{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for python3.12-setuptools is now available for Red Hat Enterprise Linux 9.4 Extended Update Support.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.\n\nSecurity Fix(es):\n\n* setuptools: Path Traversal Vulnerability in setuptools PackageIndex (CVE-2025-47273)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2025:13668",
        "url": "https://access.redhat.com/errata/RHSA-2025:13668"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#moderate",
        "url": "https://access.redhat.com/security/updates/classification/#moderate"
      },
      {
        "category": "external",
        "summary": "2366982",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366982"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_13668.json"
      }
    ],
    "title": "Red Hat Security Advisory: python3.12-setuptools security update",
    "tracking": {
      "current_release_date": "2026-04-30T13:31:58+00:00",
      "generator": {
        "date": "2026-04-30T13:31:58+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.7.7"
        }
      },
      "id": "RHSA-2025:13668",
      "initial_release_date": "2025-08-12T00:47:32+00:00",
      "revision_history": [
        {
          "date": "2025-08-12T00:47:32+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2025-08-12T00:47:32+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-04-30T13:31:58+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AppStream EUS (v.9.4)",
                "product": {
                  "name": "Red Hat Enterprise Linux AppStream EUS (v.9.4)",
                  "product_id": "AppStream-9.4.0.Z.EUS",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_eus:9.4::appstream"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat CodeReady Linux Builder EUS (v.9.4)",
                "product": {
                  "name": "Red Hat CodeReady Linux Builder EUS (v.9.4)",
                  "product_id": "CRB-9.4.0.Z.EUS",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_eus:9.4::crb"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "python3.12-setuptools-0:68.2.2-3.el9_4.2.src",
                "product": {
                  "name": "python3.12-setuptools-0:68.2.2-3.el9_4.2.src",
                  "product_id": "python3.12-setuptools-0:68.2.2-3.el9_4.2.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python3.12-setuptools@68.2.2-3.el9_4.2?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "python3.12-setuptools-0:68.2.2-3.el9_4.2.noarch",
                "product": {
                  "name": "python3.12-setuptools-0:68.2.2-3.el9_4.2.noarch",
                  "product_id": "python3.12-setuptools-0:68.2.2-3.el9_4.2.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python3.12-setuptools@68.2.2-3.el9_4.2?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python3.12-setuptools-wheel-0:68.2.2-3.el9_4.2.noarch",
                "product": {
                  "name": "python3.12-setuptools-wheel-0:68.2.2-3.el9_4.2.noarch",
                  "product_id": "python3.12-setuptools-wheel-0:68.2.2-3.el9_4.2.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python3.12-setuptools-wheel@68.2.2-3.el9_4.2?arch=noarch"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3.12-setuptools-0:68.2.2-3.el9_4.2.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
          "product_id": "AppStream-9.4.0.Z.EUS:python3.12-setuptools-0:68.2.2-3.el9_4.2.noarch"
        },
        "product_reference": "python3.12-setuptools-0:68.2.2-3.el9_4.2.noarch",
        "relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3.12-setuptools-0:68.2.2-3.el9_4.2.src as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
          "product_id": "AppStream-9.4.0.Z.EUS:python3.12-setuptools-0:68.2.2-3.el9_4.2.src"
        },
        "product_reference": "python3.12-setuptools-0:68.2.2-3.el9_4.2.src",
        "relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3.12-setuptools-wheel-0:68.2.2-3.el9_4.2.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
          "product_id": "AppStream-9.4.0.Z.EUS:python3.12-setuptools-wheel-0:68.2.2-3.el9_4.2.noarch"
        },
        "product_reference": "python3.12-setuptools-wheel-0:68.2.2-3.el9_4.2.noarch",
        "relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3.12-setuptools-0:68.2.2-3.el9_4.2.noarch as a component of Red Hat CodeReady Linux Builder EUS (v.9.4)",
          "product_id": "CRB-9.4.0.Z.EUS:python3.12-setuptools-0:68.2.2-3.el9_4.2.noarch"
        },
        "product_reference": "python3.12-setuptools-0:68.2.2-3.el9_4.2.noarch",
        "relates_to_product_reference": "CRB-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3.12-setuptools-0:68.2.2-3.el9_4.2.src as a component of Red Hat CodeReady Linux Builder EUS (v.9.4)",
          "product_id": "CRB-9.4.0.Z.EUS:python3.12-setuptools-0:68.2.2-3.el9_4.2.src"
        },
        "product_reference": "python3.12-setuptools-0:68.2.2-3.el9_4.2.src",
        "relates_to_product_reference": "CRB-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3.12-setuptools-wheel-0:68.2.2-3.el9_4.2.noarch as a component of Red Hat CodeReady Linux Builder EUS (v.9.4)",
          "product_id": "CRB-9.4.0.Z.EUS:python3.12-setuptools-wheel-0:68.2.2-3.el9_4.2.noarch"
        },
        "product_reference": "python3.12-setuptools-wheel-0:68.2.2-3.el9_4.2.noarch",
        "relates_to_product_reference": "CRB-9.4.0.Z.EUS"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-47273",
      "cwe": {
        "id": "CWE-22",
        "name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
      },
      "discovery_date": "2025-05-17T16:00:41.145177+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2366982"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A path traversal vulnerability in the Python setuptools library allows attackers with limited system access to write files outside the intended temporary directory by manipulating package download URLs. This flaw bypasses basic filename sanitization and can lead to unauthorized overwrites of important system files, creating opportunities for further compromise. While it doesn\u0027t expose data or require user interaction, it poses a high integrity risk and is especially concerning in environments that rely on automated package handling or internal tooling built on setuptools.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "setuptools: Path Traversal Vulnerability in setuptools PackageIndex",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat Product Security has rated this vulnerability \"Moderate\" based on the impact of the damage caused by a successful exploitation and the pre-requisites.\n\n* Exploitation requires that the attacker have limited code execution access to a Python environment where they can trigger the vulnerable PackageIndex.download() function\u2014this might be via a script, plugin, or automated job. Full admin rights aren\u0027t needed but a user with no access at all will be unable to exploit this vulnerability.\n* The vulnerability impacts the integrity of the system within the same security boundary\u2014it does not enable access or compromise across trust boundaries (e.g., from one container to another or from user space to kernel).\n* Successful exploitation only allows the attacker to \"create\" new files. The vulnerability does not provide access to existing files and by an extension to any confidential information. \n* Arbitrary file writes can overwrite critical config files, executables, or scripts. This can lead to persistent code execution, system misconfiguration, or unauthorized behavior, especially in automated environments. While overwriting critical files could theoretically lead to service disruption, the vulnerability in isolation does not inherently cause denial of service. The exploit doesn\u0027t target availability directly, and in many cases, systems may continue running.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.4.0.Z.EUS:python3.12-setuptools-0:68.2.2-3.el9_4.2.noarch",
          "AppStream-9.4.0.Z.EUS:python3.12-setuptools-0:68.2.2-3.el9_4.2.src",
          "AppStream-9.4.0.Z.EUS:python3.12-setuptools-wheel-0:68.2.2-3.el9_4.2.noarch",
          "CRB-9.4.0.Z.EUS:python3.12-setuptools-0:68.2.2-3.el9_4.2.noarch",
          "CRB-9.4.0.Z.EUS:python3.12-setuptools-0:68.2.2-3.el9_4.2.src",
          "CRB-9.4.0.Z.EUS:python3.12-setuptools-wheel-0:68.2.2-3.el9_4.2.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-47273"
        },
        {
          "category": "external",
          "summary": "RHBZ#2366982",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366982"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-47273",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-47273"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-47273",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-47273"
        },
        {
          "category": "external",
          "summary": "https://github.com/pypa/setuptools/blob/6ead555c5fb29bc57fe6105b1bffc163f56fd558/setuptools/package_index.py#L810C1-L825C88",
          "url": "https://github.com/pypa/setuptools/blob/6ead555c5fb29bc57fe6105b1bffc163f56fd558/setuptools/package_index.py#L810C1-L825C88"
        },
        {
          "category": "external",
          "summary": "https://github.com/pypa/setuptools/commit/250a6d17978f9f6ac3ac887091f2d32886fbbb0b",
          "url": "https://github.com/pypa/setuptools/commit/250a6d17978f9f6ac3ac887091f2d32886fbbb0b"
        },
        {
          "category": "external",
          "summary": "https://github.com/pypa/setuptools/issues/4946",
          "url": "https://github.com/pypa/setuptools/issues/4946"
        },
        {
          "category": "external",
          "summary": "https://github.com/pypa/setuptools/security/advisories/GHSA-5rjg-fvgr-3xxf",
          "url": "https://github.com/pypa/setuptools/security/advisories/GHSA-5rjg-fvgr-3xxf"
        }
      ],
      "release_date": "2025-05-17T15:46:11.399000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-08-12T00:47:32+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.4.0.Z.EUS:python3.12-setuptools-0:68.2.2-3.el9_4.2.noarch",
            "AppStream-9.4.0.Z.EUS:python3.12-setuptools-0:68.2.2-3.el9_4.2.src",
            "AppStream-9.4.0.Z.EUS:python3.12-setuptools-wheel-0:68.2.2-3.el9_4.2.noarch",
            "CRB-9.4.0.Z.EUS:python3.12-setuptools-0:68.2.2-3.el9_4.2.noarch",
            "CRB-9.4.0.Z.EUS:python3.12-setuptools-0:68.2.2-3.el9_4.2.src",
            "CRB-9.4.0.Z.EUS:python3.12-setuptools-wheel-0:68.2.2-3.el9_4.2.noarch"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:13668"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "AppStream-9.4.0.Z.EUS:python3.12-setuptools-0:68.2.2-3.el9_4.2.noarch",
            "AppStream-9.4.0.Z.EUS:python3.12-setuptools-0:68.2.2-3.el9_4.2.src",
            "AppStream-9.4.0.Z.EUS:python3.12-setuptools-wheel-0:68.2.2-3.el9_4.2.noarch",
            "CRB-9.4.0.Z.EUS:python3.12-setuptools-0:68.2.2-3.el9_4.2.noarch",
            "CRB-9.4.0.Z.EUS:python3.12-setuptools-0:68.2.2-3.el9_4.2.src",
            "CRB-9.4.0.Z.EUS:python3.12-setuptools-wheel-0:68.2.2-3.el9_4.2.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.4.0.Z.EUS:python3.12-setuptools-0:68.2.2-3.el9_4.2.noarch",
            "AppStream-9.4.0.Z.EUS:python3.12-setuptools-0:68.2.2-3.el9_4.2.src",
            "AppStream-9.4.0.Z.EUS:python3.12-setuptools-wheel-0:68.2.2-3.el9_4.2.noarch",
            "CRB-9.4.0.Z.EUS:python3.12-setuptools-0:68.2.2-3.el9_4.2.noarch",
            "CRB-9.4.0.Z.EUS:python3.12-setuptools-0:68.2.2-3.el9_4.2.src",
            "CRB-9.4.0.Z.EUS:python3.12-setuptools-wheel-0:68.2.2-3.el9_4.2.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "setuptools: Path Traversal Vulnerability in setuptools PackageIndex"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for python3.11-setuptools is now available for Red Hat Enterprise Linux 9.4 Extended Update Support.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.\n\nSecurity Fix(es):\n\n* setuptools: Path Traversal Vulnerability in setuptools PackageIndex (CVE-2025-47273)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2025:13669",
        "url": "https://access.redhat.com/errata/RHSA-2025:13669"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#moderate",
        "url": "https://access.redhat.com/security/updates/classification/#moderate"
      },
      {
        "category": "external",
        "summary": "2366982",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366982"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_13669.json"
      }
    ],
    "title": "Red Hat Security Advisory: python3.11-setuptools security update",
    "tracking": {
      "current_release_date": "2026-04-30T13:31:58+00:00",
      "generator": {
        "date": "2026-04-30T13:31:58+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.7.7"
        }
      },
      "id": "RHSA-2025:13669",
      "initial_release_date": "2025-08-12T00:44:27+00:00",
      "revision_history": [
        {
          "date": "2025-08-12T00:44:27+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2025-08-12T00:44:27+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-04-30T13:31:58+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AppStream EUS (v.9.4)",
                "product": {
                  "name": "Red Hat Enterprise Linux AppStream EUS (v.9.4)",
                  "product_id": "AppStream-9.4.0.Z.EUS",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_eus:9.4::appstream"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "python3.11-setuptools-0:65.5.1-2.el9_4.2.src",
                "product": {
                  "name": "python3.11-setuptools-0:65.5.1-2.el9_4.2.src",
                  "product_id": "python3.11-setuptools-0:65.5.1-2.el9_4.2.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python3.11-setuptools@65.5.1-2.el9_4.2?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "python3.11-setuptools-0:65.5.1-2.el9_4.2.noarch",
                "product": {
                  "name": "python3.11-setuptools-0:65.5.1-2.el9_4.2.noarch",
                  "product_id": "python3.11-setuptools-0:65.5.1-2.el9_4.2.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python3.11-setuptools@65.5.1-2.el9_4.2?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python3.11-setuptools-wheel-0:65.5.1-2.el9_4.2.noarch",
                "product": {
                  "name": "python3.11-setuptools-wheel-0:65.5.1-2.el9_4.2.noarch",
                  "product_id": "python3.11-setuptools-wheel-0:65.5.1-2.el9_4.2.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python3.11-setuptools-wheel@65.5.1-2.el9_4.2?arch=noarch"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3.11-setuptools-0:65.5.1-2.el9_4.2.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
          "product_id": "AppStream-9.4.0.Z.EUS:python3.11-setuptools-0:65.5.1-2.el9_4.2.noarch"
        },
        "product_reference": "python3.11-setuptools-0:65.5.1-2.el9_4.2.noarch",
        "relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3.11-setuptools-0:65.5.1-2.el9_4.2.src as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
          "product_id": "AppStream-9.4.0.Z.EUS:python3.11-setuptools-0:65.5.1-2.el9_4.2.src"
        },
        "product_reference": "python3.11-setuptools-0:65.5.1-2.el9_4.2.src",
        "relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3.11-setuptools-wheel-0:65.5.1-2.el9_4.2.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
          "product_id": "AppStream-9.4.0.Z.EUS:python3.11-setuptools-wheel-0:65.5.1-2.el9_4.2.noarch"
        },
        "product_reference": "python3.11-setuptools-wheel-0:65.5.1-2.el9_4.2.noarch",
        "relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-47273",
      "cwe": {
        "id": "CWE-22",
        "name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
      },
      "discovery_date": "2025-05-17T16:00:41.145177+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2366982"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A path traversal vulnerability in the Python setuptools library allows attackers with limited system access to write files outside the intended temporary directory by manipulating package download URLs. This flaw bypasses basic filename sanitization and can lead to unauthorized overwrites of important system files, creating opportunities for further compromise. While it doesn\u0027t expose data or require user interaction, it poses a high integrity risk and is especially concerning in environments that rely on automated package handling or internal tooling built on setuptools.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "setuptools: Path Traversal Vulnerability in setuptools PackageIndex",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat Product Security has rated this vulnerability \"Moderate\" based on the impact of the damage caused by a successful exploitation and the pre-requisites.\n\n* Exploitation requires that the attacker have limited code execution access to a Python environment where they can trigger the vulnerable PackageIndex.download() function\u2014this might be via a script, plugin, or automated job. Full admin rights aren\u0027t needed but a user with no access at all will be unable to exploit this vulnerability.\n* The vulnerability impacts the integrity of the system within the same security boundary\u2014it does not enable access or compromise across trust boundaries (e.g., from one container to another or from user space to kernel).\n* Successful exploitation only allows the attacker to \"create\" new files. The vulnerability does not provide access to existing files and by an extension to any confidential information. \n* Arbitrary file writes can overwrite critical config files, executables, or scripts. This can lead to persistent code execution, system misconfiguration, or unauthorized behavior, especially in automated environments. While overwriting critical files could theoretically lead to service disruption, the vulnerability in isolation does not inherently cause denial of service. The exploit doesn\u0027t target availability directly, and in many cases, systems may continue running.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.4.0.Z.EUS:python3.11-setuptools-0:65.5.1-2.el9_4.2.noarch",
          "AppStream-9.4.0.Z.EUS:python3.11-setuptools-0:65.5.1-2.el9_4.2.src",
          "AppStream-9.4.0.Z.EUS:python3.11-setuptools-wheel-0:65.5.1-2.el9_4.2.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-47273"
        },
        {
          "category": "external",
          "summary": "RHBZ#2366982",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366982"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-47273",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-47273"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-47273",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-47273"
        },
        {
          "category": "external",
          "summary": "https://github.com/pypa/setuptools/blob/6ead555c5fb29bc57fe6105b1bffc163f56fd558/setuptools/package_index.py#L810C1-L825C88",
          "url": "https://github.com/pypa/setuptools/blob/6ead555c5fb29bc57fe6105b1bffc163f56fd558/setuptools/package_index.py#L810C1-L825C88"
        },
        {
          "category": "external",
          "summary": "https://github.com/pypa/setuptools/commit/250a6d17978f9f6ac3ac887091f2d32886fbbb0b",
          "url": "https://github.com/pypa/setuptools/commit/250a6d17978f9f6ac3ac887091f2d32886fbbb0b"
        },
        {
          "category": "external",
          "summary": "https://github.com/pypa/setuptools/issues/4946",
          "url": "https://github.com/pypa/setuptools/issues/4946"
        },
        {
          "category": "external",
          "summary": "https://github.com/pypa/setuptools/security/advisories/GHSA-5rjg-fvgr-3xxf",
          "url": "https://github.com/pypa/setuptools/security/advisories/GHSA-5rjg-fvgr-3xxf"
        }
      ],
      "release_date": "2025-05-17T15:46:11.399000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-08-12T00:44:27+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.4.0.Z.EUS:python3.11-setuptools-0:65.5.1-2.el9_4.2.noarch",
            "AppStream-9.4.0.Z.EUS:python3.11-setuptools-0:65.5.1-2.el9_4.2.src",
            "AppStream-9.4.0.Z.EUS:python3.11-setuptools-wheel-0:65.5.1-2.el9_4.2.noarch"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:13669"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "AppStream-9.4.0.Z.EUS:python3.11-setuptools-0:65.5.1-2.el9_4.2.noarch",
            "AppStream-9.4.0.Z.EUS:python3.11-setuptools-0:65.5.1-2.el9_4.2.src",
            "AppStream-9.4.0.Z.EUS:python3.11-setuptools-wheel-0:65.5.1-2.el9_4.2.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.4.0.Z.EUS:python3.11-setuptools-0:65.5.1-2.el9_4.2.noarch",
            "AppStream-9.4.0.Z.EUS:python3.11-setuptools-0:65.5.1-2.el9_4.2.src",
            "AppStream-9.4.0.Z.EUS:python3.11-setuptools-wheel-0:65.5.1-2.el9_4.2.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "setuptools: Path Traversal Vulnerability in setuptools PackageIndex"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for python3.11-setuptools is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.\n\nSecurity Fix(es):\n\n* setuptools: Path Traversal Vulnerability in setuptools PackageIndex (CVE-2025-47273)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2025:13803",
        "url": "https://access.redhat.com/errata/RHSA-2025:13803"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#moderate",
        "url": "https://access.redhat.com/security/updates/classification/#moderate"
      },
      {
        "category": "external",
        "summary": "2366982",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366982"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_13803.json"
      }
    ],
    "title": "Red Hat Security Advisory: python3.11-setuptools security update",
    "tracking": {
      "current_release_date": "2026-04-30T13:31:54+00:00",
      "generator": {
        "date": "2026-04-30T13:31:54+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.7.7"
        }
      },
      "id": "RHSA-2025:13803",
      "initial_release_date": "2025-08-13T15:25:41+00:00",
      "revision_history": [
        {
          "date": "2025-08-13T15:25:41+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2025-08-13T15:25:41+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-04-30T13:31:54+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AppStream E4S (v.9.2)",
                "product": {
                  "name": "Red Hat Enterprise Linux AppStream E4S (v.9.2)",
                  "product_id": "AppStream-9.2.0.Z.E4S",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_e4s:9.2::appstream"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "python3.11-setuptools-0:65.5.1-2.el9_2.2.src",
                "product": {
                  "name": "python3.11-setuptools-0:65.5.1-2.el9_2.2.src",
                  "product_id": "python3.11-setuptools-0:65.5.1-2.el9_2.2.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python3.11-setuptools@65.5.1-2.el9_2.2?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "python3.11-setuptools-0:65.5.1-2.el9_2.2.noarch",
                "product": {
                  "name": "python3.11-setuptools-0:65.5.1-2.el9_2.2.noarch",
                  "product_id": "python3.11-setuptools-0:65.5.1-2.el9_2.2.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python3.11-setuptools@65.5.1-2.el9_2.2?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python3.11-setuptools-wheel-0:65.5.1-2.el9_2.2.noarch",
                "product": {
                  "name": "python3.11-setuptools-wheel-0:65.5.1-2.el9_2.2.noarch",
                  "product_id": "python3.11-setuptools-wheel-0:65.5.1-2.el9_2.2.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python3.11-setuptools-wheel@65.5.1-2.el9_2.2?arch=noarch"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3.11-setuptools-0:65.5.1-2.el9_2.2.noarch as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
          "product_id": "AppStream-9.2.0.Z.E4S:python3.11-setuptools-0:65.5.1-2.el9_2.2.noarch"
        },
        "product_reference": "python3.11-setuptools-0:65.5.1-2.el9_2.2.noarch",
        "relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3.11-setuptools-0:65.5.1-2.el9_2.2.src as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
          "product_id": "AppStream-9.2.0.Z.E4S:python3.11-setuptools-0:65.5.1-2.el9_2.2.src"
        },
        "product_reference": "python3.11-setuptools-0:65.5.1-2.el9_2.2.src",
        "relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3.11-setuptools-wheel-0:65.5.1-2.el9_2.2.noarch as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
          "product_id": "AppStream-9.2.0.Z.E4S:python3.11-setuptools-wheel-0:65.5.1-2.el9_2.2.noarch"
        },
        "product_reference": "python3.11-setuptools-wheel-0:65.5.1-2.el9_2.2.noarch",
        "relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-47273",
      "cwe": {
        "id": "CWE-22",
        "name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
      },
      "discovery_date": "2025-05-17T16:00:41.145177+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2366982"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A path traversal vulnerability in the Python setuptools library allows attackers with limited system access to write files outside the intended temporary directory by manipulating package download URLs. This flaw bypasses basic filename sanitization and can lead to unauthorized overwrites of important system files, creating opportunities for further compromise. While it doesn\u0027t expose data or require user interaction, it poses a high integrity risk and is especially concerning in environments that rely on automated package handling or internal tooling built on setuptools.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "setuptools: Path Traversal Vulnerability in setuptools PackageIndex",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat Product Security has rated this vulnerability \"Moderate\" based on the impact of the damage caused by a successful exploitation and the pre-requisites.\n\n* Exploitation requires that the attacker have limited code execution access to a Python environment where they can trigger the vulnerable PackageIndex.download() function\u2014this might be via a script, plugin, or automated job. Full admin rights aren\u0027t needed but a user with no access at all will be unable to exploit this vulnerability.\n* The vulnerability impacts the integrity of the system within the same security boundary\u2014it does not enable access or compromise across trust boundaries (e.g., from one container to another or from user space to kernel).\n* Successful exploitation only allows the attacker to \"create\" new files. The vulnerability does not provide access to existing files and by an extension to any confidential information. \n* Arbitrary file writes can overwrite critical config files, executables, or scripts. This can lead to persistent code execution, system misconfiguration, or unauthorized behavior, especially in automated environments. While overwriting critical files could theoretically lead to service disruption, the vulnerability in isolation does not inherently cause denial of service. The exploit doesn\u0027t target availability directly, and in many cases, systems may continue running.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.2.0.Z.E4S:python3.11-setuptools-0:65.5.1-2.el9_2.2.noarch",
          "AppStream-9.2.0.Z.E4S:python3.11-setuptools-0:65.5.1-2.el9_2.2.src",
          "AppStream-9.2.0.Z.E4S:python3.11-setuptools-wheel-0:65.5.1-2.el9_2.2.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-47273"
        },
        {
          "category": "external",
          "summary": "RHBZ#2366982",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366982"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-47273",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-47273"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-47273",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-47273"
        },
        {
          "category": "external",
          "summary": "https://github.com/pypa/setuptools/blob/6ead555c5fb29bc57fe6105b1bffc163f56fd558/setuptools/package_index.py#L810C1-L825C88",
          "url": "https://github.com/pypa/setuptools/blob/6ead555c5fb29bc57fe6105b1bffc163f56fd558/setuptools/package_index.py#L810C1-L825C88"
        },
        {
          "category": "external",
          "summary": "https://github.com/pypa/setuptools/commit/250a6d17978f9f6ac3ac887091f2d32886fbbb0b",
          "url": "https://github.com/pypa/setuptools/commit/250a6d17978f9f6ac3ac887091f2d32886fbbb0b"
        },
        {
          "category": "external",
          "summary": "https://github.com/pypa/setuptools/issues/4946",
          "url": "https://github.com/pypa/setuptools/issues/4946"
        },
        {
          "category": "external",
          "summary": "https://github.com/pypa/setuptools/security/advisories/GHSA-5rjg-fvgr-3xxf",
          "url": "https://github.com/pypa/setuptools/security/advisories/GHSA-5rjg-fvgr-3xxf"
        }
      ],
      "release_date": "2025-05-17T15:46:11.399000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-08-13T15:25:41+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.2.0.Z.E4S:python3.11-setuptools-0:65.5.1-2.el9_2.2.noarch",
            "AppStream-9.2.0.Z.E4S:python3.11-setuptools-0:65.5.1-2.el9_2.2.src",
            "AppStream-9.2.0.Z.E4S:python3.11-setuptools-wheel-0:65.5.1-2.el9_2.2.noarch"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:13803"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "AppStream-9.2.0.Z.E4S:python3.11-setuptools-0:65.5.1-2.el9_2.2.noarch",
            "AppStream-9.2.0.Z.E4S:python3.11-setuptools-0:65.5.1-2.el9_2.2.src",
            "AppStream-9.2.0.Z.E4S:python3.11-setuptools-wheel-0:65.5.1-2.el9_2.2.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.2.0.Z.E4S:python3.11-setuptools-0:65.5.1-2.el9_2.2.noarch",
            "AppStream-9.2.0.Z.E4S:python3.11-setuptools-0:65.5.1-2.el9_2.2.src",
            "AppStream-9.2.0.Z.E4S:python3.11-setuptools-wheel-0:65.5.1-2.el9_2.2.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "setuptools: Path Traversal Vulnerability in setuptools PackageIndex"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for python3.11-setuptools is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.\n\nSecurity Fix(es):\n\n* setuptools: Path Traversal Vulnerability in setuptools PackageIndex (CVE-2025-47273)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2025:13804",
        "url": "https://access.redhat.com/errata/RHSA-2025:13804"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#moderate",
        "url": "https://access.redhat.com/security/updates/classification/#moderate"
      },
      {
        "category": "external",
        "summary": "2366982",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366982"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_13804.json"
      }
    ],
    "title": "Red Hat Security Advisory: python3.11-setuptools security update",
    "tracking": {
      "current_release_date": "2026-04-30T13:31:58+00:00",
      "generator": {
        "date": "2026-04-30T13:31:58+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.7.7"
        }
      },
      "id": "RHSA-2025:13804",
      "initial_release_date": "2025-08-13T15:33:01+00:00",
      "revision_history": [
        {
          "date": "2025-08-13T15:33:01+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2025-08-13T15:33:01+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-04-30T13:31:58+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AppStream E4S (v.8.8)",
                "product": {
                  "name": "Red Hat Enterprise Linux AppStream E4S (v.8.8)",
                  "product_id": "AppStream-8.8.0.Z.E4S",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_e4s:8.8::appstream"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AppStream TUS (v.8.8)",
                "product": {
                  "name": "Red Hat Enterprise Linux AppStream TUS (v.8.8)",
                  "product_id": "AppStream-8.8.0.Z.TUS",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_tus:8.8::appstream"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "python3.11-setuptools-0:65.5.1-2.el8_8.2.src",
                "product": {
                  "name": "python3.11-setuptools-0:65.5.1-2.el8_8.2.src",
                  "product_id": "python3.11-setuptools-0:65.5.1-2.el8_8.2.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python3.11-setuptools@65.5.1-2.el8_8.2?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "python3.11-setuptools-0:65.5.1-2.el8_8.2.noarch",
                "product": {
                  "name": "python3.11-setuptools-0:65.5.1-2.el8_8.2.noarch",
                  "product_id": "python3.11-setuptools-0:65.5.1-2.el8_8.2.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python3.11-setuptools@65.5.1-2.el8_8.2?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python3.11-setuptools-wheel-0:65.5.1-2.el8_8.2.noarch",
                "product": {
                  "name": "python3.11-setuptools-wheel-0:65.5.1-2.el8_8.2.noarch",
                  "product_id": "python3.11-setuptools-wheel-0:65.5.1-2.el8_8.2.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python3.11-setuptools-wheel@65.5.1-2.el8_8.2?arch=noarch"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3.11-setuptools-0:65.5.1-2.el8_8.2.noarch as a component of Red Hat Enterprise Linux AppStream E4S (v.8.8)",
          "product_id": "AppStream-8.8.0.Z.E4S:python3.11-setuptools-0:65.5.1-2.el8_8.2.noarch"
        },
        "product_reference": "python3.11-setuptools-0:65.5.1-2.el8_8.2.noarch",
        "relates_to_product_reference": "AppStream-8.8.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3.11-setuptools-0:65.5.1-2.el8_8.2.src as a component of Red Hat Enterprise Linux AppStream E4S (v.8.8)",
          "product_id": "AppStream-8.8.0.Z.E4S:python3.11-setuptools-0:65.5.1-2.el8_8.2.src"
        },
        "product_reference": "python3.11-setuptools-0:65.5.1-2.el8_8.2.src",
        "relates_to_product_reference": "AppStream-8.8.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3.11-setuptools-wheel-0:65.5.1-2.el8_8.2.noarch as a component of Red Hat Enterprise Linux AppStream E4S (v.8.8)",
          "product_id": "AppStream-8.8.0.Z.E4S:python3.11-setuptools-wheel-0:65.5.1-2.el8_8.2.noarch"
        },
        "product_reference": "python3.11-setuptools-wheel-0:65.5.1-2.el8_8.2.noarch",
        "relates_to_product_reference": "AppStream-8.8.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3.11-setuptools-0:65.5.1-2.el8_8.2.noarch as a component of Red Hat Enterprise Linux AppStream TUS (v.8.8)",
          "product_id": "AppStream-8.8.0.Z.TUS:python3.11-setuptools-0:65.5.1-2.el8_8.2.noarch"
        },
        "product_reference": "python3.11-setuptools-0:65.5.1-2.el8_8.2.noarch",
        "relates_to_product_reference": "AppStream-8.8.0.Z.TUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3.11-setuptools-0:65.5.1-2.el8_8.2.src as a component of Red Hat Enterprise Linux AppStream TUS (v.8.8)",
          "product_id": "AppStream-8.8.0.Z.TUS:python3.11-setuptools-0:65.5.1-2.el8_8.2.src"
        },
        "product_reference": "python3.11-setuptools-0:65.5.1-2.el8_8.2.src",
        "relates_to_product_reference": "AppStream-8.8.0.Z.TUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3.11-setuptools-wheel-0:65.5.1-2.el8_8.2.noarch as a component of Red Hat Enterprise Linux AppStream TUS (v.8.8)",
          "product_id": "AppStream-8.8.0.Z.TUS:python3.11-setuptools-wheel-0:65.5.1-2.el8_8.2.noarch"
        },
        "product_reference": "python3.11-setuptools-wheel-0:65.5.1-2.el8_8.2.noarch",
        "relates_to_product_reference": "AppStream-8.8.0.Z.TUS"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-47273",
      "cwe": {
        "id": "CWE-22",
        "name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
      },
      "discovery_date": "2025-05-17T16:00:41.145177+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2366982"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A path traversal vulnerability in the Python setuptools library allows attackers with limited system access to write files outside the intended temporary directory by manipulating package download URLs. This flaw bypasses basic filename sanitization and can lead to unauthorized overwrites of important system files, creating opportunities for further compromise. While it doesn\u0027t expose data or require user interaction, it poses a high integrity risk and is especially concerning in environments that rely on automated package handling or internal tooling built on setuptools.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "setuptools: Path Traversal Vulnerability in setuptools PackageIndex",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat Product Security has rated this vulnerability \"Moderate\" based on the impact of the damage caused by a successful exploitation and the pre-requisites.\n\n* Exploitation requires that the attacker have limited code execution access to a Python environment where they can trigger the vulnerable PackageIndex.download() function\u2014this might be via a script, plugin, or automated job. Full admin rights aren\u0027t needed but a user with no access at all will be unable to exploit this vulnerability.\n* The vulnerability impacts the integrity of the system within the same security boundary\u2014it does not enable access or compromise across trust boundaries (e.g., from one container to another or from user space to kernel).\n* Successful exploitation only allows the attacker to \"create\" new files. The vulnerability does not provide access to existing files and by an extension to any confidential information. \n* Arbitrary file writes can overwrite critical config files, executables, or scripts. This can lead to persistent code execution, system misconfiguration, or unauthorized behavior, especially in automated environments. While overwriting critical files could theoretically lead to service disruption, the vulnerability in isolation does not inherently cause denial of service. The exploit doesn\u0027t target availability directly, and in many cases, systems may continue running.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.8.0.Z.E4S:python3.11-setuptools-0:65.5.1-2.el8_8.2.noarch",
          "AppStream-8.8.0.Z.E4S:python3.11-setuptools-0:65.5.1-2.el8_8.2.src",
          "AppStream-8.8.0.Z.E4S:python3.11-setuptools-wheel-0:65.5.1-2.el8_8.2.noarch",
          "AppStream-8.8.0.Z.TUS:python3.11-setuptools-0:65.5.1-2.el8_8.2.noarch",
          "AppStream-8.8.0.Z.TUS:python3.11-setuptools-0:65.5.1-2.el8_8.2.src",
          "AppStream-8.8.0.Z.TUS:python3.11-setuptools-wheel-0:65.5.1-2.el8_8.2.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-47273"
        },
        {
          "category": "external",
          "summary": "RHBZ#2366982",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366982"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-47273",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-47273"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-47273",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-47273"
        },
        {
          "category": "external",
          "summary": "https://github.com/pypa/setuptools/blob/6ead555c5fb29bc57fe6105b1bffc163f56fd558/setuptools/package_index.py#L810C1-L825C88",
          "url": "https://github.com/pypa/setuptools/blob/6ead555c5fb29bc57fe6105b1bffc163f56fd558/setuptools/package_index.py#L810C1-L825C88"
        },
        {
          "category": "external",
          "summary": "https://github.com/pypa/setuptools/commit/250a6d17978f9f6ac3ac887091f2d32886fbbb0b",
          "url": "https://github.com/pypa/setuptools/commit/250a6d17978f9f6ac3ac887091f2d32886fbbb0b"
        },
        {
          "category": "external",
          "summary": "https://github.com/pypa/setuptools/issues/4946",
          "url": "https://github.com/pypa/setuptools/issues/4946"
        },
        {
          "category": "external",
          "summary": "https://github.com/pypa/setuptools/security/advisories/GHSA-5rjg-fvgr-3xxf",
          "url": "https://github.com/pypa/setuptools/security/advisories/GHSA-5rjg-fvgr-3xxf"
        }
      ],
      "release_date": "2025-05-17T15:46:11.399000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-08-13T15:33:01+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.8.0.Z.E4S:python3.11-setuptools-0:65.5.1-2.el8_8.2.noarch",
            "AppStream-8.8.0.Z.E4S:python3.11-setuptools-0:65.5.1-2.el8_8.2.src",
            "AppStream-8.8.0.Z.E4S:python3.11-setuptools-wheel-0:65.5.1-2.el8_8.2.noarch",
            "AppStream-8.8.0.Z.TUS:python3.11-setuptools-0:65.5.1-2.el8_8.2.noarch",
            "AppStream-8.8.0.Z.TUS:python3.11-setuptools-0:65.5.1-2.el8_8.2.src",
            "AppStream-8.8.0.Z.TUS:python3.11-setuptools-wheel-0:65.5.1-2.el8_8.2.noarch"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:13804"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "AppStream-8.8.0.Z.E4S:python3.11-setuptools-0:65.5.1-2.el8_8.2.noarch",
            "AppStream-8.8.0.Z.E4S:python3.11-setuptools-0:65.5.1-2.el8_8.2.src",
            "AppStream-8.8.0.Z.E4S:python3.11-setuptools-wheel-0:65.5.1-2.el8_8.2.noarch",
            "AppStream-8.8.0.Z.TUS:python3.11-setuptools-0:65.5.1-2.el8_8.2.noarch",
            "AppStream-8.8.0.Z.TUS:python3.11-setuptools-0:65.5.1-2.el8_8.2.src",
            "AppStream-8.8.0.Z.TUS:python3.11-setuptools-wheel-0:65.5.1-2.el8_8.2.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.8.0.Z.E4S:python3.11-setuptools-0:65.5.1-2.el8_8.2.noarch",
            "AppStream-8.8.0.Z.E4S:python3.11-setuptools-0:65.5.1-2.el8_8.2.src",
            "AppStream-8.8.0.Z.E4S:python3.11-setuptools-wheel-0:65.5.1-2.el8_8.2.noarch",
            "AppStream-8.8.0.Z.TUS:python3.11-setuptools-0:65.5.1-2.el8_8.2.noarch",
            "AppStream-8.8.0.Z.TUS:python3.11-setuptools-0:65.5.1-2.el8_8.2.src",
            "AppStream-8.8.0.Z.TUS:python3.11-setuptools-wheel-0:65.5.1-2.el8_8.2.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "setuptools: Path Traversal Vulnerability in setuptools PackageIndex"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update is now available for Red Hat Ansible Automation Platform 2.5\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing IT automation at scale. IT Managers can provide top-down guidelines on how automation is applied to individual teams, while automation developers retain the freedom to write tasks that leverage existing knowledge without the overhead. Ansible Automation Platform makes it possible for users across an organization to share, vet, and manage automation content by means of a simple, powerful, and agentless language.\n\nSecurity Fix(es):\n\n* automation-controller: Path Traversal Vulnerability in setuptools PackageIndex (CVE-2025-47273)\n\n* python3.11-django: Django Path Injection Vulnerability (CVE-2025-48432)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nUpdates and fixes included:\n\nAutomation platform\n* Enhanced Support for Streaming Chat Responses (AAP-51756)\n* Improved LDAP filter parsing/handling (AAP-51591)\n* Updated AAP to allow for HTTP headers to be passed through envoy when HTTPS is offloaded by another device in front of envoy (AAP-51347)\n* Updated the OpenAPI spec to now reflect all available query parameters (AAP-49824)\n* Added a new field on AzureAD authenticator called \u0027Field to use as username\u0027 which allows use of an arbitrary field from the assertion as the username (AAP-49481)\n* Fixed migration scenarios that left legacy users in a partly migrated state to now migrate properly to gateway (AAP-43251)\n* Removed the required label from the Organization field for Galaxy credentials in the controller Credential Create and Edit forms (AAP-51587)\n* Fixed the \u0027LOGIN_REDIRECT_OVERRIDE\u0027 to be respected (AAP-49726)\n* Fixed a breadcrumb in a launch template to no longer send users to the wrong URL (AAP-44194)\n* Fixed the subscription entitlement window to no longer display again after AAP has been entitled when running in a load-balanced environment with multiple controller web pods (AAP-43883)\n* Updated the AAP User Interface to allow all users to see the Notifiers tab (AAP-41342)\n* Added the limit field on the job details page (AAP-36118)\n* automation-gateway has been updated to 2.5.20250827\n* python3.11-django-ansible-base has been updated to 2.5.20250827\n\nAutomation controller\n* Galaxy credentials can now be created and edited without the need to specify an organization (AAP-51614)\n* Fixed the subscription functionality to no longer attach before subscription credentials have been set, and to return a \u0027400 Bad Request\u0027 error instead (AAP-50322)\n* automation-controller has been updated to 4.6.19\n\nEvent-Driven Ansible\n* Fixed project import state to no longer be stuck at pending or running (AAP-51643)\n* Fixed EDA to allow \u0027%20\u0027 in the project git URL (AAP-51642)\n* Fixed \u0027MQ_TLS\u0027 to accept a boolean value (AAP-51012)\n* Fixed missing RPM dependency for PostgreSQL client which resulted in container images missing psql binaries (AAP-50941)\n* Fixed a bug to no longer prevent a user who belonged to a team with an EDA organization Project Admin role to be able see the organization (AAP-50921)\n* automation-eda-controller has been updated to 1.1.13\n\nContainer-based Ansible Automation Platform\n* Implemented PostgreSQL extra settings parameter on the installer (AAP-51533)\n* Fixed the Redis hostname to no longer fail to be set in a disconnected environment (AAP-51532)\n* Updated preflight checks to temporarily check PostgreSQL version to use a CA bundle from the VM server with the custom cert appended, if provided (AAP-50884)\n* Fixed PCP data permissions by migrating the data to a podman volume instead of a bind mount (AAP-50807)\n* Fixed a parameter to allow excluding subdirs during the Automation Hub backup process (AAP-50784)\n* Added an exclusion parameter for Containerized Backup, allowing users to specify snapshot paths to be excluded from the backup process (AAP-46767)\n* containerized installer setup has been updated to 2.5-18\n\nRPM-based Ansible Automation Platform\n* Added \u0027postgres_extra_settings\u0027 for postgresql.conf customization for managed database installations (AAP-51462)\n* Fixed automation controller nodes so they are removed from the gateway registry when set to a deprovision state (AAP-51461)\n* Fixed the installer to no longer fail when disabling HTTPS for gateway and/or gateway proxy (envoy) (AAP-48606)\n* ansible-automation-platform-installer and installer setup have been updated to 2.5-17\n\nAdditional changes:\n* automation-hub has been updated to 4.10.7\n* python3.11-django has been updated to 4.2.23\n* python3.11-galaxy-ng has been updated to 4.10.7",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2025:14686",
        "url": "https://access.redhat.com/errata/RHSA-2025:14686"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#moderate",
        "url": "https://access.redhat.com/security/updates/classification/#moderate"
      },
      {
        "category": "external",
        "summary": "2366982",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366982"
      },
      {
        "category": "external",
        "summary": "2370365",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2370365"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_14686.json"
      }
    ],
    "title": "Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update",
    "tracking": {
      "current_release_date": "2026-04-30T13:32:17+00:00",
      "generator": {
        "date": "2026-04-30T13:32:17+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.7.7"
        }
      },
      "id": "RHSA-2025:14686",
      "initial_release_date": "2025-08-26T21:02:47+00:00",
      "revision_history": [
        {
          "date": "2025-08-26T21:02:47+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2025-08-26T21:02:47+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-04-30T13:32:17+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Ansible Automation Platform 2.5 for RHEL 8",
                "product": {
                  "name": "Red Hat Ansible Automation Platform 2.5 for RHEL 8",
                  "product_id": "8Base-Ansible-Automation-Platform-2.5",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:ansible_automation_platform:2.5::el8"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Ansible Automation Platform 2.5 for RHEL 8",
                "product": {
                  "name": "Red Hat Ansible Automation Platform 2.5 for RHEL 8",
                  "product_id": "8Base-Ansible-Automation-Platform-2.5-Developer-1.2",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:ansible_automation_platform_developer:2.5::el8"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Ansible Automation Platform 2.5 for RHEL 9",
                "product": {
                  "name": "Red Hat Ansible Automation Platform 2.5 for RHEL 9",
                  "product_id": "9Base-Ansible-Automation-Platform-2.5",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:ansible_automation_platform:2.5::el9"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Ansible Automation Platform 2.5 for RHEL 9",
                "product": {
                  "name": "Red Hat Ansible Automation Platform 2.5 for RHEL 9",
                  "product_id": "9Base-Ansible-Automation-Platform-2.5-Developer-1.2",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:ansible_automation_platform_developer:2.5::el9"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Ansible Automation Platform"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "python3.11-django-0:4.2.23-1.el8ap.src",
                "product": {
                  "name": "python3.11-django-0:4.2.23-1.el8ap.src",
                  "product_id": "python3.11-django-0:4.2.23-1.el8ap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python3.11-django@4.2.23-1.el8ap?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "automation-hub-0:4.10.7-1.el8ap.src",
                "product": {
                  "name": "automation-hub-0:4.10.7-1.el8ap.src",
                  "product_id": "automation-hub-0:4.10.7-1.el8ap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/automation-hub@4.10.7-1.el8ap?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "automation-eda-controller-0:1.1.13-1.el8ap.src",
                "product": {
                  "name": "automation-eda-controller-0:1.1.13-1.el8ap.src",
                  "product_id": "automation-eda-controller-0:1.1.13-1.el8ap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/automation-eda-controller@1.1.13-1.el8ap?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "automation-gateway-0:2.5.20250827-1.el8ap.src",
                "product": {
                  "name": "automation-gateway-0:2.5.20250827-1.el8ap.src",
                  "product_id": "automation-gateway-0:2.5.20250827-1.el8ap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/automation-gateway@2.5.20250827-1.el8ap?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python3.11-galaxy-ng-0:4.10.7-1.el8ap.src",
                "product": {
                  "name": "python3.11-galaxy-ng-0:4.10.7-1.el8ap.src",
                  "product_id": "python3.11-galaxy-ng-0:4.10.7-1.el8ap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python3.11-galaxy-ng@4.10.7-1.el8ap?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "ansible-automation-platform-installer-0:2.5-17.el8ap.src",
                "product": {
                  "name": "ansible-automation-platform-installer-0:2.5-17.el8ap.src",
                  "product_id": "ansible-automation-platform-installer-0:2.5-17.el8ap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/ansible-automation-platform-installer@2.5-17.el8ap?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python3.11-django-ansible-base-0:2.5.20250827-1.el8ap.src",
                "product": {
                  "name": "python3.11-django-ansible-base-0:2.5.20250827-1.el8ap.src",
                  "product_id": "python3.11-django-ansible-base-0:2.5.20250827-1.el8ap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python3.11-django-ansible-base@2.5.20250827-1.el8ap?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "automation-controller-0:4.6.19-1.el8ap.src",
                "product": {
                  "name": "automation-controller-0:4.6.19-1.el8ap.src",
                  "product_id": "automation-controller-0:4.6.19-1.el8ap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/automation-controller@4.6.19-1.el8ap?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python3.11-django-0:4.2.23-1.el9ap.src",
                "product": {
                  "name": "python3.11-django-0:4.2.23-1.el9ap.src",
                  "product_id": "python3.11-django-0:4.2.23-1.el9ap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python3.11-django@4.2.23-1.el9ap?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "automation-gateway-0:2.5.20250827-1.el9ap.src",
                "product": {
                  "name": "automation-gateway-0:2.5.20250827-1.el9ap.src",
                  "product_id": "automation-gateway-0:2.5.20250827-1.el9ap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/automation-gateway@2.5.20250827-1.el9ap?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python3.11-django-ansible-base-0:2.5.20250827-1.el9ap.src",
                "product": {
                  "name": "python3.11-django-ansible-base-0:2.5.20250827-1.el9ap.src",
                  "product_id": "python3.11-django-ansible-base-0:2.5.20250827-1.el9ap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python3.11-django-ansible-base@2.5.20250827-1.el9ap?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python3.11-galaxy-ng-0:4.10.7-1.el9ap.src",
                "product": {
                  "name": "python3.11-galaxy-ng-0:4.10.7-1.el9ap.src",
                  "product_id": "python3.11-galaxy-ng-0:4.10.7-1.el9ap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python3.11-galaxy-ng@4.10.7-1.el9ap?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "automation-hub-0:4.10.7-1.el9ap.src",
                "product": {
                  "name": "automation-hub-0:4.10.7-1.el9ap.src",
                  "product_id": "automation-hub-0:4.10.7-1.el9ap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/automation-hub@4.10.7-1.el9ap?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "ansible-automation-platform-installer-0:2.5-17.el9ap.src",
                "product": {
                  "name": "ansible-automation-platform-installer-0:2.5-17.el9ap.src",
                  "product_id": "ansible-automation-platform-installer-0:2.5-17.el9ap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/ansible-automation-platform-installer@2.5-17.el9ap?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "automation-eda-controller-0:1.1.13-1.el9ap.src",
                "product": {
                  "name": "automation-eda-controller-0:1.1.13-1.el9ap.src",
                  "product_id": "automation-eda-controller-0:1.1.13-1.el9ap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/automation-eda-controller@1.1.13-1.el9ap?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "automation-controller-0:4.6.19-1.el9ap.src",
                "product": {
                  "name": "automation-controller-0:4.6.19-1.el9ap.src",
                  "product_id": "automation-controller-0:4.6.19-1.el9ap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/automation-controller@4.6.19-1.el9ap?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "python3.11-django-0:4.2.23-1.el8ap.noarch",
                "product": {
                  "name": "python3.11-django-0:4.2.23-1.el8ap.noarch",
                  "product_id": "python3.11-django-0:4.2.23-1.el8ap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python3.11-django@4.2.23-1.el8ap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "automation-hub-0:4.10.7-1.el8ap.noarch",
                "product": {
                  "name": "automation-hub-0:4.10.7-1.el8ap.noarch",
                  "product_id": "automation-hub-0:4.10.7-1.el8ap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/automation-hub@4.10.7-1.el8ap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "automation-eda-controller-0:1.1.13-1.el8ap.noarch",
                "product": {
                  "name": "automation-eda-controller-0:1.1.13-1.el8ap.noarch",
                  "product_id": "automation-eda-controller-0:1.1.13-1.el8ap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/automation-eda-controller@1.1.13-1.el8ap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "automation-eda-controller-base-0:1.1.13-1.el8ap.noarch",
                "product": {
                  "name": "automation-eda-controller-base-0:1.1.13-1.el8ap.noarch",
                  "product_id": "automation-eda-controller-base-0:1.1.13-1.el8ap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/automation-eda-controller-base@1.1.13-1.el8ap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "automation-eda-controller-base-services-0:1.1.13-1.el8ap.noarch",
                "product": {
                  "name": "automation-eda-controller-base-services-0:1.1.13-1.el8ap.noarch",
                  "product_id": "automation-eda-controller-base-services-0:1.1.13-1.el8ap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/automation-eda-controller-base-services@1.1.13-1.el8ap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "automation-eda-controller-event-stream-services-0:1.1.13-1.el8ap.noarch",
                "product": {
                  "name": "automation-eda-controller-event-stream-services-0:1.1.13-1.el8ap.noarch",
                  "product_id": "automation-eda-controller-event-stream-services-0:1.1.13-1.el8ap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/automation-eda-controller-event-stream-services@1.1.13-1.el8ap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "automation-eda-controller-worker-services-0:1.1.13-1.el8ap.noarch",
                "product": {
                  "name": "automation-eda-controller-worker-services-0:1.1.13-1.el8ap.noarch",
                  "product_id": "automation-eda-controller-worker-services-0:1.1.13-1.el8ap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/automation-eda-controller-worker-services@1.1.13-1.el8ap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "automation-gateway-0:2.5.20250827-1.el8ap.noarch",
                "product": {
                  "name": "automation-gateway-0:2.5.20250827-1.el8ap.noarch",
                  "product_id": "automation-gateway-0:2.5.20250827-1.el8ap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/automation-gateway@2.5.20250827-1.el8ap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "automation-gateway-config-0:2.5.20250827-1.el8ap.noarch",
                "product": {
                  "name": "automation-gateway-config-0:2.5.20250827-1.el8ap.noarch",
                  "product_id": "automation-gateway-config-0:2.5.20250827-1.el8ap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/automation-gateway-config@2.5.20250827-1.el8ap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "automation-gateway-server-0:2.5.20250827-1.el8ap.noarch",
                "product": {
                  "name": "automation-gateway-server-0:2.5.20250827-1.el8ap.noarch",
                  "product_id": "automation-gateway-server-0:2.5.20250827-1.el8ap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/automation-gateway-server@2.5.20250827-1.el8ap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python3.11-galaxy-ng-0:4.10.7-1.el8ap.noarch",
                "product": {
                  "name": "python3.11-galaxy-ng-0:4.10.7-1.el8ap.noarch",
                  "product_id": "python3.11-galaxy-ng-0:4.10.7-1.el8ap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python3.11-galaxy-ng@4.10.7-1.el8ap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "ansible-automation-platform-installer-0:2.5-17.el8ap.noarch",
                "product": {
                  "name": "ansible-automation-platform-installer-0:2.5-17.el8ap.noarch",
                  "product_id": "ansible-automation-platform-installer-0:2.5-17.el8ap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/ansible-automation-platform-installer@2.5-17.el8ap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python3.11-django-ansible-base+activitystream-0:2.5.20250827-1.el8ap.noarch",
                "product": {
                  "name": "python3.11-django-ansible-base+activitystream-0:2.5.20250827-1.el8ap.noarch",
                  "product_id": "python3.11-django-ansible-base+activitystream-0:2.5.20250827-1.el8ap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python3.11-django-ansible-base%2Bactivitystream@2.5.20250827-1.el8ap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python3.11-django-ansible-base+api_documentation-0:2.5.20250827-1.el8ap.noarch",
                "product": {
                  "name": "python3.11-django-ansible-base+api_documentation-0:2.5.20250827-1.el8ap.noarch",
                  "product_id": "python3.11-django-ansible-base+api_documentation-0:2.5.20250827-1.el8ap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python3.11-django-ansible-base%2Bapi_documentation@2.5.20250827-1.el8ap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python3.11-django-ansible-base+authentication-0:2.5.20250827-1.el8ap.noarch",
                "product": {
                  "name": "python3.11-django-ansible-base+authentication-0:2.5.20250827-1.el8ap.noarch",
                  "product_id": "python3.11-django-ansible-base+authentication-0:2.5.20250827-1.el8ap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python3.11-django-ansible-base%2Bauthentication@2.5.20250827-1.el8ap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python3.11-django-ansible-base+channel_auth-0:2.5.20250827-1.el8ap.noarch",
                "product": {
                  "name": "python3.11-django-ansible-base+channel_auth-0:2.5.20250827-1.el8ap.noarch",
                  "product_id": "python3.11-django-ansible-base+channel_auth-0:2.5.20250827-1.el8ap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python3.11-django-ansible-base%2Bchannel_auth@2.5.20250827-1.el8ap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python3.11-django-ansible-base+feature_flags-0:2.5.20250827-1.el8ap.noarch",
                "product": {
                  "name": "python3.11-django-ansible-base+feature_flags-0:2.5.20250827-1.el8ap.noarch",
                  "product_id": "python3.11-django-ansible-base+feature_flags-0:2.5.20250827-1.el8ap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python3.11-django-ansible-base%2Bfeature_flags@2.5.20250827-1.el8ap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python3.11-django-ansible-base+jwt_consumer-0:2.5.20250827-1.el8ap.noarch",
                "product": {
                  "name": "python3.11-django-ansible-base+jwt_consumer-0:2.5.20250827-1.el8ap.noarch",
                  "product_id": "python3.11-django-ansible-base+jwt_consumer-0:2.5.20250827-1.el8ap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python3.11-django-ansible-base%2Bjwt_consumer@2.5.20250827-1.el8ap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python3.11-django-ansible-base+oauth2_provider-0:2.5.20250827-1.el8ap.noarch",
                "product": {
                  "name": "python3.11-django-ansible-base+oauth2_provider-0:2.5.20250827-1.el8ap.noarch",
                  "product_id": "python3.11-django-ansible-base+oauth2_provider-0:2.5.20250827-1.el8ap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python3.11-django-ansible-base%2Boauth2_provider@2.5.20250827-1.el8ap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python3.11-django-ansible-base+rbac-0:2.5.20250827-1.el8ap.noarch",
                "product": {
                  "name": "python3.11-django-ansible-base+rbac-0:2.5.20250827-1.el8ap.noarch",
                  "product_id": "python3.11-django-ansible-base+rbac-0:2.5.20250827-1.el8ap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python3.11-django-ansible-base%2Brbac@2.5.20250827-1.el8ap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python3.11-django-ansible-base+redis_client-0:2.5.20250827-1.el8ap.noarch",
                "product": {
                  "name": "python3.11-django-ansible-base+redis_client-0:2.5.20250827-1.el8ap.noarch",
                  "product_id": "python3.11-django-ansible-base+redis_client-0:2.5.20250827-1.el8ap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python3.11-django-ansible-base%2Bredis_client@2.5.20250827-1.el8ap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python3.11-django-ansible-base+rest_filters-0:2.5.20250827-1.el8ap.noarch",
                "product": {
                  "name": "python3.11-django-ansible-base+rest_filters-0:2.5.20250827-1.el8ap.noarch",
                  "product_id": "python3.11-django-ansible-base+rest_filters-0:2.5.20250827-1.el8ap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python3.11-django-ansible-base%2Brest_filters@2.5.20250827-1.el8ap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python3.11-django-ansible-base-0:2.5.20250827-1.el8ap.noarch",
                "product": {
                  "name": "python3.11-django-ansible-base-0:2.5.20250827-1.el8ap.noarch",
                  "product_id": "python3.11-django-ansible-base-0:2.5.20250827-1.el8ap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python3.11-django-ansible-base@2.5.20250827-1.el8ap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "automation-controller-cli-0:4.6.19-1.el8ap.noarch",
                "product": {
                  "name": "automation-controller-cli-0:4.6.19-1.el8ap.noarch",
                  "product_id": "automation-controller-cli-0:4.6.19-1.el8ap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/automation-controller-cli@4.6.19-1.el8ap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "automation-controller-server-0:4.6.19-1.el8ap.noarch",
                "product": {
                  "name": "automation-controller-server-0:4.6.19-1.el8ap.noarch",
                  "product_id": "automation-controller-server-0:4.6.19-1.el8ap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/automation-controller-server@4.6.19-1.el8ap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "automation-controller-ui-0:4.6.19-1.el8ap.noarch",
                "product": {
                  "name": "automation-controller-ui-0:4.6.19-1.el8ap.noarch",
                  "product_id": "automation-controller-ui-0:4.6.19-1.el8ap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/automation-controller-ui@4.6.19-1.el8ap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python3.11-django-0:4.2.23-1.el9ap.noarch",
                "product": {
                  "name": "python3.11-django-0:4.2.23-1.el9ap.noarch",
                  "product_id": "python3.11-django-0:4.2.23-1.el9ap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python3.11-django@4.2.23-1.el9ap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "automation-gateway-0:2.5.20250827-1.el9ap.noarch",
                "product": {
                  "name": "automation-gateway-0:2.5.20250827-1.el9ap.noarch",
                  "product_id": "automation-gateway-0:2.5.20250827-1.el9ap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/automation-gateway@2.5.20250827-1.el9ap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "automation-gateway-config-0:2.5.20250827-1.el9ap.noarch",
                "product": {
                  "name": "automation-gateway-config-0:2.5.20250827-1.el9ap.noarch",
                  "product_id": "automation-gateway-config-0:2.5.20250827-1.el9ap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/automation-gateway-config@2.5.20250827-1.el9ap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "automation-gateway-server-0:2.5.20250827-1.el9ap.noarch",
                "product": {
                  "name": "automation-gateway-server-0:2.5.20250827-1.el9ap.noarch",
                  "product_id": "automation-gateway-server-0:2.5.20250827-1.el9ap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/automation-gateway-server@2.5.20250827-1.el9ap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python3.11-django-ansible-base+activitystream-0:2.5.20250827-1.el9ap.noarch",
                "product": {
                  "name": "python3.11-django-ansible-base+activitystream-0:2.5.20250827-1.el9ap.noarch",
                  "product_id": "python3.11-django-ansible-base+activitystream-0:2.5.20250827-1.el9ap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python3.11-django-ansible-base%2Bactivitystream@2.5.20250827-1.el9ap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python3.11-django-ansible-base+api_documentation-0:2.5.20250827-1.el9ap.noarch",
                "product": {
                  "name": "python3.11-django-ansible-base+api_documentation-0:2.5.20250827-1.el9ap.noarch",
                  "product_id": "python3.11-django-ansible-base+api_documentation-0:2.5.20250827-1.el9ap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python3.11-django-ansible-base%2Bapi_documentation@2.5.20250827-1.el9ap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python3.11-django-ansible-base+authentication-0:2.5.20250827-1.el9ap.noarch",
                "product": {
                  "name": "python3.11-django-ansible-base+authentication-0:2.5.20250827-1.el9ap.noarch",
                  "product_id": "python3.11-django-ansible-base+authentication-0:2.5.20250827-1.el9ap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python3.11-django-ansible-base%2Bauthentication@2.5.20250827-1.el9ap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python3.11-django-ansible-base+channel_auth-0:2.5.20250827-1.el9ap.noarch",
                "product": {
                  "name": "python3.11-django-ansible-base+channel_auth-0:2.5.20250827-1.el9ap.noarch",
                  "product_id": "python3.11-django-ansible-base+channel_auth-0:2.5.20250827-1.el9ap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python3.11-django-ansible-base%2Bchannel_auth@2.5.20250827-1.el9ap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python3.11-django-ansible-base+feature_flags-0:2.5.20250827-1.el9ap.noarch",
                "product": {
                  "name": "python3.11-django-ansible-base+feature_flags-0:2.5.20250827-1.el9ap.noarch",
                  "product_id": "python3.11-django-ansible-base+feature_flags-0:2.5.20250827-1.el9ap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python3.11-django-ansible-base%2Bfeature_flags@2.5.20250827-1.el9ap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python3.11-django-ansible-base+jwt_consumer-0:2.5.20250827-1.el9ap.noarch",
                "product": {
                  "name": "python3.11-django-ansible-base+jwt_consumer-0:2.5.20250827-1.el9ap.noarch",
                  "product_id": "python3.11-django-ansible-base+jwt_consumer-0:2.5.20250827-1.el9ap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python3.11-django-ansible-base%2Bjwt_consumer@2.5.20250827-1.el9ap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python3.11-django-ansible-base+oauth2_provider-0:2.5.20250827-1.el9ap.noarch",
                "product": {
                  "name": "python3.11-django-ansible-base+oauth2_provider-0:2.5.20250827-1.el9ap.noarch",
                  "product_id": "python3.11-django-ansible-base+oauth2_provider-0:2.5.20250827-1.el9ap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python3.11-django-ansible-base%2Boauth2_provider@2.5.20250827-1.el9ap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python3.11-django-ansible-base+rbac-0:2.5.20250827-1.el9ap.noarch",
                "product": {
                  "name": "python3.11-django-ansible-base+rbac-0:2.5.20250827-1.el9ap.noarch",
                  "product_id": "python3.11-django-ansible-base+rbac-0:2.5.20250827-1.el9ap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python3.11-django-ansible-base%2Brbac@2.5.20250827-1.el9ap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python3.11-django-ansible-base+redis_client-0:2.5.20250827-1.el9ap.noarch",
                "product": {
                  "name": "python3.11-django-ansible-base+redis_client-0:2.5.20250827-1.el9ap.noarch",
                  "product_id": "python3.11-django-ansible-base+redis_client-0:2.5.20250827-1.el9ap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python3.11-django-ansible-base%2Bredis_client@2.5.20250827-1.el9ap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python3.11-django-ansible-base+rest_filters-0:2.5.20250827-1.el9ap.noarch",
                "product": {
                  "name": "python3.11-django-ansible-base+rest_filters-0:2.5.20250827-1.el9ap.noarch",
                  "product_id": "python3.11-django-ansible-base+rest_filters-0:2.5.20250827-1.el9ap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python3.11-django-ansible-base%2Brest_filters@2.5.20250827-1.el9ap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python3.11-django-ansible-base-0:2.5.20250827-1.el9ap.noarch",
                "product": {
                  "name": "python3.11-django-ansible-base-0:2.5.20250827-1.el9ap.noarch",
                  "product_id": "python3.11-django-ansible-base-0:2.5.20250827-1.el9ap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python3.11-django-ansible-base@2.5.20250827-1.el9ap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python3.11-galaxy-ng-0:4.10.7-1.el9ap.noarch",
                "product": {
                  "name": "python3.11-galaxy-ng-0:4.10.7-1.el9ap.noarch",
                  "product_id": "python3.11-galaxy-ng-0:4.10.7-1.el9ap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python3.11-galaxy-ng@4.10.7-1.el9ap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "automation-hub-0:4.10.7-1.el9ap.noarch",
                "product": {
                  "name": "automation-hub-0:4.10.7-1.el9ap.noarch",
                  "product_id": "automation-hub-0:4.10.7-1.el9ap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/automation-hub@4.10.7-1.el9ap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "ansible-automation-platform-installer-0:2.5-17.el9ap.noarch",
                "product": {
                  "name": "ansible-automation-platform-installer-0:2.5-17.el9ap.noarch",
                  "product_id": "ansible-automation-platform-installer-0:2.5-17.el9ap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/ansible-automation-platform-installer@2.5-17.el9ap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "automation-eda-controller-0:1.1.13-1.el9ap.noarch",
                "product": {
                  "name": "automation-eda-controller-0:1.1.13-1.el9ap.noarch",
                  "product_id": "automation-eda-controller-0:1.1.13-1.el9ap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/automation-eda-controller@1.1.13-1.el9ap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "automation-eda-controller-base-0:1.1.13-1.el9ap.noarch",
                "product": {
                  "name": "automation-eda-controller-base-0:1.1.13-1.el9ap.noarch",
                  "product_id": "automation-eda-controller-base-0:1.1.13-1.el9ap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/automation-eda-controller-base@1.1.13-1.el9ap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "automation-eda-controller-base-services-0:1.1.13-1.el9ap.noarch",
                "product": {
                  "name": "automation-eda-controller-base-services-0:1.1.13-1.el9ap.noarch",
                  "product_id": "automation-eda-controller-base-services-0:1.1.13-1.el9ap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/automation-eda-controller-base-services@1.1.13-1.el9ap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "automation-eda-controller-event-stream-services-0:1.1.13-1.el9ap.noarch",
                "product": {
                  "name": "automation-eda-controller-event-stream-services-0:1.1.13-1.el9ap.noarch",
                  "product_id": "automation-eda-controller-event-stream-services-0:1.1.13-1.el9ap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/automation-eda-controller-event-stream-services@1.1.13-1.el9ap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "automation-eda-controller-worker-services-0:1.1.13-1.el9ap.noarch",
                "product": {
                  "name": "automation-eda-controller-worker-services-0:1.1.13-1.el9ap.noarch",
                  "product_id": "automation-eda-controller-worker-services-0:1.1.13-1.el9ap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/automation-eda-controller-worker-services@1.1.13-1.el9ap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "automation-controller-cli-0:4.6.19-1.el9ap.noarch",
                "product": {
                  "name": "automation-controller-cli-0:4.6.19-1.el9ap.noarch",
                  "product_id": "automation-controller-cli-0:4.6.19-1.el9ap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/automation-controller-cli@4.6.19-1.el9ap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "automation-controller-server-0:4.6.19-1.el9ap.noarch",
                "product": {
                  "name": "automation-controller-server-0:4.6.19-1.el9ap.noarch",
                  "product_id": "automation-controller-server-0:4.6.19-1.el9ap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/automation-controller-server@4.6.19-1.el9ap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "automation-controller-ui-0:4.6.19-1.el9ap.noarch",
                "product": {
                  "name": "automation-controller-ui-0:4.6.19-1.el9ap.noarch",
                  "product_id": "automation-controller-ui-0:4.6.19-1.el9ap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/automation-controller-ui@4.6.19-1.el9ap?arch=noarch"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "automation-controller-0:4.6.19-1.el8ap.x86_64",
                "product": {
                  "name": "automation-controller-0:4.6.19-1.el8ap.x86_64",
                  "product_id": "automation-controller-0:4.6.19-1.el8ap.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/automation-controller@4.6.19-1.el8ap?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "automation-controller-venv-tower-0:4.6.19-1.el8ap.x86_64",
                "product": {
                  "name": "automation-controller-venv-tower-0:4.6.19-1.el8ap.x86_64",
                  "product_id": "automation-controller-venv-tower-0:4.6.19-1.el8ap.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/automation-controller-venv-tower@4.6.19-1.el8ap?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "automation-controller-0:4.6.19-1.el9ap.x86_64",
                "product": {
                  "name": "automation-controller-0:4.6.19-1.el9ap.x86_64",
                  "product_id": "automation-controller-0:4.6.19-1.el9ap.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/automation-controller@4.6.19-1.el9ap?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "automation-controller-venv-tower-0:4.6.19-1.el9ap.x86_64",
                "product": {
                  "name": "automation-controller-venv-tower-0:4.6.19-1.el9ap.x86_64",
                  "product_id": "automation-controller-venv-tower-0:4.6.19-1.el9ap.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/automation-controller-venv-tower@4.6.19-1.el9ap?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "automation-controller-0:4.6.19-1.el8ap.ppc64le",
                "product": {
                  "name": "automation-controller-0:4.6.19-1.el8ap.ppc64le",
                  "product_id": "automation-controller-0:4.6.19-1.el8ap.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/automation-controller@4.6.19-1.el8ap?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "automation-controller-venv-tower-0:4.6.19-1.el8ap.ppc64le",
                "product": {
                  "name": "automation-controller-venv-tower-0:4.6.19-1.el8ap.ppc64le",
                  "product_id": "automation-controller-venv-tower-0:4.6.19-1.el8ap.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/automation-controller-venv-tower@4.6.19-1.el8ap?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "automation-controller-0:4.6.19-1.el9ap.ppc64le",
                "product": {
                  "name": "automation-controller-0:4.6.19-1.el9ap.ppc64le",
                  "product_id": "automation-controller-0:4.6.19-1.el9ap.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/automation-controller@4.6.19-1.el9ap?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "automation-controller-venv-tower-0:4.6.19-1.el9ap.ppc64le",
                "product": {
                  "name": "automation-controller-venv-tower-0:4.6.19-1.el9ap.ppc64le",
                  "product_id": "automation-controller-venv-tower-0:4.6.19-1.el9ap.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/automation-controller-venv-tower@4.6.19-1.el9ap?arch=ppc64le"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "automation-controller-0:4.6.19-1.el8ap.s390x",
                "product": {
                  "name": "automation-controller-0:4.6.19-1.el8ap.s390x",
                  "product_id": "automation-controller-0:4.6.19-1.el8ap.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/automation-controller@4.6.19-1.el8ap?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "automation-controller-venv-tower-0:4.6.19-1.el8ap.s390x",
                "product": {
                  "name": "automation-controller-venv-tower-0:4.6.19-1.el8ap.s390x",
                  "product_id": "automation-controller-venv-tower-0:4.6.19-1.el8ap.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/automation-controller-venv-tower@4.6.19-1.el8ap?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "automation-controller-0:4.6.19-1.el9ap.s390x",
                "product": {
                  "name": "automation-controller-0:4.6.19-1.el9ap.s390x",
                  "product_id": "automation-controller-0:4.6.19-1.el9ap.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/automation-controller@4.6.19-1.el9ap?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "automation-controller-venv-tower-0:4.6.19-1.el9ap.s390x",
                "product": {
                  "name": "automation-controller-venv-tower-0:4.6.19-1.el9ap.s390x",
                  "product_id": "automation-controller-venv-tower-0:4.6.19-1.el9ap.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/automation-controller-venv-tower@4.6.19-1.el9ap?arch=s390x"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "automation-controller-0:4.6.19-1.el8ap.aarch64",
                "product": {
                  "name": "automation-controller-0:4.6.19-1.el8ap.aarch64",
                  "product_id": "automation-controller-0:4.6.19-1.el8ap.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/automation-controller@4.6.19-1.el8ap?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "automation-controller-venv-tower-0:4.6.19-1.el8ap.aarch64",
                "product": {
                  "name": "automation-controller-venv-tower-0:4.6.19-1.el8ap.aarch64",
                  "product_id": "automation-controller-venv-tower-0:4.6.19-1.el8ap.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/automation-controller-venv-tower@4.6.19-1.el8ap?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "automation-controller-0:4.6.19-1.el9ap.aarch64",
                "product": {
                  "name": "automation-controller-0:4.6.19-1.el9ap.aarch64",
                  "product_id": "automation-controller-0:4.6.19-1.el9ap.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/automation-controller@4.6.19-1.el9ap?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "automation-controller-venv-tower-0:4.6.19-1.el9ap.aarch64",
                "product": {
                  "name": "automation-controller-venv-tower-0:4.6.19-1.el9ap.aarch64",
                  "product_id": "automation-controller-venv-tower-0:4.6.19-1.el9ap.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/automation-controller-venv-tower@4.6.19-1.el9ap?arch=aarch64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "automation-controller-0:4.6.19-1.el8ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
          "product_id": "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.19-1.el8ap.aarch64"
        },
        "product_reference": "automation-controller-0:4.6.19-1.el8ap.aarch64",
        "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5-Developer-1.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "automation-controller-0:4.6.19-1.el8ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
          "product_id": "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.19-1.el8ap.ppc64le"
        },
        "product_reference": "automation-controller-0:4.6.19-1.el8ap.ppc64le",
        "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5-Developer-1.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "automation-controller-0:4.6.19-1.el8ap.s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
          "product_id": "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.19-1.el8ap.s390x"
        },
        "product_reference": "automation-controller-0:4.6.19-1.el8ap.s390x",
        "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5-Developer-1.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "automation-controller-0:4.6.19-1.el8ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
          "product_id": "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.19-1.el8ap.src"
        },
        "product_reference": "automation-controller-0:4.6.19-1.el8ap.src",
        "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5-Developer-1.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "automation-controller-0:4.6.19-1.el8ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
          "product_id": "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.19-1.el8ap.x86_64"
        },
        "product_reference": "automation-controller-0:4.6.19-1.el8ap.x86_64",
        "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5-Developer-1.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "automation-controller-cli-0:4.6.19-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
          "product_id": "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.19-1.el8ap.noarch"
        },
        "product_reference": "automation-controller-cli-0:4.6.19-1.el8ap.noarch",
        "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5-Developer-1.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "automation-controller-server-0:4.6.19-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
          "product_id": "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-server-0:4.6.19-1.el8ap.noarch"
        },
        "product_reference": "automation-controller-server-0:4.6.19-1.el8ap.noarch",
        "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5-Developer-1.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "automation-controller-ui-0:4.6.19-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
          "product_id": "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-ui-0:4.6.19-1.el8ap.noarch"
        },
        "product_reference": "automation-controller-ui-0:4.6.19-1.el8ap.noarch",
        "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5-Developer-1.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "automation-controller-venv-tower-0:4.6.19-1.el8ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
          "product_id": "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.19-1.el8ap.aarch64"
        },
        "product_reference": "automation-controller-venv-tower-0:4.6.19-1.el8ap.aarch64",
        "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5-Developer-1.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "automation-controller-venv-tower-0:4.6.19-1.el8ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
          "product_id": "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.19-1.el8ap.ppc64le"
        },
        "product_reference": "automation-controller-venv-tower-0:4.6.19-1.el8ap.ppc64le",
        "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5-Developer-1.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "automation-controller-venv-tower-0:4.6.19-1.el8ap.s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
          "product_id": "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.19-1.el8ap.s390x"
        },
        "product_reference": "automation-controller-venv-tower-0:4.6.19-1.el8ap.s390x",
        "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5-Developer-1.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "automation-controller-venv-tower-0:4.6.19-1.el8ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
          "product_id": "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.19-1.el8ap.x86_64"
        },
        "product_reference": "automation-controller-venv-tower-0:4.6.19-1.el8ap.x86_64",
        "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5-Developer-1.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3.11-django-0:4.2.23-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
          "product_id": "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-django-0:4.2.23-1.el8ap.noarch"
        },
        "product_reference": "python3.11-django-0:4.2.23-1.el8ap.noarch",
        "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5-Developer-1.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3.11-django-0:4.2.23-1.el8ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
          "product_id": "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-django-0:4.2.23-1.el8ap.src"
        },
        "product_reference": "python3.11-django-0:4.2.23-1.el8ap.src",
        "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5-Developer-1.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ansible-automation-platform-installer-0:2.5-17.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
          "product_id": "8Base-Ansible-Automation-Platform-2.5:ansible-automation-platform-installer-0:2.5-17.el8ap.noarch"
        },
        "product_reference": "ansible-automation-platform-installer-0:2.5-17.el8ap.noarch",
        "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ansible-automation-platform-installer-0:2.5-17.el8ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
          "product_id": "8Base-Ansible-Automation-Platform-2.5:ansible-automation-platform-installer-0:2.5-17.el8ap.src"
        },
        "product_reference": "ansible-automation-platform-installer-0:2.5-17.el8ap.src",
        "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "automation-controller-0:4.6.19-1.el8ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
          "product_id": "8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.19-1.el8ap.aarch64"
        },
        "product_reference": "automation-controller-0:4.6.19-1.el8ap.aarch64",
        "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "automation-controller-0:4.6.19-1.el8ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
          "product_id": "8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.19-1.el8ap.ppc64le"
        },
        "product_reference": "automation-controller-0:4.6.19-1.el8ap.ppc64le",
        "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "automation-controller-0:4.6.19-1.el8ap.s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
          "product_id": "8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.19-1.el8ap.s390x"
        },
        "product_reference": "automation-controller-0:4.6.19-1.el8ap.s390x",
        "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "automation-controller-0:4.6.19-1.el8ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
          "product_id": "8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.19-1.el8ap.src"
        },
        "product_reference": "automation-controller-0:4.6.19-1.el8ap.src",
        "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "automation-controller-0:4.6.19-1.el8ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
          "product_id": "8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.19-1.el8ap.x86_64"
        },
        "product_reference": "automation-controller-0:4.6.19-1.el8ap.x86_64",
        "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "automation-controller-cli-0:4.6.19-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
          "product_id": "8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.19-1.el8ap.noarch"
        },
        "product_reference": "automation-controller-cli-0:4.6.19-1.el8ap.noarch",
        "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "automation-controller-server-0:4.6.19-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
          "product_id": "8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.19-1.el8ap.noarch"
        },
        "product_reference": "automation-controller-server-0:4.6.19-1.el8ap.noarch",
        "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "automation-controller-ui-0:4.6.19-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
          "product_id": "8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.19-1.el8ap.noarch"
        },
        "product_reference": "automation-controller-ui-0:4.6.19-1.el8ap.noarch",
        "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "automation-controller-venv-tower-0:4.6.19-1.el8ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
          "product_id": "8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.19-1.el8ap.aarch64"
        },
        "product_reference": "automation-controller-venv-tower-0:4.6.19-1.el8ap.aarch64",
        "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "automation-controller-venv-tower-0:4.6.19-1.el8ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
          "product_id": "8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.19-1.el8ap.ppc64le"
        },
        "product_reference": "automation-controller-venv-tower-0:4.6.19-1.el8ap.ppc64le",
        "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "automation-controller-venv-tower-0:4.6.19-1.el8ap.s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
          "product_id": "8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.19-1.el8ap.s390x"
        },
        "product_reference": "automation-controller-venv-tower-0:4.6.19-1.el8ap.s390x",
        "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "automation-controller-venv-tower-0:4.6.19-1.el8ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
          "product_id": "8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.19-1.el8ap.x86_64"
        },
        "product_reference": "automation-controller-venv-tower-0:4.6.19-1.el8ap.x86_64",
        "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "automation-eda-controller-0:1.1.13-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
          "product_id": "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.13-1.el8ap.noarch"
        },
        "product_reference": "automation-eda-controller-0:1.1.13-1.el8ap.noarch",
        "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "automation-eda-controller-0:1.1.13-1.el8ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
          "product_id": "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.13-1.el8ap.src"
        },
        "product_reference": "automation-eda-controller-0:1.1.13-1.el8ap.src",
        "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "automation-eda-controller-base-0:1.1.13-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
          "product_id": "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.13-1.el8ap.noarch"
        },
        "product_reference": "automation-eda-controller-base-0:1.1.13-1.el8ap.noarch",
        "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "automation-eda-controller-base-services-0:1.1.13-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
          "product_id": "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.13-1.el8ap.noarch"
        },
        "product_reference": "automation-eda-controller-base-services-0:1.1.13-1.el8ap.noarch",
        "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "automation-eda-controller-event-stream-services-0:1.1.13-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
          "product_id": "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.13-1.el8ap.noarch"
        },
        "product_reference": "automation-eda-controller-event-stream-services-0:1.1.13-1.el8ap.noarch",
        "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "automation-eda-controller-worker-services-0:1.1.13-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
          "product_id": "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.13-1.el8ap.noarch"
        },
        "product_reference": "automation-eda-controller-worker-services-0:1.1.13-1.el8ap.noarch",
        "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "automation-gateway-0:2.5.20250827-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
          "product_id": "8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20250827-1.el8ap.noarch"
        },
        "product_reference": "automation-gateway-0:2.5.20250827-1.el8ap.noarch",
        "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "automation-gateway-0:2.5.20250827-1.el8ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
          "product_id": "8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20250827-1.el8ap.src"
        },
        "product_reference": "automation-gateway-0:2.5.20250827-1.el8ap.src",
        "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "automation-gateway-config-0:2.5.20250827-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
          "product_id": "8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20250827-1.el8ap.noarch"
        },
        "product_reference": "automation-gateway-config-0:2.5.20250827-1.el8ap.noarch",
        "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "automation-gateway-server-0:2.5.20250827-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
          "product_id": "8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20250827-1.el8ap.noarch"
        },
        "product_reference": "automation-gateway-server-0:2.5.20250827-1.el8ap.noarch",
        "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "automation-hub-0:4.10.7-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
          "product_id": "8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.7-1.el8ap.noarch"
        },
        "product_reference": "automation-hub-0:4.10.7-1.el8ap.noarch",
        "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "automation-hub-0:4.10.7-1.el8ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
          "product_id": "8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.7-1.el8ap.src"
        },
        "product_reference": "automation-hub-0:4.10.7-1.el8ap.src",
        "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3.11-django-0:4.2.23-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
          "product_id": "8Base-Ansible-Automation-Platform-2.5:python3.11-django-0:4.2.23-1.el8ap.noarch"
        },
        "product_reference": "python3.11-django-0:4.2.23-1.el8ap.noarch",
        "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3.11-django-0:4.2.23-1.el8ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
          "product_id": "8Base-Ansible-Automation-Platform-2.5:python3.11-django-0:4.2.23-1.el8ap.src"
        },
        "product_reference": "python3.11-django-0:4.2.23-1.el8ap.src",
        "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3.11-django-ansible-base+activitystream-0:2.5.20250827-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
          "product_id": "8Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+activitystream-0:2.5.20250827-1.el8ap.noarch"
        },
        "product_reference": "python3.11-django-ansible-base+activitystream-0:2.5.20250827-1.el8ap.noarch",
        "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3.11-django-ansible-base+api_documentation-0:2.5.20250827-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
          "product_id": "8Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+api_documentation-0:2.5.20250827-1.el8ap.noarch"
        },
        "product_reference": "python3.11-django-ansible-base+api_documentation-0:2.5.20250827-1.el8ap.noarch",
        "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3.11-django-ansible-base+authentication-0:2.5.20250827-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
          "product_id": "8Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+authentication-0:2.5.20250827-1.el8ap.noarch"
        },
        "product_reference": "python3.11-django-ansible-base+authentication-0:2.5.20250827-1.el8ap.noarch",
        "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3.11-django-ansible-base+channel_auth-0:2.5.20250827-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
          "product_id": "8Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+channel_auth-0:2.5.20250827-1.el8ap.noarch"
        },
        "product_reference": "python3.11-django-ansible-base+channel_auth-0:2.5.20250827-1.el8ap.noarch",
        "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3.11-django-ansible-base+feature_flags-0:2.5.20250827-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
          "product_id": "8Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+feature_flags-0:2.5.20250827-1.el8ap.noarch"
        },
        "product_reference": "python3.11-django-ansible-base+feature_flags-0:2.5.20250827-1.el8ap.noarch",
        "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3.11-django-ansible-base+jwt_consumer-0:2.5.20250827-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
          "product_id": "8Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+jwt_consumer-0:2.5.20250827-1.el8ap.noarch"
        },
        "product_reference": "python3.11-django-ansible-base+jwt_consumer-0:2.5.20250827-1.el8ap.noarch",
        "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3.11-django-ansible-base+oauth2_provider-0:2.5.20250827-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
          "product_id": "8Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+oauth2_provider-0:2.5.20250827-1.el8ap.noarch"
        },
        "product_reference": "python3.11-django-ansible-base+oauth2_provider-0:2.5.20250827-1.el8ap.noarch",
        "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3.11-django-ansible-base+rbac-0:2.5.20250827-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
          "product_id": "8Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+rbac-0:2.5.20250827-1.el8ap.noarch"
        },
        "product_reference": "python3.11-django-ansible-base+rbac-0:2.5.20250827-1.el8ap.noarch",
        "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3.11-django-ansible-base+redis_client-0:2.5.20250827-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
          "product_id": "8Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+redis_client-0:2.5.20250827-1.el8ap.noarch"
        },
        "product_reference": "python3.11-django-ansible-base+redis_client-0:2.5.20250827-1.el8ap.noarch",
        "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3.11-django-ansible-base+rest_filters-0:2.5.20250827-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
          "product_id": "8Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+rest_filters-0:2.5.20250827-1.el8ap.noarch"
        },
        "product_reference": "python3.11-django-ansible-base+rest_filters-0:2.5.20250827-1.el8ap.noarch",
        "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3.11-django-ansible-base-0:2.5.20250827-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
          "product_id": "8Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base-0:2.5.20250827-1.el8ap.noarch"
        },
        "product_reference": "python3.11-django-ansible-base-0:2.5.20250827-1.el8ap.noarch",
        "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3.11-django-ansible-base-0:2.5.20250827-1.el8ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
          "product_id": "8Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base-0:2.5.20250827-1.el8ap.src"
        },
        "product_reference": "python3.11-django-ansible-base-0:2.5.20250827-1.el8ap.src",
        "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3.11-galaxy-ng-0:4.10.7-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
          "product_id": "8Base-Ansible-Automation-Platform-2.5:python3.11-galaxy-ng-0:4.10.7-1.el8ap.noarch"
        },
        "product_reference": "python3.11-galaxy-ng-0:4.10.7-1.el8ap.noarch",
        "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3.11-galaxy-ng-0:4.10.7-1.el8ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
          "product_id": "8Base-Ansible-Automation-Platform-2.5:python3.11-galaxy-ng-0:4.10.7-1.el8ap.src"
        },
        "product_reference": "python3.11-galaxy-ng-0:4.10.7-1.el8ap.src",
        "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "automation-controller-0:4.6.19-1.el9ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
          "product_id": "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.19-1.el9ap.aarch64"
        },
        "product_reference": "automation-controller-0:4.6.19-1.el9ap.aarch64",
        "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5-Developer-1.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "automation-controller-0:4.6.19-1.el9ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
          "product_id": "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.19-1.el9ap.ppc64le"
        },
        "product_reference": "automation-controller-0:4.6.19-1.el9ap.ppc64le",
        "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5-Developer-1.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "automation-controller-0:4.6.19-1.el9ap.s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
          "product_id": "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.19-1.el9ap.s390x"
        },
        "product_reference": "automation-controller-0:4.6.19-1.el9ap.s390x",
        "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5-Developer-1.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "automation-controller-0:4.6.19-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
          "product_id": "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.19-1.el9ap.src"
        },
        "product_reference": "automation-controller-0:4.6.19-1.el9ap.src",
        "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5-Developer-1.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "automation-controller-0:4.6.19-1.el9ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
          "product_id": "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.19-1.el9ap.x86_64"
        },
        "product_reference": "automation-controller-0:4.6.19-1.el9ap.x86_64",
        "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5-Developer-1.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "automation-controller-cli-0:4.6.19-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
          "product_id": "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.19-1.el9ap.noarch"
        },
        "product_reference": "automation-controller-cli-0:4.6.19-1.el9ap.noarch",
        "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5-Developer-1.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "automation-controller-server-0:4.6.19-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
          "product_id": "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-server-0:4.6.19-1.el9ap.noarch"
        },
        "product_reference": "automation-controller-server-0:4.6.19-1.el9ap.noarch",
        "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5-Developer-1.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "automation-controller-ui-0:4.6.19-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
          "product_id": "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-ui-0:4.6.19-1.el9ap.noarch"
        },
        "product_reference": "automation-controller-ui-0:4.6.19-1.el9ap.noarch",
        "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5-Developer-1.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "automation-controller-venv-tower-0:4.6.19-1.el9ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
          "product_id": "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.19-1.el9ap.aarch64"
        },
        "product_reference": "automation-controller-venv-tower-0:4.6.19-1.el9ap.aarch64",
        "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5-Developer-1.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "automation-controller-venv-tower-0:4.6.19-1.el9ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
          "product_id": "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.19-1.el9ap.ppc64le"
        },
        "product_reference": "automation-controller-venv-tower-0:4.6.19-1.el9ap.ppc64le",
        "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5-Developer-1.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "automation-controller-venv-tower-0:4.6.19-1.el9ap.s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
          "product_id": "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.19-1.el9ap.s390x"
        },
        "product_reference": "automation-controller-venv-tower-0:4.6.19-1.el9ap.s390x",
        "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5-Developer-1.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "automation-controller-venv-tower-0:4.6.19-1.el9ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
          "product_id": "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.19-1.el9ap.x86_64"
        },
        "product_reference": "automation-controller-venv-tower-0:4.6.19-1.el9ap.x86_64",
        "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5-Developer-1.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3.11-django-0:4.2.23-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
          "product_id": "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-django-0:4.2.23-1.el9ap.noarch"
        },
        "product_reference": "python3.11-django-0:4.2.23-1.el9ap.noarch",
        "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5-Developer-1.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3.11-django-0:4.2.23-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
          "product_id": "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-django-0:4.2.23-1.el9ap.src"
        },
        "product_reference": "python3.11-django-0:4.2.23-1.el9ap.src",
        "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5-Developer-1.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ansible-automation-platform-installer-0:2.5-17.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
          "product_id": "9Base-Ansible-Automation-Platform-2.5:ansible-automation-platform-installer-0:2.5-17.el9ap.noarch"
        },
        "product_reference": "ansible-automation-platform-installer-0:2.5-17.el9ap.noarch",
        "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ansible-automation-platform-installer-0:2.5-17.el9ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
          "product_id": "9Base-Ansible-Automation-Platform-2.5:ansible-automation-platform-installer-0:2.5-17.el9ap.src"
        },
        "product_reference": "ansible-automation-platform-installer-0:2.5-17.el9ap.src",
        "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "automation-controller-0:4.6.19-1.el9ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
          "product_id": "9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.19-1.el9ap.aarch64"
        },
        "product_reference": "automation-controller-0:4.6.19-1.el9ap.aarch64",
        "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "automation-controller-0:4.6.19-1.el9ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
          "product_id": "9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.19-1.el9ap.ppc64le"
        },
        "product_reference": "automation-controller-0:4.6.19-1.el9ap.ppc64le",
        "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "automation-controller-0:4.6.19-1.el9ap.s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
          "product_id": "9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.19-1.el9ap.s390x"
        },
        "product_reference": "automation-controller-0:4.6.19-1.el9ap.s390x",
        "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "automation-controller-0:4.6.19-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
          "product_id": "9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.19-1.el9ap.src"
        },
        "product_reference": "automation-controller-0:4.6.19-1.el9ap.src",
        "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "automation-controller-0:4.6.19-1.el9ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
          "product_id": "9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.19-1.el9ap.x86_64"
        },
        "product_reference": "automation-controller-0:4.6.19-1.el9ap.x86_64",
        "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "automation-controller-cli-0:4.6.19-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
          "product_id": "9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.19-1.el9ap.noarch"
        },
        "product_reference": "automation-controller-cli-0:4.6.19-1.el9ap.noarch",
        "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "automation-controller-server-0:4.6.19-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
          "product_id": "9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.19-1.el9ap.noarch"
        },
        "product_reference": "automation-controller-server-0:4.6.19-1.el9ap.noarch",
        "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "automation-controller-ui-0:4.6.19-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
          "product_id": "9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.19-1.el9ap.noarch"
        },
        "product_reference": "automation-controller-ui-0:4.6.19-1.el9ap.noarch",
        "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "automation-controller-venv-tower-0:4.6.19-1.el9ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
          "product_id": "9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.19-1.el9ap.aarch64"
        },
        "product_reference": "automation-controller-venv-tower-0:4.6.19-1.el9ap.aarch64",
        "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "automation-controller-venv-tower-0:4.6.19-1.el9ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
          "product_id": "9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.19-1.el9ap.ppc64le"
        },
        "product_reference": "automation-controller-venv-tower-0:4.6.19-1.el9ap.ppc64le",
        "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "automation-controller-venv-tower-0:4.6.19-1.el9ap.s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
          "product_id": "9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.19-1.el9ap.s390x"
        },
        "product_reference": "automation-controller-venv-tower-0:4.6.19-1.el9ap.s390x",
        "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "automation-controller-venv-tower-0:4.6.19-1.el9ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
          "product_id": "9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.19-1.el9ap.x86_64"
        },
        "product_reference": "automation-controller-venv-tower-0:4.6.19-1.el9ap.x86_64",
        "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "automation-eda-controller-0:1.1.13-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
          "product_id": "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.13-1.el9ap.noarch"
        },
        "product_reference": "automation-eda-controller-0:1.1.13-1.el9ap.noarch",
        "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "automation-eda-controller-0:1.1.13-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
          "product_id": "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.13-1.el9ap.src"
        },
        "product_reference": "automation-eda-controller-0:1.1.13-1.el9ap.src",
        "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "automation-eda-controller-base-0:1.1.13-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
          "product_id": "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.13-1.el9ap.noarch"
        },
        "product_reference": "automation-eda-controller-base-0:1.1.13-1.el9ap.noarch",
        "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "automation-eda-controller-base-services-0:1.1.13-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
          "product_id": "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.13-1.el9ap.noarch"
        },
        "product_reference": "automation-eda-controller-base-services-0:1.1.13-1.el9ap.noarch",
        "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "automation-eda-controller-event-stream-services-0:1.1.13-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
          "product_id": "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.13-1.el9ap.noarch"
        },
        "product_reference": "automation-eda-controller-event-stream-services-0:1.1.13-1.el9ap.noarch",
        "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "automation-eda-controller-worker-services-0:1.1.13-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
          "product_id": "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.13-1.el9ap.noarch"
        },
        "product_reference": "automation-eda-controller-worker-services-0:1.1.13-1.el9ap.noarch",
        "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "automation-gateway-0:2.5.20250827-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
          "product_id": "9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20250827-1.el9ap.noarch"
        },
        "product_reference": "automation-gateway-0:2.5.20250827-1.el9ap.noarch",
        "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "automation-gateway-0:2.5.20250827-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
          "product_id": "9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20250827-1.el9ap.src"
        },
        "product_reference": "automation-gateway-0:2.5.20250827-1.el9ap.src",
        "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "automation-gateway-config-0:2.5.20250827-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
          "product_id": "9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20250827-1.el9ap.noarch"
        },
        "product_reference": "automation-gateway-config-0:2.5.20250827-1.el9ap.noarch",
        "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "automation-gateway-server-0:2.5.20250827-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
          "product_id": "9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20250827-1.el9ap.noarch"
        },
        "product_reference": "automation-gateway-server-0:2.5.20250827-1.el9ap.noarch",
        "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "automation-hub-0:4.10.7-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
          "product_id": "9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.7-1.el9ap.noarch"
        },
        "product_reference": "automation-hub-0:4.10.7-1.el9ap.noarch",
        "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "automation-hub-0:4.10.7-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
          "product_id": "9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.7-1.el9ap.src"
        },
        "product_reference": "automation-hub-0:4.10.7-1.el9ap.src",
        "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3.11-django-0:4.2.23-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
          "product_id": "9Base-Ansible-Automation-Platform-2.5:python3.11-django-0:4.2.23-1.el9ap.noarch"
        },
        "product_reference": "python3.11-django-0:4.2.23-1.el9ap.noarch",
        "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3.11-django-0:4.2.23-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
          "product_id": "9Base-Ansible-Automation-Platform-2.5:python3.11-django-0:4.2.23-1.el9ap.src"
        },
        "product_reference": "python3.11-django-0:4.2.23-1.el9ap.src",
        "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3.11-django-ansible-base+activitystream-0:2.5.20250827-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
          "product_id": "9Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+activitystream-0:2.5.20250827-1.el9ap.noarch"
        },
        "product_reference": "python3.11-django-ansible-base+activitystream-0:2.5.20250827-1.el9ap.noarch",
        "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3.11-django-ansible-base+api_documentation-0:2.5.20250827-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
          "product_id": "9Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+api_documentation-0:2.5.20250827-1.el9ap.noarch"
        },
        "product_reference": "python3.11-django-ansible-base+api_documentation-0:2.5.20250827-1.el9ap.noarch",
        "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3.11-django-ansible-base+authentication-0:2.5.20250827-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
          "product_id": "9Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+authentication-0:2.5.20250827-1.el9ap.noarch"
        },
        "product_reference": "python3.11-django-ansible-base+authentication-0:2.5.20250827-1.el9ap.noarch",
        "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3.11-django-ansible-base+channel_auth-0:2.5.20250827-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
          "product_id": "9Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+channel_auth-0:2.5.20250827-1.el9ap.noarch"
        },
        "product_reference": "python3.11-django-ansible-base+channel_auth-0:2.5.20250827-1.el9ap.noarch",
        "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3.11-django-ansible-base+feature_flags-0:2.5.20250827-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
          "product_id": "9Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+feature_flags-0:2.5.20250827-1.el9ap.noarch"
        },
        "product_reference": "python3.11-django-ansible-base+feature_flags-0:2.5.20250827-1.el9ap.noarch",
        "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3.11-django-ansible-base+jwt_consumer-0:2.5.20250827-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
          "product_id": "9Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+jwt_consumer-0:2.5.20250827-1.el9ap.noarch"
        },
        "product_reference": "python3.11-django-ansible-base+jwt_consumer-0:2.5.20250827-1.el9ap.noarch",
        "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3.11-django-ansible-base+oauth2_provider-0:2.5.20250827-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
          "product_id": "9Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+oauth2_provider-0:2.5.20250827-1.el9ap.noarch"
        },
        "product_reference": "python3.11-django-ansible-base+oauth2_provider-0:2.5.20250827-1.el9ap.noarch",
        "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3.11-django-ansible-base+rbac-0:2.5.20250827-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
          "product_id": "9Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+rbac-0:2.5.20250827-1.el9ap.noarch"
        },
        "product_reference": "python3.11-django-ansible-base+rbac-0:2.5.20250827-1.el9ap.noarch",
        "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3.11-django-ansible-base+redis_client-0:2.5.20250827-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
          "product_id": "9Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+redis_client-0:2.5.20250827-1.el9ap.noarch"
        },
        "product_reference": "python3.11-django-ansible-base+redis_client-0:2.5.20250827-1.el9ap.noarch",
        "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3.11-django-ansible-base+rest_filters-0:2.5.20250827-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
          "product_id": "9Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+rest_filters-0:2.5.20250827-1.el9ap.noarch"
        },
        "product_reference": "python3.11-django-ansible-base+rest_filters-0:2.5.20250827-1.el9ap.noarch",
        "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3.11-django-ansible-base-0:2.5.20250827-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
          "product_id": "9Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base-0:2.5.20250827-1.el9ap.noarch"
        },
        "product_reference": "python3.11-django-ansible-base-0:2.5.20250827-1.el9ap.noarch",
        "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3.11-django-ansible-base-0:2.5.20250827-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
          "product_id": "9Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base-0:2.5.20250827-1.el9ap.src"
        },
        "product_reference": "python3.11-django-ansible-base-0:2.5.20250827-1.el9ap.src",
        "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3.11-galaxy-ng-0:4.10.7-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
          "product_id": "9Base-Ansible-Automation-Platform-2.5:python3.11-galaxy-ng-0:4.10.7-1.el9ap.noarch"
        },
        "product_reference": "python3.11-galaxy-ng-0:4.10.7-1.el9ap.noarch",
        "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3.11-galaxy-ng-0:4.10.7-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
          "product_id": "9Base-Ansible-Automation-Platform-2.5:python3.11-galaxy-ng-0:4.10.7-1.el9ap.src"
        },
        "product_reference": "python3.11-galaxy-ng-0:4.10.7-1.el9ap.src",
        "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-47273",
      "cwe": {
        "id": "CWE-22",
        "name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
      },
      "discovery_date": "2025-05-17T16:00:41.145177+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-django-0:4.2.23-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-django-0:4.2.23-1.el8ap.src",
            "8Base-Ansible-Automation-Platform-2.5:ansible-automation-platform-installer-0:2.5-17.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:ansible-automation-platform-installer-0:2.5-17.el8ap.src",
            "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.13-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.13-1.el8ap.src",
            "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.13-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.13-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.13-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.13-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20250827-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20250827-1.el8ap.src",
            "8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20250827-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20250827-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.7-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.7-1.el8ap.src",
            "8Base-Ansible-Automation-Platform-2.5:python3.11-django-0:4.2.23-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:python3.11-django-0:4.2.23-1.el8ap.src",
            "8Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+activitystream-0:2.5.20250827-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+api_documentation-0:2.5.20250827-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+authentication-0:2.5.20250827-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+channel_auth-0:2.5.20250827-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+feature_flags-0:2.5.20250827-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+jwt_consumer-0:2.5.20250827-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+oauth2_provider-0:2.5.20250827-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+rbac-0:2.5.20250827-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+redis_client-0:2.5.20250827-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+rest_filters-0:2.5.20250827-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base-0:2.5.20250827-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base-0:2.5.20250827-1.el8ap.src",
            "8Base-Ansible-Automation-Platform-2.5:python3.11-galaxy-ng-0:4.10.7-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:python3.11-galaxy-ng-0:4.10.7-1.el8ap.src",
            "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-django-0:4.2.23-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-django-0:4.2.23-1.el9ap.src",
            "9Base-Ansible-Automation-Platform-2.5:ansible-automation-platform-installer-0:2.5-17.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:ansible-automation-platform-installer-0:2.5-17.el9ap.src",
            "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.13-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.13-1.el9ap.src",
            "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.13-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.13-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.13-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.13-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20250827-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20250827-1.el9ap.src",
            "9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20250827-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20250827-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.7-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.7-1.el9ap.src",
            "9Base-Ansible-Automation-Platform-2.5:python3.11-django-0:4.2.23-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:python3.11-django-0:4.2.23-1.el9ap.src",
            "9Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+activitystream-0:2.5.20250827-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+api_documentation-0:2.5.20250827-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+authentication-0:2.5.20250827-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+channel_auth-0:2.5.20250827-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+feature_flags-0:2.5.20250827-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+jwt_consumer-0:2.5.20250827-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+oauth2_provider-0:2.5.20250827-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+rbac-0:2.5.20250827-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+redis_client-0:2.5.20250827-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+rest_filters-0:2.5.20250827-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base-0:2.5.20250827-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base-0:2.5.20250827-1.el9ap.src",
            "9Base-Ansible-Automation-Platform-2.5:python3.11-galaxy-ng-0:4.10.7-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:python3.11-galaxy-ng-0:4.10.7-1.el9ap.src"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2366982"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A path traversal vulnerability in the Python setuptools library allows attackers with limited system access to write files outside the intended temporary directory by manipulating package download URLs. This flaw bypasses basic filename sanitization and can lead to unauthorized overwrites of important system files, creating opportunities for further compromise. While it doesn\u0027t expose data or require user interaction, it poses a high integrity risk and is especially concerning in environments that rely on automated package handling or internal tooling built on setuptools.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "setuptools: Path Traversal Vulnerability in setuptools PackageIndex",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat Product Security has rated this vulnerability \"Moderate\" based on the impact of the damage caused by a successful exploitation and the pre-requisites.\n\n* Exploitation requires that the attacker have limited code execution access to a Python environment where they can trigger the vulnerable PackageIndex.download() function\u2014this might be via a script, plugin, or automated job. Full admin rights aren\u0027t needed but a user with no access at all will be unable to exploit this vulnerability.\n* The vulnerability impacts the integrity of the system within the same security boundary\u2014it does not enable access or compromise across trust boundaries (e.g., from one container to another or from user space to kernel).\n* Successful exploitation only allows the attacker to \"create\" new files. The vulnerability does not provide access to existing files and by an extension to any confidential information. \n* Arbitrary file writes can overwrite critical config files, executables, or scripts. This can lead to persistent code execution, system misconfiguration, or unauthorized behavior, especially in automated environments. While overwriting critical files could theoretically lead to service disruption, the vulnerability in isolation does not inherently cause denial of service. The exploit doesn\u0027t target availability directly, and in many cases, systems may continue running.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.19-1.el8ap.aarch64",
          "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.19-1.el8ap.ppc64le",
          "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.19-1.el8ap.s390x",
          "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.19-1.el8ap.src",
          "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.19-1.el8ap.x86_64",
          "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.19-1.el8ap.noarch",
          "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-server-0:4.6.19-1.el8ap.noarch",
          "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-ui-0:4.6.19-1.el8ap.noarch",
          "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.19-1.el8ap.aarch64",
          "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.19-1.el8ap.ppc64le",
          "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.19-1.el8ap.s390x",
          "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.19-1.el8ap.x86_64",
          "8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.19-1.el8ap.aarch64",
          "8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.19-1.el8ap.ppc64le",
          "8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.19-1.el8ap.s390x",
          "8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.19-1.el8ap.src",
          "8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.19-1.el8ap.x86_64",
          "8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.19-1.el8ap.noarch",
          "8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.19-1.el8ap.noarch",
          "8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.19-1.el8ap.noarch",
          "8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.19-1.el8ap.aarch64",
          "8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.19-1.el8ap.ppc64le",
          "8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.19-1.el8ap.s390x",
          "8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.19-1.el8ap.x86_64",
          "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.19-1.el9ap.aarch64",
          "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.19-1.el9ap.ppc64le",
          "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.19-1.el9ap.s390x",
          "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.19-1.el9ap.src",
          "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.19-1.el9ap.x86_64",
          "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.19-1.el9ap.noarch",
          "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-server-0:4.6.19-1.el9ap.noarch",
          "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-ui-0:4.6.19-1.el9ap.noarch",
          "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.19-1.el9ap.aarch64",
          "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.19-1.el9ap.ppc64le",
          "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.19-1.el9ap.s390x",
          "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.19-1.el9ap.x86_64",
          "9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.19-1.el9ap.aarch64",
          "9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.19-1.el9ap.ppc64le",
          "9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.19-1.el9ap.s390x",
          "9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.19-1.el9ap.src",
          "9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.19-1.el9ap.x86_64",
          "9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.19-1.el9ap.noarch",
          "9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.19-1.el9ap.noarch",
          "9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.19-1.el9ap.noarch",
          "9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.19-1.el9ap.aarch64",
          "9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.19-1.el9ap.ppc64le",
          "9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.19-1.el9ap.s390x",
          "9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.19-1.el9ap.x86_64"
        ],
        "known_not_affected": [
          "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-django-0:4.2.23-1.el8ap.noarch",
          "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-django-0:4.2.23-1.el8ap.src",
          "8Base-Ansible-Automation-Platform-2.5:ansible-automation-platform-installer-0:2.5-17.el8ap.noarch",
          "8Base-Ansible-Automation-Platform-2.5:ansible-automation-platform-installer-0:2.5-17.el8ap.src",
          "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.13-1.el8ap.noarch",
          "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.13-1.el8ap.src",
          "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.13-1.el8ap.noarch",
          "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.13-1.el8ap.noarch",
          "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.13-1.el8ap.noarch",
          "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.13-1.el8ap.noarch",
          "8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20250827-1.el8ap.noarch",
          "8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20250827-1.el8ap.src",
          "8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20250827-1.el8ap.noarch",
          "8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20250827-1.el8ap.noarch",
          "8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.7-1.el8ap.noarch",
          "8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.7-1.el8ap.src",
          "8Base-Ansible-Automation-Platform-2.5:python3.11-django-0:4.2.23-1.el8ap.noarch",
          "8Base-Ansible-Automation-Platform-2.5:python3.11-django-0:4.2.23-1.el8ap.src",
          "8Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+activitystream-0:2.5.20250827-1.el8ap.noarch",
          "8Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+api_documentation-0:2.5.20250827-1.el8ap.noarch",
          "8Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+authentication-0:2.5.20250827-1.el8ap.noarch",
          "8Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+channel_auth-0:2.5.20250827-1.el8ap.noarch",
          "8Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+feature_flags-0:2.5.20250827-1.el8ap.noarch",
          "8Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+jwt_consumer-0:2.5.20250827-1.el8ap.noarch",
          "8Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+oauth2_provider-0:2.5.20250827-1.el8ap.noarch",
          "8Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+rbac-0:2.5.20250827-1.el8ap.noarch",
          "8Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+redis_client-0:2.5.20250827-1.el8ap.noarch",
          "8Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+rest_filters-0:2.5.20250827-1.el8ap.noarch",
          "8Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base-0:2.5.20250827-1.el8ap.noarch",
          "8Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base-0:2.5.20250827-1.el8ap.src",
          "8Base-Ansible-Automation-Platform-2.5:python3.11-galaxy-ng-0:4.10.7-1.el8ap.noarch",
          "8Base-Ansible-Automation-Platform-2.5:python3.11-galaxy-ng-0:4.10.7-1.el8ap.src",
          "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-django-0:4.2.23-1.el9ap.noarch",
          "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-django-0:4.2.23-1.el9ap.src",
          "9Base-Ansible-Automation-Platform-2.5:ansible-automation-platform-installer-0:2.5-17.el9ap.noarch",
          "9Base-Ansible-Automation-Platform-2.5:ansible-automation-platform-installer-0:2.5-17.el9ap.src",
          "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.13-1.el9ap.noarch",
          "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.13-1.el9ap.src",
          "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.13-1.el9ap.noarch",
          "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.13-1.el9ap.noarch",
          "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.13-1.el9ap.noarch",
          "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.13-1.el9ap.noarch",
          "9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20250827-1.el9ap.noarch",
          "9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20250827-1.el9ap.src",
          "9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20250827-1.el9ap.noarch",
          "9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20250827-1.el9ap.noarch",
          "9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.7-1.el9ap.noarch",
          "9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.7-1.el9ap.src",
          "9Base-Ansible-Automation-Platform-2.5:python3.11-django-0:4.2.23-1.el9ap.noarch",
          "9Base-Ansible-Automation-Platform-2.5:python3.11-django-0:4.2.23-1.el9ap.src",
          "9Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+activitystream-0:2.5.20250827-1.el9ap.noarch",
          "9Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+api_documentation-0:2.5.20250827-1.el9ap.noarch",
          "9Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+authentication-0:2.5.20250827-1.el9ap.noarch",
          "9Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+channel_auth-0:2.5.20250827-1.el9ap.noarch",
          "9Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+feature_flags-0:2.5.20250827-1.el9ap.noarch",
          "9Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+jwt_consumer-0:2.5.20250827-1.el9ap.noarch",
          "9Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+oauth2_provider-0:2.5.20250827-1.el9ap.noarch",
          "9Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+rbac-0:2.5.20250827-1.el9ap.noarch",
          "9Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+redis_client-0:2.5.20250827-1.el9ap.noarch",
          "9Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+rest_filters-0:2.5.20250827-1.el9ap.noarch",
          "9Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base-0:2.5.20250827-1.el9ap.noarch",
          "9Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base-0:2.5.20250827-1.el9ap.src",
          "9Base-Ansible-Automation-Platform-2.5:python3.11-galaxy-ng-0:4.10.7-1.el9ap.noarch",
          "9Base-Ansible-Automation-Platform-2.5:python3.11-galaxy-ng-0:4.10.7-1.el9ap.src"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-47273"
        },
        {
          "category": "external",
          "summary": "RHBZ#2366982",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366982"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-47273",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-47273"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-47273",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-47273"
        },
        {
          "category": "external",
          "summary": "https://github.com/pypa/setuptools/blob/6ead555c5fb29bc57fe6105b1bffc163f56fd558/setuptools/package_index.py#L810C1-L825C88",
          "url": "https://github.com/pypa/setuptools/blob/6ead555c5fb29bc57fe6105b1bffc163f56fd558/setuptools/package_index.py#L810C1-L825C88"
        },
        {
          "category": "external",
          "summary": "https://github.com/pypa/setuptools/commit/250a6d17978f9f6ac3ac887091f2d32886fbbb0b",
          "url": "https://github.com/pypa/setuptools/commit/250a6d17978f9f6ac3ac887091f2d32886fbbb0b"
        },
        {
          "category": "external",
          "summary": "https://github.com/pypa/setuptools/issues/4946",
          "url": "https://github.com/pypa/setuptools/issues/4946"
        },
        {
          "category": "external",
          "summary": "https://github.com/pypa/setuptools/security/advisories/GHSA-5rjg-fvgr-3xxf",
          "url": "https://github.com/pypa/setuptools/security/advisories/GHSA-5rjg-fvgr-3xxf"
        }
      ],
      "release_date": "2025-05-17T15:46:11.399000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-08-26T21:02:47+00:00",
          "details": "Red Hat Ansible Automation Platform",
          "product_ids": [
            "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.19-1.el8ap.aarch64",
            "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.19-1.el8ap.ppc64le",
            "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.19-1.el8ap.s390x",
            "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.19-1.el8ap.src",
            "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.19-1.el8ap.x86_64",
            "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.19-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-server-0:4.6.19-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-ui-0:4.6.19-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.19-1.el8ap.aarch64",
            "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.19-1.el8ap.ppc64le",
            "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.19-1.el8ap.s390x",
            "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.19-1.el8ap.x86_64",
            "8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.19-1.el8ap.aarch64",
            "8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.19-1.el8ap.ppc64le",
            "8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.19-1.el8ap.s390x",
            "8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.19-1.el8ap.src",
            "8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.19-1.el8ap.x86_64",
            "8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.19-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.19-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.19-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.19-1.el8ap.aarch64",
            "8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.19-1.el8ap.ppc64le",
            "8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.19-1.el8ap.s390x",
            "8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.19-1.el8ap.x86_64",
            "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.19-1.el9ap.aarch64",
            "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.19-1.el9ap.ppc64le",
            "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.19-1.el9ap.s390x",
            "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.19-1.el9ap.src",
            "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.19-1.el9ap.x86_64",
            "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.19-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-server-0:4.6.19-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-ui-0:4.6.19-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.19-1.el9ap.aarch64",
            "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.19-1.el9ap.ppc64le",
            "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.19-1.el9ap.s390x",
            "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.19-1.el9ap.x86_64",
            "9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.19-1.el9ap.aarch64",
            "9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.19-1.el9ap.ppc64le",
            "9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.19-1.el9ap.s390x",
            "9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.19-1.el9ap.src",
            "9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.19-1.el9ap.x86_64",
            "9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.19-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.19-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.19-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.19-1.el9ap.aarch64",
            "9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.19-1.el9ap.ppc64le",
            "9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.19-1.el9ap.s390x",
            "9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.19-1.el9ap.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:14686"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.19-1.el8ap.aarch64",
            "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.19-1.el8ap.ppc64le",
            "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.19-1.el8ap.s390x",
            "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.19-1.el8ap.src",
            "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.19-1.el8ap.x86_64",
            "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.19-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-server-0:4.6.19-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-ui-0:4.6.19-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.19-1.el8ap.aarch64",
            "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.19-1.el8ap.ppc64le",
            "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.19-1.el8ap.s390x",
            "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.19-1.el8ap.x86_64",
            "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-django-0:4.2.23-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-django-0:4.2.23-1.el8ap.src",
            "8Base-Ansible-Automation-Platform-2.5:ansible-automation-platform-installer-0:2.5-17.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:ansible-automation-platform-installer-0:2.5-17.el8ap.src",
            "8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.19-1.el8ap.aarch64",
            "8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.19-1.el8ap.ppc64le",
            "8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.19-1.el8ap.s390x",
            "8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.19-1.el8ap.src",
            "8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.19-1.el8ap.x86_64",
            "8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.19-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.19-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.19-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.19-1.el8ap.aarch64",
            "8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.19-1.el8ap.ppc64le",
            "8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.19-1.el8ap.s390x",
            "8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.19-1.el8ap.x86_64",
            "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.13-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.13-1.el8ap.src",
            "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.13-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.13-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.13-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.13-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20250827-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20250827-1.el8ap.src",
            "8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20250827-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20250827-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.7-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.7-1.el8ap.src",
            "8Base-Ansible-Automation-Platform-2.5:python3.11-django-0:4.2.23-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:python3.11-django-0:4.2.23-1.el8ap.src",
            "8Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+activitystream-0:2.5.20250827-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+api_documentation-0:2.5.20250827-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+authentication-0:2.5.20250827-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+channel_auth-0:2.5.20250827-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+feature_flags-0:2.5.20250827-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+jwt_consumer-0:2.5.20250827-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+oauth2_provider-0:2.5.20250827-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+rbac-0:2.5.20250827-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+redis_client-0:2.5.20250827-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+rest_filters-0:2.5.20250827-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base-0:2.5.20250827-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base-0:2.5.20250827-1.el8ap.src",
            "8Base-Ansible-Automation-Platform-2.5:python3.11-galaxy-ng-0:4.10.7-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:python3.11-galaxy-ng-0:4.10.7-1.el8ap.src",
            "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.19-1.el9ap.aarch64",
            "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.19-1.el9ap.ppc64le",
            "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.19-1.el9ap.s390x",
            "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.19-1.el9ap.src",
            "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.19-1.el9ap.x86_64",
            "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.19-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-server-0:4.6.19-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-ui-0:4.6.19-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.19-1.el9ap.aarch64",
            "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.19-1.el9ap.ppc64le",
            "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.19-1.el9ap.s390x",
            "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.19-1.el9ap.x86_64",
            "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-django-0:4.2.23-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-django-0:4.2.23-1.el9ap.src",
            "9Base-Ansible-Automation-Platform-2.5:ansible-automation-platform-installer-0:2.5-17.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:ansible-automation-platform-installer-0:2.5-17.el9ap.src",
            "9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.19-1.el9ap.aarch64",
            "9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.19-1.el9ap.ppc64le",
            "9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.19-1.el9ap.s390x",
            "9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.19-1.el9ap.src",
            "9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.19-1.el9ap.x86_64",
            "9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.19-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.19-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.19-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.19-1.el9ap.aarch64",
            "9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.19-1.el9ap.ppc64le",
            "9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.19-1.el9ap.s390x",
            "9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.19-1.el9ap.x86_64",
            "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.13-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.13-1.el9ap.src",
            "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.13-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.13-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.13-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.13-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20250827-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20250827-1.el9ap.src",
            "9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20250827-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20250827-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.7-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.7-1.el9ap.src",
            "9Base-Ansible-Automation-Platform-2.5:python3.11-django-0:4.2.23-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:python3.11-django-0:4.2.23-1.el9ap.src",
            "9Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+activitystream-0:2.5.20250827-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+api_documentation-0:2.5.20250827-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+authentication-0:2.5.20250827-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+channel_auth-0:2.5.20250827-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+feature_flags-0:2.5.20250827-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+jwt_consumer-0:2.5.20250827-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+oauth2_provider-0:2.5.20250827-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+rbac-0:2.5.20250827-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+redis_client-0:2.5.20250827-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+rest_filters-0:2.5.20250827-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base-0:2.5.20250827-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base-0:2.5.20250827-1.el9ap.src",
            "9Base-Ansible-Automation-Platform-2.5:python3.11-galaxy-ng-0:4.10.7-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:python3.11-galaxy-ng-0:4.10.7-1.el9ap.src"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L",
            "version": "3.1"
          },
          "products": [
            "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.19-1.el8ap.aarch64",
            "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.19-1.el8ap.ppc64le",
            "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.19-1.el8ap.s390x",
            "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.19-1.el8ap.src",
            "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.19-1.el8ap.x86_64",
            "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.19-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-server-0:4.6.19-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-ui-0:4.6.19-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.19-1.el8ap.aarch64",
            "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.19-1.el8ap.ppc64le",
            "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.19-1.el8ap.s390x",
            "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.19-1.el8ap.x86_64",
            "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-django-0:4.2.23-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-django-0:4.2.23-1.el8ap.src",
            "8Base-Ansible-Automation-Platform-2.5:ansible-automation-platform-installer-0:2.5-17.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:ansible-automation-platform-installer-0:2.5-17.el8ap.src",
            "8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.19-1.el8ap.aarch64",
            "8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.19-1.el8ap.ppc64le",
            "8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.19-1.el8ap.s390x",
            "8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.19-1.el8ap.src",
            "8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.19-1.el8ap.x86_64",
            "8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.19-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.19-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.19-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.19-1.el8ap.aarch64",
            "8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.19-1.el8ap.ppc64le",
            "8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.19-1.el8ap.s390x",
            "8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.19-1.el8ap.x86_64",
            "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.13-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.13-1.el8ap.src",
            "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.13-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.13-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.13-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.13-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20250827-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20250827-1.el8ap.src",
            "8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20250827-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20250827-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.7-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.7-1.el8ap.src",
            "8Base-Ansible-Automation-Platform-2.5:python3.11-django-0:4.2.23-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:python3.11-django-0:4.2.23-1.el8ap.src",
            "8Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+activitystream-0:2.5.20250827-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+api_documentation-0:2.5.20250827-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+authentication-0:2.5.20250827-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+channel_auth-0:2.5.20250827-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+feature_flags-0:2.5.20250827-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+jwt_consumer-0:2.5.20250827-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+oauth2_provider-0:2.5.20250827-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+rbac-0:2.5.20250827-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+redis_client-0:2.5.20250827-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+rest_filters-0:2.5.20250827-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base-0:2.5.20250827-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base-0:2.5.20250827-1.el8ap.src",
            "8Base-Ansible-Automation-Platform-2.5:python3.11-galaxy-ng-0:4.10.7-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:python3.11-galaxy-ng-0:4.10.7-1.el8ap.src",
            "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.19-1.el9ap.aarch64",
            "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.19-1.el9ap.ppc64le",
            "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.19-1.el9ap.s390x",
            "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.19-1.el9ap.src",
            "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.19-1.el9ap.x86_64",
            "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.19-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-server-0:4.6.19-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-ui-0:4.6.19-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.19-1.el9ap.aarch64",
            "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.19-1.el9ap.ppc64le",
            "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.19-1.el9ap.s390x",
            "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.19-1.el9ap.x86_64",
            "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-django-0:4.2.23-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-django-0:4.2.23-1.el9ap.src",
            "9Base-Ansible-Automation-Platform-2.5:ansible-automation-platform-installer-0:2.5-17.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:ansible-automation-platform-installer-0:2.5-17.el9ap.src",
            "9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.19-1.el9ap.aarch64",
            "9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.19-1.el9ap.ppc64le",
            "9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.19-1.el9ap.s390x",
            "9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.19-1.el9ap.src",
            "9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.19-1.el9ap.x86_64",
            "9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.19-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.19-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.19-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.19-1.el9ap.aarch64",
            "9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.19-1.el9ap.ppc64le",
            "9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.19-1.el9ap.s390x",
            "9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.19-1.el9ap.x86_64",
            "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.13-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.13-1.el9ap.src",
            "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.13-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.13-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.13-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.13-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20250827-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20250827-1.el9ap.src",
            "9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20250827-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20250827-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.7-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.7-1.el9ap.src",
            "9Base-Ansible-Automation-Platform-2.5:python3.11-django-0:4.2.23-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:python3.11-django-0:4.2.23-1.el9ap.src",
            "9Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+activitystream-0:2.5.20250827-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+api_documentation-0:2.5.20250827-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+authentication-0:2.5.20250827-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+channel_auth-0:2.5.20250827-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+feature_flags-0:2.5.20250827-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+jwt_consumer-0:2.5.20250827-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+oauth2_provider-0:2.5.20250827-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+rbac-0:2.5.20250827-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+redis_client-0:2.5.20250827-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+rest_filters-0:2.5.20250827-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base-0:2.5.20250827-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base-0:2.5.20250827-1.el9ap.src",
            "9Base-Ansible-Automation-Platform-2.5:python3.11-galaxy-ng-0:4.10.7-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:python3.11-galaxy-ng-0:4.10.7-1.el9ap.src"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "setuptools: Path Traversal Vulnerability in setuptools PackageIndex"
    },
    {
      "cve": "CVE-2025-48432",
      "cwe": {
        "id": "CWE-117",
        "name": "Improper Output Neutralization for Logs"
      },
      "discovery_date": "2025-06-05T03:00:46.786432+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.19-1.el8ap.aarch64",
            "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.19-1.el8ap.ppc64le",
            "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.19-1.el8ap.s390x",
            "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.19-1.el8ap.src",
            "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.19-1.el8ap.x86_64",
            "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.19-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-server-0:4.6.19-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-ui-0:4.6.19-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.19-1.el8ap.aarch64",
            "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.19-1.el8ap.ppc64le",
            "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.19-1.el8ap.s390x",
            "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.19-1.el8ap.x86_64",
            "8Base-Ansible-Automation-Platform-2.5:ansible-automation-platform-installer-0:2.5-17.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:ansible-automation-platform-installer-0:2.5-17.el8ap.src",
            "8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.19-1.el8ap.aarch64",
            "8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.19-1.el8ap.ppc64le",
            "8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.19-1.el8ap.s390x",
            "8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.19-1.el8ap.src",
            "8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.19-1.el8ap.x86_64",
            "8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.19-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.19-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.19-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.19-1.el8ap.aarch64",
            "8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.19-1.el8ap.ppc64le",
            "8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.19-1.el8ap.s390x",
            "8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.19-1.el8ap.x86_64",
            "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.13-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.13-1.el8ap.src",
            "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.13-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.13-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.13-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.13-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20250827-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20250827-1.el8ap.src",
            "8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20250827-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20250827-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.7-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.7-1.el8ap.src",
            "8Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+activitystream-0:2.5.20250827-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+api_documentation-0:2.5.20250827-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+authentication-0:2.5.20250827-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+channel_auth-0:2.5.20250827-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+feature_flags-0:2.5.20250827-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+jwt_consumer-0:2.5.20250827-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+oauth2_provider-0:2.5.20250827-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+rbac-0:2.5.20250827-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+redis_client-0:2.5.20250827-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+rest_filters-0:2.5.20250827-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base-0:2.5.20250827-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base-0:2.5.20250827-1.el8ap.src",
            "8Base-Ansible-Automation-Platform-2.5:python3.11-galaxy-ng-0:4.10.7-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:python3.11-galaxy-ng-0:4.10.7-1.el8ap.src",
            "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.19-1.el9ap.aarch64",
            "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.19-1.el9ap.ppc64le",
            "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.19-1.el9ap.s390x",
            "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.19-1.el9ap.src",
            "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.19-1.el9ap.x86_64",
            "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.19-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-server-0:4.6.19-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-ui-0:4.6.19-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.19-1.el9ap.aarch64",
            "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.19-1.el9ap.ppc64le",
            "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.19-1.el9ap.s390x",
            "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.19-1.el9ap.x86_64",
            "9Base-Ansible-Automation-Platform-2.5:ansible-automation-platform-installer-0:2.5-17.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:ansible-automation-platform-installer-0:2.5-17.el9ap.src",
            "9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.19-1.el9ap.aarch64",
            "9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.19-1.el9ap.ppc64le",
            "9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.19-1.el9ap.s390x",
            "9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.19-1.el9ap.src",
            "9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.19-1.el9ap.x86_64",
            "9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.19-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.19-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.19-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.19-1.el9ap.aarch64",
            "9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.19-1.el9ap.ppc64le",
            "9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.19-1.el9ap.s390x",
            "9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.19-1.el9ap.x86_64",
            "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.13-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.13-1.el9ap.src",
            "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.13-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.13-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.13-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.13-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20250827-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20250827-1.el9ap.src",
            "9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20250827-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20250827-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.7-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.7-1.el9ap.src",
            "9Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+activitystream-0:2.5.20250827-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+api_documentation-0:2.5.20250827-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+authentication-0:2.5.20250827-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+channel_auth-0:2.5.20250827-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+feature_flags-0:2.5.20250827-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+jwt_consumer-0:2.5.20250827-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+oauth2_provider-0:2.5.20250827-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+rbac-0:2.5.20250827-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+redis_client-0:2.5.20250827-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+rest_filters-0:2.5.20250827-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base-0:2.5.20250827-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base-0:2.5.20250827-1.el9ap.src",
            "9Base-Ansible-Automation-Platform-2.5:python3.11-galaxy-ng-0:4.10.7-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:python3.11-galaxy-ng-0:4.10.7-1.el9ap.src"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2370365"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Django. The `request.path` component of HTTP requests is not properly escaped when included in internal response logging, allowing remote attackers to manipulate log output through crafted URLs. This vulnerability allows an attacker to inject arbitrary content into Django\u0027s internal log files. The consequence is potential information leakage or log file corruption.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "django: Django Path Injection Vulnerability",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The vulnerability allows for log injection via crafted URLs. While remote exploitation is possible without authentication (PR:N, UI:N), the attack requires a high degree of skill and knowledge to craft malicious URLs that will be logged. The impact is limited to confidentiality and integrity; specifically, the ability to manipulate log output. This allows an attacker to potentially forge log entries, which could be used for social engineering or to obscure malicious activity. While the impact isn\u0027t arbitrary code execution or a denial of service, the ability to manipulate logs presents a security risk, especially given that logs are often used for auditing and security monitoring. The Confidentiality impact is rated \u0027Low\u0027 as the information leaked is limited to the manipulated log entries themselves, not sensitive data. The Scope is changed to \u0027C\u0027 to reflect that the vulnerability affects only the logging component.\nThe current python-django issue may be resolved in an upcoming Satellite update.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-django-0:4.2.23-1.el8ap.noarch",
          "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-django-0:4.2.23-1.el8ap.src",
          "8Base-Ansible-Automation-Platform-2.5:python3.11-django-0:4.2.23-1.el8ap.noarch",
          "8Base-Ansible-Automation-Platform-2.5:python3.11-django-0:4.2.23-1.el8ap.src",
          "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-django-0:4.2.23-1.el9ap.noarch",
          "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-django-0:4.2.23-1.el9ap.src",
          "9Base-Ansible-Automation-Platform-2.5:python3.11-django-0:4.2.23-1.el9ap.noarch",
          "9Base-Ansible-Automation-Platform-2.5:python3.11-django-0:4.2.23-1.el9ap.src"
        ],
        "known_not_affected": [
          "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.19-1.el8ap.aarch64",
          "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.19-1.el8ap.ppc64le",
          "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.19-1.el8ap.s390x",
          "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.19-1.el8ap.src",
          "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.19-1.el8ap.x86_64",
          "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.19-1.el8ap.noarch",
          "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-server-0:4.6.19-1.el8ap.noarch",
          "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-ui-0:4.6.19-1.el8ap.noarch",
          "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.19-1.el8ap.aarch64",
          "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.19-1.el8ap.ppc64le",
          "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.19-1.el8ap.s390x",
          "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.19-1.el8ap.x86_64",
          "8Base-Ansible-Automation-Platform-2.5:ansible-automation-platform-installer-0:2.5-17.el8ap.noarch",
          "8Base-Ansible-Automation-Platform-2.5:ansible-automation-platform-installer-0:2.5-17.el8ap.src",
          "8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.19-1.el8ap.aarch64",
          "8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.19-1.el8ap.ppc64le",
          "8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.19-1.el8ap.s390x",
          "8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.19-1.el8ap.src",
          "8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.19-1.el8ap.x86_64",
          "8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.19-1.el8ap.noarch",
          "8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.19-1.el8ap.noarch",
          "8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.19-1.el8ap.noarch",
          "8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.19-1.el8ap.aarch64",
          "8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.19-1.el8ap.ppc64le",
          "8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.19-1.el8ap.s390x",
          "8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.19-1.el8ap.x86_64",
          "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.13-1.el8ap.noarch",
          "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.13-1.el8ap.src",
          "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.13-1.el8ap.noarch",
          "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.13-1.el8ap.noarch",
          "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.13-1.el8ap.noarch",
          "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.13-1.el8ap.noarch",
          "8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20250827-1.el8ap.noarch",
          "8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20250827-1.el8ap.src",
          "8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20250827-1.el8ap.noarch",
          "8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20250827-1.el8ap.noarch",
          "8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.7-1.el8ap.noarch",
          "8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.7-1.el8ap.src",
          "8Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+activitystream-0:2.5.20250827-1.el8ap.noarch",
          "8Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+api_documentation-0:2.5.20250827-1.el8ap.noarch",
          "8Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+authentication-0:2.5.20250827-1.el8ap.noarch",
          "8Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+channel_auth-0:2.5.20250827-1.el8ap.noarch",
          "8Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+feature_flags-0:2.5.20250827-1.el8ap.noarch",
          "8Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+jwt_consumer-0:2.5.20250827-1.el8ap.noarch",
          "8Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+oauth2_provider-0:2.5.20250827-1.el8ap.noarch",
          "8Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+rbac-0:2.5.20250827-1.el8ap.noarch",
          "8Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+redis_client-0:2.5.20250827-1.el8ap.noarch",
          "8Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+rest_filters-0:2.5.20250827-1.el8ap.noarch",
          "8Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base-0:2.5.20250827-1.el8ap.noarch",
          "8Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base-0:2.5.20250827-1.el8ap.src",
          "8Base-Ansible-Automation-Platform-2.5:python3.11-galaxy-ng-0:4.10.7-1.el8ap.noarch",
          "8Base-Ansible-Automation-Platform-2.5:python3.11-galaxy-ng-0:4.10.7-1.el8ap.src",
          "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.19-1.el9ap.aarch64",
          "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.19-1.el9ap.ppc64le",
          "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.19-1.el9ap.s390x",
          "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.19-1.el9ap.src",
          "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.19-1.el9ap.x86_64",
          "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.19-1.el9ap.noarch",
          "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-server-0:4.6.19-1.el9ap.noarch",
          "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-ui-0:4.6.19-1.el9ap.noarch",
          "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.19-1.el9ap.aarch64",
          "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.19-1.el9ap.ppc64le",
          "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.19-1.el9ap.s390x",
          "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.19-1.el9ap.x86_64",
          "9Base-Ansible-Automation-Platform-2.5:ansible-automation-platform-installer-0:2.5-17.el9ap.noarch",
          "9Base-Ansible-Automation-Platform-2.5:ansible-automation-platform-installer-0:2.5-17.el9ap.src",
          "9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.19-1.el9ap.aarch64",
          "9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.19-1.el9ap.ppc64le",
          "9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.19-1.el9ap.s390x",
          "9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.19-1.el9ap.src",
          "9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.19-1.el9ap.x86_64",
          "9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.19-1.el9ap.noarch",
          "9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.19-1.el9ap.noarch",
          "9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.19-1.el9ap.noarch",
          "9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.19-1.el9ap.aarch64",
          "9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.19-1.el9ap.ppc64le",
          "9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.19-1.el9ap.s390x",
          "9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.19-1.el9ap.x86_64",
          "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.13-1.el9ap.noarch",
          "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.13-1.el9ap.src",
          "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.13-1.el9ap.noarch",
          "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.13-1.el9ap.noarch",
          "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.13-1.el9ap.noarch",
          "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.13-1.el9ap.noarch",
          "9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20250827-1.el9ap.noarch",
          "9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20250827-1.el9ap.src",
          "9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20250827-1.el9ap.noarch",
          "9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20250827-1.el9ap.noarch",
          "9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.7-1.el9ap.noarch",
          "9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.7-1.el9ap.src",
          "9Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+activitystream-0:2.5.20250827-1.el9ap.noarch",
          "9Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+api_documentation-0:2.5.20250827-1.el9ap.noarch",
          "9Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+authentication-0:2.5.20250827-1.el9ap.noarch",
          "9Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+channel_auth-0:2.5.20250827-1.el9ap.noarch",
          "9Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+feature_flags-0:2.5.20250827-1.el9ap.noarch",
          "9Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+jwt_consumer-0:2.5.20250827-1.el9ap.noarch",
          "9Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+oauth2_provider-0:2.5.20250827-1.el9ap.noarch",
          "9Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+rbac-0:2.5.20250827-1.el9ap.noarch",
          "9Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+redis_client-0:2.5.20250827-1.el9ap.noarch",
          "9Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+rest_filters-0:2.5.20250827-1.el9ap.noarch",
          "9Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base-0:2.5.20250827-1.el9ap.noarch",
          "9Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base-0:2.5.20250827-1.el9ap.src",
          "9Base-Ansible-Automation-Platform-2.5:python3.11-galaxy-ng-0:4.10.7-1.el9ap.noarch",
          "9Base-Ansible-Automation-Platform-2.5:python3.11-galaxy-ng-0:4.10.7-1.el9ap.src"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-48432"
        },
        {
          "category": "external",
          "summary": "RHBZ#2370365",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2370365"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-48432",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-48432"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-48432",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-48432"
        },
        {
          "category": "external",
          "summary": "http://www.openwall.com/lists/oss-security/2025/06/04/5",
          "url": "http://www.openwall.com/lists/oss-security/2025/06/04/5"
        },
        {
          "category": "external",
          "summary": "https://docs.djangoproject.com/en/dev/releases/security/",
          "url": "https://docs.djangoproject.com/en/dev/releases/security/"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/django-announce",
          "url": "https://groups.google.com/g/django-announce"
        },
        {
          "category": "external",
          "summary": "https://www.djangoproject.com/weblog/2025/jun/04/security-releases/",
          "url": "https://www.djangoproject.com/weblog/2025/jun/04/security-releases/"
        }
      ],
      "release_date": "2025-06-05T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-08-26T21:02:47+00:00",
          "details": "Red Hat Ansible Automation Platform",
          "product_ids": [
            "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-django-0:4.2.23-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-django-0:4.2.23-1.el8ap.src",
            "8Base-Ansible-Automation-Platform-2.5:python3.11-django-0:4.2.23-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:python3.11-django-0:4.2.23-1.el8ap.src",
            "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-django-0:4.2.23-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-django-0:4.2.23-1.el9ap.src",
            "9Base-Ansible-Automation-Platform-2.5:python3.11-django-0:4.2.23-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:python3.11-django-0:4.2.23-1.el9ap.src"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:14686"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.19-1.el8ap.aarch64",
            "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.19-1.el8ap.ppc64le",
            "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.19-1.el8ap.s390x",
            "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.19-1.el8ap.src",
            "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.19-1.el8ap.x86_64",
            "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.19-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-server-0:4.6.19-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-ui-0:4.6.19-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.19-1.el8ap.aarch64",
            "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.19-1.el8ap.ppc64le",
            "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.19-1.el8ap.s390x",
            "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.19-1.el8ap.x86_64",
            "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-django-0:4.2.23-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-django-0:4.2.23-1.el8ap.src",
            "8Base-Ansible-Automation-Platform-2.5:ansible-automation-platform-installer-0:2.5-17.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:ansible-automation-platform-installer-0:2.5-17.el8ap.src",
            "8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.19-1.el8ap.aarch64",
            "8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.19-1.el8ap.ppc64le",
            "8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.19-1.el8ap.s390x",
            "8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.19-1.el8ap.src",
            "8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.19-1.el8ap.x86_64",
            "8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.19-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.19-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.19-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.19-1.el8ap.aarch64",
            "8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.19-1.el8ap.ppc64le",
            "8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.19-1.el8ap.s390x",
            "8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.19-1.el8ap.x86_64",
            "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.13-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.13-1.el8ap.src",
            "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.13-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.13-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.13-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.13-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20250827-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20250827-1.el8ap.src",
            "8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20250827-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20250827-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.7-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.7-1.el8ap.src",
            "8Base-Ansible-Automation-Platform-2.5:python3.11-django-0:4.2.23-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:python3.11-django-0:4.2.23-1.el8ap.src",
            "8Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+activitystream-0:2.5.20250827-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+api_documentation-0:2.5.20250827-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+authentication-0:2.5.20250827-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+channel_auth-0:2.5.20250827-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+feature_flags-0:2.5.20250827-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+jwt_consumer-0:2.5.20250827-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+oauth2_provider-0:2.5.20250827-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+rbac-0:2.5.20250827-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+redis_client-0:2.5.20250827-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+rest_filters-0:2.5.20250827-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base-0:2.5.20250827-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base-0:2.5.20250827-1.el8ap.src",
            "8Base-Ansible-Automation-Platform-2.5:python3.11-galaxy-ng-0:4.10.7-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:python3.11-galaxy-ng-0:4.10.7-1.el8ap.src",
            "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.19-1.el9ap.aarch64",
            "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.19-1.el9ap.ppc64le",
            "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.19-1.el9ap.s390x",
            "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.19-1.el9ap.src",
            "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.19-1.el9ap.x86_64",
            "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.19-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-server-0:4.6.19-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-ui-0:4.6.19-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.19-1.el9ap.aarch64",
            "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.19-1.el9ap.ppc64le",
            "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.19-1.el9ap.s390x",
            "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.19-1.el9ap.x86_64",
            "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-django-0:4.2.23-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-django-0:4.2.23-1.el9ap.src",
            "9Base-Ansible-Automation-Platform-2.5:ansible-automation-platform-installer-0:2.5-17.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:ansible-automation-platform-installer-0:2.5-17.el9ap.src",
            "9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.19-1.el9ap.aarch64",
            "9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.19-1.el9ap.ppc64le",
            "9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.19-1.el9ap.s390x",
            "9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.19-1.el9ap.src",
            "9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.19-1.el9ap.x86_64",
            "9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.19-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.19-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.19-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.19-1.el9ap.aarch64",
            "9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.19-1.el9ap.ppc64le",
            "9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.19-1.el9ap.s390x",
            "9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.19-1.el9ap.x86_64",
            "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.13-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.13-1.el9ap.src",
            "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.13-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.13-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.13-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.13-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20250827-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20250827-1.el9ap.src",
            "9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20250827-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20250827-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.7-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.7-1.el9ap.src",
            "9Base-Ansible-Automation-Platform-2.5:python3.11-django-0:4.2.23-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:python3.11-django-0:4.2.23-1.el9ap.src",
            "9Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+activitystream-0:2.5.20250827-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+api_documentation-0:2.5.20250827-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+authentication-0:2.5.20250827-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+channel_auth-0:2.5.20250827-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+feature_flags-0:2.5.20250827-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+jwt_consumer-0:2.5.20250827-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+oauth2_provider-0:2.5.20250827-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+rbac-0:2.5.20250827-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+redis_client-0:2.5.20250827-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+rest_filters-0:2.5.20250827-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base-0:2.5.20250827-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base-0:2.5.20250827-1.el9ap.src",
            "9Base-Ansible-Automation-Platform-2.5:python3.11-galaxy-ng-0:4.10.7-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:python3.11-galaxy-ng-0:4.10.7-1.el9ap.src"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.4,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.19-1.el8ap.aarch64",
            "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.19-1.el8ap.ppc64le",
            "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.19-1.el8ap.s390x",
            "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.19-1.el8ap.src",
            "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.19-1.el8ap.x86_64",
            "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.19-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-server-0:4.6.19-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-ui-0:4.6.19-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.19-1.el8ap.aarch64",
            "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.19-1.el8ap.ppc64le",
            "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.19-1.el8ap.s390x",
            "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.19-1.el8ap.x86_64",
            "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-django-0:4.2.23-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-django-0:4.2.23-1.el8ap.src",
            "8Base-Ansible-Automation-Platform-2.5:ansible-automation-platform-installer-0:2.5-17.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:ansible-automation-platform-installer-0:2.5-17.el8ap.src",
            "8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.19-1.el8ap.aarch64",
            "8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.19-1.el8ap.ppc64le",
            "8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.19-1.el8ap.s390x",
            "8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.19-1.el8ap.src",
            "8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.19-1.el8ap.x86_64",
            "8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.19-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.19-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.19-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.19-1.el8ap.aarch64",
            "8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.19-1.el8ap.ppc64le",
            "8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.19-1.el8ap.s390x",
            "8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.19-1.el8ap.x86_64",
            "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.13-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.13-1.el8ap.src",
            "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.13-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.13-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.13-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.13-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20250827-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20250827-1.el8ap.src",
            "8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20250827-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20250827-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.7-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.7-1.el8ap.src",
            "8Base-Ansible-Automation-Platform-2.5:python3.11-django-0:4.2.23-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:python3.11-django-0:4.2.23-1.el8ap.src",
            "8Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+activitystream-0:2.5.20250827-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+api_documentation-0:2.5.20250827-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+authentication-0:2.5.20250827-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+channel_auth-0:2.5.20250827-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+feature_flags-0:2.5.20250827-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+jwt_consumer-0:2.5.20250827-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+oauth2_provider-0:2.5.20250827-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+rbac-0:2.5.20250827-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+redis_client-0:2.5.20250827-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+rest_filters-0:2.5.20250827-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base-0:2.5.20250827-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base-0:2.5.20250827-1.el8ap.src",
            "8Base-Ansible-Automation-Platform-2.5:python3.11-galaxy-ng-0:4.10.7-1.el8ap.noarch",
            "8Base-Ansible-Automation-Platform-2.5:python3.11-galaxy-ng-0:4.10.7-1.el8ap.src",
            "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.19-1.el9ap.aarch64",
            "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.19-1.el9ap.ppc64le",
            "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.19-1.el9ap.s390x",
            "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.19-1.el9ap.src",
            "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.19-1.el9ap.x86_64",
            "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.19-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-server-0:4.6.19-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-ui-0:4.6.19-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.19-1.el9ap.aarch64",
            "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.19-1.el9ap.ppc64le",
            "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.19-1.el9ap.s390x",
            "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.19-1.el9ap.x86_64",
            "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-django-0:4.2.23-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-django-0:4.2.23-1.el9ap.src",
            "9Base-Ansible-Automation-Platform-2.5:ansible-automation-platform-installer-0:2.5-17.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:ansible-automation-platform-installer-0:2.5-17.el9ap.src",
            "9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.19-1.el9ap.aarch64",
            "9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.19-1.el9ap.ppc64le",
            "9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.19-1.el9ap.s390x",
            "9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.19-1.el9ap.src",
            "9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.19-1.el9ap.x86_64",
            "9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.19-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.19-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.19-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.19-1.el9ap.aarch64",
            "9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.19-1.el9ap.ppc64le",
            "9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.19-1.el9ap.s390x",
            "9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.19-1.el9ap.x86_64",
            "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.13-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.13-1.el9ap.src",
            "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.13-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.13-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.13-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.13-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20250827-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20250827-1.el9ap.src",
            "9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20250827-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20250827-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.7-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.7-1.el9ap.src",
            "9Base-Ansible-Automation-Platform-2.5:python3.11-django-0:4.2.23-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:python3.11-django-0:4.2.23-1.el9ap.src",
            "9Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+activitystream-0:2.5.20250827-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+api_documentation-0:2.5.20250827-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+authentication-0:2.5.20250827-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+channel_auth-0:2.5.20250827-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+feature_flags-0:2.5.20250827-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+jwt_consumer-0:2.5.20250827-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+oauth2_provider-0:2.5.20250827-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+rbac-0:2.5.20250827-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+redis_client-0:2.5.20250827-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base+rest_filters-0:2.5.20250827-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base-0:2.5.20250827-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:python3.11-django-ansible-base-0:2.5.20250827-1.el9ap.src",
            "9Base-Ansible-Automation-Platform-2.5:python3.11-galaxy-ng-0:4.10.7-1.el9ap.noarch",
            "9Base-Ansible-Automation-Platform-2.5:python3.11-galaxy-ng-0:4.10.7-1.el9ap.src"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "django: Django Path Injection Vulnerability"
    }
  ]
}