Preview     cpe:/a:redhat:podman_desktop:0
    Create a notification for this product.
    Red Hat Red Hat Data Grid 8     cpe:/a:redhat:jboss_data_grid:8
    Create a notification for this product.
    Red Hat Red Hat Developer Hub     cpe:/a:redhat:rhdh:1
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 8     cpe:/o:redhat:enterprise_linux:8
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 9     cpe:/o:redhat:enterprise_linux:9
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux AI (RHEL AI) 3     cpe:/a:redhat:enterprise_linux_ai:3
    Create a notification for this product.
    Red Hat Red Hat Fuse 7     cpe:/a:redhat:jboss_fuse:7
    Create a notification for this product.
    Red Hat Red Hat Hardened Images     cpe:/a:redhat:hummingbird:1
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI (RHOAI)     cpe:/a:redhat:openshift_ai
    Create a notification for this product.
    Red Hat Red Hat OpenShift Container Platform 4     cpe:/a:redhat:openshift:4
    Create a notification for this product.
    Red Hat Red Hat OpenShift Virtualization 4     cpe:/a:redhat:container_native_virtualization:4
    Create a notification for this product.
    Red Hat Red Hat Process Automation 7     cpe:/a:redhat:jboss_enterprise_bpms_platform:7
    Create a notification for this product.
    Red Hat Red Hat Trusted Profile Analyzer     cpe:/a:redhat:trusted_profile_analyzer:2
    Create a notification for this product.
    Red Hat Self-service automation portal 2     cpe:/a:redhat:ansible_portal:2
    Create a notification for this product.
    Red Hat streams for Apache Kafka 3     cpe:/a:redhat:amq_streams:3
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-42044",
                    "options": [
                      {
                        "Exploitation": "poc"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "partial"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-04-24T18:11:49.647774Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-04-24T18:12:13.920Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "references": [
              {
                "tags": [
                  "exploit"
                ],
                "url": "https://github.com/axios/axios/security/advisories/GHSA-3w6x-2g7m-8v23"
              }
            ],
            "title": "CISA ADP Vulnrichment"
          },
          {
            "affected": [
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:apache_camel_hawtio:4.4::el9"
                ],
                "defaultStatus": "unaffected",
                "packageName": "axios",
                "product": "HawtIO HawtIO 4.4.0",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2.5::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "automation-gateway",
                "product": "Red Hat Ansible Automation Platform 2.5 for RHEL 8",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:2.5.20260715-1.el8ap",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2.5::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "automation-gateway",
                "product": "Red Hat Ansible Automation Platform 2.5 for RHEL 9",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:2.5.20260715-1.el9ap",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:amq_streams:2.9::el9"
                ],
                "defaultStatus": "unaffected",
                "packageName": "axios",
                "product": "Streams for Apache Kafka 2.9.4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:multicluster_engine:2.10::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "multicluster-engine/console-mce-rhel9",
                "product": "multicluster engine for Kubernetes 2.1",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1780917531",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:multicluster_engine:2.11::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "multicluster-engine/console-mce-rhel9",
                "product": "multicluster engine for Kubernetes 2.11",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1780910888",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:multicluster_engine:2.6::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "multicluster-engine/console-mce-rhel9",
                "product": "multicluster engine for Kubernetes 2.6",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778511348",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:multicluster_engine:2.8::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "multicluster-engine/console-mce-rhel9",
                "product": "multicluster engine for Kubernetes 2.8",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778383863",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:multicluster_engine:2.9::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "multicluster-engine/console-mce-rhel9",
                "product": "multicluster engine for Kubernetes 2.9",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778532610",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:network_observ_optr:1.12::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "network-observability/network-observability-console-plugin-pf4-rhel9",
                "product": "Network Observability (NETOBSERV) 1.12.2",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1780920979",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:network_observ_optr:1.12::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "network-observability/network-observability-console-plugin-rhel9",
                "product": "Network Observability (NETOBSERV) 1.12.2",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1780556069",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:acm:2.14::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhacm2/console-rhel9",
                "product": "Red Hat Advanced Cluster Management for Kubernetes 2.14",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1783451729",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:acm:2.15::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhacm2/console-rhel9",
                "product": "Red Hat Advanced Cluster Management for Kubernetes 2.15",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1780876734",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:acm:2.16::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhacm2/console-rhel9",
                "product": "Red Hat Advanced Cluster Management for Kubernetes 2.16",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1780600823",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:advanced_cluster_security:4.9::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "advanced-cluster-security/rhacs-main-rhel8",
                "product": "Red Hat Advanced Cluster Security 4.9",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779371594",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:advanced_cluster_security:4.10::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "advanced-cluster-security/rhacs-main-rhel8",
                "product": "Red Hat Advanced Cluster Security for Kubernetes 4.10",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779293013",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:container_native_virtualization:4.15::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "container-native-virtualization/kubevirt-console-plugin-rhel9",
                "product": "Red Hat Container Native Virtualization 4.15",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782917983",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:rhdh:1.8::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhdh/rhdh-hub-rhel9",
                "product": "Red Hat Developer Hub 1.8",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779841586",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:rhdh:1.9::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhdh/rhdh-hub-rhel9",
                "product": "Red Hat Developer Hub 1.9",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782761244",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:discovery:2::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "discovery/discovery-ui-rhel9",
                "product": "Red Hat Discovery 2",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779395188",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:rhmt:1.8::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "rhmtc/openshift-migration-ui-rhel8",
                "product": "Red Hat Migration Toolkit 1.8",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1780590717",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:migration_toolkit_applications:8.1::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "mta/mta-ui-rhel9",
                "product": "Red Hat Migration Toolkit for Applications 8.1",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1785169013",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_devspaces:3.28::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "devspaces/code-rhel9",
                "product": "Red Hat OpenShift Dev Spaces 3.28",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779814592",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_devspaces:3.28::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "devspaces/dashboard-rhel9",
                "product": "Red Hat OpenShift Dev Spaces 3.28",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779341289",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:2.6::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-ossmc-rhel8",
                "product": "Red Hat OpenShift Service Mesh 2.6",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779520355",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:2.6::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-rhel8",
                "product": "Red Hat OpenShift Service Mesh 2.6",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779520348",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3.0::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-ossmc-rhel9",
                "product": "Red Hat OpenShift Service Mesh 3.0",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778163785",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3.0::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-rhel9",
                "product": "Red Hat OpenShift Service Mesh 3.0",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778164208",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3.1::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-ossmc-rhel9",
                "product": "Red Hat OpenShift Service Mesh 3.1",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778163935",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3.1::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-rhel9",
                "product": "Red Hat OpenShift Service Mesh 3.1",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778164042",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3.2::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-ossmc-rhel9",
                "product": "Red Hat OpenShift Service Mesh 3.2",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778163792",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3.2::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-rhel9",
                "product": "Red Hat OpenShift Service Mesh 3.2",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778163909",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3.3::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-ossmc-rhel9",
                "product": "Red Hat OpenShift Service Mesh 3.3",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778163785",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3.3::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-rhel9",
                "product": "Red Hat OpenShift Service Mesh 3.3",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778163986",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.10::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel8",
                "product": "Red Hat Quay 3.10",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779822261",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.12::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel8",
                "product": "Red Hat Quay 3.12",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779811412",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.14::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel8",
                "product": "Red Hat Quay 3.14",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779689392",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.15::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel8",
                "product": "Red Hat Quay 3.15",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1780891395",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.16::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel9",
                "product": "Red Hat Quay 3.16",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779204086",
                    "versionType": "rpm"
                  },
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1783955846",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.17::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel9",
                "product": "Red Hat Quay 3.17",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779922205",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.9::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel8",
                "product": "Red Hat Quay 3.9",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779811473",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:satellite:6.18::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "satellite/iop-advisor-frontend-rhel9",
                "product": "Red Hat Satellite 6.18",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1781181673",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:satellite:6.18::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "satellite/iop-vulnerability-frontend-rhel9",
                "product": "Red Hat Satellite 6.18",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1781032495",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:satellite:6.18::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "satellite/iop-host-inventory-frontend-rhel9",
                "product": "Red Hat Satellite 6.18",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1780105179",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:trusted_artifact_signer:1.3::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhtas/rhtas-console-ui-rhel9",
                "product": "Red Hat Trusted Artifact Signer 1.3",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779971506",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:cryostat:4"
                ],
                "defaultStatus": "unaffected",
                "packageName": "axios",
                "product": "Cryostat 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:gatekeeper:3"
                ],
                "defaultStatus": "affected",
                "packageName": "gatekeeper/gatekeeper-rhel9",
                "product": "Gatekeeper 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:migration_toolkit_applications:8"
                ],
                "defaultStatus": "affected",
                "packageName": "mta/mta-ui-rhel8",
                "product": "Migration Toolkit for Applications 8",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:network_observ_optr:1"
                ],
                "defaultStatus": "affected",
                "packageName": "network-observability/network-observability-console-plugin-compat-rhel9",
                "product": "Network Observability Operator",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_pipelines:1"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-pipelines/pipelines-hub-ui-rhel8",
                "product": "OpenShift Pipelines",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_pipelines:1"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-pipelines/pipelines-hub-ui-rhel9",
                "product": "OpenShift Pipelines",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3"
                ],
                "defaultStatus": "unaffected",
                "packageName": "openshift-service-mesh/kiali-operator-bundle",
                "product": "OpenShift Service Mesh 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3"
                ],
                "defaultStatus": "unaffected",
                "packageName": "openshift-service-mesh/kiali-rhel9-operator",
                "product": "OpenShift Service Mesh 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:red_hat_3scale_amp:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "3scale-amp21/system",
                "product": "Red Hat 3scale API Management Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:red_hat_3scale_amp:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "3scale-amp22/system",
                "product": "Red Hat 3scale API Management Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:red_hat_3scale_amp:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "3scale-amp2/system-rhel7",
                "product": "Red Hat 3scale API Management Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:red_hat_3scale_amp:2"
                ],
                "defaultStatus": "affected",
                "packageName": "3scale-amp2/system-rhel8",
                "product": "Red Hat 3scale API Management Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:red_hat_3scale_amp:2"
                ],
                "defaultStatus": "affected",
                "packageName": "3scale-amp2/system-rhel9",
                "product": "Red Hat 3scale API Management Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "affected",
                "packageName": "ansible-automation-platform-26/gateway-rhel9",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "affected",
                "packageName": "ansible-automation-platform/automation-dashboard-rhel9",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "affected",
                "packageName": "automation-controller",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "affected",
                "packageName": "automation-hub",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "affected",
                "packageName": "automation-platform-ui",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "python3.11-galaxy-ng",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "python3.12-galaxy-ng",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "python3x-galaxy-ng",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "python-galaxy-ng",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:service_registry:2"
                ],
                "defaultStatus": "affected",
                "packageName": "axios",
                "product": "Red Hat build of Apicurio Registry 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:apicurio_registry:3"
                ],
                "defaultStatus": "affected",
                "packageName": "apicurio/apicurio-registry-ui-rhel8",
                "product": "Red Hat build of Apicurio Registry 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:apicurio_registry:3"
                ],
                "defaultStatus": "affected",
                "packageName": "apicurio/apicurio-registry-ui-rhel9",
                "product": "Red Hat build of Apicurio Registry 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:podman_desktop:0"
                ],
                "defaultStatus": "affected",
                "packageName": "rhdesktop/rh-podman-desktop-ext-openshift-local-rhel10",
                "product": "Red Hat Build of Podman Desktop - Tech Preview",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:jboss_data_grid:8"
                ],
                "defaultStatus": "unaffected",
                "packageName": "axios",
                "product": "Red Hat Data Grid 8",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:rhdh:1"
                ],
                "defaultStatus": "affected",
                "packageName": "rhdh/backstage-community-plugin-catalog-backend-module-scaffolder-relation-processor",
                "product": "Red Hat Developer Hub",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:8"
                ],
                "defaultStatus": "affected",
                "packageName": "grafana",
                "product": "Red Hat Enterprise Linux 8",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:9"
                ],
                "defaultStatus": "unaffected",
                "packageName": "grafana",
                "product": "Red Hat Enterprise Linux 9",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:enterprise_linux_ai:3"
                ],
                "defaultStatus": "affected",
                "packageName": "rhelai3/bootc-cuda-rhel9",
                "product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:enterprise_linux_ai:3"
                ],
                "defaultStatus": "affected",
                "packageName": "rhelai3/bootc-rocm-rhel9",
                "product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:enterprise_linux_ai:3"
                ],
                "defaultStatus": "affected",
                "packageName": "rhelai3/disk-image-cuda-rhel9",
                "product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:jboss_fuse:7"
                ],
                "defaultStatus": "unaffected",
                "packageName": "axios",
                "product": "Red Hat Fuse 7",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:hummingbird:1"
                ],
                "defaultStatus": "unaffected",
                "packageName": "boost",
                "product": "Red Hat Hardened Images",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "unaffected",
                "packageName": "rhoai/odh-dashboard-rhel8",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-dashboard-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-mod-arch-gen-ai-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-mod-arch-maas-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-mod-arch-model-registry-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift3/ose-console",
                "product": "Red Hat OpenShift Container Platform 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift4/ose-agent-installer-ui-rhel9",
                "product": "Red Hat OpenShift Container Platform 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4"
                ],
                "defaultStatus": "unaffected",
                "packageName": "openshift4/ose-console",
                "product": "Red Hat OpenShift Container Platform 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4"
                ],
                "defaultStatus": "unaffected",
                "packageName": "openshift4/ose-console-rhel9",
                "product": "Red Hat OpenShift Container Platform 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift4/ose-monitoring-plugin-rhel9",
                "product": "Red Hat OpenShift Container Platform 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:container_native_virtualization:4"
                ],
                "defaultStatus": "affected",
                "packageName": "container-native-virtualization/kubevirt-console-plugin",
                "product": "Red Hat OpenShift Virtualization 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:jboss_enterprise_bpms_platform:7"
                ],
                "defaultStatus": "unaffected",
                "packageName": "axios",
                "product": "Red Hat Process Automation 7",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:trusted_profile_analyzer:2"
                ],
                "defaultStatus": "affected",
                "packageName": "rhtpa/rhtpa-trustification-service-rhel9",
                "product": "Red Hat Trusted Profile Analyzer",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_portal:2"
                ],
                "defaultStatus": "affected",
                "packageName": "ansible-automation-platform/automation-portal",
                "product": "Self-service automation portal 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:amq_streams:3"
                ],
                "defaultStatus": "unaffected",
                "packageName": "axios",
                "product": "streams for Apache Kafka 3",
                "vendor": "Red Hat"
              }
            ],
            "datePublic": "2026-04-24T17:49:49.517Z",
            "descriptions": [
              {
                "lang": "en",
                "value": "A flaw was found in Axios, a widely used HTTP client. This vulnerability, known as a Prototype Pollution \"Gadget\" attack, allows a remote attacker to subtly alter JSON API responses. By manipulating a specific function, an attacker can selectively modify data within these responses. This could lead to significant security breaches, including unauthorized privilege escalation, fraudulent balance manipulation, or bypassing critical authorization checks."
              }
            ],
            "metrics": [
              {
                "other": {
                  "content": {
                    "namespace": "https://access.redhat.com/security/updates/classification/",
                    "value": "Important"
                  },
                  "type": "Red Hat severity rating"
                }
              },
              {
                "cvssV3_1": {
                  "attackComplexity": "HIGH",
                  "attackVector": "NETWORK",
                  "availabilityImpact": "NONE",
                  "baseScore": 7.4,
                  "baseSeverity": "HIGH",
                  "confidentialityImpact": "HIGH",
                  "integrityImpact": "HIGH",
                  "privilegesRequired": "NONE",
                  "scope": "UNCHANGED",
                  "userInteraction": "NONE",
                  "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
                  "version": "3.1"
                },
                "format": "CVSS"
              }
            ],
            "problemTypes": [
              {
                "descriptions": [
                  {
                    "cweId": "CWE-915",
                    "description": "Improperly Controlled Modification of Dynamically-Determined Object Attributes",
                    "lang": "en",
                    "type": "CWE"
                  }
                ]
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-09-10T12:04:51.583Z",
              "orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
              "shortName": "redhat-SADP"
            },
            "references": [
              {
                "tags": [
                  "vdb-entry",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/security/cve/CVE-2026-42044"
              },
              {
                "name": "RHBZ#2461624",
                "tags": [
                  "issue-tracking",
                  "x_refsource_REDHAT"
                ],
                "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2461624"
              },
              {
                "tags": [
                  "x_sadp-csaf-vex"
                ],
                "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42044.json"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:42078"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:25089"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:24473"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:36882"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:24539"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:25273"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:20938"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:20889"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:36107"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:21338"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:33574"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:20338"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:25041"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:50300"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:21772"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:20454"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:16534"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:16532"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:16535"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:16542"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:22840"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:22629"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:21017"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:24853"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:19375"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:41066"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:22465"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:23361"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:26214"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:26232"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:26225"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:24471"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:34608"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:25271"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:24536"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:17657"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:17699"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:19109"
              }
            ],
            "solutions": [
              {
                "lang": "en",
                "value": "RHSA-2026:42078: Red Hat Ansible Automation Platform 2.5 for RHEL 8, Red Hat Ansible Automation Platform 2.5 for RHEL 9"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:25089: HawtIO HawtIO 4.4.0"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:24473: Network Observability (NETOBSERV) 1.12.2"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:36882: Red Hat Advanced Cluster Management for Kubernetes 2.14"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:24539: Red Hat Advanced Cluster Management for Kubernetes 2.15"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:25273: Red Hat Advanced Cluster Management for Kubernetes 2.16"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:20938: Red Hat Advanced Cluster Security 4.9"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:20889: Red Hat Advanced Cluster Security for Kubernetes 4.10"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:36107: Red Hat Container Native Virtualization 4.15"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:21338: Red Hat Developer Hub 1.8"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:33574: Red Hat Developer Hub 1.9"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:20338: Red Hat Discovery 2"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:25041: Red Hat Migration Toolkit 1.8"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:50300: Red Hat Migration Toolkit for Applications 8.1"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:21772: Red Hat OpenShift Dev Spaces 3.28"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:20454: Red Hat OpenShift Service Mesh 2.6"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:16534: Red Hat OpenShift Service Mesh 3.0"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:16532: Red Hat OpenShift Service Mesh 3.1"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:16535: Red Hat OpenShift Service Mesh 3.2"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:16542: Red Hat OpenShift Service Mesh 3.3"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:22840: Red Hat Quay 3.10"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:22629: Red Hat Quay 3.12"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:21017: Red Hat Quay 3.14"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:24853: Red Hat Quay 3.15"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:19375: Red Hat Quay 3.16"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:41066: Red Hat Quay 3.16"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:22465: Red Hat Quay 3.17"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:23361: Red Hat Quay 3.9"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:26214: Red Hat Satellite 6.18"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:26232: Red Hat Satellite 6.18"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:26225: Red Hat Satellite 6.18"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:24471: Red Hat Trusted Artifact Signer 1.3"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:34608: Streams for Apache Kafka 2.9.4"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:25271: multicluster engine for Kubernetes 2.11"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:24536: multicluster engine for Kubernetes 2.1"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:17657: multicluster engine for Kubernetes 2.6"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:17699: multicluster engine for Kubernetes 2.8"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:19109: multicluster engine for Kubernetes 2.9"
              }
            ],
            "timeline": [
              {
                "lang": "en",
                "time": "2026-04-24T19:01:13.418Z",
                "value": "Reported to Red Hat."
              },
              {
                "lang": "en",
                "time": "2026-04-24T17:49:49.517Z",
                "value": "Made public."
              }
            ],
            "title": "axios: Axios: Invisible JSON Response Tampering via Prototype Pollution Gadget",
            "workarounds": [
              {
                "lang": "en",
                "value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
              }
            ],
            "x_adpType": "supplier",
            "x_generator": {
              "engine": "sadp-cli 1.0.0"
            }
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "axios",
              "vendor": "axios",
              "versions": [
                {
                  "status": "affected",
                  "version": "\u003e= 1.0.0, \u003c 1.15.2"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "Axios is a promise based HTTP client for the browser and Node.js. From 1.0.0 to before 1.15.2, he Axios library is vulnerable to a Prototype Pollution \"Gadget\" attack that allows any Object.prototype pollution in the application\u0027s dependency tree to be escalated into surgical, invisible modification of all JSON API responses \u2014 including privilege escalation, balance manipulation, and authorization bypass. The default transformResponse function at lib/defaults/index.js:124 calls JSON.parse(data, this.parseReviver), where this is the merged config object. Because parseReviver is not present in Axios defaults, not validated by assertOptions, and not subject to any constraints, a polluted Object.prototype.parseReviver function is called for every key-value pair in every JSON response, allowing the attacker to selectively modify individual values while leaving the rest of the response intact. This vulnerability is fixed in 1.15.2."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "HIGH",
                "attackVector": "NETWORK",
                "availabilityImpact": "NONE",
                "baseScore": 6.5,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "LOW",
                "integrityImpact": "HIGH",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N",
                "version": "3.1"
              }
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-915",
                  "description": "CWE-915: Improperly Controlled Modification of Dynamically-Determined Object Attributes",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            },
            {
              "descriptions": [
                {
                  "cweId": "CWE-1321",
                  "description": "CWE-1321: Improperly Controlled Modification of Object Prototype Attributes (\u0027Prototype Pollution\u0027)",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-04-24T17:50:26.586Z",
            "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
            "shortName": "GitHub_M"
          },
          "references": [
            {
              "name": "https://github.com/axios/axios/security/advisories/GHSA-3w6x-2g7m-8v23",
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "https://github.com/axios/axios/security/advisories/GHSA-3w6x-2g7m-8v23"
            }
          ],
          "source": {
            "advisory": "GHSA-3w6x-2g7m-8v23",
            "discovery": "UNKNOWN"
          },
          "title": "Axios: Invisible JSON Response Tampering via Prototype Pollution Gadget in `parseReviver`"
        }
      },
      "cveMetadata": {
        "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "assignerShortName": "GitHub_M",
        "cveId": "CVE-2026-42044",
        "datePublished": "2026-04-24T17:49:49.517Z",
        "dateReserved": "2026-04-23T16:05:01.709Z",
        "dateUpdated": "2026-09-10T12:04:51.583Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2026-42033 (GCVE-0-2026-42033)

    Vulnerability from cvelistv5 – Published: 2026-04-24 17:36 – Updated: 2026-09-10 12:05
    VLAI
    Title
    Axios: Prototype Pollution Gadgets - Response Tampering, Data Exfiltration, and Request Hijacking
    Summary
    Axios is a promise based HTTP client for the browser and Node.js. Prior to 1.15.1 and 0.31.1, when Object.prototype has been polluted by any co-dependency with keys that axios reads without a hasOwnProperty guard, an attacker can (a) silently intercept and modify every JSON response before the application sees it, or (b) fully hijack the underlying HTTP transport, gaining access to request credentials, headers, and body. The precondition is prototype pollution from a separate source in the same process. This vulnerability is fixed in 1.15.1 and 0.31.1.
    SSVC
    Exploitation: poc Automatable: no Technical Impact: total
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-04-24 00:00 UTC
    CWE
    • CWE-1321 - Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
    • CWE-915 - Improperly Controlled Modification of Dynamically-Determined Object Attributes
    References
    URL Tags
    https://github.com/axios/axios/security/advisorie… x_refsource_CONFIRM
    https://access.redhat.com/security/cve/CVE-2026-42033 vdb-entryx_refsource_REDHAT
    https://bugzilla.redhat.com/show_bug.cgi?id=2461607 issue-trackingx_refsource_REDHAT
    https://security.access.redhat.com/data/csaf/v2/v… x_sadp-csaf-vex
    https://access.redhat.com/errata/RHSA-2026:25089 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:16874 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:36882 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:24539 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:25273 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:20938 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:20889 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:22619 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:21338 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:33574 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:14937 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:25041 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:24977 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:17468 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:17474 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:48670 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:21772 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:16476 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:16534 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:16532 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:16535 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:16542 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:22840 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:22629 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:21017 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:24853 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:19375 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:22465 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:23361 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:26214 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:26232 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:26225 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:25271 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:24536 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:17657 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:17699 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:19109 vendor-advisoryx_refsource_REDHAT
    Impacted products
    Vendor Product Version
    axios axios Affected: >= 1.0.0, < 1.15.1
    Affected: < 0.31.1
    Create a notification for this product.
    Red Hat HawtIO HawtIO 4.4.0     cpe:/a:redhat:apache_camel_hawtio:4.4::el9
    Create a notification for this product.
    Red Hat Red Hat Data Grid 8.6.1     cpe:/a:redhat:jboss_data_grid:8
    Create a notification for this product.
    Red Hat multicluster engine for Kubernetes 2.1 Unaffected: 1780917531 , < * (rpm)
        cpe:/a:redhat:multicluster_engine:2.10::el9
    Create a notification for this product.
    Red Hat multicluster engine for Kubernetes 2.11 Unaffected: 1780910888 , < * (rpm)
        cpe:/a:redhat:multicluster_engine:2.11::el9
    Create a notification for this product.
    Red Hat multicluster engine for Kubernetes 2.6 Unaffected: 1778511348 , < * (rpm)
        cpe:/a:redhat:multicluster_engine:2.6::el9
    Create a notification for this product.
    Red Hat multicluster engine for Kubernetes 2.8 Unaffected: 1778383863 , < * (rpm)
        cpe:/a:redhat:multicluster_engine:2.8::el9
    Create a notification for this product.
    Red Hat multicluster engine for Kubernetes 2.9 Unaffected: 1778532610 , < * (rpm)
        cpe:/a:redhat:multicluster_engine:2.9::el9
    Create a notification for this product.
    Red Hat Network Observability (NETOBSERV) 1.11.0 Unaffected: 1778508956 , < * (rpm)
        cpe:/a:redhat:network_observ_optr:1.11::el9
    Create a notification for this product.
    Red Hat Network Observability (NETOBSERV) 1.11.0 Unaffected: 1778510461 , < * (rpm)
        cpe:/a:redhat:network_observ_optr:1.11::el9
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.14 Unaffected: 1783451729 , < * (rpm)
        cpe:/a:redhat:acm:2.14::el9
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.15 Unaffected: 1780876734 , < * (rpm)
        cpe:/a:redhat:acm:2.15::el9
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.16 Unaffected: 1780600823 , < * (rpm)
        cpe:/a:redhat:acm:2.16::el9
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Security 4.9 Unaffected: 1779371594 , < * (rpm)
        cpe:/a:redhat:advanced_cluster_security:4.9::el8
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Security for Kubernetes 4.10 Unaffected: 1779293013 , < * (rpm)
        cpe:/a:redhat:advanced_cluster_security:4.10::el8
    Create a notification for this product.
    Red Hat Red Hat Developer Hub 1.8 Unaffected: 1779841586 , < * (rpm)
        cpe:/a:redhat:rhdh:1.8::el9
    Create a notification for this product.
    Red Hat Red Hat Developer Hub 1.9 Unaffected: 1782761244 , < * (rpm)
        cpe:/a:redhat:rhdh:1.9::el9
    Create a notification for this product.
    Red Hat Red Hat Discovery 2 Unaffected: 1778156756 , < * (rpm)
        cpe:/a:redhat:discovery:2::el9
    Create a notification for this product.
    Red Hat Red Hat Migration Toolkit 1.8 Unaffected: 1780590717 , < * (rpm)
        cpe:/a:redhat:rhmt:1.8::el8
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 2.25 Unaffected: 1780467029 , < * (rpm)
        cpe:/a:redhat:openshift_ai:2.25::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 2.25 Unaffected: 1780467147 , < * (rpm)
        cpe:/a:redhat:openshift_ai:2.25::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Container Platform 4.20 Unaffected: 1778645099 , < * (rpm)
        cpe:/a:redhat:openshift:4.20::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Container Platform 4.21 Unaffected: 1778539338 , < * (rpm)
        cpe:/a:redhat:openshift:4.21::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Container Platform 4.21 Unaffected: 1785354128 , < * (rpm)
        cpe:/a:redhat:openshift:4.21::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Dev Spaces 3.28 Unaffected: 1779814592 , < * (rpm)
        cpe:/a:redhat:openshift_devspaces:3.28::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Dev Spaces 3.28 Unaffected: 1779341289 , < * (rpm)
        cpe:/a:redhat:openshift_devspaces:3.28::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 2.6 Unaffected: 1778191473 , < * (rpm)
        cpe:/a:redhat:service_mesh:2.6::el8
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 2.6 Unaffected: 1778191378 , < * (rpm)
        cpe:/a:redhat:service_mesh:2.6::el8
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 3.0 Unaffected: 1778163785 , < * (rpm)
        cpe:/a:redhat:service_mesh:3.0::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 3.0 Unaffected: 1778164208 , < * (rpm)
        cpe:/a:redhat:service_mesh:3.0::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 3.1 Unaffected: 1778163935 , < * (rpm)
        cpe:/a:redhat:service_mesh:3.1::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 3.1 Unaffected: 1778164042 , < * (rpm)
        cpe:/a:redhat:service_mesh:3.1::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 3.2 Unaffected: 1778163792 , < * (rpm)
        cpe:/a:redhat:service_mesh:3.2::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 3.2 Unaffected: 1778163909 , < * (rpm)
        cpe:/a:redhat:service_mesh:3.2::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 3.3 Unaffected: 1778163785 , < * (rpm)
        cpe:/a:redhat:service_mesh:3.3::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 3.3 Unaffected: 1778163986 , < * (rpm)
        cpe:/a:redhat:service_mesh:3.3::el9
    Create a notification for this product.
    Red Hat Red Hat Quay 3.10 Unaffected: 1779822261 , < * (rpm)
        cpe:/a:redhat:quay:3.10::el8
    Create a notification for this product.
    Red Hat Red Hat Quay 3.12 Unaffected: 1779811412 , < * (rpm)
        cpe:/a:redhat:quay:3.12::el8
    Create a notification for this product.
    Red Hat Red Hat Quay 3.14 Unaffected: 1779689392 , < * (rpm)
        cpe:/a:redhat:quay:3.14::el8
    Create a notification for this product.
    Red Hat Red Hat Quay 3.15 Unaffected: 1780891395 , < * (rpm)
        cpe:/a:redhat:quay:3.15::el8
    Create a notification for this product.
    Red Hat Red Hat Quay 3.16 Unaffected: 1779204086 , < * (rpm)
        cpe:/a:redhat:quay:3.16::el9
    Create a notification for this product.
    Red Hat Red Hat Quay 3.17 Unaffected: 1779922205 , < * (rpm)
        cpe:/a:redhat:quay:3.17::el9
    Create a notification for this product.
    Red Hat Red Hat Quay 3.9 Unaffected: 1779811473 , < * (rpm)
        cpe:/a:redhat:quay:3.9::el8
    Create a notification for this product.
    Red Hat Red Hat Satellite 6.18 Unaffected: 1781181673 , < * (rpm)
        cpe:/a:redhat:satellite:6.18::el9
    Create a notification for this product.
    Red Hat Red Hat Satellite 6.18 Unaffected: 1781032495 , < * (rpm)
        cpe:/a:redhat:satellite:6.18::el9
    Create a notification for this product.
    Red Hat Red Hat Satellite 6.18 Unaffected: 1780105179 , < * (rpm)
        cpe:/a:redhat:satellite:6.18::el9
    Create a notification for this product.
    Red Hat Cryostat 4     cpe:/a:redhat:cryostat:4
    Create a notification for this product.
    Red Hat Gatekeeper 3     cpe:/a:redhat:gatekeeper:3
    Create a notification for this product.
    Red Hat Migration Toolkit for Applications 8     cpe:/a:redhat:migration_toolkit_applications:8
    Create a notification for this product.
    Red Hat OpenShift Pipelines     cpe:/a:redhat:openshift_pipelines:1
    Create a notification for this product.
    Red Hat OpenShift Service Mesh 3     cpe:/a:redhat:service_mesh:3
    Create a notification for this product.
    Red Hat Red Hat 3scale API Management Platform 2     cpe:/a:redhat:red_hat_3scale_amp:2
    Create a notification for this product.
    Red Hat Red Hat Ansible Automation Platform 2     cpe:/a:redhat:ansible_automation_platform:2
    Create a notification for this product.
    Red Hat Red Hat build of Apicurio Registry 2     cpe:/a:redhat:service_registry:2
    Create a notification for this product.
    Red Hat Red Hat build of Apicurio Registry 3     cpe:/a:redhat:apicurio_registry:3
    Create a notification for this product.
    Red Hat Red Hat Build of Podman Desktop - Tech Preview     cpe:/a:redhat:podman_desktop:0
    Create a notification for this product.
    Red Hat Red Hat Developer Hub     cpe:/a:redhat:rhdh:1
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 8     cpe:/o:redhat:enterprise_linux:8
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 9     cpe:/o:redhat:enterprise_linux:9
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux AI (RHEL AI) 3     cpe:/a:redhat:enterprise_linux_ai:3
    Create a notification for this product.
    Red Hat Red Hat Fuse 7     cpe:/a:redhat:jboss_fuse:7
    Create a notification for this product.
    Red Hat Red Hat Hardened Images     cpe:/a:redhat:hummingbird:1
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI (RHOAI)     cpe:/a:redhat:openshift_ai
    Create a notification for this product.
    Red Hat Red Hat OpenShift Container Platform 4     cpe:/a:redhat:openshift:4
    Create a notification for this product.
    Red Hat Red Hat OpenShift Virtualization 4     cpe:/a:redhat:container_native_virtualization:4
    Create a notification for this product.
    Red Hat Red Hat Process Automation 7     cpe:/a:redhat:jboss_enterprise_bpms_platform:7
    Create a notification for this product.
    Red Hat Red Hat Trusted Artifact Signer     cpe:/a:redhat:trusted_artifact_signer:1
    Create a notification for this product.
    Red Hat Red Hat Trusted Profile Analyzer     cpe:/a:redhat:trusted_profile_analyzer:2
    Create a notification for this product.
    Red Hat Self-service automation portal 2     cpe:/a:redhat:ansible_portal:2
    Create a notification for this product.
    Red Hat streams for Apache Kafka 2     cpe:/a:redhat:amq_streams:2
    Create a notification for this product.
    Red Hat streams for Apache Kafka 3     cpe:/a:redhat:amq_streams:3
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-42033",
                    "options": [
                      {
                        "Exploitation": "poc"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "total"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-04-24T00:00:00+00:00",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-04-25T03:55:57.725Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "references": [
              {
                "tags": [
                  "exploit"
                ],
                "url": "https://github.com/axios/axios/security/advisories/GHSA-pf86-5x62-jrwf"
              }
            ],
            "title": "CISA ADP Vulnrichment"
          },
          {
            "affected": [
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:apache_camel_hawtio:4.4::el9"
                ],
                "defaultStatus": "unaffected",
                "packageName": "axios",
                "product": "HawtIO HawtIO 4.4.0",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:jboss_data_grid:8"
                ],
                "defaultStatus": "unaffected",
                "packageName": "axios",
                "product": "Red Hat Data Grid 8.6.1",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:multicluster_engine:2.10::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "multicluster-engine/console-mce-rhel9",
                "product": "multicluster engine for Kubernetes 2.1",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1780917531",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:multicluster_engine:2.11::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "multicluster-engine/console-mce-rhel9",
                "product": "multicluster engine for Kubernetes 2.11",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1780910888",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:multicluster_engine:2.6::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "multicluster-engine/console-mce-rhel9",
                "product": "multicluster engine for Kubernetes 2.6",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778511348",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:multicluster_engine:2.8::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "multicluster-engine/console-mce-rhel9",
                "product": "multicluster engine for Kubernetes 2.8",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778383863",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:multicluster_engine:2.9::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "multicluster-engine/console-mce-rhel9",
                "product": "multicluster engine for Kubernetes 2.9",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778532610",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:network_observ_optr:1.11::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "network-observability/network-observability-console-plugin-compat-rhel9",
                "product": "Network Observability (NETOBSERV) 1.11.0",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778508956",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:network_observ_optr:1.11::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "network-observability/network-observability-console-plugin-rhel9",
                "product": "Network Observability (NETOBSERV) 1.11.0",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778510461",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:acm:2.14::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhacm2/console-rhel9",
                "product": "Red Hat Advanced Cluster Management for Kubernetes 2.14",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1783451729",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:acm:2.15::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhacm2/console-rhel9",
                "product": "Red Hat Advanced Cluster Management for Kubernetes 2.15",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1780876734",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:acm:2.16::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhacm2/console-rhel9",
                "product": "Red Hat Advanced Cluster Management for Kubernetes 2.16",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1780600823",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:advanced_cluster_security:4.9::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "advanced-cluster-security/rhacs-main-rhel8",
                "product": "Red Hat Advanced Cluster Security 4.9",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779371594",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:advanced_cluster_security:4.10::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "advanced-cluster-security/rhacs-main-rhel8",
                "product": "Red Hat Advanced Cluster Security for Kubernetes 4.10",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779293013",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:rhdh:1.8::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhdh/rhdh-hub-rhel9",
                "product": "Red Hat Developer Hub 1.8",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779841586",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:rhdh:1.9::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhdh/rhdh-hub-rhel9",
                "product": "Red Hat Developer Hub 1.9",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782761244",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:discovery:2::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "discovery/discovery-ui-rhel9",
                "product": "Red Hat Discovery 2",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778156756",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:rhmt:1.8::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "rhmtc/openshift-migration-ui-rhel8",
                "product": "Red Hat Migration Toolkit 1.8",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1780590717",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:2.25::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-dashboard-rhel9",
                "product": "Red Hat OpenShift AI 2.25",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1780467029",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:2.25::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-mod-arch-model-registry-rhel9",
                "product": "Red Hat OpenShift AI 2.25",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1780467147",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4.20::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift4/ose-agent-installer-ui-rhel9",
                "product": "Red Hat OpenShift Container Platform 4.20",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778645099",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4.21::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift4/ose-agent-installer-ui-rhel9",
                "product": "Red Hat OpenShift Container Platform 4.21",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778539338",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4.21::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift4/ose-monitoring-plugin-rhel9",
                "product": "Red Hat OpenShift Container Platform 4.21",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1785354128",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_devspaces:3.28::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "devspaces/code-rhel9",
                "product": "Red Hat OpenShift Dev Spaces 3.28",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779814592",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_devspaces:3.28::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "devspaces/dashboard-rhel9",
                "product": "Red Hat OpenShift Dev Spaces 3.28",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779341289",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:2.6::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-ossmc-rhel8",
                "product": "Red Hat OpenShift Service Mesh 2.6",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778191473",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:2.6::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-rhel8",
                "product": "Red Hat OpenShift Service Mesh 2.6",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778191378",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3.0::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-ossmc-rhel9",
                "product": "Red Hat OpenShift Service Mesh 3.0",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778163785",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3.0::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-rhel9",
                "product": "Red Hat OpenShift Service Mesh 3.0",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778164208",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3.1::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-ossmc-rhel9",
                "product": "Red Hat OpenShift Service Mesh 3.1",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778163935",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3.1::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-rhel9",
                "product": "Red Hat OpenShift Service Mesh 3.1",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778164042",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3.2::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-ossmc-rhel9",
                "product": "Red Hat OpenShift Service Mesh 3.2",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778163792",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3.2::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-rhel9",
                "product": "Red Hat OpenShift Service Mesh 3.2",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778163909",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3.3::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-ossmc-rhel9",
                "product": "Red Hat OpenShift Service Mesh 3.3",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778163785",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3.3::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-rhel9",
                "product": "Red Hat OpenShift Service Mesh 3.3",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778163986",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.10::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel8",
                "product": "Red Hat Quay 3.10",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779822261",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.12::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel8",
                "product": "Red Hat Quay 3.12",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779811412",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.14::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel8",
                "product": "Red Hat Quay 3.14",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779689392",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.15::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel8",
                "product": "Red Hat Quay 3.15",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1780891395",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.16::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel9",
                "product": "Red Hat Quay 3.16",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779204086",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.17::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel9",
                "product": "Red Hat Quay 3.17",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779922205",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.9::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel8",
                "product": "Red Hat Quay 3.9",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779811473",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:satellite:6.18::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "satellite/iop-advisor-frontend-rhel9",
                "product": "Red Hat Satellite 6.18",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1781181673",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:satellite:6.18::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "satellite/iop-vulnerability-frontend-rhel9",
                "product": "Red Hat Satellite 6.18",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1781032495",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:satellite:6.18::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "satellite/iop-host-inventory-frontend-rhel9",
                "product": "Red Hat Satellite 6.18",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1780105179",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:cryostat:4"
                ],
                "defaultStatus": "unaffected",
                "packageName": "axios",
                "product": "Cryostat 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:gatekeeper:3"
                ],
                "defaultStatus": "unaffected",
                "packageName": "gatekeeper/gatekeeper-rhel9",
                "product": "Gatekeeper 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:migration_toolkit_applications:8"
                ],
                "defaultStatus": "affected",
                "packageName": "mta/mta-ui-rhel8",
                "product": "Migration Toolkit for Applications 8",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:migration_toolkit_applications:8"
                ],
                "defaultStatus": "affected",
                "packageName": "mta/mta-ui-rhel9",
                "product": "Migration Toolkit for Applications 8",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_pipelines:1"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-pipelines/pipelines-hub-ui-rhel8",
                "product": "OpenShift Pipelines",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_pipelines:1"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-pipelines/pipelines-hub-ui-rhel9",
                "product": "OpenShift Pipelines",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3"
                ],
                "defaultStatus": "unaffected",
                "packageName": "openshift-service-mesh/kiali-operator-bundle",
                "product": "OpenShift Service Mesh 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3"
                ],
                "defaultStatus": "unaffected",
                "packageName": "openshift-service-mesh/kiali-rhel9-operator",
                "product": "OpenShift Service Mesh 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:red_hat_3scale_amp:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "3scale-amp21/system",
                "product": "Red Hat 3scale API Management Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:red_hat_3scale_amp:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "3scale-amp22/system",
                "product": "Red Hat 3scale API Management Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:red_hat_3scale_amp:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "3scale-amp2/system-rhel7",
                "product": "Red Hat 3scale API Management Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:red_hat_3scale_amp:2"
                ],
                "defaultStatus": "affected",
                "packageName": "3scale-amp2/system-rhel8",
                "product": "Red Hat 3scale API Management Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:red_hat_3scale_amp:2"
                ],
                "defaultStatus": "affected",
                "packageName": "3scale-amp2/system-rhel9",
                "product": "Red Hat 3scale API Management Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "ansible-automation-platform-26/gateway-rhel9",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "affected",
                "packageName": "ansible-automation-platform/automation-dashboard-rhel9",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "affected",
                "packageName": "automation-controller",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "automation-gateway",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "affected",
                "packageName": "automation-hub",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "automation-platform-ui",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "python3.11-galaxy-ng",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "python3.12-galaxy-ng",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "python3x-galaxy-ng",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "python-galaxy-ng",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:service_registry:2"
                ],
                "defaultStatus": "affected",
                "packageName": "axios",
                "product": "Red Hat build of Apicurio Registry 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:apicurio_registry:3"
                ],
                "defaultStatus": "affected",
                "packageName": "apicurio/apicurio-registry-ui-rhel8",
                "product": "Red Hat build of Apicurio Registry 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:apicurio_registry:3"
                ],
                "defaultStatus": "affected",
                "packageName": "apicurio/apicurio-registry-ui-rhel9",
                "product": "Red Hat build of Apicurio Registry 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:podman_desktop:0"
                ],
                "defaultStatus": "affected",
                "packageName": "rhdesktop/rh-podman-desktop-ext-openshift-local-rhel10",
                "product": "Red Hat Build of Podman Desktop - Tech Preview",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:rhdh:1"
                ],
                "defaultStatus": "unaffected",
                "packageName": "rhdh/backstage-community-plugin-catalog-backend-module-scaffolder-relation-processor",
                "product": "Red Hat Developer Hub",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:8"
                ],
                "defaultStatus": "affected",
                "packageName": "grafana",
                "product": "Red Hat Enterprise Linux 8",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:9"
                ],
                "defaultStatus": "unaffected",
                "packageName": "grafana",
                "product": "Red Hat Enterprise Linux 9",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:enterprise_linux_ai:3"
                ],
                "defaultStatus": "affected",
                "packageName": "rhelai3/bootc-cuda-rhel9",
                "product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:enterprise_linux_ai:3"
                ],
                "defaultStatus": "affected",
                "packageName": "rhelai3/bootc-rocm-rhel9",
                "product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:enterprise_linux_ai:3"
                ],
                "defaultStatus": "affected",
                "packageName": "rhelai3/disk-image-cuda-rhel9",
                "product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:jboss_fuse:7"
                ],
                "defaultStatus": "affected",
                "packageName": "axios",
                "product": "Red Hat Fuse 7",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:hummingbird:1"
                ],
                "defaultStatus": "unaffected",
                "packageName": "boost",
                "product": "Red Hat Hardened Images",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "unaffected",
                "packageName": "rhoai/odh-dashboard-rhel8",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-mod-arch-gen-ai-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-mod-arch-maas-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift3/ose-console",
                "product": "Red Hat OpenShift Container Platform 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4"
                ],
                "defaultStatus": "unaffected",
                "packageName": "openshift4/ose-console",
                "product": "Red Hat OpenShift Container Platform 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4"
                ],
                "defaultStatus": "unaffected",
                "packageName": "openshift4/ose-console-rhel9",
                "product": "Red Hat OpenShift Container Platform 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:container_native_virtualization:4"
                ],
                "defaultStatus": "unaffected",
                "packageName": "container-native-virtualization/kubevirt-console-plugin",
                "product": "Red Hat OpenShift Virtualization 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:container_native_virtualization:4"
                ],
                "defaultStatus": "affected",
                "packageName": "container-native-virtualization/kubevirt-console-plugin-rhel9",
                "product": "Red Hat OpenShift Virtualization 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:jboss_enterprise_bpms_platform:7"
                ],
                "defaultStatus": "unaffected",
                "packageName": "axios",
                "product": "Red Hat Process Automation 7",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:trusted_artifact_signer:1"
                ],
                "defaultStatus": "unaffected",
                "packageName": "rhtas/rhtas-console-ui-rhel9",
                "product": "Red Hat Trusted Artifact Signer",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:trusted_profile_analyzer:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "rhtpa/rhtpa-trustification-service-rhel9",
                "product": "Red Hat Trusted Profile Analyzer",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_portal:2"
                ],
                "defaultStatus": "affected",
                "packageName": "ansible-automation-platform/automation-portal",
                "product": "Self-service automation portal 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:amq_streams:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "axios",
                "product": "streams for Apache Kafka 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:amq_streams:3"
                ],
                "defaultStatus": "unaffected",
                "packageName": "axios",
                "product": "streams for Apache Kafka 3",
                "vendor": "Red Hat"
              }
            ],
            "datePublic": "2026-04-24T17:36:44.132Z",
            "descriptions": [
              {
                "lang": "en",
                "value": "A flaw was found in Axios, an HTTP client library. This vulnerability allows an attacker to exploit a prototype pollution issue if another part of the application has already polluted the Object.prototype. By doing so, the attacker can intercept and modify JSON responses or take control of the HTTP communication. This could lead to unauthorized access to sensitive information like user credentials and request details."
              }
            ],
            "metrics": [
              {
                "other": {
                  "content": {
                    "namespace": "https://access.redhat.com/security/updates/classification/",
                    "value": "Important"
                  },
                  "type": "Red Hat severity rating"
                }
              },
              {
                "cvssV3_1": {
                  "attackComplexity": "HIGH",
                  "attackVector": "NETWORK",
                  "availabilityImpact": "NONE",
                  "baseScore": 7.4,
                  "baseSeverity": "HIGH",
                  "confidentialityImpact": "HIGH",
                  "integrityImpact": "HIGH",
                  "privilegesRequired": "NONE",
                  "scope": "UNCHANGED",
                  "userInteraction": "NONE",
                  "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
                  "version": "3.1"
                },
                "format": "CVSS"
              }
            ],
            "problemTypes": [
              {
                "descriptions": [
                  {
                    "cweId": "CWE-915",
                    "description": "Improperly Controlled Modification of Dynamically-Determined Object Attributes",
                    "lang": "en",
                    "type": "CWE"
                  }
                ]
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-09-10T12:05:09.354Z",
              "orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
              "shortName": "redhat-SADP"
            },
            "references": [
              {
                "tags": [
                  "vdb-entry",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/security/cve/CVE-2026-42033"
              },
              {
                "name": "RHBZ#2461607",
                "tags": [
                  "issue-tracking",
                  "x_refsource_REDHAT"
                ],
                "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2461607"
              },
              {
                "tags": [
                  "x_sadp-csaf-vex"
                ],
                "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42033.json"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:25089"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:16874"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:36882"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:24539"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:25273"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:20938"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:20889"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:22619"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:21338"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:33574"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:14937"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:25041"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:24977"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:17468"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:17474"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:48670"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:21772"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:16476"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:16534"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:16532"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:16535"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:16542"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:22840"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:22629"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:21017"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:24853"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:19375"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:22465"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:23361"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:26214"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:26232"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:26225"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:25271"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:24536"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:17657"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:17699"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:19109"
              }
            ],
            "solutions": [
              {
                "lang": "en",
                "value": "RHSA-2026:25089: HawtIO HawtIO 4.4.0"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:16874: Network Observability (NETOBSERV) 1.11.0"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:36882: Red Hat Advanced Cluster Management for Kubernetes 2.14"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:24539: Red Hat Advanced Cluster Management for Kubernetes 2.15"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:25273: Red Hat Advanced Cluster Management for Kubernetes 2.16"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:20938: Red Hat Advanced Cluster Security 4.9"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:20889: Red Hat Advanced Cluster Security for Kubernetes 4.10"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:22619: Red Hat Data Grid 8.6.1"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:21338: Red Hat Developer Hub 1.8"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:33574: Red Hat Developer Hub 1.9"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:14937: Red Hat Discovery 2"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:25041: Red Hat Migration Toolkit 1.8"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:24977: Red Hat OpenShift AI 2.25"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:17468: Red Hat OpenShift Container Platform 4.20"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:17474: Red Hat OpenShift Container Platform 4.21"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:48670: Red Hat OpenShift Container Platform 4.21"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:21772: Red Hat OpenShift Dev Spaces 3.28"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:16476: Red Hat OpenShift Service Mesh 2.6"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:16534: Red Hat OpenShift Service Mesh 3.0"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:16532: Red Hat OpenShift Service Mesh 3.1"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:16535: Red Hat OpenShift Service Mesh 3.2"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:16542: Red Hat OpenShift Service Mesh 3.3"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:22840: Red Hat Quay 3.10"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:22629: Red Hat Quay 3.12"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:21017: Red Hat Quay 3.14"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:24853: Red Hat Quay 3.15"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:19375: Red Hat Quay 3.16"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:22465: Red Hat Quay 3.17"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:23361: Red Hat Quay 3.9"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:26214: Red Hat Satellite 6.18"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:26232: Red Hat Satellite 6.18"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:26225: Red Hat Satellite 6.18"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:25271: multicluster engine for Kubernetes 2.11"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:24536: multicluster engine for Kubernetes 2.1"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:17657: multicluster engine for Kubernetes 2.6"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:17699: multicluster engine for Kubernetes 2.8"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:19109: multicluster engine for Kubernetes 2.9"
              }
            ],
            "timeline": [
              {
                "lang": "en",
                "time": "2026-04-24T18:01:20.937Z",
                "value": "Reported to Red Hat."
              },
              {
                "lang": "en",
                "time": "2026-04-24T17:36:44.132Z",
                "value": "Made public."
              }
            ],
            "title": "axios: Axios: HTTP Transport Hijacking via Prototype Pollution",
            "x_adpType": "supplier",
            "x_generator": {
              "engine": "sadp-cli 1.0.0"
            }
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "axios",
              "vendor": "axios",
              "versions": [
                {
                  "status": "affected",
                  "version": "\u003e= 1.0.0, \u003c 1.15.1"
                },
                {
                  "status": "affected",
                  "version": "\u003c 0.31.1"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "Axios is a promise based HTTP client for the browser and Node.js. Prior to 1.15.1 and 0.31.1, when Object.prototype has been polluted by any co-dependency with keys that axios reads without a hasOwnProperty guard, an attacker can (a) silently intercept and modify every JSON response before the application sees it, or (b) fully hijack the underlying HTTP transport, gaining access to request credentials, headers, and body. The precondition is prototype pollution from a separate source in the same process. This vulnerability is fixed in 1.15.1 and 0.31.1."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "HIGH",
                "attackVector": "NETWORK",
                "availabilityImpact": "NONE",
                "baseScore": 7.4,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
                "version": "3.1"
              }
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-1321",
                  "description": "CWE-1321: Improperly Controlled Modification of Object Prototype Attributes (\u0027Prototype Pollution\u0027)",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-04-24T17:36:44.132Z",
            "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
            "shortName": "GitHub_M"
          },
          "references": [
            {
              "name": "https://github.com/axios/axios/security/advisories/GHSA-pf86-5x62-jrwf",
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "https://github.com/axios/axios/security/advisories/GHSA-pf86-5x62-jrwf"
            }
          ],
          "source": {
            "advisory": "GHSA-pf86-5x62-jrwf",
            "discovery": "UNKNOWN"
          },
          "title": "Axios: Prototype Pollution Gadgets - Response Tampering, Data Exfiltration, and Request Hijacking"
        }
      },
      "cveMetadata": {
        "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "assignerShortName": "GitHub_M",
        "cveId": "CVE-2026-42033",
        "datePublished": "2026-04-24T17:36:44.132Z",
        "dateReserved": "2026-04-23T16:05:01.708Z",
        "dateUpdated": "2026-09-10T12:05:09.354Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2026-40895 (GCVE-0-2026-40895)

    Vulnerability from cvelistv5 – Published: 2026-04-21 19:59 – Updated: 2026-09-10 12:05
    VLAI
    Title
    follow-redirects: Custom Authentication Headers Leaked to Cross-Domain Redirect Targets
    Summary
    follow-redirects is an open source, drop-in replacement for Node's `http` and `https` modules that automatically follows redirects. Prior to 1.16.0, when an HTTP request follows a cross-domain redirect (301/302/307/308), follow-redirects only strips authorization, proxy-authorization, and cookie headers (matched by regex at index.js). Any custom authentication header (e.g., X-API-Key, X-Auth-Token, Api-Key, Token) is forwarded verbatim to the redirect target. This vulnerability is fixed in 1.16.0.
    SSVC
    Exploitation: none Automatable: no Technical Impact: partial
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-04-22 13:31 UTC
    CWE
    • CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor
    • CWE-212 - Improper Removal of Sensitive Information Before Storage or Transfer
    References
    URL Tags
    https://github.com/follow-redirects/follow-redire… x_refsource_CONFIRM
    https://access.redhat.com/security/cve/CVE-2026-40895 vdb-entryx_refsource_REDHAT
    https://bugzilla.redhat.com/show_bug.cgi?id=2460297 issue-trackingx_refsource_REDHAT
    https://security.access.redhat.com/data/csaf/v2/v… x_sadp-csaf-vex
    https://access.redhat.com/errata/RHSA-2026:17789 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:26010 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:16874 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:36882 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:24539 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:25273 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:20938 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:20889 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:24766 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:21338 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:13826 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:14937 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:41928 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:50300 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:24977 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:65126 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:19712 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:47728 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:48699 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:44235 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:27004 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:44263 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:27063 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:44267 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:27044 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:40768 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:21772 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:16476 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:16534 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:16532 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:16535 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:16542 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:22840 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:22629 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:21017 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:24853 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:19375 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:22465 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:23361 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:25271 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:24536 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:17657 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:17699 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:19109 vendor-advisoryx_refsource_REDHAT
    Impacted products
    Vendor Product Version
    follow-redirects follow-redirects Affected: < 1.16.0
    Create a notification for this product.
    Red Hat Cryostat 4 on RHEL 9 Unaffected: 4.2.0-9 , < * (rpm)
        cpe:/a:redhat:cryostat:4::el9
    Create a notification for this product.
    Red Hat Cluster Observability Operator 1.5.0 Unaffected: 1781116645 , < * (rpm)
        cpe:/a:redhat:cluster_observability_operator:1.5::el9
    Create a notification for this product.
    Red Hat Cluster Observability Operator 1.5.0 Unaffected: 1781116658 , < * (rpm)
        cpe:/a:redhat:cluster_observability_operator:1.5::el9
    Create a notification for this product.
    Red Hat Cluster Observability Operator 1.5.0 Unaffected: 1781116387 , < * (rpm)
        cpe:/a:redhat:cluster_observability_operator:1.5::el9
    Create a notification for this product.
    Red Hat Cluster Observability Operator 1.5.0 Unaffected: 1781116392 , < * (rpm)
        cpe:/a:redhat:cluster_observability_operator:1.5::el9
    Create a notification for this product.
    Red Hat multicluster engine for Kubernetes 2.1 Unaffected: 1780917531 , < * (rpm)
        cpe:/a:redhat:multicluster_engine:2.10::el9
    Create a notification for this product.
    Red Hat multicluster engine for Kubernetes 2.11 Unaffected: 1780910888 , < * (rpm)
        cpe:/a:redhat:multicluster_engine:2.11::el9
    Create a notification for this product.
    Red Hat multicluster engine for Kubernetes 2.6 Unaffected: 1778511348 , < * (rpm)
        cpe:/a:redhat:multicluster_engine:2.6::el9
    Create a notification for this product.
    Red Hat multicluster engine for Kubernetes 2.8 Unaffected: 1778383863 , < * (rpm)
        cpe:/a:redhat:multicluster_engine:2.8::el9
    Create a notification for this product.
    Red Hat multicluster engine for Kubernetes 2.9 Unaffected: 1778532610 , < * (rpm)
        cpe:/a:redhat:multicluster_engine:2.9::el9
    Create a notification for this product.
    Red Hat Network Observability (NETOBSERV) 1.11.0 Unaffected: 1778508956 , < * (rpm)
        cpe:/a:redhat:network_observ_optr:1.11::el9
    Create a notification for this product.
    Red Hat Network Observability (NETOBSERV) 1.11.0 Unaffected: 1778510461 , < * (rpm)
        cpe:/a:redhat:network_observ_optr:1.11::el9
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.14 Unaffected: 1783451729 , < * (rpm)
        cpe:/a:redhat:acm:2.14::el9
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.15 Unaffected: 1780876734 , < * (rpm)
        cpe:/a:redhat:acm:2.15::el9
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.16 Unaffected: 1780600823 , < * (rpm)
        cpe:/a:redhat:acm:2.16::el9
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Security 4.9 Unaffected: 1779371594 , < * (rpm)
        cpe:/a:redhat:advanced_cluster_security:4.9::el8
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Security for Kubernetes 4.10 Unaffected: 1779293013 , < * (rpm)
        cpe:/a:redhat:advanced_cluster_security:4.10::el8
    Create a notification for this product.
    Red Hat Red Hat Ansible Automation Platform 2.5 Unaffected: 1780082949 , < * (rpm)
        cpe:/a:redhat:ansible_automation_platform:2.5::el8
    Create a notification for this product.
    Red Hat Red Hat Developer Hub 1.8 Unaffected: 1779841586 , < * (rpm)
        cpe:/a:redhat:rhdh:1.8::el9
    Create a notification for this product.
    Red Hat Red Hat Developer Hub 1.9 Unaffected: 1777903262 , < * (rpm)
        cpe:/a:redhat:rhdh:1.9::el9
    Create a notification for this product.
    Red Hat Red Hat Discovery 2 Unaffected: 1778156756 , < * (rpm)
        cpe:/a:redhat:discovery:2::el9
    Create a notification for this product.
    Red Hat Red Hat Migration Toolkit 1.8 Unaffected: 1783690532 , < * (rpm)
        cpe:/a:redhat:rhmt:1.8::el8
    Create a notification for this product.
    Red Hat Red Hat Migration Toolkit for Applications 8.1 Unaffected: 1785169013 , < * (rpm)
        cpe:/a:redhat:migration_toolkit_applications:8.1::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 2.25 Unaffected: 1780467029 , < * (rpm)
        cpe:/a:redhat:openshift_ai:2.25::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 2.25 Unaffected: 1780467147 , < * (rpm)
        cpe:/a:redhat:openshift_ai:2.25::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 2.25 Unaffected: 1787801527 , < * (rpm)
        cpe:/a:redhat:openshift_ai:2.25::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 3.3 Unaffected: 1779189627 , < * (rpm)
        cpe:/a:redhat:openshift_ai:3.3::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 3.3 Unaffected: 1778473763 , < * (rpm)
        cpe:/a:redhat:openshift_ai:3.3::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 3.3 Unaffected: 1778666987 , < * (rpm)
        cpe:/a:redhat:openshift_ai:3.3::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Container Platform 4.17 Unaffected: 1784803344 , < * (rpm)
        cpe:/a:redhat:openshift:4.17::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Container Platform 4.18 Unaffected: 1785278569 , < * (rpm)
        cpe:/a:redhat:openshift:4.18::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Container Platform 4.19 Unaffected: 1781708434 , < * (rpm)
        cpe:/a:redhat:openshift:4.19::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Container Platform 4.19 Unaffected: 1784634877 , < * (rpm)
        cpe:/a:redhat:openshift:4.19::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Container Platform 4.20 Unaffected: 1781695012 , < * (rpm)
        cpe:/a:redhat:openshift:4.20::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Container Platform 4.20 Unaffected: 1784731014 , < * (rpm)
        cpe:/a:redhat:openshift:4.20::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Container Platform 4.21 Unaffected: 1781731914 , < * (rpm)
        cpe:/a:redhat:openshift:4.21::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Container Platform 4.21 Unaffected: 1784713762 , < * (rpm)
        cpe:/a:redhat:openshift:4.21::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Container Platform 4.22 Unaffected: 1784125329 , < * (rpm)
        cpe:/a:redhat:openshift:4.22::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Dev Spaces 3.28 Unaffected: 1779814592 , < * (rpm)
        cpe:/a:redhat:openshift_devspaces:3.28::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Dev Spaces 3.28 Unaffected: 1779341289 , < * (rpm)
        cpe:/a:redhat:openshift_devspaces:3.28::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Dev Spaces 3.28 Unaffected: 1779528224 , < * (rpm)
        cpe:/a:redhat:openshift_devspaces:3.28::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Dev Spaces 3.28 Unaffected: 1779359423 , < * (rpm)
        cpe:/a:redhat:openshift_devspaces:3.28::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 2.6 Unaffected: 1778191473 , < * (rpm)
        cpe:/a:redhat:service_mesh:2.6::el8
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 2.6 Unaffected: 1778191378 , < * (rpm)
        cpe:/a:redhat:service_mesh:2.6::el8
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 3.0 Unaffected: 1778163785 , < * (rpm)
        cpe:/a:redhat:service_mesh:3.0::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 3.0 Unaffected: 1778164208 , < * (rpm)
        cpe:/a:redhat:service_mesh:3.0::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 3.1 Unaffected: 1778163935 , < * (rpm)
        cpe:/a:redhat:service_mesh:3.1::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 3.1 Unaffected: 1778164042 , < * (rpm)
        cpe:/a:redhat:service_mesh:3.1::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 3.2 Unaffected: 1778163792 , < * (rpm)
        cpe:/a:redhat:service_mesh:3.2::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 3.2 Unaffected: 1778163909 , < * (rpm)
        cpe:/a:redhat:service_mesh:3.2::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 3.3 Unaffected: 1778163785 , < * (rpm)
        cpe:/a:redhat:service_mesh:3.3::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 3.3 Unaffected: 1778163986 , < * (rpm)
        cpe:/a:redhat:service_mesh:3.3::el9
    Create a notification for this product.
    Red Hat Red Hat Quay 3.10 Unaffected: 1779822261 , < * (rpm)
        cpe:/a:redhat:quay:3.10::el8
    Create a notification for this product.
    Red Hat Red Hat Quay 3.12 Unaffected: 1779811412 , < * (rpm)
        cpe:/a:redhat:quay:3.12::el8
    Create a notification for this product.
    Red Hat Red Hat Quay 3.14 Unaffected: 1779689392 , < * (rpm)
        cpe:/a:redhat:quay:3.14::el8
    Create a notification for this product.
    Red Hat Red Hat Quay 3.15 Unaffected: 1780891395 , < * (rpm)
        cpe:/a:redhat:quay:3.15::el8
    Create a notification for this product.
    Red Hat Red Hat Quay 3.16 Unaffected: 1779204086 , < * (rpm)
        cpe:/a:redhat:quay:3.16::el9
    Create a notification for this product.
    Red Hat Red Hat Quay 3.17 Unaffected: 1779922205 , < * (rpm)
        cpe:/a:redhat:quay:3.17::el9
    Create a notification for this product.
    Red Hat Red Hat Quay 3.9 Unaffected: 1779811473 , < * (rpm)
        cpe:/a:redhat:quay:3.9::el8
    Create a notification for this product.
    Red Hat Cryostat 4     cpe:/a:redhat:cryostat:4
    Create a notification for this product.
    Red Hat Gatekeeper 3     cpe:/a:redhat:gatekeeper:3
    Create a notification for this product.
    Red Hat Migration Toolkit for Applications 8     cpe:/a:redhat:migration_toolkit_applications:8
    Create a notification for this product.
    Red Hat Migration Toolkit for Virtualization     cpe:/a:redhat:migration_toolkit_virtualization:2
    Create a notification for this product.
    Red Hat Node HealthCheck Operator     cpe:/a:redhat:workload_availability_nhc:0
    Create a notification for this product.
    Red Hat OpenShift Lightspeed     cpe:/a:redhat:openshift_lightspeed
    Create a notification for this product.
    Red Hat OpenShift Pipelines     cpe:/a:redhat:openshift_pipelines:1
    Create a notification for this product.
    Red Hat OpenShift Service Mesh 3     cpe:/a:redhat:service_mesh:3
    Create a notification for this product.
    Red Hat Red Hat 3scale API Management Platform 2     cpe:/a:redhat:red_hat_3scale_amp:2
    Create a notification for this product.
    Red Hat Red Hat Ansible Automation Platform 2     cpe:/a:redhat:ansible_automation_platform:2
    Create a notification for this product.
    Red Hat Red Hat build of Apache Camel - HawtIO 4     cpe:/a:redhat:apache_camel_hawtio:4
    Create a notification for this product.
    Red Hat Red Hat build of Apicurio Registry 2     cpe:/a:redhat:service_registry:2
    Create a notification for this product.
    Red Hat Red Hat build of Apicurio Registry 3     cpe:/a:redhat:apicurio_registry:3
    Create a notification for this product.
    Red Hat Red Hat Build of Podman Desktop     cpe:/a:redhat:podman_desktop:1
    Create a notification for this product.
    Red Hat Red Hat Build of Podman Desktop - Tech Preview     cpe:/a:redhat:podman_desktop:0
    Create a notification for this product.
    Red Hat Red Hat Ceph Storage 9     cpe:/a:redhat:ceph_storage:9
    Create a notification for this product.
    Red Hat Red Hat Connectivity Link 1     cpe:/a:redhat:connectivity_link:1
    Create a notification for this product.
    Red Hat Red Hat Data Grid 8     cpe:/a:redhat:jboss_data_grid:8
    Create a notification for this product.
    Red Hat Red Hat Developer Hub     cpe:/a:redhat:rhdh:1
    Create a notification for this product.
    Red Hat Red Hat Edge Manager 1     cpe:/a:redhat:edge_manager:1
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 8     cpe:/o:redhat:enterprise_linux:8
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 9     cpe:/o:redhat:enterprise_linux:9
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux AI (RHEL AI) 3     cpe:/a:redhat:enterprise_linux_ai:3
    Create a notification for this product.
    Red Hat Red Hat Fuse 7     cpe:/a:redhat:jboss_fuse:7
    Create a notification for this product.
    Red Hat Red Hat Hardened Images     cpe:/a:redhat:hummingbird:1
    Create a notification for this product.
    Red Hat Red Hat JBoss Enterprise Application Platform 7     cpe:/a:redhat:jboss_enterprise_application_platform:7
    Create a notification for this product.
    Red Hat Red Hat JBoss Enterprise Application Platform 8     cpe:/a:redhat:jboss_enterprise_application_platform:8
    Create a notification for this product.
    Red Hat Red Hat JBoss Enterprise Application Platform Expansion Pack     cpe:/a:redhat:jbosseapxp
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI (RHOAI)     cpe:/a:redhat:openshift_ai
    Create a notification for this product.
    Red Hat Red Hat OpenShift Container Platform 4     cpe:/a:redhat:openshift:4
    Create a notification for this product.
    Red Hat Red Hat Openshift Data Foundation 4     cpe:/a:redhat:openshift_data_foundation:4
    Create a notification for this product.
    Red Hat Red Hat OpenShift distributed tracing 3     cpe:/a:redhat:openshift_distributed_tracing:3
    Create a notification for this product.
    Red Hat Red Hat OpenShift GitOps     cpe:/a:redhat:openshift_gitops:1
    Create a notification for this product.
    Red Hat Red Hat OpenShift Virtualization 4     cpe:/a:redhat:container_native_virtualization:4
    Create a notification for this product.
    Red Hat Red Hat Process Automation 7     cpe:/a:redhat:jboss_enterprise_bpms_platform:7
    Create a notification for this product.
    Red Hat Red Hat Satellite 6     cpe:/a:redhat:satellite:6
    Create a notification for this product.
    Red Hat Red Hat Trusted Artifact Signer     cpe:/a:redhat:trusted_artifact_signer:1
    Create a notification for this product.
    Red Hat Red Hat Trusted Profile Analyzer     cpe:/a:redhat:trusted_profile_analyzer:2
    Create a notification for this product.
    Red Hat Self-service automation portal 2     cpe:/a:redhat:ansible_portal:2
    Create a notification for this product.
    Red Hat streams for Apache Kafka 2     cpe:/a:redhat:amq_streams:2
    Create a notification for this product.
    Red Hat streams for Apache Kafka 3     cpe:/a:redhat:amq_streams:3
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-40895",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "partial"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-04-22T13:31:13.035788Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-04-22T13:31:34.652Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          },
          {
            "affected": [
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:cryostat:4::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "cryostat/cryostat-openshift-console-plugin-rhel9",
                "product": "Cryostat 4 on RHEL 9",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "4.2.0-9",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9",
                "product": "Cluster Observability Operator 1.5.0",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1781116645",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9",
                "product": "Cluster Observability Operator 1.5.0",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1781116658",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9",
                "product": "Cluster Observability Operator 1.5.0",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1781116387",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "cluster-observability-operator/distributed-tracing-console-plugin-rhel9",
                "product": "Cluster Observability Operator 1.5.0",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1781116392",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:multicluster_engine:2.10::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "multicluster-engine/console-mce-rhel9",
                "product": "multicluster engine for Kubernetes 2.1",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1780917531",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:multicluster_engine:2.11::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "multicluster-engine/console-mce-rhel9",
                "product": "multicluster engine for Kubernetes 2.11",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1780910888",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:multicluster_engine:2.6::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "multicluster-engine/console-mce-rhel9",
                "product": "multicluster engine for Kubernetes 2.6",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778511348",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:multicluster_engine:2.8::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "multicluster-engine/console-mce-rhel9",
                "product": "multicluster engine for Kubernetes 2.8",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778383863",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:multicluster_engine:2.9::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "multicluster-engine/console-mce-rhel9",
                "product": "multicluster engine for Kubernetes 2.9",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778532610",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:network_observ_optr:1.11::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "network-observability/network-observability-console-plugin-compat-rhel9",
                "product": "Network Observability (NETOBSERV) 1.11.0",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778508956",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:network_observ_optr:1.11::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "network-observability/network-observability-console-plugin-rhel9",
                "product": "Network Observability (NETOBSERV) 1.11.0",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778510461",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:acm:2.14::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhacm2/console-rhel9",
                "product": "Red Hat Advanced Cluster Management for Kubernetes 2.14",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1783451729",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:acm:2.15::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhacm2/console-rhel9",
                "product": "Red Hat Advanced Cluster Management for Kubernetes 2.15",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1780876734",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:acm:2.16::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhacm2/console-rhel9",
                "product": "Red Hat Advanced Cluster Management for Kubernetes 2.16",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1780600823",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:advanced_cluster_security:4.9::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "advanced-cluster-security/rhacs-main-rhel8",
                "product": "Red Hat Advanced Cluster Security 4.9",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779371594",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:advanced_cluster_security:4.10::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "advanced-cluster-security/rhacs-main-rhel8",
                "product": "Red Hat Advanced Cluster Security for Kubernetes 4.10",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779293013",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2.5::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "ansible-automation-platform-25/lightspeed-rhel8",
                "product": "Red Hat Ansible Automation Platform 2.5",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1780082949",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:rhdh:1.8::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhdh/rhdh-hub-rhel9",
                "product": "Red Hat Developer Hub 1.8",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779841586",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:rhdh:1.9::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhdh/rhdh-hub-rhel9",
                "product": "Red Hat Developer Hub 1.9",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1777903262",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:discovery:2::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "discovery/discovery-ui-rhel9",
                "product": "Red Hat Discovery 2",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778156756",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:rhmt:1.8::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "rhmtc/openshift-migration-ui-rhel8",
                "product": "Red Hat Migration Toolkit 1.8",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1783690532",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:migration_toolkit_applications:8.1::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "mta/mta-ui-rhel9",
                "product": "Red Hat Migration Toolkit for Applications 8.1",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1785169013",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:2.25::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-dashboard-rhel9",
                "product": "Red Hat OpenShift AI 2.25",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1780467029",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:2.25::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-mod-arch-model-registry-rhel9",
                "product": "Red Hat OpenShift AI 2.25",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1780467147",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:2.25::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9",
                "product": "Red Hat OpenShift AI 2.25",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1787801527",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:3.3::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-dashboard-rhel9",
                "product": "Red Hat OpenShift AI 3.3",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779189627",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:3.3::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-mod-arch-gen-ai-rhel9",
                "product": "Red Hat OpenShift AI 3.3",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778473763",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:3.3::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-mod-arch-model-registry-rhel9",
                "product": "Red Hat OpenShift AI 3.3",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778666987",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4.17::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift4/ose-console-rhel9",
                "product": "Red Hat OpenShift Container Platform 4.17",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1784803344",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4.18::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift4/ose-console-rhel9",
                "product": "Red Hat OpenShift Container Platform 4.18",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1785278569",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4.19::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift4/ose-monitoring-plugin-rhel9",
                "product": "Red Hat OpenShift Container Platform 4.19",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1781708434",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4.19::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift4/ose-console-rhel9",
                "product": "Red Hat OpenShift Container Platform 4.19",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1784634877",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4.20::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift4/ose-monitoring-plugin-rhel9",
                "product": "Red Hat OpenShift Container Platform 4.20",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1781695012",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4.20::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift4/ose-console-rhel9",
                "product": "Red Hat OpenShift Container Platform 4.20",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1784731014",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4.21::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift4/ose-monitoring-plugin-rhel9",
                "product": "Red Hat OpenShift Container Platform 4.21",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1781731914",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4.21::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift4/ose-console-rhel9",
                "product": "Red Hat OpenShift Container Platform 4.21",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1784713762",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4.22::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift4/ose-console-rhel9",
                "product": "Red Hat OpenShift Container Platform 4.22",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1784125329",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_devspaces:3.28::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "devspaces/code-rhel9",
                "product": "Red Hat OpenShift Dev Spaces 3.28",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779814592",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_devspaces:3.28::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "devspaces/dashboard-rhel9",
                "product": "Red Hat OpenShift Dev Spaces 3.28",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779341289",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_devspaces:3.28::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "devspaces/openvsx-rhel9",
                "product": "Red Hat OpenShift Dev Spaces 3.28",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779528224",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_devspaces:3.28::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "devspaces/pluginregistry-rhel9",
                "product": "Red Hat OpenShift Dev Spaces 3.28",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779359423",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:2.6::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-ossmc-rhel8",
                "product": "Red Hat OpenShift Service Mesh 2.6",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778191473",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:2.6::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-rhel8",
                "product": "Red Hat OpenShift Service Mesh 2.6",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778191378",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3.0::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-ossmc-rhel9",
                "product": "Red Hat OpenShift Service Mesh 3.0",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778163785",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3.0::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-rhel9",
                "product": "Red Hat OpenShift Service Mesh 3.0",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778164208",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3.1::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-ossmc-rhel9",
                "product": "Red Hat OpenShift Service Mesh 3.1",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778163935",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3.1::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-rhel9",
                "product": "Red Hat OpenShift Service Mesh 3.1",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778164042",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3.2::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-ossmc-rhel9",
                "product": "Red Hat OpenShift Service Mesh 3.2",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778163792",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3.2::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-rhel9",
                "product": "Red Hat OpenShift Service Mesh 3.2",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778163909",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3.3::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-ossmc-rhel9",
                "product": "Red Hat OpenShift Service Mesh 3.3",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778163785",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3.3::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-rhel9",
                "product": "Red Hat OpenShift Service Mesh 3.3",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778163986",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.10::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel8",
                "product": "Red Hat Quay 3.10",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779822261",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.12::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel8",
                "product": "Red Hat Quay 3.12",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779811412",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.14::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel8",
                "product": "Red Hat Quay 3.14",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779689392",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.15::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel8",
                "product": "Red Hat Quay 3.15",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1780891395",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.16::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel9",
                "product": "Red Hat Quay 3.16",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779204086",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.17::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel9",
                "product": "Red Hat Quay 3.17",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779922205",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.9::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel8",
                "product": "Red Hat Quay 3.9",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779811473",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:cryostat:4"
                ],
                "defaultStatus": "unaffected",
                "packageName": "cryostat-openshift-console-plugin-npm",
                "product": "Cryostat 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:cryostat:4"
                ],
                "defaultStatus": "unaffected",
                "packageName": "follow-redirects",
                "product": "Cryostat 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:gatekeeper:3"
                ],
                "defaultStatus": "unaffected",
                "packageName": "gatekeeper/gatekeeper-rhel9",
                "product": "Gatekeeper 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:migration_toolkit_applications:8"
                ],
                "defaultStatus": "affected",
                "packageName": "mta/mta-ui-rhel8",
                "product": "Migration Toolkit for Applications 8",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:migration_toolkit_virtualization:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "migration-toolkit-virtualization/mtv-console-plugin-rhel9",
                "product": "Migration Toolkit for Virtualization",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:migration_toolkit_virtualization:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "mtv-candidate/mtv-console-plugin-rhel9",
                "product": "Migration Toolkit for Virtualization",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:workload_availability_nhc:0"
                ],
                "defaultStatus": "unaffected",
                "packageName": "workload-availability/node-healthcheck-must-gather-rhel9",
                "product": "Node HealthCheck Operator",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:workload_availability_nhc:0"
                ],
                "defaultStatus": "unaffected",
                "packageName": "workload-availability/node-healthcheck-operator-bundle",
                "product": "Node HealthCheck Operator",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:workload_availability_nhc:0"
                ],
                "defaultStatus": "unaffected",
                "packageName": "workload-availability/node-healthcheck-rhel9-operator",
                "product": "Node HealthCheck Operator",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_lightspeed"
                ],
                "defaultStatus": "unaffected",
                "packageName": "openshift-lightspeed/lightspeed-console-plugin-419-rhel9",
                "product": "OpenShift Lightspeed",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_lightspeed"
                ],
                "defaultStatus": "unaffected",
                "packageName": "openshift-lightspeed/lightspeed-console-plugin-pf5-rhel9",
                "product": "OpenShift Lightspeed",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_lightspeed"
                ],
                "defaultStatus": "unaffected",
                "packageName": "openshift-lightspeed/lightspeed-console-plugin-rhel9",
                "product": "OpenShift Lightspeed",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_pipelines:1"
                ],
                "defaultStatus": "unaffected",
                "packageName": "openshift-pipelines/pipelines-console-plugin-rhel8",
                "product": "OpenShift Pipelines",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_pipelines:1"
                ],
                "defaultStatus": "unaffected",
                "packageName": "openshift-pipelines/pipelines-console-plugin-rhel9",
                "product": "OpenShift Pipelines",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_pipelines:1"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-pipelines/pipelines-hub-ui-rhel8",
                "product": "OpenShift Pipelines",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_pipelines:1"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-pipelines/pipelines-hub-ui-rhel9",
                "product": "OpenShift Pipelines",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3"
                ],
                "defaultStatus": "unaffected",
                "packageName": "openshift-service-mesh/kiali-operator-bundle",
                "product": "OpenShift Service Mesh 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3"
                ],
                "defaultStatus": "unaffected",
                "packageName": "openshift-service-mesh/kiali-rhel9-operator",
                "product": "OpenShift Service Mesh 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:red_hat_3scale_amp:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "3scale-amp21/system",
                "product": "Red Hat 3scale API Management Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:red_hat_3scale_amp:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "3scale-amp22/system",
                "product": "Red Hat 3scale API Management Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:red_hat_3scale_amp:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "3scale-amp2/system-rhel7",
                "product": "Red Hat 3scale API Management Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:red_hat_3scale_amp:2"
                ],
                "defaultStatus": "affected",
                "packageName": "3scale-amp2/system-rhel8",
                "product": "Red Hat 3scale API Management Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:red_hat_3scale_amp:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "3scale-amp2/system-rhel9",
                "product": "Red Hat 3scale API Management Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "ansible-automation-platform-26/gateway-rhel9",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "affected",
                "packageName": "ansible-automation-platform-26/lightspeed-rhel9",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "affected",
                "packageName": "ansible-automation-platform/automation-dashboard-rhel9",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "affected",
                "packageName": "automation-controller",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "automation-eda-controller",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "automation-gateway",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "affected",
                "packageName": "automation-hub",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "automation-platform-ui",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "python3.11-galaxy-ng",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "python3.12-galaxy-ng",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "python3x-galaxy-ng",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "python-galaxy-ng",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:apache_camel_hawtio:4"
                ],
                "defaultStatus": "affected",
                "packageName": "follow-redirects",
                "product": "Red Hat build of Apache Camel - HawtIO 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:service_registry:2"
                ],
                "defaultStatus": "affected",
                "packageName": "follow-redirects",
                "product": "Red Hat build of Apicurio Registry 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:apicurio_registry:3"
                ],
                "defaultStatus": "affected",
                "packageName": "apicurio/apicurio-registry-ui-rhel8",
                "product": "Red Hat build of Apicurio Registry 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:apicurio_registry:3"
                ],
                "defaultStatus": "affected",
                "packageName": "apicurio/apicurio-registry-ui-rhel9",
                "product": "Red Hat build of Apicurio Registry 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:podman_desktop:1"
                ],
                "defaultStatus": "affected",
                "packageName": "rh-podman-desktop.git",
                "product": "Red Hat Build of Podman Desktop",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:podman_desktop:0"
                ],
                "defaultStatus": "affected",
                "packageName": "rhdesktop/rh-podman-desktop-ext-openshift-local-rhel10",
                "product": "Red Hat Build of Podman Desktop - Tech Preview",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ceph_storage:9"
                ],
                "defaultStatus": "unaffected",
                "packageName": "rhceph/alloy-rhel10",
                "product": "Red Hat Ceph Storage 9",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:connectivity_link:1"
                ],
                "defaultStatus": "affected",
                "packageName": "rhcl-1/rhcl-console-plugin-rhel9",
                "product": "Red Hat Connectivity Link 1",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:jboss_data_grid:8"
                ],
                "defaultStatus": "unaffected",
                "packageName": "follow-redirects",
                "product": "Red Hat Data Grid 8",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:rhdh:1"
                ],
                "defaultStatus": "affected",
                "packageName": "rhdh/backstage-community-plugin-catalog-backend-module-scaffolder-relation-processor",
                "product": "Red Hat Developer Hub",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:edge_manager:1"
                ],
                "defaultStatus": "unaffected",
                "packageName": "rhem/flightctl-ui-ocp-rhel10",
                "product": "Red Hat Edge Manager 1",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:edge_manager:1"
                ],
                "defaultStatus": "unaffected",
                "packageName": "rhem/flightctl-ui-ocp-rhel9",
                "product": "Red Hat Edge Manager 1",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:edge_manager:1"
                ],
                "defaultStatus": "unaffected",
                "packageName": "rhem/flightctl-ui-rhel10",
                "product": "Red Hat Edge Manager 1",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:edge_manager:1"
                ],
                "defaultStatus": "unaffected",
                "packageName": "rhem/flightctl-ui-rhel9",
                "product": "Red Hat Edge Manager 1",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:8"
                ],
                "defaultStatus": "affected",
                "packageName": "grafana",
                "product": "Red Hat Enterprise Linux 8",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:8"
                ],
                "defaultStatus": "unaffected",
                "packageName": "pcs",
                "product": "Red Hat Enterprise Linux 8",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:9"
                ],
                "defaultStatus": "unaffected",
                "packageName": "grafana",
                "product": "Red Hat Enterprise Linux 9",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:9"
                ],
                "defaultStatus": "unaffected",
                "packageName": "pcs",
                "product": "Red Hat Enterprise Linux 9",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:enterprise_linux_ai:3"
                ],
                "defaultStatus": "affected",
                "packageName": "rhelai3/bootc-cuda-rhel9",
                "product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:enterprise_linux_ai:3"
                ],
                "defaultStatus": "affected",
                "packageName": "rhelai3/bootc-rocm-rhel9",
                "product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:enterprise_linux_ai:3"
                ],
                "defaultStatus": "affected",
                "packageName": "rhelai3/disk-image-cuda-rhel9",
                "product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:jboss_fuse:7"
                ],
                "defaultStatus": "affected",
                "packageName": "follow-redirects",
                "product": "Red Hat Fuse 7",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:hummingbird:1"
                ],
                "defaultStatus": "unaffected",
                "packageName": "boost",
                "product": "Red Hat Hardened Images",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:hummingbird:1"
                ],
                "defaultStatus": "unaffected",
                "packageName": "dotnet8.0",
                "product": "Red Hat Hardened Images",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:hummingbird:1"
                ],
                "defaultStatus": "unaffected",
                "packageName": "python3.14",
                "product": "Red Hat Hardened Images",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:jboss_enterprise_application_platform:7"
                ],
                "defaultStatus": "unaffected",
                "packageName": "follow-redirects",
                "product": "Red Hat JBoss Enterprise Application Platform 7",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:jboss_enterprise_application_platform:8"
                ],
                "defaultStatus": "unaffected",
                "packageName": "follow-redirects",
                "product": "Red Hat JBoss Enterprise Application Platform 8",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:jbosseapxp"
                ],
                "defaultStatus": "unaffected",
                "packageName": "follow-redirects",
                "product": "Red Hat JBoss Enterprise Application Platform Expansion Pack",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "unaffected",
                "packageName": "rhoai/odh-dashboard-rhel8",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "unaffected",
                "packageName": "rhoai/odh-mlflow-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-mod-arch-maas-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "unaffected",
                "packageName": "rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "unaffected",
                "packageName": "rhoai/odh-pipeline-runtime-minimal-cpu-py312-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "unaffected",
                "packageName": "rhoai/odh-pipeline-runtime-pytorch-cuda-py312-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "unaffected",
                "packageName": "rhoai/odh-pipeline-runtime-pytorch-llmcompressor-cuda-py312-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "unaffected",
                "packageName": "rhoai/odh-pipeline-runtime-pytorch-rocm-py312-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "unaffected",
                "packageName": "rhoai/odh-pipeline-runtime-tensorflow-cuda-py312-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "unaffected",
                "packageName": "rhoai/odh-pipeline-runtime-tensorflow-rocm-py312-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "unaffected",
                "packageName": "rhoai/odh-workbench-jupyter-datascience-cpu-py312-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "unaffected",
                "packageName": "rhoai/odh-workbench-jupyter-minimal-cpu-py312-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "unaffected",
                "packageName": "rhoai/odh-workbench-jupyter-minimal-cuda-py312-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "unaffected",
                "packageName": "rhoai/odh-workbench-jupyter-minimal-rocm-py312-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "unaffected",
                "packageName": "rhoai/odh-workbench-jupyter-pytorch-cuda-py312-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "unaffected",
                "packageName": "rhoai/odh-workbench-jupyter-pytorch-llmcompressor-cuda-py312-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "unaffected",
                "packageName": "rhoai/odh-workbench-jupyter-pytorch-rocm-py312-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "unaffected",
                "packageName": "rhoai/odh-workbench-jupyter-tensorflow-cuda-py312-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "unaffected",
                "packageName": "rhoai/odh-workbench-jupyter-tensorflow-rocm-py312-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "unaffected",
                "packageName": "rhoai/odh-workbench-jupyter-trustyai-cpu-py312-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift3/ose-console",
                "product": "Red Hat OpenShift Container Platform 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4"
                ],
                "defaultStatus": "unaffected",
                "packageName": "openshift4/nmstate-console-plugin-rhel9",
                "product": "Red Hat OpenShift Container Platform 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift4/ose-agent-installer-ui-rhel9",
                "product": "Red Hat OpenShift Container Platform 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4"
                ],
                "defaultStatus": "unaffected",
                "packageName": "openshift4/ose-console",
                "product": "Red Hat OpenShift Container Platform 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4"
                ],
                "defaultStatus": "unaffected",
                "packageName": "openshift4/ose-networking-console-plugin-rhel9",
                "product": "Red Hat OpenShift Container Platform 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4"
                ],
                "defaultStatus": "unaffected",
                "packageName": "odf4/ocs-client-console-rhel9",
                "product": "Red Hat Openshift Data Foundation 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4"
                ],
                "defaultStatus": "unaffected",
                "packageName": "odf4/odf-console-rhel9",
                "product": "Red Hat Openshift Data Foundation 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_data_foundation:4"
                ],
                "defaultStatus": "unaffected",
                "packageName": "odf4/odf-multicluster-console-rhel9",
                "product": "Red Hat Openshift Data Foundation 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_distributed_tracing:3"
                ],
                "defaultStatus": "unaffected",
                "packageName": "rhosdt/tempo-jaeger-query-rhel9",
                "product": "Red Hat OpenShift distributed tracing 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_gitops:1"
                ],
                "defaultStatus": "unaffected",
                "packageName": "openshift-gitops-1/console-plugin-rhel8",
                "product": "Red Hat OpenShift GitOps",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_gitops:1"
                ],
                "defaultStatus": "unaffected",
                "packageName": "openshift-gitops-1/console-plugin-rhel9",
                "product": "Red Hat OpenShift GitOps",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:container_native_virtualization:4"
                ],
                "defaultStatus": "unaffected",
                "packageName": "container-native-virtualization/kubevirt-console-plugin",
                "product": "Red Hat OpenShift Virtualization 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:container_native_virtualization:4"
                ],
                "defaultStatus": "unaffected",
                "packageName": "container-native-virtualization/kubevirt-console-plugin-rhel9",
                "product": "Red Hat OpenShift Virtualization 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:jboss_enterprise_bpms_platform:7"
                ],
                "defaultStatus": "unaffected",
                "packageName": "follow-redirects",
                "product": "Red Hat Process Automation 7",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:satellite:6"
                ],
                "defaultStatus": "unaffected",
                "packageName": "satellite/iop-advisor-frontend-rhel9",
                "product": "Red Hat Satellite 6",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:satellite:6"
                ],
                "defaultStatus": "unaffected",
                "packageName": "satellite/iop-host-inventory-frontend-rhel9",
                "product": "Red Hat Satellite 6",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:satellite:6"
                ],
                "defaultStatus": "unaffected",
                "packageName": "satellite/iop-vulnerability-frontend-rhel9",
                "product": "Red Hat Satellite 6",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:trusted_artifact_signer:1"
                ],
                "defaultStatus": "unaffected",
                "packageName": "rhtas/rhtas-console-ui-rhel9",
                "product": "Red Hat Trusted Artifact Signer",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:trusted_profile_analyzer:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "rhtpa/rhtpa-trustification-service-rhel9",
                "product": "Red Hat Trusted Profile Analyzer",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_portal:2"
                ],
                "defaultStatus": "affected",
                "packageName": "ansible-automation-platform/automation-portal",
                "product": "Self-service automation portal 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:amq_streams:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "follow-redirects",
                "product": "streams for Apache Kafka 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:amq_streams:3"
                ],
                "defaultStatus": "unaffected",
                "packageName": "follow-redirects",
                "product": "streams for Apache Kafka 3",
                "vendor": "Red Hat"
              }
            ],
            "datePublic": "2026-04-21T19:59:59.759Z",
            "descriptions": [
              {
                "lang": "en",
                "value": "A flaw was found in follow-redirects. When an HTTP request follows a cross-domain redirect (a redirection to a different domain), custom authentication headers, such as X-API-Key or X-Auth-Token, are not properly stripped. This allows these sensitive headers to be forwarded verbatim to the redirect target, potentially leading to the unintended disclosure of authentication information to an untrusted third party."
              }
            ],
            "metrics": [
              {
                "other": {
                  "content": {
                    "namespace": "https://access.redhat.com/security/updates/classification/",
                    "value": "Important"
                  },
                  "type": "Red Hat severity rating"
                }
              },
              {
                "cvssV3_1": {
                  "attackComplexity": "LOW",
                  "attackVector": "NETWORK",
                  "availabilityImpact": "NONE",
                  "baseScore": 7.5,
                  "baseSeverity": "HIGH",
                  "confidentialityImpact": "HIGH",
                  "integrityImpact": "NONE",
                  "privilegesRequired": "NONE",
                  "scope": "UNCHANGED",
                  "userInteraction": "NONE",
                  "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
                  "version": "3.1"
                },
                "format": "CVSS"
              }
            ],
            "problemTypes": [
              {
                "descriptions": [
                  {
                    "cweId": "CWE-212",
                    "description": "Improper Removal of Sensitive Information Before Storage or Transfer",
                    "lang": "en",
                    "type": "CWE"
                  }
                ]
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-09-10T12:05:07.783Z",
              "orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
              "shortName": "redhat-SADP"
            },
            "references": [
              {
                "tags": [
                  "vdb-entry",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/security/cve/CVE-2026-40895"
              },
              {
                "name": "RHBZ#2460297",
                "tags": [
                  "issue-tracking",
                  "x_refsource_REDHAT"
                ],
                "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2460297"
              },
              {
                "tags": [
                  "x_sadp-csaf-vex"
                ],
                "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-40895.json"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:17789"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:26010"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:16874"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:36882"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:24539"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:25273"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:20938"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:20889"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:24766"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:21338"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:13826"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:14937"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:41928"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:50300"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:24977"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:65126"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:19712"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:47728"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:48699"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:44235"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:27004"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:44263"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:27063"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:44267"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:27044"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:40768"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:21772"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:16476"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:16534"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:16532"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:16535"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:16542"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:22840"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:22629"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:21017"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:24853"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:19375"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:22465"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:23361"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:25271"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:24536"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:17657"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:17699"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:19109"
              }
            ],
            "solutions": [
              {
                "lang": "en",
                "value": "RHSA-2026:17789: Cryostat 4 on RHEL 9"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:26010: Cluster Observability Operator 1.5.0"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:16874: Network Observability (NETOBSERV) 1.11.0"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:36882: Red Hat Advanced Cluster Management for Kubernetes 2.14"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:24539: Red Hat Advanced Cluster Management for Kubernetes 2.15"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:25273: Red Hat Advanced Cluster Management for Kubernetes 2.16"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:20938: Red Hat Advanced Cluster Security 4.9"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:20889: Red Hat Advanced Cluster Security for Kubernetes 4.10"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:24766: Red Hat Ansible Automation Platform 2.5"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:21338: Red Hat Developer Hub 1.8"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:13826: Red Hat Developer Hub 1.9"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:14937: Red Hat Discovery 2"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:41928: Red Hat Migration Toolkit 1.8"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:50300: Red Hat Migration Toolkit for Applications 8.1"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:24977: Red Hat OpenShift AI 2.25"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:65126: Red Hat OpenShift AI 2.25"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:19712: Red Hat OpenShift AI 3.3"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:47728: Red Hat OpenShift Container Platform 4.17"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:48699: Red Hat OpenShift Container Platform 4.18"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:44235: Red Hat OpenShift Container Platform 4.19"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:27004: Red Hat OpenShift Container Platform 4.19"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:44263: Red Hat OpenShift Container Platform 4.20"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:27063: Red Hat OpenShift Container Platform 4.20"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:44267: Red Hat OpenShift Container Platform 4.21"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:27044: Red Hat OpenShift Container Platform 4.21"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:40768: Red Hat OpenShift Container Platform 4.22"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:21772: Red Hat OpenShift Dev Spaces 3.28"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:16476: Red Hat OpenShift Service Mesh 2.6"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:16534: Red Hat OpenShift Service Mesh 3.0"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:16532: Red Hat OpenShift Service Mesh 3.1"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:16535: Red Hat OpenShift Service Mesh 3.2"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:16542: Red Hat OpenShift Service Mesh 3.3"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:22840: Red Hat Quay 3.10"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:22629: Red Hat Quay 3.12"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:21017: Red Hat Quay 3.14"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:24853: Red Hat Quay 3.15"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:19375: Red Hat Quay 3.16"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:22465: Red Hat Quay 3.17"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:23361: Red Hat Quay 3.9"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:25271: multicluster engine for Kubernetes 2.11"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:24536: multicluster engine for Kubernetes 2.1"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:17657: multicluster engine for Kubernetes 2.6"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:17699: multicluster engine for Kubernetes 2.8"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:19109: multicluster engine for Kubernetes 2.9"
              }
            ],
            "timeline": [
              {
                "lang": "en",
                "time": "2026-04-21T21:02:33.280Z",
                "value": "Reported to Red Hat."
              },
              {
                "lang": "en",
                "time": "2026-04-21T19:59:59.759Z",
                "value": "Made public."
              }
            ],
            "title": "follow-redirects: follow-redirects: Information disclosure via cross-domain redirects",
            "workarounds": [
              {
                "lang": "en",
                "value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
              }
            ],
            "x_adpType": "supplier",
            "x_generator": {
              "engine": "sadp-cli 1.0.0"
            }
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "follow-redirects",
              "vendor": "follow-redirects",
              "versions": [
                {
                  "status": "affected",
                  "version": "\u003c 1.16.0"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "follow-redirects is an open source, drop-in replacement for Node\u0027s `http` and `https` modules that automatically follows redirects. Prior to 1.16.0, when an HTTP request follows a cross-domain redirect (301/302/307/308), follow-redirects only strips authorization, proxy-authorization, and cookie headers (matched by regex at index.js). Any custom authentication header (e.g., X-API-Key, X-Auth-Token, Api-Key, Token) is forwarded verbatim to the redirect target. This vulnerability is fixed in 1.16.0."
            }
          ],
          "metrics": [
            {
              "cvssV4_0": {
                "attackComplexity": "LOW",
                "attackRequirements": "NONE",
                "attackVector": "NETWORK",
                "baseScore": 6.9,
                "baseSeverity": "MEDIUM",
                "privilegesRequired": "NONE",
                "subAvailabilityImpact": "NONE",
                "subConfidentialityImpact": "NONE",
                "subIntegrityImpact": "NONE",
                "userInteraction": "NONE",
                "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
                "version": "4.0",
                "vulnAvailabilityImpact": "NONE",
                "vulnConfidentialityImpact": "LOW",
                "vulnIntegrityImpact": "NONE"
              }
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-200",
                  "description": "CWE-200: Exposure of Sensitive Information to an Unauthorized Actor",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-04-21T19:59:59.759Z",
            "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
            "shortName": "GitHub_M"
          },
          "references": [
            {
              "name": "https://github.com/follow-redirects/follow-redirects/security/advisories/GHSA-r4q5-vmmm-2653",
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "https://github.com/follow-redirects/follow-redirects/security/advisories/GHSA-r4q5-vmmm-2653"
            }
          ],
          "source": {
            "advisory": "GHSA-r4q5-vmmm-2653",
            "discovery": "UNKNOWN"
          },
          "title": "follow-redirects: Custom Authentication Headers Leaked to Cross-Domain Redirect Targets"
        }
      },
      "cveMetadata": {
        "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "assignerShortName": "GitHub_M",
        "cveId": "CVE-2026-40895",
        "datePublished": "2026-04-21T19:59:59.759Z",
        "dateReserved": "2026-04-15T16:37:22.766Z",
        "dateUpdated": "2026-09-10T12:05:07.783Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2026-40192 (GCVE-0-2026-40192)

    Vulnerability from cvelistv5 – Published: 2026-04-15 22:53 – Updated: 2026-09-10 12:04
    VLAI
    Title
    Pillow is vulnerable to a FITS GZIP decompression bomb
    Summary
    Pillow is a Python imaging library. Versions 10.3.0 through 12.1.1 did not limit the amount of GZIP-compressed data read when decoding a FITS image, making them vulnerable to decompression bomb attacks. A specially crafted FITS file could cause unbounded memory consumption, leading to denial of service (OOM crash or severe performance degradation). If users are unable to immediately upgrade, they should only open specific image formats, excluding FITS, as a workaround.
    SSVC
    Exploitation: none Automatable: yes Technical Impact: partial
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-04-16 13:37 UTC
    CWE
    • CWE-770 - Allocation of Resources Without Limits or Throttling
    • CWE-400 - Uncontrolled Resource Consumption
    • CWE-409 - Improper Handling of Highly Compressed Data (Data Amplification)
    References
    URL Tags
    https://github.com/python-pillow/Pillow/security/… x_refsource_CONFIRM
    https://github.com/python-pillow/Pillow/pull/9521 x_refsource_MISC
    https://github.com/python-pillow/Pillow/commit/3c… x_refsource_MISC
    https://pillow.readthedocs.io/en/stable/releaseno… x_refsource_MISC
    https://access.redhat.com/security/cve/CVE-2026-40192 vdb-entryx_refsource_REDHAT
    https://bugzilla.redhat.com/show_bug.cgi?id=2458856 issue-trackingx_refsource_REDHAT
    https://security.access.redhat.com/data/csaf/v2/v… x_sadp-csaf-vex
    https://access.redhat.com/errata/RHSA-2026:24761 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:27076 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:24762 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:34366 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:34368 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:34365 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:61628 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:61627 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:61629 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:16008 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:16030 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:16009 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:16174 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:57387 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:24866 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:17611 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:17609 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:24977 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:65126 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:19712 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:37275 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:22840 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:22629 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:21017 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:24853 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:19375 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:22465 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:23361 vendor-advisoryx_refsource_REDHAT
    Impacted products
    Vendor Product Version
    python-pillow Pillow Affected: >= 10.3.0, < 12.2.0
    Create a notification for this product.
    Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 8 Unaffected: 0:12.2.0-1.el8ap , < * (rpm)
        cpe:/a:redhat:ansible_automation_platform:2.5::el8
    Create a notification for this product.
    Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 9 Unaffected: 0:12.2.0-1.el9ap , < * (rpm)
        cpe:/a:redhat:ansible_automation_platform:2.5::el9
    Create a notification for this product.
    Red Hat Red Hat Ansible Automation Platform 2.6 for RHEL 9 Unaffected: 0:12.2.0-1.el9ap , < * (rpm)
        cpe:/a:redhat:ansible_automation_platform:2.6::el9
    Create a notification for this product.
    Red Hat Red Hat Satellite 6.16 for RHEL 8 Unaffected: 0:12.2.0-1.el8pc , < * (rpm)
        cpe:/a:redhat:satellite:6.16::el8
        cpe:/a:redhat:satellite_capsule:6.16::el8
    Create a notification for this product.
    Red Hat Red Hat Satellite 6.16 for RHEL 9 Unaffected: 0:12.2.0-1.el9pc , < * (rpm)
        cpe:/a:redhat:satellite:6.16::el9
        cpe:/a:redhat:satellite_capsule:6.16::el9
    Create a notification for this product.
    Red Hat Red Hat Satellite 6.17 for RHEL 9 Unaffected: 0:12.2.0-1.el9pc , < * (rpm)
        cpe:/a:redhat:satellite:6.17::el9
        cpe:/a:redhat:satellite_capsule:6.17::el9
    Create a notification for this product.
    Red Hat Red Hat Satellite 6.18 for RHEL 9 Unaffected: 0:12.2.0-1.el9pc , < * (rpm)
        cpe:/a:redhat:satellite:6.18::el9
        cpe:/a:redhat:satellite_capsule:6.18::el9
    Create a notification for this product.
    Red Hat Red Hat Satellite 6.19 for RHEL 9 Unaffected: 0:12.2.0-1.el9pc , < * (rpm)
        cpe:/a:redhat:satellite:6.19::el9
        cpe:/a:redhat:satellite_capsule:6.19::el9
    Create a notification for this product.
    Red Hat Red Hat AI Inference Server 3.2 Unaffected: 1787860580 , < * (rpm)
        cpe:/a:redhat:ai_inference_server:3.2::el9
    Create a notification for this product.
    Red Hat Red Hat AI Inference Server 3.2 Unaffected: 1787772157 , < * (rpm)
        cpe:/a:redhat:ai_inference_server:3.2::el9
    Create a notification for this product.
    Red Hat Red Hat AI Inference Server 3.2 Unaffected: 1787884873 , < * (rpm)
        cpe:/a:redhat:ai_inference_server:3.2::el9
    Create a notification for this product.
    Red Hat Red Hat AI Inference Server 3.3 Unaffected: 1778244559 , < * (rpm)
        cpe:/a:redhat:ai_inference_server:3.3::el9
    Create a notification for this product.
    Red Hat Red Hat AI Inference Server 3.3 Unaffected: 1778244531 , < * (rpm)
        cpe:/a:redhat:ai_inference_server:3.3::el9
    Create a notification for this product.
    Red Hat Red Hat AI Inference Server 3.3 Unaffected: 1778274666 , < * (rpm)
        cpe:/a:redhat:ai_inference_server:3.3::el9
    Create a notification for this product.
    Red Hat Red Hat AI Inference Server 3.3 Unaffected: 1778244546 , < * (rpm)
        cpe:/a:redhat:ai_inference_server:3.3::el9
    Create a notification for this product.
    Red Hat Red Hat AI Inference Server 3.4 Unaffected: 1787151840 , < * (rpm)
        cpe:/a:redhat:ai_inference_server:3.4::el9
    Create a notification for this product.
    Red Hat Red Hat Ansible Automation Platform 2.6 Unaffected: 1779761061 , < * (rpm)
        cpe:/a:redhat:ansible_automation_platform:2.6::el9
    Create a notification for this product.
    Red Hat Red Hat Ansible Automation Platform 2.6 Unaffected: 1780102732 , < * (rpm)
        cpe:/a:redhat:ansible_automation_platform:2.6::el9
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux AI 3.3 Unaffected: 1778690639 , < * (rpm)
        cpe:/a:redhat:enterprise_linux_ai:3.3::el9
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux AI 3.3 Unaffected: 1778677633 , < * (rpm)
        cpe:/a:redhat:enterprise_linux_ai:3.3::el9
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux AI 3.3 Unaffected: 1778677632 , < * (rpm)
        cpe:/a:redhat:enterprise_linux_ai:3.3::el9
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux AI 3.3 Unaffected: 1778677745 , < * (rpm)
        cpe:/a:redhat:enterprise_linux_ai:3.3::el9
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux AI 3.3 Unaffected: 1778666122 , < * (rpm)
        cpe:/a:redhat:enterprise_linux_ai:3.3::el9
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux AI 3.3 Unaffected: 1778666124 , < * (rpm)
        cpe:/a:redhat:enterprise_linux_ai:3.3::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 2.25 Unaffected: 1780388133 , < * (rpm)
        cpe:/a:redhat:openshift_ai:2.25::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 2.25 Unaffected: 1786711151 , < * (rpm)
        cpe:/a:redhat:openshift_ai:2.25::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 3.3 Unaffected: 1778677779 , < * (rpm)
        cpe:/a:redhat:openshift_ai:3.3::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 3.3 Unaffected: 1778677692 , < * (rpm)
        cpe:/a:redhat:openshift_ai:3.3::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 3.3 Unaffected: 1778262893 , < * (rpm)
        cpe:/a:redhat:openshift_ai:3.3::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 3.3 Unaffected: 1778677701 , < * (rpm)
        cpe:/a:redhat:openshift_ai:3.3::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 3.3 Unaffected: 1778677741 , < * (rpm)
        cpe:/a:redhat:openshift_ai:3.3::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 3.3 Unaffected: 1778677767 , < * (rpm)
        cpe:/a:redhat:openshift_ai:3.3::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 3.3 Unaffected: 1779123334 , < * (rpm)
        cpe:/a:redhat:openshift_ai:3.3::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 3.3 Unaffected: 1778263128 , < * (rpm)
        cpe:/a:redhat:openshift_ai:3.3::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 3.3 Unaffected: 1778782933 , < * (rpm)
        cpe:/a:redhat:openshift_ai:3.3::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 3.3 Unaffected: 1778677718 , < * (rpm)
        cpe:/a:redhat:openshift_ai:3.3::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 3.3 Unaffected: 1778677716 , < * (rpm)
        cpe:/a:redhat:openshift_ai:3.3::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 3.3 Unaffected: 1778263054 , < * (rpm)
        cpe:/a:redhat:openshift_ai:3.3::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 3.3 Unaffected: 1778677734 , < * (rpm)
        cpe:/a:redhat:openshift_ai:3.3::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 3.3 Unaffected: 1778677667 , < * (rpm)
        cpe:/a:redhat:openshift_ai:3.3::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 3.3 Unaffected: 1778677717 , < * (rpm)
        cpe:/a:redhat:openshift_ai:3.3::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 3.3 Unaffected: 1778677722 , < * (rpm)
        cpe:/a:redhat:openshift_ai:3.3::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 3.3 Unaffected: 1782472374 , < * (rpm)
        cpe:/a:redhat:openshift_ai:3.3::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 3.3 Unaffected: 1782471606 , < * (rpm)
        cpe:/a:redhat:openshift_ai:3.3::el9
    Create a notification for this product.
    Red Hat Red Hat Quay 3.10 Unaffected: 1779822261 , < * (rpm)
        cpe:/a:redhat:quay:3.10::el8
    Create a notification for this product.
    Red Hat Red Hat Quay 3.12 Unaffected: 1779811412 , < * (rpm)
        cpe:/a:redhat:quay:3.12::el8
    Create a notification for this product.
    Red Hat Red Hat Quay 3.14 Unaffected: 1779689392 , < * (rpm)
        cpe:/a:redhat:quay:3.14::el8
    Create a notification for this product.
    Red Hat Red Hat Quay 3.15 Unaffected: 1780891395 , < * (rpm)
        cpe:/a:redhat:quay:3.15::el8
    Create a notification for this product.
    Red Hat Red Hat Quay 3.16 Unaffected: 1779204086 , < * (rpm)
        cpe:/a:redhat:quay:3.16::el9
    Create a notification for this product.
    Red Hat Red Hat Quay 3.17 Unaffected: 1779922205 , < * (rpm)
        cpe:/a:redhat:quay:3.17::el9
    Create a notification for this product.
    Red Hat Red Hat Quay 3.9 Unaffected: 1779811473 , < * (rpm)
        cpe:/a:redhat:quay:3.9::el8
    Create a notification for this product.
    Red Hat Lightspeed Core     cpe:/a:redhat:lightspeed_core
    Create a notification for this product.
    Red Hat OpenShift Lightspeed     cpe:/a:redhat:openshift_lightspeed
    Create a notification for this product.
    Red Hat Red Hat AI Inference Server     cpe:/a:redhat:ai_inference_server:3
    Create a notification for this product.
    Red Hat Red Hat Ansible Automation Platform 2     cpe:/a:redhat:ansible_automation_platform:2
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 7     cpe:/o:redhat:enterprise_linux:7
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 8     cpe:/o:redhat:enterprise_linux:8
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI (RHOAI)     cpe:/a:redhat:openshift_ai
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-40192",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "yes"
                      },
                      {
                        "Technical Impact": "partial"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-04-16T13:37:11.864898Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-04-16T13:37:19.918Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          },
          {
            "affected": [
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2.5::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "python3.12-pillow",
                "product": "Red Hat Ansible Automation Platform 2.5 for RHEL 8",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:12.2.0-1.el8ap",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2.5::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "python3.12-pillow",
                "product": "Red Hat Ansible Automation Platform 2.5 for RHEL 9",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:12.2.0-1.el9ap",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2.6::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "python3.12-pillow",
                "product": "Red Hat Ansible Automation Platform 2.6 for RHEL 9",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:12.2.0-1.el9ap",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:satellite:6.16::el8",
                  "cpe:/a:redhat:satellite_capsule:6.16::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "python-pillow",
                "product": "Red Hat Satellite 6.16 for RHEL 8",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:12.2.0-1.el8pc",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:satellite:6.16::el9",
                  "cpe:/a:redhat:satellite_capsule:6.16::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "python-pillow",
                "product": "Red Hat Satellite 6.16 for RHEL 9",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:12.2.0-1.el9pc",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:satellite:6.17::el9",
                  "cpe:/a:redhat:satellite_capsule:6.17::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "python-pillow",
                "product": "Red Hat Satellite 6.17 for RHEL 9",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:12.2.0-1.el9pc",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:satellite:6.18::el9",
                  "cpe:/a:redhat:satellite_capsule:6.18::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "python3.12-pillow",
                "product": "Red Hat Satellite 6.18 for RHEL 9",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:12.2.0-1.el9pc",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:satellite:6.19::el9",
                  "cpe:/a:redhat:satellite_capsule:6.19::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "python3.12-pillow",
                "product": "Red Hat Satellite 6.19 for RHEL 9",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:12.2.0-1.el9pc",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:ai_inference_server:3.2::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhaiis/vllm-cuda-rhel9",
                "product": "Red Hat AI Inference Server 3.2",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1787860580",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:ai_inference_server:3.2::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhaiis/model-opt-cuda-rhel9",
                "product": "Red Hat AI Inference Server 3.2",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1787772157",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:ai_inference_server:3.2::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhaiis/vllm-rocm-rhel9",
                "product": "Red Hat AI Inference Server 3.2",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1787884873",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:ai_inference_server:3.3::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhaiis/model-opt-cuda-rhel9",
                "product": "Red Hat AI Inference Server 3.3",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778244559",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:ai_inference_server:3.3::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhaiis/vllm-rocm-rhel9",
                "product": "Red Hat AI Inference Server 3.3",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778244531",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:ai_inference_server:3.3::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhaiis/vllm-cuda-rhel9",
                "product": "Red Hat AI Inference Server 3.3",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778274666",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:ai_inference_server:3.3::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhaiis/vllm-spyre-rhel9",
                "product": "Red Hat AI Inference Server 3.3",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778244546",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:ai_inference_server:3.4::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhaii/vllm-spyre-rhel9",
                "product": "Red Hat AI Inference Server 3.4",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1787151840",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2.6::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "ansible-automation-platform-26/hub-rhel9",
                "product": "Red Hat Ansible Automation Platform 2.6",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779761061",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2.6::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "ansible-automation-platform-26/lightspeed-chatbot-rhel9",
                "product": "Red Hat Ansible Automation Platform 2.6",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1780102732",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:enterprise_linux_ai:3.3::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhelai3/disk-image-cuda-rhel9",
                "product": "Red Hat Enterprise Linux AI 3.3",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778690639",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:enterprise_linux_ai:3.3::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhelai3/bootc-aws-cuda-rhel9",
                "product": "Red Hat Enterprise Linux AI 3.3",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778677633",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:enterprise_linux_ai:3.3::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhelai3/bootc-azure-cuda-rhel9",
                "product": "Red Hat Enterprise Linux AI 3.3",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778677632",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:enterprise_linux_ai:3.3::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhelai3/bootc-azure-rocm-rhel9",
                "product": "Red Hat Enterprise Linux AI 3.3",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778677745",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:enterprise_linux_ai:3.3::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhelai3/bootc-cuda-rhel9",
                "product": "Red Hat Enterprise Linux AI 3.3",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778666122",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:enterprise_linux_ai:3.3::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhelai3/bootc-gcp-cuda-rhel9",
                "product": "Red Hat Enterprise Linux AI 3.3",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778677632",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:enterprise_linux_ai:3.3::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhelai3/bootc-rocm-rhel9",
                "product": "Red Hat Enterprise Linux AI 3.3",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778666124",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:2.25::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-caikit-tgis-serving-rhel9",
                "product": "Red Hat OpenShift AI 2.25",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1780388133",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:2.25::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-vllm-rocm-rhel9",
                "product": "Red Hat OpenShift AI 2.25",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1786711151",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:3.3::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9",
                "product": "Red Hat OpenShift AI 3.3",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778677779",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:3.3::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-pipeline-runtime-pytorch-cuda-py312-rhel9",
                "product": "Red Hat OpenShift AI 3.3",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778677692",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:3.3::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-pipeline-runtime-pytorch-llmcompressor-cuda-py312-rhel9",
                "product": "Red Hat OpenShift AI 3.3",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778262893",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:3.3::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-pipeline-runtime-pytorch-rocm-py312-rhel9",
                "product": "Red Hat OpenShift AI 3.3",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778677701",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:3.3::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-pipeline-runtime-tensorflow-cuda-py312-rhel9",
                "product": "Red Hat OpenShift AI 3.3",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778677741",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:3.3::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-pipeline-runtime-tensorflow-rocm-py312-rhel9",
                "product": "Red Hat OpenShift AI 3.3",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778677767",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:3.3::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-training-cuda128-torch29-py312-rhel9",
                "product": "Red Hat OpenShift AI 3.3",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779123334",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:3.3::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-training-rocm64-torch29-py312-rhel9",
                "product": "Red Hat OpenShift AI 3.3",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778263128",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:3.3::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9",
                "product": "Red Hat OpenShift AI 3.3",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778782933",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:3.3::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-workbench-jupyter-datascience-cpu-py312-rhel9",
                "product": "Red Hat OpenShift AI 3.3",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778677718",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:3.3::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-workbench-jupyter-pytorch-cuda-py312-rhel9",
                "product": "Red Hat OpenShift AI 3.3",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778677716",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:3.3::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-workbench-jupyter-pytorch-llmcompressor-cuda-py312-rhel9",
                "product": "Red Hat OpenShift AI 3.3",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778263054",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:3.3::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-workbench-jupyter-pytorch-rocm-py312-rhel9",
                "product": "Red Hat OpenShift AI 3.3",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778677734",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:3.3::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-workbench-jupyter-tensorflow-cuda-py312-rhel9",
                "product": "Red Hat OpenShift AI 3.3",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778677667",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:3.3::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-workbench-jupyter-tensorflow-rocm-py312-rhel9",
                "product": "Red Hat OpenShift AI 3.3",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778677717",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:3.3::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-workbench-jupyter-trustyai-cpu-py312-rhel9",
                "product": "Red Hat OpenShift AI 3.3",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778677722",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:3.3::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-trustyai-garak-lls-provider-dsp-rhel9",
                "product": "Red Hat OpenShift AI 3.3",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782472374",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:3.3::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-trustyai-nemo-guardrails-server-rhel9",
                "product": "Red Hat OpenShift AI 3.3",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782471606",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.10::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel8",
                "product": "Red Hat Quay 3.10",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779822261",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.12::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel8",
                "product": "Red Hat Quay 3.12",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779811412",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.14::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel8",
                "product": "Red Hat Quay 3.14",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779689392",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.15::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel8",
                "product": "Red Hat Quay 3.15",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1780891395",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.16::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel9",
                "product": "Red Hat Quay 3.16",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779204086",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.17::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel9",
                "product": "Red Hat Quay 3.17",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779922205",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.9::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel8",
                "product": "Red Hat Quay 3.9",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779811473",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:lightspeed_core"
                ],
                "defaultStatus": "affected",
                "packageName": "lightspeed-core/rag-tool-rhel9",
                "product": "Lightspeed Core",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_lightspeed"
                ],
                "defaultStatus": "unaffected",
                "packageName": "openshift-lightspeed/lightspeed-ocp-rag-rhel9",
                "product": "OpenShift Lightspeed",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_lightspeed"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-lightspeed/lightspeed-service-api-rhel9",
                "product": "OpenShift Lightspeed",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_lightspeed"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-lightspeed-tech-preview/lightspeed-rag-tool-rhel9",
                "product": "OpenShift Lightspeed",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ai_inference_server:3"
                ],
                "defaultStatus": "affected",
                "packageName": "rhaiis/vllm-cpu-rhel9",
                "product": "Red Hat AI Inference Server",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ai_inference_server:3"
                ],
                "defaultStatus": "affected",
                "packageName": "rhaiis/vllm-neuron-rhel9",
                "product": "Red Hat AI Inference Server",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ai_inference_server:3"
                ],
                "defaultStatus": "affected",
                "packageName": "rhaiis/vllm-tpu-rhel9",
                "product": "Red Hat AI Inference Server",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "affected",
                "packageName": "ansible-automation-platform-25/lightspeed-chatbot-rhel8",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "python-pillow",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:7"
                ],
                "defaultStatus": "unknown",
                "packageName": "python-pillow",
                "product": "Red Hat Enterprise Linux 7",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:8"
                ],
                "defaultStatus": "affected",
                "packageName": "python-pillow",
                "product": "Red Hat Enterprise Linux 8",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "unaffected",
                "packageName": "rhoai/odh-caikit-nlp-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "unaffected",
                "packageName": "rhoai/odh-kserve-agent-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "unaffected",
                "packageName": "rhoai/odh-kserve-controller-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "unaffected",
                "packageName": "rhoai/odh-kserve-router-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "unaffected",
                "packageName": "rhoai/odh-kserve-storage-initializer-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-llama-stack-core-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-llm-d-inference-scheduler-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "unaffected",
                "packageName": "rhoai/odh-mlflow-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-openvino-model-server-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-vllm-cuda-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-vllm-gaudi-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              }
            ],
            "datePublic": "2026-04-15T22:53:56.147Z",
            "descriptions": [
              {
                "lang": "en",
                "value": "A flaw was found in Pillow, a Python imaging library. This vulnerability allows a remote attacker to trigger a denial of service (DoS) by providing a specially crafted FITS image file. The library\u0027s failure to limit the amount of GZIP-compressed data during decoding can lead to unbounded memory consumption, causing the system to crash or experience severe performance issues."
              }
            ],
            "metrics": [
              {
                "other": {
                  "content": {
                    "namespace": "https://access.redhat.com/security/updates/classification/",
                    "value": "Important"
                  },
                  "type": "Red Hat severity rating"
                }
              },
              {
                "cvssV3_1": {
                  "attackComplexity": "LOW",
                  "attackVector": "NETWORK",
                  "availabilityImpact": "HIGH",
                  "baseScore": 7.5,
                  "baseSeverity": "HIGH",
                  "confidentialityImpact": "NONE",
                  "integrityImpact": "NONE",
                  "privilegesRequired": "NONE",
                  "scope": "UNCHANGED",
                  "userInteraction": "NONE",
                  "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "version": "3.1"
                },
                "format": "CVSS"
              }
            ],
            "problemTypes": [
              {
                "descriptions": [
                  {
                    "cweId": "CWE-409",
                    "description": "Improper Handling of Highly Compressed Data (Data Amplification)",
                    "lang": "en",
                    "type": "CWE"
                  }
                ]
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-09-10T12:04:47.474Z",
              "orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
              "shortName": "redhat-SADP"
            },
            "references": [
              {
                "tags": [
                  "vdb-entry",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/security/cve/CVE-2026-40192"
              },
              {
                "name": "RHBZ#2458856",
                "tags": [
                  "issue-tracking",
                  "x_refsource_REDHAT"
                ],
                "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2458856"
              },
              {
                "tags": [
                  "x_sadp-csaf-vex"
                ],
                "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-40192.json"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:24761"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:27076"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:24762"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:34366"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:34368"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:34365"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:61628"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:61627"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:61629"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:16008"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:16030"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:16009"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:16174"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:57387"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:24866"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:17611"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:17609"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:24977"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:65126"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:19712"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:37275"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:22840"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:22629"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:21017"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:24853"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:19375"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:22465"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:23361"
              }
            ],
            "solutions": [
              {
                "lang": "en",
                "value": "RHSA-2026:24761: Red Hat Ansible Automation Platform 2.5 for RHEL 8, Red Hat Ansible Automation Platform 2.5 for RHEL 9"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:27076: Red Hat Satellite 6.16 for RHEL 8, Red Hat Satellite 6.16 for RHEL 9"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:24762: Red Hat Ansible Automation Platform 2.6 for RHEL 9"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:34366: Red Hat Satellite 6.17 for RHEL 9"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:34368: Red Hat Satellite 6.18 for RHEL 9"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:34365: Red Hat Satellite 6.19 for RHEL 9"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:61628: Red Hat AI Inference Server 3.2"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:61627: Red Hat AI Inference Server 3.2"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:61629: Red Hat AI Inference Server 3.2"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:16008: Red Hat AI Inference Server 3.3"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:16030: Red Hat AI Inference Server 3.3"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:16009: Red Hat AI Inference Server 3.3"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:16174: Red Hat AI Inference Server 3.3"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:57387: Red Hat AI Inference Server 3.4"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:24866: Red Hat Ansible Automation Platform 2.6"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:17611: Red Hat Enterprise Linux AI 3.3"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:17609: Red Hat Enterprise Linux AI 3.3"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:24977: Red Hat OpenShift AI 2.25"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:65126: Red Hat OpenShift AI 2.25"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:19712: Red Hat OpenShift AI 3.3"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:37275: Red Hat OpenShift AI 3.3"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:22840: Red Hat Quay 3.10"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:22629: Red Hat Quay 3.12"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:21017: Red Hat Quay 3.14"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:24853: Red Hat Quay 3.15"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:19375: Red Hat Quay 3.16"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:22465: Red Hat Quay 3.17"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:23361: Red Hat Quay 3.9"
              }
            ],
            "timeline": [
              {
                "lang": "en",
                "time": "2026-04-16T00:00:49.590Z",
                "value": "Reported to Red Hat."
              },
              {
                "lang": "en",
                "time": "2026-04-15T22:53:56.147Z",
                "value": "Made public."
              }
            ],
            "title": "Pillow: Pillow: Denial of Service via decompression bomb in FITS image processing",
            "workarounds": [
              {
                "lang": "en",
                "value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."
              }
            ],
            "x_adpType": "supplier",
            "x_generator": {
              "engine": "sadp-cli 1.0.0"
            }
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "Pillow",
              "vendor": "python-pillow",
              "versions": [
                {
                  "status": "affected",
                  "version": "\u003e= 10.3.0, \u003c 12.2.0"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "Pillow is a Python imaging library. Versions 10.3.0 through 12.1.1 did not limit the amount of GZIP-compressed data read when decoding a FITS image, making them vulnerable to decompression bomb attacks. A specially crafted FITS file could cause unbounded memory consumption, leading to denial of service (OOM crash or severe performance degradation). If users are unable to immediately upgrade, they should only open specific image formats, excluding FITS, as a workaround."
            }
          ],
          "metrics": [
            {
              "cvssV4_0": {
                "attackComplexity": "LOW",
                "attackRequirements": "NONE",
                "attackVector": "NETWORK",
                "baseScore": 8.7,
                "baseSeverity": "HIGH",
                "privilegesRequired": "NONE",
                "subAvailabilityImpact": "NONE",
                "subConfidentialityImpact": "NONE",
                "subIntegrityImpact": "NONE",
                "userInteraction": "NONE",
                "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
                "version": "4.0",
                "vulnAvailabilityImpact": "HIGH",
                "vulnConfidentialityImpact": "NONE",
                "vulnIntegrityImpact": "NONE"
              }
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-770",
                  "description": "CWE-770: Allocation of Resources Without Limits or Throttling",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            },
            {
              "descriptions": [
                {
                  "cweId": "CWE-400",
                  "description": "CWE-400: Uncontrolled Resource Consumption",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-04-15T22:53:56.147Z",
            "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
            "shortName": "GitHub_M"
          },
          "references": [
            {
              "name": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-whj4-6x5x-4v2j",
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-whj4-6x5x-4v2j"
            },
            {
              "name": "https://github.com/python-pillow/Pillow/pull/9521",
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "https://github.com/python-pillow/Pillow/pull/9521"
            },
            {
              "name": "https://github.com/python-pillow/Pillow/commit/3cb854e8b2bab43f40e342e665f9340d861aa628",
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "https://github.com/python-pillow/Pillow/commit/3cb854e8b2bab43f40e342e665f9340d861aa628"
            },
            {
              "name": "https://pillow.readthedocs.io/en/stable/releasenotes/12.2.0.html#prevent-fits-decompression-bomb",
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "https://pillow.readthedocs.io/en/stable/releasenotes/12.2.0.html#prevent-fits-decompression-bomb"
            }
          ],
          "source": {
            "advisory": "GHSA-whj4-6x5x-4v2j",
            "discovery": "UNKNOWN"
          },
          "title": "Pillow is vulnerable to a FITS GZIP decompression bomb"
        }
      },
      "cveMetadata": {
        "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "assignerShortName": "GitHub_M",
        "cveId": "CVE-2026-40192",
        "datePublished": "2026-04-15T22:53:56.147Z",
        "dateReserved": "2026-04-09T20:59:17.620Z",
        "dateUpdated": "2026-09-10T12:04:47.474Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2025-62718 (GCVE-0-2025-62718)

    Vulnerability from cvelistv5 – Published: 2026-04-09 14:31 – Updated: 2026-09-10 12:04
    VLAI
    Title
    Axios has a NO_PROXY Hostname Normalization Bypass that Leads to SSRF
    Summary
    Axios is a promise based HTTP client for the browser and Node.js. Prior to 1.15.0 and 0.31.0, Axios does not correctly handle hostname normalization when checking NO_PROXY rules. Requests to loopback addresses like localhost. (with a trailing dot) or [::1] (IPv6 literal) skip NO_PROXY matching and go through the configured proxy. This goes against what developers expect and lets attackers force requests through a proxy, even if NO_PROXY is set up to protect loopback or internal services. This issue leads to the possibility of proxy bypass and SSRF vulnerabilities allowing attackers to reach sensitive loopback or internal services despite the configured protections. This vulnerability is fixed in 1.15.0 and 0.31.0.
    SSVC
    Exploitation: poc Automatable: yes Technical Impact: partial
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-04-09 15:02 UTC
    CWE
    • CWE-441 - Unintended Proxy or Intermediary ('Confused Deputy')
    • CWE-918 - Server-Side Request Forgery (SSRF)
    • CWE-1289 - Improper Validation of Unsafe Equivalence in Input
    References
    URL Tags
    https://github.com/axios/axios/security/advisorie… x_refsource_CONFIRM
    https://github.com/axios/axios/pull/10661 x_refsource_MISC
    https://github.com/axios/axios/pull/10688 x_refsource_MISC
    https://github.com/axios/axios/commit/03cdfc99e8d… x_refsource_MISC
    https://github.com/axios/axios/commit/fb3befb6daa… x_refsource_MISC
    https://datatracker.ietf.org/doc/html/rfc1034#sec… x_refsource_MISC
    https://datatracker.ietf.org/doc/html/rfc3986#sec… x_refsource_MISC
    https://github.com/axios/axios/releases/tag/v0.31.0 x_refsource_MISC
    https://github.com/axios/axios/releases/tag/v1.15.0 x_refsource_MISC
    https://access.redhat.com/security/cve/CVE-2025-62718 vdb-entryx_refsource_REDHAT
    https://bugzilla.redhat.com/show_bug.cgi?id=2456913 issue-trackingx_refsource_REDHAT
    https://security.access.redhat.com/data/csaf/v2/v… x_sadp-csaf-vex
    https://access.redhat.com/errata/RHSA-2026:24761 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:26010 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:16874 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:36882 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:20938 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:20889 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:24766 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:59155 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:24866 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:9742 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:13826 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:14937 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:41928 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:24977 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:19712 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:10175 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:8483 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:8484 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:8490 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:8491 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:8493 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:22840 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:22629 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:21017 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:24853 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:19375 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:22465 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:23361 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:24471 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:13571 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:17657 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:17699 vendor-advisoryx_refsource_REDHAT
    Impacted products
    Vendor Product Version
    axios axios Affected: >= 1.0.0, < 1.15.0
    Affected: < 0.31.0
    Create a notification for this product.
    Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 8 Unaffected: 0:2.5.20260422-3.el8ap , < * (rpm)
        cpe:/a:redhat:ansible_automation_platform:2.5::el8
    Create a notification for this product.
    Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 9 Unaffected: 0:2.5.20260422-3.el9ap , < * (rpm)
        cpe:/a:redhat:ansible_automation_platform:2.5::el9
    Create a notification for this product.
    Red Hat Streams for Apache Kafka 3.2.0     cpe:/a:redhat:amq_streams:3.2::el9
    Create a notification for this product.
    Red Hat Cluster Observability Operator 1.5.0 Unaffected: 1781116645 , < * (rpm)
        cpe:/a:redhat:cluster_observability_operator:1.5::el9
    Create a notification for this product.
    Red Hat Cluster Observability Operator 1.5.0 Unaffected: 1781116658 , < * (rpm)
        cpe:/a:redhat:cluster_observability_operator:1.5::el9
    Create a notification for this product.
    Red Hat Cluster Observability Operator 1.5.0 Unaffected: 1781116387 , < * (rpm)
        cpe:/a:redhat:cluster_observability_operator:1.5::el9
    Create a notification for this product.
    Red Hat Cluster Observability Operator 1.5.0 Unaffected: 1781116392 , < * (rpm)
        cpe:/a:redhat:cluster_observability_operator:1.5::el9
    Create a notification for this product.
    Red Hat Cluster Observability Operator 1.5.0 Unaffected: 1781116667 , < * (rpm)
        cpe:/a:redhat:cluster_observability_operator:1.5::el9
    Create a notification for this product.
    Red Hat multicluster engine for Kubernetes 2.6 Unaffected: 1778511348 , < * (rpm)
        cpe:/a:redhat:multicluster_engine:2.6::el9
    Create a notification for this product.
    Red Hat multicluster engine for Kubernetes 2.8 Unaffected: 1778383863 , < * (rpm)
        cpe:/a:redhat:multicluster_engine:2.8::el9
    Create a notification for this product.
    Red Hat Network Observability (NETOBSERV) 1.11.0 Unaffected: 1778508956 , < * (rpm)
        cpe:/a:redhat:network_observ_optr:1.11::el9
    Create a notification for this product.
    Red Hat Network Observability (NETOBSERV) 1.11.0 Unaffected: 1778510461 , < * (rpm)
        cpe:/a:redhat:network_observ_optr:1.11::el9
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.14 Unaffected: 1783451729 , < * (rpm)
        cpe:/a:redhat:acm:2.14::el9
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Security 4.9 Unaffected: 1779371594 , < * (rpm)
        cpe:/a:redhat:advanced_cluster_security:4.9::el8
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Security for Kubernetes 4.10 Unaffected: 1779293013 , < * (rpm)
        cpe:/a:redhat:advanced_cluster_security:4.10::el8
    Create a notification for this product.
    Red Hat Red Hat Ansible Automation Platform 2.5 Unaffected: 1780082949 , < * (rpm)
        cpe:/a:redhat:ansible_automation_platform:2.5::el8
    Create a notification for this product.
    Red Hat Red Hat Ansible Automation Platform 2.6 Unaffected: 1779784904 , < * (rpm)
        cpe:/a:redhat:ansible_automation_platform:2.6::el9
    Create a notification for this product.
    Red Hat Red Hat Ansible Automation Platform 2.6 Unaffected: 1787184682 , < * (rpm)
        cpe:/a:redhat:ansible_automation_platform:2.6::el9
    Create a notification for this product.
    Red Hat Red Hat Developer Hub 1.8 Unaffected: 1776784286 , < * (rpm)
        cpe:/a:redhat:rhdh:1.8::el9
    Create a notification for this product.
    Red Hat Red Hat Developer Hub 1.9 Unaffected: 1777903262 , < * (rpm)
        cpe:/a:redhat:rhdh:1.9::el9
    Create a notification for this product.
    Red Hat Red Hat Discovery 2 Unaffected: 1778156756 , < * (rpm)
        cpe:/a:redhat:discovery:2::el9
    Create a notification for this product.
    Red Hat Red Hat Migration Toolkit 1.8 Unaffected: 1783690532 , < * (rpm)
        cpe:/a:redhat:rhmt:1.8::el8
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 2.25 Unaffected: 1780467029 , < * (rpm)
        cpe:/a:redhat:openshift_ai:2.25::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 2.25 Unaffected: 1780467147 , < * (rpm)
        cpe:/a:redhat:openshift_ai:2.25::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 3.3 Unaffected: 1779189627 , < * (rpm)
        cpe:/a:redhat:openshift_ai:3.3::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 3.3 Unaffected: 1778473763 , < * (rpm)
        cpe:/a:redhat:openshift_ai:3.3::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 3.3 Unaffected: 1778666987 , < * (rpm)
        cpe:/a:redhat:openshift_ai:3.3::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Dev Spaces 3.27 Unaffected: 1776744110 , < * (rpm)
        cpe:/a:redhat:openshift_devspaces:3.27::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Dev Spaces 3.27 Unaffected: 1776795511 , < * (rpm)
        cpe:/a:redhat:openshift_devspaces:3.27::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 2.6 Unaffected: 1776202125 , < * (rpm)
        cpe:/a:redhat:service_mesh:2.6::el8
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 2.6 Unaffected: 1776191302 , < * (rpm)
        cpe:/a:redhat:service_mesh:2.6::el8
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 3.0 Unaffected: 1776151124 , < * (rpm)
        cpe:/a:redhat:service_mesh:3.0::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 3.0 Unaffected: 1776151272 , < * (rpm)
        cpe:/a:redhat:service_mesh:3.0::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 3.1 Unaffected: 1776151106 , < * (rpm)
        cpe:/a:redhat:service_mesh:3.1::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 3.1 Unaffected: 1776151270 , < * (rpm)
        cpe:/a:redhat:service_mesh:3.1::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 3.2 Unaffected: 1776155669 , < * (rpm)
        cpe:/a:redhat:service_mesh:3.2::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 3.2 Unaffected: 1776149682 , < * (rpm)
        cpe:/a:redhat:service_mesh:3.2::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 3.3 Unaffected: 1776151134 , < * (rpm)
        cpe:/a:redhat:service_mesh:3.3::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift Service Mesh 3.3 Unaffected: 1776151277 , < * (rpm)
        cpe:/a:redhat:service_mesh:3.3::el9
    Create a notification for this product.
    Red Hat Red Hat Quay 3.10 Unaffected: 1779822261 , < * (rpm)
        cpe:/a:redhat:quay:3.10::el8
    Create a notification for this product.
    Red Hat Red Hat Quay 3.12 Unaffected: 1779811412 , < * (rpm)
        cpe:/a:redhat:quay:3.12::el8
    Create a notification for this product.
    Red Hat Red Hat Quay 3.14 Unaffected: 1779689392 , < * (rpm)
        cpe:/a:redhat:quay:3.14::el8
    Create a notification for this product.
    Red Hat Red Hat Quay 3.15 Unaffected: 1780891395 , < * (rpm)
        cpe:/a:redhat:quay:3.15::el8
    Create a notification for this product.
    Red Hat Red Hat Quay 3.16 Unaffected: 1779204086 , < * (rpm)
        cpe:/a:redhat:quay:3.16::el9
    Create a notification for this product.
    Red Hat Red Hat Quay 3.17 Unaffected: 1779922205 , < * (rpm)
        cpe:/a:redhat:quay:3.17::el9
    Create a notification for this product.
    Red Hat Red Hat Quay 3.9 Unaffected: 1779811473 , < * (rpm)
        cpe:/a:redhat:quay:3.9::el8
    Create a notification for this product.
    Red Hat Red Hat Trusted Artifact Signer 1.3 Unaffected: 1779971506 , < * (rpm)
        cpe:/a:redhat:trusted_artifact_signer:1.3::el9
    Create a notification for this product.
    Red Hat Cryostat 4     cpe:/a:redhat:cryostat:4
    Create a notification for this product.
    Red Hat Gatekeeper 3     cpe:/a:redhat:gatekeeper:3
    Create a notification for this product.
    Red Hat Migration Toolkit for Applications 8     cpe:/a:redhat:migration_toolkit_applications:8
    Create a notification for this product.
    Red Hat Multicluster Engine for Kubernetes     cpe:/a:redhat:multicluster_engine
    Create a notification for this product.
    Red Hat Network Observability Operator     cpe:/a:redhat:network_observ_optr:1
    Create a notification for this product.
    Red Hat OpenShift Pipelines     cpe:/a:redhat:openshift_pipelines:1
    Create a notification for this product.
    Red Hat OpenShift Service Mesh 2     cpe:/a:redhat:service_mesh:2
    Create a notification for this product.
    Red Hat OpenShift Service Mesh 3     cpe:/a:redhat:service_mesh:3
    Create a notification for this product.
    Red Hat Red Hat 3scale API Management Platform 2     cpe:/a:redhat:red_hat_3scale_amp:2
    Create a notification for this product.
    Red Hat Red Hat Advanced Cluster Management for Kubernetes 2     cpe:/a:redhat:acm:2
    Create a notification for this product.
    Red Hat Red Hat Ansible Automation Platform 2     cpe:/a:redhat:ansible_automation_platform:2
    Create a notification for this product.
    Red Hat Red Hat build of Apache Camel - HawtIO 4     cpe:/a:redhat:apache_camel_hawtio:4
    Create a notification for this product.
    Red Hat Red Hat build of Apicurio Registry 2     cpe:/a:redhat:service_registry:2
    Create a notification for this product.
    Red Hat Red Hat build of Apicurio Registry 3     cpe:/a:redhat:apicurio_registry:3
    Create a notification for this product.
    Red Hat Red Hat Build of Kueue     cpe:/a:redhat:kueue_operator:1
    Create a notification for this product.
    Red Hat Red Hat Data Grid 8     cpe:/a:redhat:jboss_data_grid:8
    Create a notification for this product.
    Red Hat Red Hat Developer Hub     cpe:/a:redhat:rhdh:1
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 8     cpe:/o:redhat:enterprise_linux:8
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 9     cpe:/o:redhat:enterprise_linux:9
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux AI (RHEL AI) 3     cpe:/a:redhat:enterprise_linux_ai:3
    Create a notification for this product.
    Red Hat Red Hat Fuse 7     cpe:/a:redhat:jboss_fuse:7
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI (RHOAI)     cpe:/a:redhat:openshift_ai
    Create a notification for this product.
    Red Hat Red Hat OpenShift Container Platform 4     cpe:/a:redhat:openshift:4
    Create a notification for this product.
    Red Hat Red Hat OpenShift Virtualization 4     cpe:/a:redhat:container_native_virtualization:4
    Create a notification for this product.
    Red Hat Red Hat Process Automation 7     cpe:/a:redhat:jboss_enterprise_bpms_platform:7
    Create a notification for this product.
    Red Hat Red Hat Quay 3     cpe:/a:redhat:quay:3
    Create a notification for this product.
    Red Hat Red Hat Satellite 6     cpe:/a:redhat:satellite:6
    Create a notification for this product.
    Red Hat Red Hat Trusted Profile Analyzer     cpe:/a:redhat:trusted_profile_analyzer:2
    Create a notification for this product.
    Red Hat Self-service automation portal 2     cpe:/a:redhat:ansible_portal:2
    Create a notification for this product.
    Red Hat streams for Apache Kafka 2     cpe:/a:redhat:amq_streams:2
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2025-62718",
                    "options": [
                      {
                        "Exploitation": "poc"
                      },
                      {
                        "Automatable": "yes"
                      },
                      {
                        "Technical Impact": "partial"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-04-09T15:02:50.313939Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-04-09T16:15:31.322Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "references": [
              {
                "tags": [
                  "exploit"
                ],
                "url": "https://github.com/axios/axios/security/advisories/GHSA-3p68-rc4w-qgx5"
              }
            ],
            "title": "CISA ADP Vulnrichment"
          },
          {
            "affected": [
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2.5::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "automation-gateway",
                "product": "Red Hat Ansible Automation Platform 2.5 for RHEL 8",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:2.5.20260422-3.el8ap",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2.5::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "automation-gateway",
                "product": "Red Hat Ansible Automation Platform 2.5 for RHEL 9",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:2.5.20260422-3.el9ap",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:amq_streams:3.2::el9"
                ],
                "defaultStatus": "unaffected",
                "packageName": "axios",
                "product": "Streams for Apache Kafka 3.2.0",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9",
                "product": "Cluster Observability Operator 1.5.0",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1781116645",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9",
                "product": "Cluster Observability Operator 1.5.0",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1781116658",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9",
                "product": "Cluster Observability Operator 1.5.0",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1781116387",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "cluster-observability-operator/distributed-tracing-console-plugin-rhel9",
                "product": "Cluster Observability Operator 1.5.0",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1781116392",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "cluster-observability-operator/monitoring-console-plugin-pf5-rhel9",
                "product": "Cluster Observability Operator 1.5.0",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1781116667",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:multicluster_engine:2.6::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "multicluster-engine/console-mce-rhel9",
                "product": "multicluster engine for Kubernetes 2.6",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778511348",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:multicluster_engine:2.8::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "multicluster-engine/console-mce-rhel9",
                "product": "multicluster engine for Kubernetes 2.8",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778383863",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:network_observ_optr:1.11::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "network-observability/network-observability-console-plugin-compat-rhel9",
                "product": "Network Observability (NETOBSERV) 1.11.0",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778508956",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:network_observ_optr:1.11::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "network-observability/network-observability-console-plugin-rhel9",
                "product": "Network Observability (NETOBSERV) 1.11.0",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778510461",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:acm:2.14::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhacm2/console-rhel9",
                "product": "Red Hat Advanced Cluster Management for Kubernetes 2.14",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1783451729",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:advanced_cluster_security:4.9::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "advanced-cluster-security/rhacs-main-rhel8",
                "product": "Red Hat Advanced Cluster Security 4.9",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779371594",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:advanced_cluster_security:4.10::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "advanced-cluster-security/rhacs-main-rhel8",
                "product": "Red Hat Advanced Cluster Security for Kubernetes 4.10",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779293013",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2.5::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "ansible-automation-platform-25/lightspeed-rhel8",
                "product": "Red Hat Ansible Automation Platform 2.5",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1780082949",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2.6::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "ansible-automation-platform-26/lightspeed-rhel9",
                "product": "Red Hat Ansible Automation Platform 2.6",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779784904",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2.6::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "ansible-automation-platform-26/lightspeed-rhel9-operator",
                "product": "Red Hat Ansible Automation Platform 2.6",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1787184682",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:rhdh:1.8::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhdh/rhdh-hub-rhel9",
                "product": "Red Hat Developer Hub 1.8",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1776784286",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:rhdh:1.9::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhdh/rhdh-hub-rhel9",
                "product": "Red Hat Developer Hub 1.9",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1777903262",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:discovery:2::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "discovery/discovery-ui-rhel9",
                "product": "Red Hat Discovery 2",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778156756",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:rhmt:1.8::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "rhmtc/openshift-migration-ui-rhel8",
                "product": "Red Hat Migration Toolkit 1.8",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1783690532",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:2.25::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-dashboard-rhel9",
                "product": "Red Hat OpenShift AI 2.25",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1780467029",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:2.25::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-mod-arch-model-registry-rhel9",
                "product": "Red Hat OpenShift AI 2.25",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1780467147",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:3.3::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-dashboard-rhel9",
                "product": "Red Hat OpenShift AI 3.3",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779189627",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:3.3::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-mod-arch-gen-ai-rhel9",
                "product": "Red Hat OpenShift AI 3.3",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778473763",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:3.3::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-mod-arch-model-registry-rhel9",
                "product": "Red Hat OpenShift AI 3.3",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1778666987",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_devspaces:3.27::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "devspaces/code-rhel9",
                "product": "Red Hat OpenShift Dev Spaces 3.27",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1776744110",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_devspaces:3.27::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "devspaces/dashboard-rhel9",
                "product": "Red Hat OpenShift Dev Spaces 3.27",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1776795511",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:2.6::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-ossmc-rhel8",
                "product": "Red Hat OpenShift Service Mesh 2.6",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1776202125",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:2.6::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-rhel8",
                "product": "Red Hat OpenShift Service Mesh 2.6",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1776191302",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3.0::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-ossmc-rhel9",
                "product": "Red Hat OpenShift Service Mesh 3.0",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1776151124",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3.0::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-rhel9",
                "product": "Red Hat OpenShift Service Mesh 3.0",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1776151272",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3.1::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-ossmc-rhel9",
                "product": "Red Hat OpenShift Service Mesh 3.1",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1776151106",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3.1::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-rhel9",
                "product": "Red Hat OpenShift Service Mesh 3.1",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1776151270",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3.2::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-ossmc-rhel9",
                "product": "Red Hat OpenShift Service Mesh 3.2",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1776155669",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3.2::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-rhel9",
                "product": "Red Hat OpenShift Service Mesh 3.2",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1776149682",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3.3::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-ossmc-rhel9",
                "product": "Red Hat OpenShift Service Mesh 3.3",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1776151134",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3.3::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-service-mesh/kiali-rhel9",
                "product": "Red Hat OpenShift Service Mesh 3.3",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1776151277",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.10::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel8",
                "product": "Red Hat Quay 3.10",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779822261",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.12::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel8",
                "product": "Red Hat Quay 3.12",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779811412",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.14::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel8",
                "product": "Red Hat Quay 3.14",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779689392",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.15::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel8",
                "product": "Red Hat Quay 3.15",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1780891395",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.16::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel9",
                "product": "Red Hat Quay 3.16",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779204086",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.17::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel9",
                "product": "Red Hat Quay 3.17",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779922205",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.9::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel8",
                "product": "Red Hat Quay 3.9",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779811473",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:trusted_artifact_signer:1.3::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhtas/rhtas-console-ui-rhel9",
                "product": "Red Hat Trusted Artifact Signer 1.3",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779971506",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:cryostat:4"
                ],
                "defaultStatus": "unaffected",
                "packageName": "axios",
                "product": "Cryostat 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:gatekeeper:3"
                ],
                "defaultStatus": "affected",
                "packageName": "redhat-user-workloads/gatekeeper-3-18",
                "product": "Gatekeeper 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:gatekeeper:3"
                ],
                "defaultStatus": "unaffected",
                "packageName": "redhat-user-workloads/gatekeeper-3-19",
                "product": "Gatekeeper 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:migration_toolkit_applications:8"
                ],
                "defaultStatus": "affected",
                "packageName": "mta/mta-ui-rhel8",
                "product": "Migration Toolkit for Applications 8",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:migration_toolkit_applications:8"
                ],
                "defaultStatus": "affected",
                "packageName": "mta/mta-ui-rhel9",
                "product": "Migration Toolkit for Applications 8",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:migration_toolkit_applications:8"
                ],
                "defaultStatus": "affected",
                "packageName": "redhat-user-workloads/art-images",
                "product": "Migration Toolkit for Applications 8",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:multicluster_engine"
                ],
                "defaultStatus": "affected",
                "packageName": "redhat-user-workloads/console-mce-mce-211",
                "product": "Multicluster Engine for Kubernetes",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:multicluster_engine"
                ],
                "defaultStatus": "affected",
                "packageName": "redhat-user-workloads/console-mce-mce-26",
                "product": "Multicluster Engine for Kubernetes",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:multicluster_engine"
                ],
                "defaultStatus": "affected",
                "packageName": "redhat-user-workloads/console-mce-mce-27",
                "product": "Multicluster Engine for Kubernetes",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:multicluster_engine"
                ],
                "defaultStatus": "affected",
                "packageName": "redhat-user-workloads/console-mce-mce-28",
                "product": "Multicluster Engine for Kubernetes",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:multicluster_engine"
                ],
                "defaultStatus": "affected",
                "packageName": "redhat-user-workloads/console-mce-mce-29",
                "product": "Multicluster Engine for Kubernetes",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:network_observ_optr:1"
                ],
                "defaultStatus": "affected",
                "packageName": "redhat-user-workloads/network-observability-console-plugin-zstream",
                "product": "Network Observability Operator",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_pipelines:1"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-pipelines/pipelines-hub-ui-rhel8",
                "product": "OpenShift Pipelines",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_pipelines:1"
                ],
                "defaultStatus": "affected",
                "packageName": "redhat-user-workloads/hub-ui-rhel9",
                "product": "OpenShift Pipelines",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_pipelines:1"
                ],
                "defaultStatus": "affected",
                "packageName": "redhat-user-workloads/pipelines-hub-ui-rhel9",
                "product": "OpenShift Pipelines",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:2"
                ],
                "defaultStatus": "affected",
                "packageName": "redhat-user-workloads/kiali-2-6-ossmc",
                "product": "OpenShift Service Mesh 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3"
                ],
                "defaultStatus": "affected",
                "packageName": "redhat-user-workloads/kiali-3-0",
                "product": "OpenShift Service Mesh 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3"
                ],
                "defaultStatus": "unaffected",
                "packageName": "redhat-user-workloads/kiali-3-0-bundle",
                "product": "OpenShift Service Mesh 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3"
                ],
                "defaultStatus": "unaffected",
                "packageName": "redhat-user-workloads/kiali-3-0-operator",
                "product": "OpenShift Service Mesh 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3"
                ],
                "defaultStatus": "affected",
                "packageName": "redhat-user-workloads/kiali-3-1",
                "product": "OpenShift Service Mesh 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3"
                ],
                "defaultStatus": "unaffected",
                "packageName": "redhat-user-workloads/kiali-3-1-bundle",
                "product": "OpenShift Service Mesh 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3"
                ],
                "defaultStatus": "unaffected",
                "packageName": "redhat-user-workloads/kiali-3-1-operator",
                "product": "OpenShift Service Mesh 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3"
                ],
                "defaultStatus": "affected",
                "packageName": "redhat-user-workloads/kiali-3-1-ossmc",
                "product": "OpenShift Service Mesh 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3"
                ],
                "defaultStatus": "affected",
                "packageName": "redhat-user-workloads/kiali-3-2",
                "product": "OpenShift Service Mesh 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3"
                ],
                "defaultStatus": "affected",
                "packageName": "redhat-user-workloads/kiali-3-2-ossmc",
                "product": "OpenShift Service Mesh 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3"
                ],
                "defaultStatus": "affected",
                "packageName": "redhat-user-workloads/kiali-3-3",
                "product": "OpenShift Service Mesh 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:service_mesh:3"
                ],
                "defaultStatus": "affected",
                "packageName": "redhat-user-workloads/kiali-3-3-ossmc",
                "product": "OpenShift Service Mesh 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:red_hat_3scale_amp:2"
                ],
                "defaultStatus": "affected",
                "packageName": "3scale-amp21/system",
                "product": "Red Hat 3scale API Management Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:red_hat_3scale_amp:2"
                ],
                "defaultStatus": "affected",
                "packageName": "3scale-amp22/system",
                "product": "Red Hat 3scale API Management Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:red_hat_3scale_amp:2"
                ],
                "defaultStatus": "affected",
                "packageName": "3scale-amp2/system-rhel7",
                "product": "Red Hat 3scale API Management Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:red_hat_3scale_amp:2"
                ],
                "defaultStatus": "affected",
                "packageName": "3scale-amp2/system-rhel8",
                "product": "Red Hat 3scale API Management Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:red_hat_3scale_amp:2"
                ],
                "defaultStatus": "affected",
                "packageName": "3scale-amp2/system-rhel9",
                "product": "Red Hat 3scale API Management Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:acm:2"
                ],
                "defaultStatus": "affected",
                "packageName": "redhat-user-workloads/console-acm-215",
                "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:acm:2"
                ],
                "defaultStatus": "affected",
                "packageName": "redhat-user-workloads/console-acm-216",
                "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "affected",
                "packageName": "ansible-automation-platform-24/lightspeed-rhel8-operator",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "affected",
                "packageName": "automation-controller",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "affected",
                "packageName": "automation-hub",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "automation-platform-ui",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "python3.11-galaxy-ng",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "python3.12-galaxy-ng",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "python3x-galaxy-ng",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "python-galaxy-ng",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "affected",
                "packageName": "redhat-user-workloads/automation-reports",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "affected",
                "packageName": "redhat-user-workloads/gateway-rhel9",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:apache_camel_hawtio:4"
                ],
                "defaultStatus": "affected",
                "packageName": "axios",
                "product": "Red Hat build of Apache Camel - HawtIO 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:service_registry:2"
                ],
                "defaultStatus": "affected",
                "packageName": "axios",
                "product": "Red Hat build of Apicurio Registry 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:apicurio_registry:3"
                ],
                "defaultStatus": "affected",
                "packageName": "apicurio/apicurio-registry-ui-rhel8",
                "product": "Red Hat build of Apicurio Registry 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:apicurio_registry:3"
                ],
                "defaultStatus": "affected",
                "packageName": "apicurio/apicurio-registry-ui-rhel9",
                "product": "Red Hat build of Apicurio Registry 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:kueue_operator:1"
                ],
                "defaultStatus": "unaffected",
                "packageName": "redhat-user-workloads/kueue-0-12",
                "product": "Red Hat Build of Kueue",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:kueue_operator:1"
                ],
                "defaultStatus": "unaffected",
                "packageName": "redhat-user-workloads/kueue-bundle-1-1",
                "product": "Red Hat Build of Kueue",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:kueue_operator:1"
                ],
                "defaultStatus": "unaffected",
                "packageName": "redhat-user-workloads/kueue-must-gather-1-1",
                "product": "Red Hat Build of Kueue",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:kueue_operator:1"
                ],
                "defaultStatus": "unaffected",
                "packageName": "redhat-user-workloads/kueue-operator-1-1",
                "product": "Red Hat Build of Kueue",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:jboss_data_grid:8"
                ],
                "defaultStatus": "unaffected",
                "packageName": "axios",
                "product": "Red Hat Data Grid 8",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:rhdh:1"
                ],
                "defaultStatus": "affected",
                "packageName": "rhdh/backstage-community-plugin-catalog-backend-module-scaffolder-relation-processor",
                "product": "Red Hat Developer Hub",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:8"
                ],
                "defaultStatus": "unaffected",
                "packageName": "grafana",
                "product": "Red Hat Enterprise Linux 8",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:9"
                ],
                "defaultStatus": "unaffected",
                "packageName": "grafana",
                "product": "Red Hat Enterprise Linux 9",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:enterprise_linux_ai:3"
                ],
                "defaultStatus": "affected",
                "packageName": "rhelai3/bootc-cuda-rhel9",
                "product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:enterprise_linux_ai:3"
                ],
                "defaultStatus": "affected",
                "packageName": "rhelai3/bootc-rocm-rhel9",
                "product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:enterprise_linux_ai:3"
                ],
                "defaultStatus": "affected",
                "packageName": "rhelai3/disk-image-cuda-rhel9",
                "product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:jboss_fuse:7"
                ],
                "defaultStatus": "affected",
                "packageName": "axios",
                "product": "Red Hat Fuse 7",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "unaffected",
                "packageName": "rhoai/odh-dashboard-rhel8",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-mod-arch-maas-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift3/ose-console",
                "product": "Red Hat OpenShift Container Platform 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift4/ose-console",
                "product": "Red Hat OpenShift Container Platform 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4"
                ],
                "defaultStatus": "unaffected",
                "packageName": "openshift4/ose-console-rhel9",
                "product": "Red Hat OpenShift Container Platform 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift:4"
                ],
                "defaultStatus": "affected",
                "packageName": "redhat-user-workloads/art-images",
                "product": "Red Hat OpenShift Container Platform 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:container_native_virtualization:4"
                ],
                "defaultStatus": "affected",
                "packageName": "container-native-virtualization/kubevirt-console-plugin",
                "product": "Red Hat OpenShift Virtualization 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:container_native_virtualization:4"
                ],
                "defaultStatus": "affected",
                "packageName": "container-native-virtualization/kubevirt-console-plugin-rhel9",
                "product": "Red Hat OpenShift Virtualization 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:container_native_virtualization:4"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-virtualization/kubevirt-console-plugin-rhel9",
                "product": "Red Hat OpenShift Virtualization 4",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:jboss_enterprise_bpms_platform:7"
                ],
                "defaultStatus": "unaffected",
                "packageName": "axios",
                "product": "Red Hat Process Automation 7",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:quay:3"
                ],
                "defaultStatus": "affected",
                "packageName": "redhat-user-workloads/quay-quay-v3-12",
                "product": "Red Hat Quay 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:quay:3"
                ],
                "defaultStatus": "affected",
                "packageName": "redhat-user-workloads/quay-quay-v3-13",
                "product": "Red Hat Quay 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:quay:3"
                ],
                "defaultStatus": "affected",
                "packageName": "redhat-user-workloads/quay-quay-v3-14",
                "product": "Red Hat Quay 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:quay:3"
                ],
                "defaultStatus": "affected",
                "packageName": "redhat-user-workloads/quay-quay-v3-15",
                "product": "Red Hat Quay 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:quay:3"
                ],
                "defaultStatus": "affected",
                "packageName": "redhat-user-workloads/quay-quay-v3-16",
                "product": "Red Hat Quay 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:quay:3"
                ],
                "defaultStatus": "affected",
                "packageName": "redhat-user-workloads/quay-quay-v3-17",
                "product": "Red Hat Quay 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:quay:3"
                ],
                "defaultStatus": "affected",
                "packageName": "redhat-user-workloads/quay-quay-v3-9",
                "product": "Red Hat Quay 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:satellite:6"
                ],
                "defaultStatus": "affected",
                "packageName": "redhat-user-workloads/iop-advisor-frontend-sat-6-18",
                "product": "Red Hat Satellite 6",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:satellite:6"
                ],
                "defaultStatus": "affected",
                "packageName": "redhat-user-workloads/iop-host-inventory-frontend-sat-6-18",
                "product": "Red Hat Satellite 6",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:satellite:6"
                ],
                "defaultStatus": "unaffected",
                "packageName": "redhat-user-workloads/iop-vulnerability-frontend-sat-6-18",
                "product": "Red Hat Satellite 6",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:trusted_profile_analyzer:2"
                ],
                "defaultStatus": "affected",
                "packageName": "redhat-user-workloads/rhtpa-product-0-3-z",
                "product": "Red Hat Trusted Profile Analyzer",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:trusted_profile_analyzer:2"
                ],
                "defaultStatus": "affected",
                "packageName": "redhat-user-workloads/rhtpa-product-0-4-z",
                "product": "Red Hat Trusted Profile Analyzer",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:trusted_profile_analyzer:2"
                ],
                "defaultStatus": "affected",
                "packageName": "rhtpa/rhtpa-trustification-service-rhel9",
                "product": "Red Hat Trusted Profile Analyzer",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_portal:2"
                ],
                "defaultStatus": "affected",
                "packageName": "redhat-user-workloads/ansible-plugins",
                "product": "Self-service automation portal 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:amq_streams:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "axios",
                "product": "streams for Apache Kafka 2",
                "vendor": "Red Hat"
              }
            ],
            "datePublic": "2026-04-09T14:31:46.067Z",
            "descriptions": [
              {
                "lang": "en",
                "value": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not correctly handle hostname normalization when evaluating NO_PROXY rules. An attacker can exploit this by crafting requests to loopback addresses (e.g., localhost. or [::1]) which bypass the NO_PROXY configuration and are routed through the configured proxy. This can lead to Server-Side Request Forgery (SSRF) vulnerabilities, enabling attackers to access sensitive internal or loopback services that should otherwise be protected."
              }
            ],
            "metrics": [
              {
                "other": {
                  "content": {
                    "namespace": "https://access.redhat.com/security/updates/classification/",
                    "value": "Important"
                  },
                  "type": "Red Hat severity rating"
                }
              },
              {
                "cvssV3_1": {
                  "attackComplexity": "HIGH",
                  "attackVector": "NETWORK",
                  "availabilityImpact": "LOW",
                  "baseScore": 7,
                  "baseSeverity": "HIGH",
                  "confidentialityImpact": "HIGH",
                  "integrityImpact": "LOW",
                  "privilegesRequired": "NONE",
                  "scope": "UNCHANGED",
                  "userInteraction": "NONE",
                  "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L",
                  "version": "3.1"
                },
                "format": "CVSS"
              }
            ],
            "problemTypes": [
              {
                "descriptions": [
                  {
                    "cweId": "CWE-1289",
                    "description": "Improper Validation of Unsafe Equivalence in Input",
                    "lang": "en",
                    "type": "CWE"
                  }
                ]
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-09-10T12:04:48.730Z",
              "orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
              "shortName": "redhat-SADP"
            },
            "references": [
              {
                "tags": [
                  "vdb-entry",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/security/cve/CVE-2025-62718"
              },
              {
                "name": "RHBZ#2456913",
                "tags": [
                  "issue-tracking",
                  "x_refsource_REDHAT"
                ],
                "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456913"
              },
              {
                "tags": [
                  "x_sadp-csaf-vex"
                ],
                "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-62718.json"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:24761"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:26010"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:16874"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:36882"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:20938"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:20889"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:24766"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:59155"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:24866"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:9742"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:13826"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:14937"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:41928"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:24977"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:19712"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:10175"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:8483"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:8484"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:8490"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:8491"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:8493"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:22840"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:22629"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:21017"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:24853"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:19375"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:22465"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:23361"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:24471"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:13571"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:17657"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:17699"
              }
            ],
            "solutions": [
              {
                "lang": "en",
                "value": "RHSA-2026:24761: Red Hat Ansible Automation Platform 2.5 for RHEL 8, Red Hat Ansible Automation Platform 2.5 for RHEL 9"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:26010: Cluster Observability Operator 1.5.0"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:16874: Network Observability (NETOBSERV) 1.11.0"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:36882: Red Hat Advanced Cluster Management for Kubernetes 2.14"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:20938: Red Hat Advanced Cluster Security 4.9"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:20889: Red Hat Advanced Cluster Security for Kubernetes 4.10"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:24766: Red Hat Ansible Automation Platform 2.5"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:59155: Red Hat Ansible Automation Platform 2.6"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:24866: Red Hat Ansible Automation Platform 2.6"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:9742: Red Hat Developer Hub 1.8"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:13826: Red Hat Developer Hub 1.9"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:14937: Red Hat Discovery 2"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:41928: Red Hat Migration Toolkit 1.8"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:24977: Red Hat OpenShift AI 2.25"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:19712: Red Hat OpenShift AI 3.3"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:10175: Red Hat OpenShift Dev Spaces 3.27"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:8483: Red Hat OpenShift Service Mesh 2.6"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:8484: Red Hat OpenShift Service Mesh 3.0"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:8490: Red Hat OpenShift Service Mesh 3.1"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:8491: Red Hat OpenShift Service Mesh 3.2"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:8493: Red Hat OpenShift Service Mesh 3.3"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:22840: Red Hat Quay 3.10"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:22629: Red Hat Quay 3.12"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:21017: Red Hat Quay 3.14"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:24853: Red Hat Quay 3.15"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:19375: Red Hat Quay 3.16"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:22465: Red Hat Quay 3.17"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:23361: Red Hat Quay 3.9"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:24471: Red Hat Trusted Artifact Signer 1.3"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:13571: Streams for Apache Kafka 3.2.0"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:17657: multicluster engine for Kubernetes 2.6"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:17699: multicluster engine for Kubernetes 2.8"
              }
            ],
            "timeline": [
              {
                "lang": "en",
                "time": "2026-04-09T15:01:48.111Z",
                "value": "Reported to Red Hat."
              },
              {
                "lang": "en",
                "time": "2026-04-09T14:31:46.067Z",
                "value": "Made public."
              }
            ],
            "title": "axios: Axios: Server-Side Request Forgery and proxy bypass due to improper hostname normalization",
            "workarounds": [
              {
                "lang": "en",
                "value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."
              }
            ],
            "x_adpType": "supplier",
            "x_generator": {
              "engine": "sadp-cli 1.0.0"
            }
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "axios",
              "vendor": "axios",
              "versions": [
                {
                  "status": "affected",
                  "version": "\u003e= 1.0.0, \u003c 1.15.0"
                },
                {
                  "status": "affected",
                  "version": "\u003c 0.31.0"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "Axios is a promise based HTTP client for the browser and Node.js. Prior to 1.15.0 and 0.31.0, Axios does not correctly handle hostname normalization when checking NO_PROXY rules. Requests to loopback addresses like localhost. (with a trailing dot) or [::1] (IPv6 literal) skip NO_PROXY matching and go through the configured proxy. This goes against what developers expect and lets attackers force requests through a proxy, even if NO_PROXY is set up to protect loopback or internal services. This issue leads to the possibility of proxy bypass and SSRF vulnerabilities allowing attackers to reach sensitive loopback or internal services despite the configured protections. This vulnerability is fixed in 1.15.0 and 0.31.0."
            }
          ],
          "metrics": [
            {
              "cvssV4_0": {
                "attackComplexity": "LOW",
                "attackRequirements": "PRESENT",
                "attackVector": "NETWORK",
                "baseScore": 6.3,
                "baseSeverity": "MEDIUM",
                "privilegesRequired": "NONE",
                "subAvailabilityImpact": "NONE",
                "subConfidentialityImpact": "LOW",
                "subIntegrityImpact": "LOW",
                "userInteraction": "NONE",
                "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N",
                "version": "4.0",
                "vulnAvailabilityImpact": "NONE",
                "vulnConfidentialityImpact": "LOW",
                "vulnIntegrityImpact": "LOW"
              }
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-441",
                  "description": "CWE-441: Unintended Proxy or Intermediary (\u0027Confused Deputy\u0027)",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            },
            {
              "descriptions": [
                {
                  "cweId": "CWE-918",
                  "description": "CWE-918: Server-Side Request Forgery (SSRF)",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-04-16T18:44:20.705Z",
            "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
            "shortName": "GitHub_M"
          },
          "references": [
            {
              "name": "https://github.com/axios/axios/security/advisories/GHSA-3p68-rc4w-qgx5",
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "https://github.com/axios/axios/security/advisories/GHSA-3p68-rc4w-qgx5"
            },
            {
              "name": "https://github.com/axios/axios/pull/10661",
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "https://github.com/axios/axios/pull/10661"
            },
            {
              "name": "https://github.com/axios/axios/pull/10688",
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "https://github.com/axios/axios/pull/10688"
            },
            {
              "name": "https://github.com/axios/axios/commit/03cdfc99e8db32a390e12128208b6778492cee9c",
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "https://github.com/axios/axios/commit/03cdfc99e8db32a390e12128208b6778492cee9c"
            },
            {
              "name": "https://github.com/axios/axios/commit/fb3befb6daac6cad26b2e54094d0f2d9e47f24df",
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "https://github.com/axios/axios/commit/fb3befb6daac6cad26b2e54094d0f2d9e47f24df"
            },
            {
              "name": "https://datatracker.ietf.org/doc/html/rfc1034#section-3.1",
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "https://datatracker.ietf.org/doc/html/rfc1034#section-3.1"
            },
            {
              "name": "https://datatracker.ietf.org/doc/html/rfc3986#section-3.2.2",
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "https://datatracker.ietf.org/doc/html/rfc3986#section-3.2.2"
            },
            {
              "name": "https://github.com/axios/axios/releases/tag/v0.31.0",
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "https://github.com/axios/axios/releases/tag/v0.31.0"
            },
            {
              "name": "https://github.com/axios/axios/releases/tag/v1.15.0",
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "https://github.com/axios/axios/releases/tag/v1.15.0"
            }
          ],
          "source": {
            "advisory": "GHSA-3p68-rc4w-qgx5",
            "discovery": "UNKNOWN"
          },
          "title": "Axios has a NO_PROXY Hostname Normalization Bypass that Leads to SSRF"
        }
      },
      "cveMetadata": {
        "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "assignerShortName": "GitHub_M",
        "cveId": "CVE-2025-62718",
        "datePublished": "2026-04-09T14:31:46.067Z",
        "dateReserved": "2025-10-20T19:41:22.741Z",
        "dateUpdated": "2026-09-10T12:04:48.730Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2026-39892 (GCVE-0-2026-39892)

    Vulnerability from cvelistv5 – Published: 2026-04-08 20:49 – Updated: 2026-09-10 12:04
    VLAI
    Title
    cryptography has a buffer overflow if non-contiguous buffers were passed to APIs
    Summary
    cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. From 45.0.0 to before 46.0.7, if a non-contiguous buffer was passed to APIs which accepted Python buffers (e.g. Hash.update()), this could lead to buffer overflows. This vulnerability is fixed in 46.0.7.
    SSVC
    Exploitation: none Automatable: yes Technical Impact: partial
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-04-09 19:41 UTC
    CWE
    • CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer
    • CWE-131 - Incorrect Calculation of Buffer Size
    References
    URL Tags
    https://github.com/pyca/cryptography/security/adv… x_refsource_CONFIRM
    http://www.openwall.com/lists/oss-security/2026/0…
    https://access.redhat.com/security/cve/CVE-2026-39892 vdb-entryx_refsource_REDHAT
    https://bugzilla.redhat.com/show_bug.cgi?id=2456735 issue-trackingx_refsource_REDHAT
    https://security.access.redhat.com/data/csaf/v2/v… x_sadp-csaf-vex
    https://access.redhat.com/errata/RHSA-2026:24761 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:24762 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:30089 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:30088 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:24866 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:20338 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:43855 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:43854 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:43851 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:43670 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:43853 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:43651 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:46956 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:7295 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:42644 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:24977 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:37275 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:22840 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:22629 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:21017 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:24853 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:19375 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:22465 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:23361 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:24483 vendor-advisoryx_refsource_REDHAT
    Impacted products
    Vendor Product Version
    pyca cryptography Affected: >= 45.0.0, < 46.0.7
    Create a notification for this product.
    Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 8 Unaffected: 0:4.6.29-2.el8ap , < * (rpm)
        cpe:/a:redhat:ansible_automation_platform:2.5::el8
    Create a notification for this product.
    Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 8 Unaffected: 0:46.0.7-1.el8ap , < * (rpm)
        cpe:/a:redhat:ansible_automation_platform:2.5::el8
    Create a notification for this product.
    Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 9 Unaffected: 0:4.6.29-2.el9ap , < * (rpm)
        cpe:/a:redhat:ansible_automation_platform:2.5::el9
    Create a notification for this product.
    Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 9 Unaffected: 0:46.0.7-1.el9ap , < * (rpm)
        cpe:/a:redhat:ansible_automation_platform:2.5::el9
    Create a notification for this product.
    Red Hat Red Hat Ansible Automation Platform 2.6 for RHEL 9 Unaffected: 0:4.7.12-1.el9ap , < * (rpm)
        cpe:/a:redhat:ansible_automation_platform:2.6::el9
    Create a notification for this product.
    Red Hat Red Hat Ansible Automation Platform 2.6 for RHEL 9 Unaffected: 0:46.0.7-1.el9ap , < * (rpm)
        cpe:/a:redhat:ansible_automation_platform:2.6::el9
    Create a notification for this product.
    Red Hat Red Hat AI Inference Server 3.3 Unaffected: 1782353093 , < * (rpm)
        cpe:/a:redhat:ai_inference_server:3.3::el9
    Create a notification for this product.
    Red Hat Red Hat AI Inference Server 3.3 Unaffected: 1782352847 , < * (rpm)
        cpe:/a:redhat:ai_inference_server:3.3::el9
    Create a notification for this product.
    Red Hat Red Hat Ansible Automation Platform 2.6 Unaffected: 1779762270 , < * (rpm)
        cpe:/a:redhat:ansible_automation_platform:2.6::el9
    Create a notification for this product.
    Red Hat Red Hat Ansible Automation Platform 2.6 Unaffected: 1779759716 , < * (rpm)
        cpe:/a:redhat:ansible_automation_platform:2.6::el9
    Create a notification for this product.
    Red Hat Red Hat Ansible Automation Platform 2.6 Unaffected: 1779734628 , < * (rpm)
        cpe:/a:redhat:ansible_automation_platform:2.6::el9
    Create a notification for this product.
    Red Hat Red Hat Ansible Automation Platform 2.6 Unaffected: 1779773804 , < * (rpm)
        cpe:/a:redhat:ansible_automation_platform:2.6::el9
    Create a notification for this product.
    Red Hat Red Hat Ansible Automation Platform 2.6 Unaffected: 1779761061 , < * (rpm)
        cpe:/a:redhat:ansible_automation_platform:2.6::el9
    Create a notification for this product.
    Red Hat Red Hat Ansible Automation Platform 2.6 Unaffected: 1779760844 , < * (rpm)
        cpe:/a:redhat:ansible_automation_platform:2.6::el9
    Create a notification for this product.
    Red Hat Red Hat Discovery 2 Unaffected: 1779395228 , < * (rpm)
        cpe:/a:redhat:discovery:2::el9
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux AI 3.3 Unaffected: 1784670204 , < * (rpm)
        cpe:/a:redhat:enterprise_linux_ai:3.3::el9
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux AI 3.3 Unaffected: 1784669680 , < * (rpm)
        cpe:/a:redhat:enterprise_linux_ai:3.3::el9
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux AI 3.3 Unaffected: 1784736822 , < * (rpm)
        cpe:/a:redhat:enterprise_linux_ai:3.3::el9
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux AI 3.3 Unaffected: 1784736941 , < * (rpm)
        cpe:/a:redhat:enterprise_linux_ai:3.3::el9
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux AI 3.3 Unaffected: 1784736798 , < * (rpm)
        cpe:/a:redhat:enterprise_linux_ai:3.3::el9
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux AI 3.3 Unaffected: 1784736857 , < * (rpm)
        cpe:/a:redhat:enterprise_linux_ai:3.3::el9
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux AI 3.3 Unaffected: 1785163184 , < * (rpm)
        cpe:/a:redhat:enterprise_linux_ai:3.3::el9
    Create a notification for this product.
    Red Hat Red Hat Hardened Images Unaffected: 46.0.7-1.hum1 , < * (rpm)
        cpe:/a:redhat:hummingbird:1
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 2.25 Unaffected: 1780069069 , < * (rpm)
        cpe:/a:redhat:openshift_ai:2.25::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 2.25 Unaffected: 1783701598 , < * (rpm)
        cpe:/a:redhat:openshift_ai:2.25::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 3.3 Unaffected: 1782471587 , < * (rpm)
        cpe:/a:redhat:openshift_ai:3.3::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 3.3 Unaffected: 1782472374 , < * (rpm)
        cpe:/a:redhat:openshift_ai:3.3::el9
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI 3.3 Unaffected: 1782471606 , < * (rpm)
        cpe:/a:redhat:openshift_ai:3.3::el9
    Create a notification for this product.
    Red Hat Red Hat Quay 3.10 Unaffected: 1779822261 , < * (rpm)
        cpe:/a:redhat:quay:3.10::el8
    Create a notification for this product.
    Red Hat Red Hat Quay 3.12 Unaffected: 1779811412 , < * (rpm)
        cpe:/a:redhat:quay:3.12::el8
    Create a notification for this product.
    Red Hat Red Hat Quay 3.14 Unaffected: 1779689392 , < * (rpm)
        cpe:/a:redhat:quay:3.14::el8
    Create a notification for this product.
    Red Hat Red Hat Quay 3.15 Unaffected: 1780891395 , < * (rpm)
        cpe:/a:redhat:quay:3.15::el8
    Create a notification for this product.
    Red Hat Red Hat Quay 3.16 Unaffected: 1779204086 , < * (rpm)
        cpe:/a:redhat:quay:3.16::el9
    Create a notification for this product.
    Red Hat Red Hat Quay 3.17 Unaffected: 1779922205 , < * (rpm)
        cpe:/a:redhat:quay:3.17::el9
    Create a notification for this product.
    Red Hat Red Hat Quay 3.9 Unaffected: 1779811473 , < * (rpm)
        cpe:/a:redhat:quay:3.9::el8
    Create a notification for this product.
    Red Hat Red Hat Trusted Artifact Signer 1.4 Unaffected: 1780914886 , < * (rpm)
        cpe:/a:redhat:trusted_artifact_signer:1.4::el9
    Create a notification for this product.
    Red Hat Lightspeed Core     cpe:/a:redhat:lightspeed_core
    Create a notification for this product.
    Red Hat Migration Toolkit for Applications 8     cpe:/a:redhat:migration_toolkit_applications:8
    Create a notification for this product.
    Red Hat OpenShift Lightspeed     cpe:/a:redhat:openshift_lightspeed
    Create a notification for this product.
    Red Hat Red Hat AI Inference Server     cpe:/a:redhat:ai_inference_server:3
    Create a notification for this product.
    Red Hat Red Hat Ansible Automation Platform 2     cpe:/a:redhat:ansible_automation_platform:2
    Create a notification for this product.
    Red Hat Red Hat Ansible Automation Platform Ansible Core 2     cpe:/a:redhat:ansible_core:2
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 8     cpe:/o:redhat:enterprise_linux:8
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 9     cpe:/o:redhat:enterprise_linux:9
    Create a notification for this product.
    Red Hat Red Hat Enterprise Linux AI (RHEL AI) 3     cpe:/a:redhat:enterprise_linux_ai:3
    Create a notification for this product.
    Red Hat Red Hat OpenShift AI (RHOAI)     cpe:/a:redhat:openshift_ai
    Create a notification for this product.
    Red Hat Red Hat Quay 3     cpe:/a:redhat:quay:3
    Create a notification for this product.
    Red Hat Red Hat Satellite 6     cpe:/a:redhat:satellite:6
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2026-04-08T21:16:07.164Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "url": "http://www.openwall.com/lists/oss-security/2026/04/08/12"
              }
            ],
            "title": "CVE Program Container"
          },
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-39892",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "yes"
                      },
                      {
                        "Technical Impact": "partial"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-04-09T19:41:57.662246Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-04-09T19:52:22.602Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          },
          {
            "affected": [
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2.5::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "automation-controller",
                "product": "Red Hat Ansible Automation Platform 2.5 for RHEL 8",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:4.6.29-2.el8ap",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2.5::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "python3.12-cryptography",
                "product": "Red Hat Ansible Automation Platform 2.5 for RHEL 8",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:46.0.7-1.el8ap",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2.5::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "automation-controller",
                "product": "Red Hat Ansible Automation Platform 2.5 for RHEL 9",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:4.6.29-2.el9ap",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2.5::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "python3.12-cryptography",
                "product": "Red Hat Ansible Automation Platform 2.5 for RHEL 9",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:46.0.7-1.el9ap",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2.6::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "automation-controller",
                "product": "Red Hat Ansible Automation Platform 2.6 for RHEL 9",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:4.7.12-1.el9ap",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2.6::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "python3.12-cryptography",
                "product": "Red Hat Ansible Automation Platform 2.6 for RHEL 9",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:46.0.7-1.el9ap",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:ai_inference_server:3.3::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhaiis/vllm-rocm-rhel9",
                "product": "Red Hat AI Inference Server 3.3",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782353093",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:ai_inference_server:3.3::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhaiis/vllm-cuda-rhel9",
                "product": "Red Hat AI Inference Server 3.3",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782352847",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2.6::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "ansible-automation-platform-26/controller-rhel9",
                "product": "Red Hat Ansible Automation Platform 2.6",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779762270",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2.6::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "ansible-automation-platform-26/eda-controller-rhel9",
                "product": "Red Hat Ansible Automation Platform 2.6",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779759716",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2.6::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "ansible-automation-platform-26/ee-supported-rhel9",
                "product": "Red Hat Ansible Automation Platform 2.6",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779734628",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2.6::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "ansible-automation-platform-26/gateway-rhel9",
                "product": "Red Hat Ansible Automation Platform 2.6",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779773804",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2.6::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "ansible-automation-platform-26/hub-rhel9",
                "product": "Red Hat Ansible Automation Platform 2.6",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779761061",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2.6::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "ansible-automation-platform-tech-preview/metrics-service-rhel9",
                "product": "Red Hat Ansible Automation Platform 2.6",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779760844",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:discovery:2::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "discovery/discovery-server-rhel9",
                "product": "Red Hat Discovery 2",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779395228",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:enterprise_linux_ai:3.3::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhelai3/bootc-rocm-rhel9",
                "product": "Red Hat Enterprise Linux AI 3.3",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1784670204",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:enterprise_linux_ai:3.3::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhelai3/bootc-cuda-rhel9",
                "product": "Red Hat Enterprise Linux AI 3.3",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1784669680",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:enterprise_linux_ai:3.3::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhelai3/bootc-azure-rocm-rhel9",
                "product": "Red Hat Enterprise Linux AI 3.3",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1784736822",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:enterprise_linux_ai:3.3::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhelai3/bootc-gcp-cuda-rhel9",
                "product": "Red Hat Enterprise Linux AI 3.3",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1784736941",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:enterprise_linux_ai:3.3::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhelai3/bootc-azure-cuda-rhel9",
                "product": "Red Hat Enterprise Linux AI 3.3",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1784736798",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:enterprise_linux_ai:3.3::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhelai3/bootc-aws-cuda-rhel9",
                "product": "Red Hat Enterprise Linux AI 3.3",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1784736857",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:enterprise_linux_ai:3.3::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhelai3/disk-image-cuda-rhel9",
                "product": "Red Hat Enterprise Linux AI 3.3",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1785163184",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:hummingbird:1"
                ],
                "defaultStatus": "affected",
                "packageName": "python-cryptography-main",
                "product": "Red Hat Hardened Images",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "46.0.7-1.hum1",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:2.25::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-vllm-gaudi-rhel9",
                "product": "Red Hat OpenShift AI 2.25",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1780069069",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:2.25::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-llama-stack-core-rhel9",
                "product": "Red Hat OpenShift AI 2.25",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1783701598",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:3.3::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-llama-stack-core-rhel9",
                "product": "Red Hat OpenShift AI 3.3",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782471587",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:3.3::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-trustyai-garak-lls-provider-dsp-rhel9",
                "product": "Red Hat OpenShift AI 3.3",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782472374",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai:3.3::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-trustyai-nemo-guardrails-server-rhel9",
                "product": "Red Hat OpenShift AI 3.3",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782471606",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.10::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel8",
                "product": "Red Hat Quay 3.10",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779822261",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.12::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel8",
                "product": "Red Hat Quay 3.12",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779811412",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.14::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel8",
                "product": "Red Hat Quay 3.14",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779689392",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.15::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel8",
                "product": "Red Hat Quay 3.15",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1780891395",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.16::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel9",
                "product": "Red Hat Quay 3.16",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779204086",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.17::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel9",
                "product": "Red Hat Quay 3.17",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779922205",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.9::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel8",
                "product": "Red Hat Quay 3.9",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779811473",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:trusted_artifact_signer:1.4::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "rhtas/model-transparency-rhel9",
                "product": "Red Hat Trusted Artifact Signer 1.4",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1780914886",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:lightspeed_core"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift-lightspeed-tech-preview/lightspeed-rag-tool-rhel9",
                "product": "Lightspeed Core",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:lightspeed_core"
                ],
                "defaultStatus": "affected",
                "packageName": "redhat-user-workloads/lightspeed-stack",
                "product": "Lightspeed Core",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:migration_toolkit_applications:8"
                ],
                "defaultStatus": "affected",
                "packageName": "redhat-user-workloads/art-images",
                "product": "Migration Toolkit for Applications 8",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_lightspeed"
                ],
                "defaultStatus": "unaffected",
                "packageName": "openshift-lightspeed/lightspeed-ocp-rag-rhel9",
                "product": "OpenShift Lightspeed",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_lightspeed"
                ],
                "defaultStatus": "unaffected",
                "packageName": "openshift-lightspeed/lightspeed-service-api-rhel9",
                "product": "OpenShift Lightspeed",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ai_inference_server:3"
                ],
                "defaultStatus": "affected",
                "packageName": "redhat-user-workloads/rhaiis-cpu-ubi9-3-3",
                "product": "Red Hat AI Inference Server",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ai_inference_server:3"
                ],
                "defaultStatus": "affected",
                "packageName": "redhat-user-workloads/rhaiis-rocm-ubi9-3-3",
                "product": "Red Hat AI Inference Server",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ai_inference_server:3"
                ],
                "defaultStatus": "affected",
                "packageName": "redhat-user-workloads/rhaiis-tpu-ubi9-3-3",
                "product": "Red Hat AI Inference Server",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "ansible-automation-platform-24/lightspeed-rhel8-operator",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "affected",
                "packageName": "ansible-automation-platform-25/lightspeed-chatbot-rhel8",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "ansible-automation-platform-26/lightspeed-rhel9-operator",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "affected",
                "packageName": "redhat-user-workloads/automation-reports",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "affected",
                "packageName": "redhat-user-workloads/ee-supported-rhel8",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "redhat-user-workloads/lightspeed-chatbot-rhel9",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_automation_platform:2"
                ],
                "defaultStatus": "affected",
                "packageName": "redhat-user-workloads/mcp-tools-rhel9",
                "product": "Red Hat Ansible Automation Platform 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_core:2"
                ],
                "defaultStatus": "affected",
                "packageName": "redhat-user-workloads/ee-minimal-ansible-core-2-19-rhel-8-tech-preview",
                "product": "Red Hat Ansible Automation Platform Ansible Core 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_core:2"
                ],
                "defaultStatus": "affected",
                "packageName": "redhat-user-workloads/ee-minimal-ansible-core-2-19-rhel-9-tech-preview",
                "product": "Red Hat Ansible Automation Platform Ansible Core 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_core:2"
                ],
                "defaultStatus": "affected",
                "packageName": "redhat-user-workloads/ee-minimal-ansible-core-2-20-rhel-8-tech-preview",
                "product": "Red Hat Ansible Automation Platform Ansible Core 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:ansible_core:2"
                ],
                "defaultStatus": "affected",
                "packageName": "redhat-user-workloads/ee-minimal-ansible-core-2-20-rhel-9-tech-preview",
                "product": "Red Hat Ansible Automation Platform Ansible Core 2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:8"
                ],
                "defaultStatus": "affected",
                "packageName": "fence-agents",
                "product": "Red Hat Enterprise Linux 8",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/o:redhat:enterprise_linux:9"
                ],
                "defaultStatus": "affected",
                "packageName": "fence-agents",
                "product": "Red Hat Enterprise Linux 9",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:enterprise_linux_ai:3"
                ],
                "defaultStatus": "affected",
                "packageName": "redhat-user-workloads/bootc-cuda-azure-3-3",
                "product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:enterprise_linux_ai:3"
                ],
                "defaultStatus": "affected",
                "packageName": "redhat-user-workloads/bootc-cuda-gcp-3-3",
                "product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:enterprise_linux_ai:3"
                ],
                "defaultStatus": "affected",
                "packageName": "redhat-user-workloads/bootc-rocm-azure-3-3",
                "product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-feature-server-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "unaffected",
                "packageName": "rhoai/odh-kserve-agent-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "unaffected",
                "packageName": "rhoai/odh-kserve-controller-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "unaffected",
                "packageName": "rhoai/odh-kserve-router-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-kserve-storage-initializer-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-mlflow-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-pipeline-runtime-minimal-cpu-py312-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-pipeline-runtime-pytorch-cuda-py312-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-pipeline-runtime-pytorch-llmcompressor-cuda-py312-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-pipeline-runtime-pytorch-rocm-py312-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-pipeline-runtime-tensorflow-cuda-py312-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-pipeline-runtime-tensorflow-rocm-py312-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-training-cuda128-torch29-py312-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-workbench-jupyter-datascience-cpu-py312-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-workbench-jupyter-minimal-cpu-py312-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-workbench-jupyter-minimal-cuda-py312-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-workbench-jupyter-minimal-rocm-py312-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-workbench-jupyter-pytorch-cuda-py312-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-workbench-jupyter-pytorch-llmcompressor-cuda-py312-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-workbench-jupyter-pytorch-rocm-py312-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-workbench-jupyter-tensorflow-cuda-py312-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-workbench-jupyter-tensorflow-rocm-py312-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openshift_ai"
                ],
                "defaultStatus": "affected",
                "packageName": "rhoai/odh-workbench-jupyter-trustyai-cpu-py312-rhel9",
                "product": "Red Hat OpenShift AI (RHOAI)",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:quay:3"
                ],
                "defaultStatus": "affected",
                "packageName": "redhat-user-workloads/quay-quay-v3-12",
                "product": "Red Hat Quay 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:quay:3"
                ],
                "defaultStatus": "affected",
                "packageName": "redhat-user-workloads/quay-quay-v3-13",
                "product": "Red Hat Quay 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:quay:3"
                ],
                "defaultStatus": "affected",
                "packageName": "redhat-user-workloads/quay-quay-v3-14",
                "product": "Red Hat Quay 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:quay:3"
                ],
                "defaultStatus": "affected",
                "packageName": "redhat-user-workloads/quay-quay-v3-15",
                "product": "Red Hat Quay 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:quay:3"
                ],
                "defaultStatus": "affected",
                "packageName": "redhat-user-workloads/quay-quay-v3-16",
                "product": "Red Hat Quay 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:quay:3"
                ],
                "defaultStatus": "affected",
                "packageName": "redhat-user-workloads/quay-quay-v3-17",
                "product": "Red Hat Quay 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:quay:3"
                ],
                "defaultStatus": "affected",
                "packageName": "redhat-user-workloads/quay-quay-v3-9",
                "product": "Red Hat Quay 3",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:satellite:6"
                ],
                "defaultStatus": "affected",
                "packageName": "redhat-user-workloads/iop-advisor-engine",
                "product": "Red Hat Satellite 6",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:satellite:6"
                ],
                "defaultStatus": "unaffected",
                "packageName": "redhat-user-workloads/iop-host-inventory-sat-6-18",
                "product": "Red Hat Satellite 6",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:satellite:6"
                ],
                "defaultStatus": "affected",
                "packageName": "satellite/foreman-mcp-server-rhel9",
                "product": "Red Hat Satellite 6",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:satellite:6"
                ],
                "defaultStatus": "unaffected",
                "packageName": "satellite/iop-vmaas-rhel9",
                "product": "Red Hat Satellite 6",
                "vendor": "Red Hat"
              }
            ],
            "datePublic": "2026-04-08T20:49:41.967Z",
            "descriptions": [
              {
                "lang": "en",
                "value": "A flaw was found in the cryptography library. This vulnerability occurs when a non-contiguous buffer is passed to certain application programming interfaces (APIs) that accept Python buffers, such as Hash.update(). A remote attacker could exploit this to cause a buffer overflow, potentially leading to a denial of service."
              }
            ],
            "metrics": [
              {
                "other": {
                  "content": {
                    "namespace": "https://access.redhat.com/security/updates/classification/",
                    "value": "Important"
                  },
                  "type": "Red Hat severity rating"
                }
              },
              {
                "cvssV3_1": {
                  "attackComplexity": "LOW",
                  "attackVector": "NETWORK",
                  "availabilityImpact": "LOW",
                  "baseScore": 7.3,
                  "baseSeverity": "HIGH",
                  "confidentialityImpact": "LOW",
                  "integrityImpact": "LOW",
                  "privilegesRequired": "NONE",
                  "scope": "UNCHANGED",
                  "userInteraction": "NONE",
                  "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
                  "version": "3.1"
                },
                "format": "CVSS"
              }
            ],
            "problemTypes": [
              {
                "descriptions": [
                  {
                    "cweId": "CWE-131",
                    "description": "Incorrect Calculation of Buffer Size",
                    "lang": "en",
                    "type": "CWE"
                  }
                ]
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-09-10T12:04:47.954Z",
              "orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
              "shortName": "redhat-SADP"
            },
            "references": [
              {
                "tags": [
                  "vdb-entry",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/security/cve/CVE-2026-39892"
              },
              {
                "name": "RHBZ#2456735",
                "tags": [
                  "issue-tracking",
                  "x_refsource_REDHAT"
                ],
                "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456735"
              },
              {
                "tags": [
                  "x_sadp-csaf-vex"
                ],
                "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-39892.json"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:24761"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:24762"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:30089"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:30088"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:24866"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:20338"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:43855"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:43854"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:43851"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:43670"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:43853"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:43651"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:46956"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:7295"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:42644"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:24977"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:37275"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:22840"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:22629"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:21017"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:24853"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:19375"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:22465"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:23361"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:24483"
              }
            ],
            "solutions": [
              {
                "lang": "en",
                "value": "RHSA-2026:24761: Red Hat Ansible Automation Platform 2.5 for RHEL 8, Red Hat Ansible Automation Platform 2.5 for RHEL 9"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:24762: Red Hat Ansible Automation Platform 2.6 for RHEL 9"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:30089: Red Hat AI Inference Server 3.3"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:30088: Red Hat AI Inference Server 3.3"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:24866: Red Hat Ansible Automation Platform 2.6"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:20338: Red Hat Discovery 2"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:43855: Red Hat Enterprise Linux AI 3.3"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:43854: Red Hat Enterprise Linux AI 3.3"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:43851: Red Hat Enterprise Linux AI 3.3"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:43670: Red Hat Enterprise Linux AI 3.3"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:43853: Red Hat Enterprise Linux AI 3.3"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:43651: Red Hat Enterprise Linux AI 3.3"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:46956: Red Hat Enterprise Linux AI 3.3"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:7295: Red Hat Hardened Images"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:42644: Red Hat OpenShift AI 2.25"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:24977: Red Hat OpenShift AI 2.25"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:37275: Red Hat OpenShift AI 3.3"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:22840: Red Hat Quay 3.10"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:22629: Red Hat Quay 3.12"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:21017: Red Hat Quay 3.14"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:24853: Red Hat Quay 3.15"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:19375: Red Hat Quay 3.16"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:22465: Red Hat Quay 3.17"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:23361: Red Hat Quay 3.9"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:24483: Red Hat Trusted Artifact Signer 1.4"
              }
            ],
            "timeline": [
              {
                "lang": "en",
                "time": "2026-04-08T22:00:59.416Z",
                "value": "Reported to Red Hat."
              },
              {
                "lang": "en",
                "time": "2026-04-08T20:49:41.967Z",
                "value": "Made public."
              }
            ],
            "title": "cryptography: Cryptography: Buffer overflow via non-contiguous buffer in API",
            "workarounds": [
              {
                "lang": "en",
                "value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."
              }
            ],
            "x_adpType": "supplier",
            "x_generator": {
              "engine": "sadp-cli 1.0.0"
            }
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "cryptography",
              "vendor": "pyca",
              "versions": [
                {
                  "status": "affected",
                  "version": "\u003e= 45.0.0, \u003c 46.0.7"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. From 45.0.0 to before 46.0.7, if a non-contiguous buffer was passed to APIs which accepted Python buffers (e.g. Hash.update()), this could lead to buffer overflows. This vulnerability is fixed in 46.0.7."
            }
          ],
          "metrics": [
            {
              "cvssV4_0": {
                "attackComplexity": "LOW",
                "attackRequirements": "NONE",
                "attackVector": "NETWORK",
                "baseScore": 6.9,
                "baseSeverity": "MEDIUM",
                "privilegesRequired": "NONE",
                "subAvailabilityImpact": "NONE",
                "subConfidentialityImpact": "NONE",
                "subIntegrityImpact": "NONE",
                "userInteraction": "NONE",
                "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N",
                "version": "4.0",
                "vulnAvailabilityImpact": "LOW",
                "vulnConfidentialityImpact": "NONE",
                "vulnIntegrityImpact": "NONE"
              }
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-119",
                  "description": "CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-04-08T20:49:41.967Z",
            "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
            "shortName": "GitHub_M"
          },
          "references": [
            {
              "name": "https://github.com/pyca/cryptography/security/advisories/GHSA-p423-j2cm-9vmq",
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "https://github.com/pyca/cryptography/security/advisories/GHSA-p423-j2cm-9vmq"
            }
          ],
          "source": {
            "advisory": "GHSA-p423-j2cm-9vmq",
            "discovery": "UNKNOWN"
          },
          "title": "cryptography has a buffer overflow if non-contiguous buffers were passed to APIs"
        }
      },
      "cveMetadata": {
        "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "assignerShortName": "GitHub_M",
        "cveId": "CVE-2026-39892",
        "datePublished": "2026-04-08T20:49:41.967Z",
        "dateReserved": "2026-04-07T20:32:03.011Z",
        "dateUpdated": "2026-09-10T12:04:47.954Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2026-32591 (GCVE-0-2026-32591)

    Vulnerability from cvelistv5 – Published: 2026-04-08 17:06 – Updated: 2026-09-10 12:05
    VLAI
    Title
    Mirror-registry: quay: server-side request forgery in proxy cache upstream registry configuration
    Summary
    A flaw was found in Red Hat Quay's Proxy Cache configuration feature. When an organization administrator configures an upstream registry for proxy caching, Quay makes a network connection to the specified registry hostname without verifying that it points to a legitimate external service. An attacker with organization administrator privileges could supply a crafted hostname to force the Quay server to make requests to internal network services, cloud infrastructure endpoints, or other resources that should not be accessible from the Quay application.
    SSVC
    Exploitation: none Automatable: no Technical Impact: partial
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-04-10 20:34 UTC
    CWE
    • CWE-918 - Server-Side Request Forgery (SSRF)
    References
    URL Tags
    https://access.redhat.com/errata/RHSA-2026:24833 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:40262 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:41031 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:41066 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:42146 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:42796 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:43052 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:48085 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/security/cve/CVE-2026-32591 vdb-entryx_refsource_REDHAT
    https://bugzilla.redhat.com/show_bug.cgi?id=2446965 issue-trackingx_refsource_REDHAT
    https://security.access.redhat.com/data/csaf/v2/v… x_sadp-csaf-vex
    Impacted products
    Vendor Product Version
    Red Hat Red Hat Quay 3.10 Unaffected: 1783750447 , < * (rpm)
        cpe:/a:redhat:quay:3.10::el8
    Create a notification for this product.
    Red Hat Red Hat Quay 3.12 Unaffected: 1783751865 , < * (rpm)
        cpe:/a:redhat:quay:3.12::el8
    Create a notification for this product.
    Red Hat Red Hat Quay 3.12 Unaffected: 1784353904 , < * (rpm)
        cpe:/a:redhat:quay:3.12::el8
    Create a notification for this product.
    Red Hat Red Hat Quay 3.15 Unaffected: 1784351966 , < * (rpm)
        cpe:/a:redhat:quay:3.15::el8
    Create a notification for this product.
    Red Hat Red Hat Quay 3.16 Unaffected: 1783955846 , < * (rpm)
        cpe:/a:redhat:quay:3.16::el9
    Create a notification for this product.
    Red Hat Red Hat Quay 3.17 Unaffected: 1780604033 , < * (rpm)
        cpe:/a:redhat:quay:3.17::el9
    Create a notification for this product.
    Red Hat Red Hat Quay 3.18 Unaffected: 1784987273 , < * (rpm)
        cpe:/a:redhat:quay:3.18::el9
    Create a notification for this product.
    Red Hat Red Hat Quay 3.9 Unaffected: 1784125838 , < * (rpm)
        cpe:/a:redhat:quay:3.9::el8
    Create a notification for this product.
    Red Hat mirror registry for Red Hat OpenShift     cpe:/a:redhat:mirror_registry:1
    Create a notification for this product.
    Red Hat mirror registry for Red Hat OpenShift 2     cpe:/a:redhat:mirror_registry:2
    Create a notification for this product.
    Red Hat Red Hat Quay 3.12 Unaffected: 1783751865 , < * (rpm)
    Unaffected: 1784353904 , < * (rpm)
        cpe:/a:redhat:quay:3.12::el8
    Create a notification for this product.
    Date Public
    2026-04-08 00:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-32591",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "partial"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-04-10T20:34:13.210994Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-05-27T14:52:42.383Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          },
          {
            "affected": [
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.10::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel8",
                "product": "Red Hat Quay 3.10",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1783750447",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.12::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel8",
                "product": "Red Hat Quay 3.12",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1783751865",
                    "versionType": "rpm"
                  },
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1784353904",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.15::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel8",
                "product": "Red Hat Quay 3.15",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1784351966",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.16::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel9",
                "product": "Red Hat Quay 3.16",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1783955846",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.17::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel9",
                "product": "Red Hat Quay 3.17",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1780604033",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.18::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel9",
                "product": "Red Hat Quay 3.18",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1784987273",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.9::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel8",
                "product": "Red Hat Quay 3.9",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1784125838",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:mirror_registry:1"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift/mirror-registry-rhel8",
                "product": "mirror registry for Red Hat OpenShift",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:mirror_registry:2"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift/mirror-registry-rhel8",
                "product": "mirror registry for Red Hat OpenShift 2",
                "vendor": "Red Hat"
              }
            ],
            "datePublic": "2026-04-08T00:00:00.000Z",
            "descriptions": [
              {
                "lang": "en",
                "value": "A flaw was found in Red Hat Quay\u0027s Proxy Cache configuration feature. When an organization administrator configures an upstream registry for proxy caching, Quay makes a network connection to the specified registry hostname without verifying that it points to a legitimate external service. An attacker with organization administrator privileges could supply a crafted hostname to force the Quay server to make requests to internal network services, cloud infrastructure endpoints, or other resources that should not be accessible from the Quay application."
              }
            ],
            "metrics": [
              {
                "other": {
                  "content": {
                    "namespace": "https://access.redhat.com/security/updates/classification/",
                    "value": "Important"
                  },
                  "type": "Red Hat severity rating"
                }
              },
              {
                "cvssV3_1": {
                  "attackComplexity": "LOW",
                  "attackVector": "NETWORK",
                  "availabilityImpact": "NONE",
                  "baseScore": 5.2,
                  "baseSeverity": "MEDIUM",
                  "confidentialityImpact": "HIGH",
                  "integrityImpact": "LOW",
                  "privilegesRequired": "HIGH",
                  "scope": "UNCHANGED",
                  "userInteraction": "REQUIRED",
                  "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:L/A:N",
                  "version": "3.1"
                },
                "format": "CVSS"
              }
            ],
            "problemTypes": [
              {
                "descriptions": [
                  {
                    "cweId": "CWE-918",
                    "description": "Server-Side Request Forgery (SSRF)",
                    "lang": "en",
                    "type": "CWE"
                  }
                ]
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-09-10T12:05:07.380Z",
              "orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
              "shortName": "redhat-SADP"
            },
            "references": [
              {
                "tags": [
                  "vdb-entry",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/security/cve/CVE-2026-32591"
              },
              {
                "name": "RHBZ#2446965",
                "tags": [
                  "issue-tracking",
                  "x_refsource_REDHAT"
                ],
                "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2446965"
              },
              {
                "tags": [
                  "x_sadp-csaf-vex"
                ],
                "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-32591.json"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:41031"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:42146"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:43052"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:42796"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:41066"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:24833"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:48085"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:40262"
              }
            ],
            "solutions": [
              {
                "lang": "en",
                "value": "RHSA-2026:41031: Red Hat Quay 3.10"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:42146: Red Hat Quay 3.12"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:43052: Red Hat Quay 3.12"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:42796: Red Hat Quay 3.15"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:41066: Red Hat Quay 3.16"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:24833: Red Hat Quay 3.17"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:48085: Red Hat Quay 3.18"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:40262: Red Hat Quay 3.9"
              }
            ],
            "timeline": [
              {
                "lang": "en",
                "time": "2026-03-12T15:09:38.210Z",
                "value": "Reported to Red Hat."
              },
              {
                "lang": "en",
                "time": "2026-04-08T00:00:00.000Z",
                "value": "Made public."
              }
            ],
            "title": "mirror-registry: quay: server-side request forgery in proxy cache upstream registry configuration",
            "x_adpType": "supplier",
            "x_generator": {
              "engine": "sadp-cli 1.0.0"
            }
          }
        ],
        "cna": {
          "affected": [
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:quay:3.10::el8"
              ],
              "defaultStatus": "affected",
              "packageName": "quay/quay-rhel8",
              "product": "Red Hat Quay 3.10",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "1783750447",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:quay:3.12::el8"
              ],
              "defaultStatus": "affected",
              "packageName": "quay/quay-rhel8",
              "product": "Red Hat Quay 3.12",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "1783751865",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:quay:3.12::el8"
              ],
              "defaultStatus": "affected",
              "packageName": "quay/quay-rhel8",
              "product": "Red Hat Quay 3.12",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "1784353904",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:quay:3.15::el8"
              ],
              "defaultStatus": "affected",
              "packageName": "quay/quay-rhel8",
              "product": "Red Hat Quay 3.15",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "1784351966",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:quay:3.16::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "quay/quay-rhel9",
              "product": "Red Hat Quay 3.16",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "1783955846",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:quay:3.17::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "quay/quay-rhel9",
              "product": "Red Hat Quay 3.17",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "1780604033",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:quay:3.18::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "quay/quay-rhel9",
              "product": "Red Hat Quay 3.18",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "1784987273",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:quay:3.9::el8"
              ],
              "defaultStatus": "affected",
              "packageName": "quay/quay-rhel8",
              "product": "Red Hat Quay 3.9",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "1784125838",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:mirror_registry:1"
              ],
              "defaultStatus": "affected",
              "packageName": "openshift/mirror-registry-rhel8",
              "product": "mirror registry for Red Hat OpenShift",
              "vendor": "Red Hat"
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:mirror_registry:2"
              ],
              "defaultStatus": "affected",
              "packageName": "openshift/mirror-registry-rhel8",
              "product": "mirror registry for Red Hat OpenShift 2",
              "vendor": "Red Hat"
            }
          ],
          "credits": [
            {
              "lang": "en",
              "value": "Red Hat would like to thank Antony Di Scala and Michael Whale for reporting this issue."
            }
          ],
          "datePublic": "2026-04-08T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "A flaw was found in Red Hat Quay\u0027s Proxy Cache configuration feature. When an organization administrator configures an upstream registry for proxy caching, Quay makes a network connection to the specified registry hostname without verifying that it points to a legitimate external service. An attacker with organization administrator privileges could supply a crafted hostname to force the Quay server to make requests to internal network services, cloud infrastructure endpoints, or other resources that should not be accessible from the Quay application."
            }
          ],
          "metrics": [
            {
              "other": {
                "content": {
                  "namespace": "https://access.redhat.com/security/updates/classification/",
                  "value": "Important"
                },
                "type": "Red Hat severity rating"
              }
            },
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "NONE",
                "baseScore": 5.2,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "LOW",
                "privilegesRequired": "HIGH",
                "scope": "UNCHANGED",
                "userInteraction": "REQUIRED",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:L/A:N",
                "version": "3.1"
              },
              "format": "CVSS"
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-918",
                  "description": "Server-Side Request Forgery (SSRF)",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-09-09T22:07:37.479Z",
            "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
            "shortName": "redhat"
          },
          "references": [
            {
              "name": "RHSA-2026:24833",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2026:24833"
            },
            {
              "name": "RHSA-2026:40262",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2026:40262"
            },
            {
              "name": "RHSA-2026:41031",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2026:41031"
            },
            {
              "name": "RHSA-2026:41066",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2026:41066"
            },
            {
              "name": "RHSA-2026:42146",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2026:42146"
            },
            {
              "name": "RHSA-2026:42796",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2026:42796"
            },
            {
              "name": "RHSA-2026:43052",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2026:43052"
            },
            {
              "name": "RHSA-2026:48085",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2026:48085"
            },
            {
              "tags": [
                "vdb-entry",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/security/cve/CVE-2026-32591"
            },
            {
              "name": "RHBZ#2446965",
              "tags": [
                "issue-tracking",
                "x_refsource_REDHAT"
              ],
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2446965"
            }
          ],
          "timeline": [
            {
              "lang": "en",
              "time": "2026-03-12T15:09:38.210Z",
              "value": "Reported to Red Hat."
            },
            {
              "lang": "en",
              "time": "2026-04-08T00:00:00.000Z",
              "value": "Made public."
            }
          ],
          "title": "Mirror-registry: quay: server-side request forgery in proxy cache upstream registry configuration",
          "x_generator": {
            "engine": "cvelib 1.8.0"
          },
          "x_redhatCweChain": "CWE-918: Server-Side Request Forgery (SSRF)"
        }
      },
      "cveMetadata": {
        "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "assignerShortName": "redhat",
        "cveId": "CVE-2026-32591",
        "datePublished": "2026-04-08T17:06:58.222Z",
        "dateReserved": "2026-03-12T14:39:53.657Z",
        "dateUpdated": "2026-09-10T12:05:07.380Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2026-32590 (GCVE-0-2026-32590)

    Vulnerability from cvelistv5 – Published: 2026-04-08 17:04 – Updated: 2026-09-09 22:38
    VLAI
    Title
    Mirror-registry: remote code execution using pickle deserialization
    Summary
    A flaw was found in Red Hat Quay's handling of resumable container image layer uploads. The upload process stores intermediate data in the database using a format that, if tampered with, could allow an attacker to execute arbitrary code on the Quay server.
    SSVC
    Exploitation: none Automatable: no Technical Impact: total
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-04-08 19:14 UTC
    CWE
    • CWE-502 - Deserialization of Untrusted Data
    References
    URL Tags
    https://access.redhat.com/errata/RHSA-2026:19375 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:21017 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:22465 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:22629 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:22840 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:23361 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:24833 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:24853 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:28441 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:48085 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/security/cve/CVE-2026-32590 vdb-entryx_refsource_REDHAT
    https://bugzilla.redhat.com/show_bug.cgi?id=2446964 issue-trackingx_refsource_REDHAT
    Impacted products
    Vendor Product Version
    Red Hat mirror registry for Red Hat OpenShift 2.0 Unaffected: 1782177012 , < * (rpm)
        cpe:/a:redhat:mirror_registry:2.0::el8
    Create a notification for this product.
    Red Hat Red Hat Quay 3.10 Unaffected: 1779822261 , < * (rpm)
        cpe:/a:redhat:quay:3.10::el8
    Create a notification for this product.
    Red Hat Red Hat Quay 3.12 Unaffected: 1779811412 , < * (rpm)
        cpe:/a:redhat:quay:3.12::el8
    Create a notification for this product.
    Red Hat Red Hat Quay 3.14 Unaffected: 1779689392 , < * (rpm)
        cpe:/a:redhat:quay:3.14::el8
    Create a notification for this product.
    Red Hat Red Hat Quay 3.15 Unaffected: 1780891395 , < * (rpm)
        cpe:/a:redhat:quay:3.15::el8
    Create a notification for this product.
    Red Hat Red Hat Quay 3.16 Unaffected: 1779204086 , < * (rpm)
        cpe:/a:redhat:quay:3.16::el9
    Create a notification for this product.
    Red Hat Red Hat Quay 3.17 Unaffected: 1779922205 , < * (rpm)
        cpe:/a:redhat:quay:3.17::el9
    Create a notification for this product.
    Red Hat Red Hat Quay 3.17 Unaffected: 1780604033 , < * (rpm)
        cpe:/a:redhat:quay:3.17::el9
    Create a notification for this product.
    Red Hat Red Hat Quay 3.18 Unaffected: 1784987273 , < * (rpm)
        cpe:/a:redhat:quay:3.18::el9
    Create a notification for this product.
    Red Hat Red Hat Quay 3.9 Unaffected: 1779811473 , < * (rpm)
        cpe:/a:redhat:quay:3.9::el8
    Create a notification for this product.
    Red Hat mirror registry for Red Hat OpenShift     cpe:/a:redhat:mirror_registry:1
    Create a notification for this product.
    Date Public
    2026-04-08 00:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-32590",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "total"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-04-08T19:14:47.764287Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-04-08T19:14:55.136Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:mirror_registry:2.0::el8"
              ],
              "defaultStatus": "affected",
              "packageName": "openshift/mirror-registry-rhel8",
              "product": "mirror registry for Red Hat OpenShift 2.0",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "1782177012",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:quay:3.10::el8"
              ],
              "defaultStatus": "affected",
              "packageName": "quay/quay-rhel8",
              "product": "Red Hat Quay 3.10",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "1779822261",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:quay:3.12::el8"
              ],
              "defaultStatus": "affected",
              "packageName": "quay/quay-rhel8",
              "product": "Red Hat Quay 3.12",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "1779811412",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:quay:3.14::el8"
              ],
              "defaultStatus": "affected",
              "packageName": "quay/quay-rhel8",
              "product": "Red Hat Quay 3.14",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "1779689392",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:quay:3.15::el8"
              ],
              "defaultStatus": "affected",
              "packageName": "quay/quay-rhel8",
              "product": "Red Hat Quay 3.15",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "1780891395",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:quay:3.16::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "quay/quay-rhel9",
              "product": "Red Hat Quay 3.16",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "1779204086",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:quay:3.17::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "quay/quay-rhel9",
              "product": "Red Hat Quay 3.17",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "1779922205",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:quay:3.17::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "quay/quay-rhel9",
              "product": "Red Hat Quay 3.17",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "1780604033",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:quay:3.18::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "quay/quay-rhel9",
              "product": "Red Hat Quay 3.18",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "1784987273",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:quay:3.9::el8"
              ],
              "defaultStatus": "affected",
              "packageName": "quay/quay-rhel8",
              "product": "Red Hat Quay 3.9",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "1779811473",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:mirror_registry:1"
              ],
              "defaultStatus": "affected",
              "packageName": "openshift/mirror-registry-rhel8",
              "product": "mirror registry for Red Hat OpenShift",
              "vendor": "Red Hat"
            }
          ],
          "credits": [
            {
              "lang": "en",
              "value": "Red Hat would like to thank Antony Di Scala and Michael Whale for reporting this issue."
            }
          ],
          "datePublic": "2026-04-08T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "A flaw was found in Red Hat Quay\u0027s handling of resumable container image layer uploads. The upload process stores intermediate data in the database using a format that, if tampered with, could allow an attacker to execute arbitrary code on the Quay server."
            }
          ],
          "metrics": [
            {
              "other": {
                "content": {
                  "namespace": "https://access.redhat.com/security/updates/classification/",
                  "value": "Moderate"
                },
                "type": "Red Hat severity rating"
              }
            },
            {
              "cvssV3_1": {
                "attackComplexity": "HIGH",
                "attackVector": "NETWORK",
                "availabilityImpact": "HIGH",
                "baseScore": 7.1,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "LOW",
                "scope": "UNCHANGED",
                "userInteraction": "REQUIRED",
                "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "format": "CVSS"
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-502",
                  "description": "Deserialization of Untrusted Data",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-09-09T22:38:17.267Z",
            "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
            "shortName": "redhat"
          },
          "references": [
            {
              "name": "RHSA-2026:19375",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2026:19375"
            },
            {
              "name": "RHSA-2026:21017",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2026:21017"
            },
            {
              "name": "RHSA-2026:22465",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2026:22465"
            },
            {
              "name": "RHSA-2026:22629",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2026:22629"
            },
            {
              "name": "RHSA-2026:22840",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2026:22840"
            },
            {
              "name": "RHSA-2026:23361",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2026:23361"
            },
            {
              "name": "RHSA-2026:24833",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2026:24833"
            },
            {
              "name": "RHSA-2026:24853",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2026:24853"
            },
            {
              "name": "RHSA-2026:28441",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2026:28441"
            },
            {
              "name": "RHSA-2026:48085",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2026:48085"
            },
            {
              "tags": [
                "vdb-entry",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/security/cve/CVE-2026-32590"
            },
            {
              "name": "RHBZ#2446964",
              "tags": [
                "issue-tracking",
                "x_refsource_REDHAT"
              ],
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2446964"
            }
          ],
          "timeline": [
            {
              "lang": "en",
              "time": "2026-03-12T14:43:11.443Z",
              "value": "Reported to Red Hat."
            },
            {
              "lang": "en",
              "time": "2026-04-08T00:00:00.000Z",
              "value": "Made public."
            }
          ],
          "title": "Mirror-registry: remote code execution using pickle deserialization",
          "x_generator": {
            "engine": "cvelib 1.8.0"
          },
          "x_redhatCweChain": "CWE-502: Deserialization of Untrusted Data"
        }
      },
      "cveMetadata": {
        "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "assignerShortName": "redhat",
        "cveId": "CVE-2026-32590",
        "datePublished": "2026-04-08T17:04:22.870Z",
        "dateReserved": "2026-03-12T14:39:53.657Z",
        "dateUpdated": "2026-09-09T22:38:17.267Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2026-32589 (GCVE-0-2026-32589)

    Vulnerability from cvelistv5 – Published: 2026-04-08 17:04 – Updated: 2026-09-10 12:05
    VLAI
    Title
    Mirror-registry: quay: insecure direct object reference in blobupload
    Summary
    A flaw was found in Red Hat Quay's container image upload process. An authenticated user with push access to any repository on the registry can interfere with image uploads in progress by other users, including those in repositories they do not have access to. This could allow the attacker to read, modify, or cancel another user's in-progress image upload.
    SSVC
    Exploitation: none Automatable: no Technical Impact: partial
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-04-08 18:01 UTC
    CWE
    • CWE-639 - Authorization Bypass Through User-Controlled Key
    References
    URL Tags
    https://access.redhat.com/errata/RHSA-2026:19375 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:21017 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:22465 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:22629 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:22840 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:23361 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:24853 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:28441 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/security/cve/CVE-2026-32589 vdb-entryx_refsource_REDHAT
    https://bugzilla.redhat.com/show_bug.cgi?id=2446963 issue-trackingx_refsource_REDHAT
    https://security.access.redhat.com/data/csaf/v2/v… x_sadp-csaf-vex
    Impacted products
    Vendor Product Version
    Red Hat mirror registry for Red Hat OpenShift 2.0 Unaffected: 1782177012 , < * (rpm)
        cpe:/a:redhat:mirror_registry:2.0::el8
    Create a notification for this product.
    Red Hat Red Hat Quay 3.10 Unaffected: 1779822261 , < * (rpm)
        cpe:/a:redhat:quay:3.10::el8
    Create a notification for this product.
    Red Hat Red Hat Quay 3.12 Unaffected: 1779811412 , < * (rpm)
        cpe:/a:redhat:quay:3.12::el8
    Create a notification for this product.
    Red Hat Red Hat Quay 3.14 Unaffected: 1779689392 , < * (rpm)
        cpe:/a:redhat:quay:3.14::el8
    Create a notification for this product.
    Red Hat Red Hat Quay 3.15 Unaffected: 1780891395 , < * (rpm)
        cpe:/a:redhat:quay:3.15::el8
    Create a notification for this product.
    Red Hat Red Hat Quay 3.16 Unaffected: 1779204086 , < * (rpm)
        cpe:/a:redhat:quay:3.16::el9
    Create a notification for this product.
    Red Hat Red Hat Quay 3.17 Unaffected: 1779922205 , < * (rpm)
        cpe:/a:redhat:quay:3.17::el9
    Create a notification for this product.
    Red Hat Red Hat Quay 3.9 Unaffected: 1779811473 , < * (rpm)
        cpe:/a:redhat:quay:3.9::el8
    Create a notification for this product.
    Red Hat mirror registry for Red Hat OpenShift     cpe:/a:redhat:mirror_registry:1
    Create a notification for this product.
    Date Public
    2026-04-08 00:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-32589",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "partial"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-04-08T18:01:21.450628Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-04-08T18:01:32.402Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          },
          {
            "affected": [
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:mirror_registry:2.0::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift/mirror-registry-rhel8",
                "product": "mirror registry for Red Hat OpenShift 2.0",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1782177012",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.10::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel8",
                "product": "Red Hat Quay 3.10",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779822261",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.12::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel8",
                "product": "Red Hat Quay 3.12",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779811412",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.14::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel8",
                "product": "Red Hat Quay 3.14",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779689392",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.15::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel8",
                "product": "Red Hat Quay 3.15",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1780891395",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.16::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel9",
                "product": "Red Hat Quay 3.16",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779204086",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.17::el9"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel9",
                "product": "Red Hat Quay 3.17",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779922205",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://catalog.redhat.com/software/containers/",
                "cpes": [
                  "cpe:/a:redhat:quay:3.9::el8"
                ],
                "defaultStatus": "affected",
                "packageName": "quay/quay-rhel8",
                "product": "Red Hat Quay 3.9",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "1779811473",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:mirror_registry:1"
                ],
                "defaultStatus": "affected",
                "packageName": "openshift/mirror-registry-rhel8",
                "product": "mirror registry for Red Hat OpenShift",
                "vendor": "Red Hat"
              }
            ],
            "datePublic": "2026-04-08T00:00:00.000Z",
            "descriptions": [
              {
                "lang": "en",
                "value": "A flaw was found in Red Hat Quay\u0027s container image upload process. An authenticated user with push access to any repository on the registry can interfere with image uploads in progress by other users, including those in repositories they do not have access to. This could allow the attacker to read, modify, or cancel another user\u0027s in-progress image upload."
              }
            ],
            "metrics": [
              {
                "other": {
                  "content": {
                    "namespace": "https://access.redhat.com/security/updates/classification/",
                    "value": "Important"
                  },
                  "type": "Red Hat severity rating"
                }
              },
              {
                "cvssV3_1": {
                  "attackComplexity": "LOW",
                  "attackVector": "NETWORK",
                  "availabilityImpact": "LOW",
                  "baseScore": 7.4,
                  "baseSeverity": "HIGH",
                  "confidentialityImpact": "LOW",
                  "integrityImpact": "LOW",
                  "privilegesRequired": "LOW",
                  "scope": "CHANGED",
                  "userInteraction": "NONE",
                  "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L",
                  "version": "3.1"
                },
                "format": "CVSS"
              }
            ],
            "problemTypes": [
              {
                "descriptions": [
                  {
                    "cweId": "CWE-639",
                    "description": "Authorization Bypass Through User-Controlled Key",
                    "lang": "en",
                    "type": "CWE"
                  }
                ]
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-09-10T12:05:01.059Z",
              "orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
              "shortName": "redhat-SADP"
            },
            "references": [
              {
                "tags": [
                  "vdb-entry",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/security/cve/CVE-2026-32589"
              },
              {
                "name": "RHBZ#2446963",
                "tags": [
                  "issue-tracking",
                  "x_refsource_REDHAT"
                ],
                "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2446963"
              },
              {
                "tags": [
                  "x_sadp-csaf-vex"
                ],
                "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-32589.json"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:22840"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:22629"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:21017"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:24853"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:19375"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:22465"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:23361"
              },
              {
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT"
                ],
                "url": "https://access.redhat.com/errata/RHSA-2026:28441"
              }
            ],
            "solutions": [
              {
                "lang": "en",
                "value": "RHSA-2026:22840: Red Hat Quay 3.10"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:22629: Red Hat Quay 3.12"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:21017: Red Hat Quay 3.14"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:24853: Red Hat Quay 3.15"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:19375: Red Hat Quay 3.16"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:22465: Red Hat Quay 3.17"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:23361: Red Hat Quay 3.9"
              },
              {
                "lang": "en",
                "value": "RHSA-2026:28441: mirror registry for Red Hat OpenShift 2.0"
              }
            ],
            "timeline": [
              {
                "lang": "en",
                "time": "2026-03-12T14:43:07.878Z",
                "value": "Reported to Red Hat."
              },
              {
                "lang": "en",
                "time": "2026-04-08T00:00:00.000Z",
                "value": "Made public."
              }
            ],
            "title": "mirror-registry: quay: insecure direct object reference in BlobUpload",
            "x_adpType": "supplier",
            "x_generator": {
              "engine": "sadp-cli 1.0.0"
            }
          }
        ],
        "cna": {
          "affected": [
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:mirror_registry:2.0::el8"
              ],
              "defaultStatus": "affected",
              "packageName": "openshift/mirror-registry-rhel8",
              "product": "mirror registry for Red Hat OpenShift 2.0",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "1782177012",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:quay:3.10::el8"
              ],
              "defaultStatus": "affected",
              "packageName": "quay/quay-rhel8",
              "product": "Red Hat Quay 3.10",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "1779822261",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:quay:3.12::el8"
              ],
              "defaultStatus": "affected",
              "packageName": "quay/quay-rhel8",
              "product": "Red Hat Quay 3.12",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "1779811412",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:quay:3.14::el8"
              ],
              "defaultStatus": "affected",
              "packageName": "quay/quay-rhel8",
              "product": "Red Hat Quay 3.14",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "1779689392",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:quay:3.15::el8"
              ],
              "defaultStatus": "affected",
              "packageName": "quay/quay-rhel8",
              "product": "Red Hat Quay 3.15",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "1780891395",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:quay:3.16::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "quay/quay-rhel9",
              "product": "Red Hat Quay 3.16",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "1779204086",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:quay:3.17::el9"
              ],
              "defaultStatus": "affected",
              "packageName": "quay/quay-rhel9",
              "product": "Red Hat Quay 3.17",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "1779922205",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://catalog.redhat.com/software/containers/",
              "cpes": [
                "cpe:/a:redhat:quay:3.9::el8"
              ],
              "defaultStatus": "affected",
              "packageName": "quay/quay-rhel8",
              "product": "Red Hat Quay 3.9",
              "vendor": "Red Hat",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "unaffected",
                  "version": "1779811473",
                  "versionType": "rpm"
                }
              ]
            },
            {
              "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
              "cpes": [
                "cpe:/a:redhat:mirror_registry:1"
              ],
              "defaultStatus": "affected",
              "packageName": "openshift/mirror-registry-rhel8",
              "product": "mirror registry for Red Hat OpenShift",
              "vendor": "Red Hat"
            }
          ],
          "credits": [
            {
              "lang": "en",
              "value": "Red Hat would like to thank Antony Di Scala and Michael Whale for reporting this issue."
            }
          ],
          "datePublic": "2026-04-08T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "A flaw was found in Red Hat Quay\u0027s container image upload process. An authenticated user with push access to any repository on the registry can interfere with image uploads in progress by other users, including those in repositories they do not have access to. This could allow the attacker to read, modify, or cancel another user\u0027s in-progress image upload."
            }
          ],
          "metrics": [
            {
              "other": {
                "content": {
                  "namespace": "https://access.redhat.com/security/updates/classification/",
                  "value": "Important"
                },
                "type": "Red Hat severity rating"
              }
            },
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "LOW",
                "baseScore": 7.4,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "LOW",
                "integrityImpact": "LOW",
                "privilegesRequired": "LOW",
                "scope": "CHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L",
                "version": "3.1"
              },
              "format": "CVSS"
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-639",
                  "description": "Authorization Bypass Through User-Controlled Key",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-09-09T22:07:32.906Z",
            "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
            "shortName": "redhat"
          },
          "references": [
            {
              "name": "RHSA-2026:19375",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2026:19375"
            },
            {
              "name": "RHSA-2026:21017",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2026:21017"
            },
            {
              "name": "RHSA-2026:22465",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2026:22465"
            },
            {
              "name": "RHSA-2026:22629",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2026:22629"
            },
            {
              "name": "RHSA-2026:22840",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2026:22840"
            },
            {
              "name": "RHSA-2026:23361",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2026:23361"
            },
            {
              "name": "RHSA-2026:24853",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2026:24853"
            },
            {
              "name": "RHSA-2026:28441",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2026:28441"
            },
            {
              "tags": [
                "vdb-entry",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/security/cve/CVE-2026-32589"
            },
            {
              "name": "RHBZ#2446963",
              "tags": [
                "issue-tracking",
                "x_refsource_REDHAT"
              ],
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2446963"
            }
          ],
          "timeline": [
            {
              "lang": "en",
              "time": "2026-03-12T14:43:07.878Z",
              "value": "Reported to Red Hat."
            },
            {
              "lang": "en",
              "time": "2026-04-08T00:00:00.000Z",
              "value": "Made public."
            }
          ],
          "title": "Mirror-registry: quay: insecure direct object reference in blobupload",
          "x_generator": {
            "engine": "cvelib 1.8.0"
          },
          "x_redhatCweChain": "CWE-639: Authorization Bypass Through User-Controlled Key"
        }
      },
      "cveMetadata": {
        "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "assignerShortName": "redhat",
        "cveId": "CVE-2026-32589",
        "datePublished": "2026-04-08T17:04:20.284Z",
        "dateReserved": "2026-03-12T14:39:53.657Z",
        "dateUpdated": "2026-09-10T12:05:01.059Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }