RHSA-2026:82315

Vulnerability from csaf_redhat - Published: 2026-10-13 14:54 - Updated: 2026-10-15 13:09
Summary
Red Hat Security Advisory: Migration Toolkit for Applications
Severity
Important
Notes
Topic: A new version of Migration Toolkit for Applications (MTA) is now available.
Details: Migration Toolkit for Applications (MTA) accelerates large-scale application modernization efforts across hybrid cloud environments on Red Hat OpenShift. This solution provides insight throughout the adoption process, at both the portfolio and application levels: inventory, assess, analyze, and manage applications for faster migration to OpenShift via the user interface.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
CVE-2026-33818

A flaw was found in the `encoding/asn1` package in Go. An attacker could provide a specially crafted, deeply-nested Abstract Syntax Notation One (ASN.1) structure, leading to excessive recursion during the `Unmarshal` operation. This could result in stack exhaustion and a Denial of Service (DoS) condition.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-776 - Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')
Affected products
Product Identifier Version Remediation
Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:5c3201937cedd6d9581b51dc5e2c4afbbb4dc0ac18989f661fb8468935e88f7b_amd64 —
Vendor Fix fix
Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:9163ed14379a7a06d309a9333ad36459312ce0efb4bfde11cde4e51977b4ddd9_arm64 —
Vendor Fix fix
Product Identifier Version Remediation
Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:0429aea51eeb7ffd6367a88cea433710249a2f62ad51a566b363dbb032ed119d_arm64 —
Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:2221fdeae6c54896ebae60984f914b8ad6a7900c99308b2fded8ed424c1de855_amd64 —
Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:15bb6993f3830cb001fe4671432ed8ce7609f23f83083189c06658fc3eb28f73_amd64 —
Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:36e32b3d4958a474f85fb657394672c54fd8acb4f52dd29cd4f24730adace677_arm64 —
Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:03323c7a4c2ce6a6eba28632cd19183de5e12b3883d791a88269a0e8b1eb5801_arm64 —
Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:968a0ea4f8dcd6fdfb2c13502046ec10946241b7d3a49188e1c207f5db71af96_amd64 —
Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:78009fe42a94b562a856296d23c0f7f2c7fa9ce70f867b16687de3909a2537da_amd64 —
Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:c049384124f893bc66f0e525b65c62a56c3436b8878644bc5928873c0106aebe_arm64 —
Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:1dc7fbf6a8ee7d1c807f25fb3a26812a24a3bbac0efad68c797fd9070f9b6d3f_amd64 —
Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:33de12a53b8f8ab35b2db56f5aeb2edee0b9a0738fb33f8aab2e7cffdc281c36_arm64 —
Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:bc9d6063d9d042a1f9b2a11c71a773075a216933f5cf5af3e538614c8ff31d1b_arm64 —
Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:beb1c01c5869fb1f9de3463980d3ee3aafe2cc50d1f0053e45e1b9adb6c843ba_amd64 —
Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12e5096d8fa16c377611d87044c2c132843b82baa14d94f316a8bada9f9a2c82_arm64 —
Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:657915791d6c3e0ce8feda6007cce676a003154ebc1e7cc19b810f90e88b523b_amd64 —
Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:53accce8f784339f74b2ede47e56a9e8744be3f25f8c87c9a8aa8d817caa0e3e_amd64 —
Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:1fad9ff6e53a5d8929431a2929b79a268c8d040a11ea71783fe2d6e4bedcb95f_arm64 —
Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:6e46d1165993320b994b94a71a89279cab160f5b222b8a74e0d815028abbdd1b_amd64 —
Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:2753c02ffa2f5a03c183fb3f4818a2374f8365e1bcaed52f5aa4dbb26c040646_arm64 —
Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:903dc961ededd0d53ed3173e083216ad362f545dd9fbc448ee77e9b2a211572f_amd64 —
Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:0c686cd1556801582b2093553d20cc5484519605a327401bfd710902a3d76be0_arm64 —
Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:f1e3927868af9d970c5f74aa788855d8c2498c07a46d26cab7b36100f3ab099b_amd64 —
Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:ee4dbe222bd778ef272ddf3e59dac0844289cc719cd87dea1e24df74f344e097_amd64 —
Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:fea4e17c615d460eaf8d4d55dc85d55a3adfe40465bb977adfd29d9f381982af_arm64 —
Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:7ce47660456e5a3ab4d0880c2b07e21ac0ddced59e62f1e4e483506b3aa6e888_arm64 —
Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f889c64dd327ef718643ad2023d267a9db05e5dd1b05b66ccdc7af16909227ee_amd64 —
Threats
Impact Important
CVE-2026-41178

A flaw was found in OpenTelemetry-Go. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by sending oversized or invalid baggage headers. The `Parse` function, in affected versions, failed to reject raw-length inputs, leading to excessive processing and error logging when handling these large inputs.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-770 - Allocation of Resources Without Limits or Throttling
Affected products
Product Identifier Version Remediation
Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:1dc7fbf6a8ee7d1c807f25fb3a26812a24a3bbac0efad68c797fd9070f9b6d3f_amd64 —
Vendor Fix fix
Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:33de12a53b8f8ab35b2db56f5aeb2edee0b9a0738fb33f8aab2e7cffdc281c36_arm64 —
Vendor Fix fix
Product Identifier Version Remediation
Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:0429aea51eeb7ffd6367a88cea433710249a2f62ad51a566b363dbb032ed119d_arm64 —
Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:2221fdeae6c54896ebae60984f914b8ad6a7900c99308b2fded8ed424c1de855_amd64 —
Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:5c3201937cedd6d9581b51dc5e2c4afbbb4dc0ac18989f661fb8468935e88f7b_amd64 —
Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:9163ed14379a7a06d309a9333ad36459312ce0efb4bfde11cde4e51977b4ddd9_arm64 —
Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:15bb6993f3830cb001fe4671432ed8ce7609f23f83083189c06658fc3eb28f73_amd64 —
Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:36e32b3d4958a474f85fb657394672c54fd8acb4f52dd29cd4f24730adace677_arm64 —
Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:03323c7a4c2ce6a6eba28632cd19183de5e12b3883d791a88269a0e8b1eb5801_arm64 —
Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:968a0ea4f8dcd6fdfb2c13502046ec10946241b7d3a49188e1c207f5db71af96_amd64 —
Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:78009fe42a94b562a856296d23c0f7f2c7fa9ce70f867b16687de3909a2537da_amd64 —
Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:c049384124f893bc66f0e525b65c62a56c3436b8878644bc5928873c0106aebe_arm64 —
Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:bc9d6063d9d042a1f9b2a11c71a773075a216933f5cf5af3e538614c8ff31d1b_arm64 —
Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:beb1c01c5869fb1f9de3463980d3ee3aafe2cc50d1f0053e45e1b9adb6c843ba_amd64 —
Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12e5096d8fa16c377611d87044c2c132843b82baa14d94f316a8bada9f9a2c82_arm64 —
Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:657915791d6c3e0ce8feda6007cce676a003154ebc1e7cc19b810f90e88b523b_amd64 —
Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:53accce8f784339f74b2ede47e56a9e8744be3f25f8c87c9a8aa8d817caa0e3e_amd64 —
Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:1fad9ff6e53a5d8929431a2929b79a268c8d040a11ea71783fe2d6e4bedcb95f_arm64 —
Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:6e46d1165993320b994b94a71a89279cab160f5b222b8a74e0d815028abbdd1b_amd64 —
Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:2753c02ffa2f5a03c183fb3f4818a2374f8365e1bcaed52f5aa4dbb26c040646_arm64 —
Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:903dc961ededd0d53ed3173e083216ad362f545dd9fbc448ee77e9b2a211572f_amd64 —
Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:0c686cd1556801582b2093553d20cc5484519605a327401bfd710902a3d76be0_arm64 —
Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:f1e3927868af9d970c5f74aa788855d8c2498c07a46d26cab7b36100f3ab099b_amd64 —
Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:ee4dbe222bd778ef272ddf3e59dac0844289cc719cd87dea1e24df74f344e097_amd64 —
Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:fea4e17c615d460eaf8d4d55dc85d55a3adfe40465bb977adfd29d9f381982af_arm64 —
Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:7ce47660456e5a3ab4d0880c2b07e21ac0ddced59e62f1e4e483506b3aa6e888_arm64 —
Unresolved product id: Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f889c64dd327ef718643ad2023d267a9db05e5dd1b05b66ccdc7af16909227ee_amd64 —
Threats
Impact Important
CVE-2026-56852

A flaw was found in golang.org/x/text. The norm.Iter component can enter an infinite loop when processing input that contains invalid UTF-8 (Unicode Transformation Format - 8-bit) bytes. A remote attacker could exploit this vulnerability by providing specially crafted input, leading to a Denial of Service (DoS) condition where the affected application becomes unresponsive.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-835 - Loop with Unreachable Exit Condition ('Infinite Loop')
Affected products
Fixed 2 products, the same list as for CVE-2026-33818
Known not affected 25 products, the same list as for CVE-2026-33818
Threats
Impact Important
CVE-2026-56853

A flaw was found in the `net/http` component of the Go standard library. When a server is configured to support unencrypted HTTP/2, it reads initial bytes from new connections to detect the HTTP/2 client preface. However, the `ReadHeaderTimeout` is not correctly applied during this process. This oversight could allow a remote attacker to maintain open connections indefinitely, potentially leading to a Denial of Service (DoS) by exhausting server resources.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-770 - Allocation of Resources Without Limits or Throttling
Affected products
Fixed 2 products, the same list as for CVE-2026-33818
Known not affected 25 products, the same list as for CVE-2026-33818
Threats
Impact Important
CVE-2026-56858

A flaw was found in the `html/template` component of Go (golang). Pathological inputs could prematurely close an unescaped forward slash ('/'), allowing an attacker to inject arbitrary content. This could lead to Cross-Site Scripting (XSS), where malicious scripts are executed in a user's browser, potentially compromising user data or actions.

8.1 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Affected products
Fixed 2 products, the same list as for CVE-2026-33818
Known not affected 25 products, the same list as for CVE-2026-33818
Threats
Impact Important
CVE-2026-56859

A flaw was found in the `encoding/xml` package of Go. The `DecodeElement` function failed to correctly track recursion depth, which could lead to stack exhaustion. A remote attacker could exploit this vulnerability by providing a specially crafted XML input, resulting in a Denial of Service (DoS) for the affected application.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-776 - Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')
Affected products
Fixed 2 products, the same list as for CVE-2026-33818
Known not affected 25 products, the same list as for CVE-2026-33818
Threats
Impact Important
CVE-2026-56860

A flaw was found in `net/url`, a component of `golang`. This vulnerability arises when resolving relative paths that contain numerous parent directory ('..') segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory allocation. This can result in a Denial of Service (DoS) due to resource exhaustion.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-770 - Allocation of Resources Without Limits or Throttling
Affected products
Fixed 2 products, the same list as for CVE-2026-33818
Known not affected 25 products, the same list as for CVE-2026-33818
Threats
Impact Important
CVE-2026-56862

A flaw was found in the `crypto/tls` package, part of `golang`. A malicious client can exploit this vulnerability by continuously sending KeyUpdate messages to a server. This forces the server to perform indefinite key derivation operations, leading to resource exhaustion and a Denial of Service (DoS) condition.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-1050 - Excessive Platform Resource Consumption within a Loop
Affected products
Fixed 2 products, the same list as for CVE-2026-33818
Known not affected 25 products, the same list as for CVE-2026-33818
Threats
Impact Important
CVE-2026-73501

A flaw was found in kin-openapi. This vulnerability allows a remote attacker to bypass authentication checks. Specifically, the system incorrectly handles missing authentication configurations, substituting them with a function that does not verify user credentials. This enables unauthorized access to protected resources that should require proper authentication, compromising the application's security.

9.1 (Critical)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CWE-306 - Missing Authentication for Critical Function
Affected products
Fixed 2 products, the same list as for CVE-2026-33818
Known not affected 25 products, the same list as for CVE-2026-33818
Threats
Impact Important
CVE-2026-73502

A flaw was found in kin-openapi. An unauthenticated remote attacker can trigger a null-pointer dereference in the `openapi3filter.ValidateRequest` function. This occurs when validating a request against a `content` parameter whose `application/json` media type has no schema. Successful exploitation leads to a denial of service, causing request validation to panic and potentially resulting in an aborted request or a full process crash.

5.3 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
CWE-476 - NULL Pointer Dereference
Affected products
Fixed 2 products, the same list as for CVE-2026-33818
Known not affected 25 products, the same list as for CVE-2026-33818
Threats
Impact Moderate
CVE-2026-76905

A flaw was found in kin-openapi, a Go project for handling OpenAPI files. An unauthenticated client can exploit this vulnerability by sending a malformed non-string scalar field in a multipart/form-data request body. This can cause applications that render validation errors through specific error-rendering helpers to panic, leading to a Denial of Service (DoS). JSON request bodies and applications that do not use these error-rendering helpers are not affected.

5.3 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
CWE-476 - NULL Pointer Dereference
Affected products
Fixed 2 products, the same list as for CVE-2026-33818
Known not affected 25 products, the same list as for CVE-2026-33818
Threats
Impact Moderate
CVE-2026-77354

A flaw was found in kin-openapi, a Go project for handling OpenAPI files. An unauthenticated client can exploit this vulnerability by sending a specially crafted query with a large index in a deepObject query parameter. This forces the application to allocate multi-gigabyte memory, leading to an Out-of-Memory (OOM) error or a restart loop, effectively causing a Denial of Service (DoS).

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-1285 - Improper Validation of Specified Index, Position, or Offset in Input
Affected products
Fixed 2 products, the same list as for CVE-2026-33818
Known not affected 25 products, the same list as for CVE-2026-33818
Threats
Impact Important
References
URL Category
https://access.redhat.com/errata/RHSA-2026:82315 self
https://access.redhat.com/security/cve/CVE-2026-33818 external
https://access.redhat.com/security/cve/CVE-2026-41178 external
https://access.redhat.com/security/cve/CVE-2026-56852 external
https://access.redhat.com/security/cve/CVE-2026-56853 external
https://access.redhat.com/security/cve/CVE-2026-56858 external
https://access.redhat.com/security/cve/CVE-2026-56859 external
https://access.redhat.com/security/cve/CVE-2026-56860 external
https://access.redhat.com/security/cve/CVE-2026-56862 external
https://access.redhat.com/security/cve/CVE-2026-73501 external
https://access.redhat.com/security/cve/CVE-2026-73502 external
https://access.redhat.com/security/cve/CVE-2026-76905 external
https://access.redhat.com/security/cve/CVE-2026-77354 external
https://access.redhat.com/security/updates/classi… external
https://developers.redhat.com/products/mta/overview external
https://docs.redhat.com/en/documentation/migratio… external
https://security.access.redhat.com/data/csaf/v2/a… self
https://access.redhat.com/security/cve/CVE-2026-33818 self
https://bugzilla.redhat.com/show_bug.cgi?id=2515815 external
https://www.cve.org/CVERecord?id=CVE-2026-33818 external
https://nvd.nist.gov/vuln/detail/CVE-2026-33818 external
https://go.dev/cl/814980 external
https://go.dev/issue/80405 external
https://groups.google.com/g/golang-announce/c/94p… external
https://pkg.go.dev/vuln/GO-2026-5972 external
https://access.redhat.com/security/cve/CVE-2026-41178 self
https://bugzilla.redhat.com/show_bug.cgi?id=2484830 external
https://www.cve.org/CVERecord?id=CVE-2026-41178 external
https://nvd.nist.gov/vuln/detail/CVE-2026-41178 external
https://github.com/open-telemetry/opentelemetry-g… external
https://github.com/open-telemetry/opentelemetry-g… external
https://access.redhat.com/security/cve/CVE-2026-56852 self
https://bugzilla.redhat.com/show_bug.cgi?id=2504233 external
https://www.cve.org/CVERecord?id=CVE-2026-56852 external
https://nvd.nist.gov/vuln/detail/CVE-2026-56852 external
https://go.dev/cl/794100 external
https://go.dev/issue/80142 external
https://pkg.go.dev/vuln/GO-2026-5970 external
https://access.redhat.com/security/cve/CVE-2026-56853 self
https://bugzilla.redhat.com/show_bug.cgi?id=2515827 external
https://www.cve.org/CVERecord?id=CVE-2026-56853 external
https://nvd.nist.gov/vuln/detail/CVE-2026-56853 external
https://go.dev/cl/795540 external
https://go.dev/issue/80205 external
https://pkg.go.dev/vuln/GO-2026-6089 external
https://access.redhat.com/security/cve/CVE-2026-56858 self
https://bugzilla.redhat.com/show_bug.cgi?id=2515838 external
https://www.cve.org/CVERecord?id=CVE-2026-56858 external
https://nvd.nist.gov/vuln/detail/CVE-2026-56858 external
https://go.dev/cl/807100 external
https://go.dev/issue/80435 external
https://pkg.go.dev/vuln/GO-2026-6091 external
https://access.redhat.com/security/cve/CVE-2026-56859 self
https://bugzilla.redhat.com/show_bug.cgi?id=2515840 external
https://www.cve.org/CVERecord?id=CVE-2026-56859 external
https://nvd.nist.gov/vuln/detail/CVE-2026-56859 external
https://go.dev/cl/803320 external
https://go.dev/issue/80481 external
https://pkg.go.dev/vuln/GO-2026-6088 external
https://access.redhat.com/security/cve/CVE-2026-56860 self
https://bugzilla.redhat.com/show_bug.cgi?id=2515820 external
https://www.cve.org/CVERecord?id=CVE-2026-56860 external
https://nvd.nist.gov/vuln/detail/CVE-2026-56860 external
https://go.dev/cl/803681 external
https://go.dev/issue/80494 external
https://pkg.go.dev/vuln/GO-2026-6218 external
https://access.redhat.com/security/cve/CVE-2026-56862 self
https://bugzilla.redhat.com/show_bug.cgi?id=2515839 external
https://www.cve.org/CVERecord?id=CVE-2026-56862 external
https://nvd.nist.gov/vuln/detail/CVE-2026-56862 external
https://go.dev/cl/804261 external
https://go.dev/issue/80528 external
https://pkg.go.dev/vuln/GO-2026-6090 external
https://access.redhat.com/security/cve/CVE-2026-73501 self
https://bugzilla.redhat.com/show_bug.cgi?id=2515006 external
https://www.cve.org/CVERecord?id=CVE-2026-73501 external
https://nvd.nist.gov/vuln/detail/CVE-2026-73501 external
https://github.com/getkin/kin-openapi/commit/f040… external
https://github.com/getkin/kin-openapi/releases/ta… external
https://github.com/getkin/kin-openapi/security/ad… external
https://access.redhat.com/security/cve/CVE-2026-73502 self
https://bugzilla.redhat.com/show_bug.cgi?id=2518119 external
https://www.cve.org/CVERecord?id=CVE-2026-73502 external
https://nvd.nist.gov/vuln/detail/CVE-2026-73502 external
https://github.com/getkin/kin-openapi/commit/68ac… external
https://github.com/getkin/kin-openapi/security/ad… external
https://access.redhat.com/security/cve/CVE-2026-76905 self
https://bugzilla.redhat.com/show_bug.cgi?id=2521202 external
https://www.cve.org/CVERecord?id=CVE-2026-76905 external
https://nvd.nist.gov/vuln/detail/CVE-2026-76905 external
https://github.com/getkin/kin-openapi/commit/1d0a… external
https://github.com/getkin/kin-openapi/releases/ta… external
https://github.com/getkin/kin-openapi/security/ad… external
https://access.redhat.com/security/cve/CVE-2026-77354 self
https://bugzilla.redhat.com/show_bug.cgi?id=2521204 external
https://www.cve.org/CVERecord?id=CVE-2026-77354 external
https://nvd.nist.gov/vuln/detail/CVE-2026-77354 external
https://github.com/getkin/kin-openapi/commit/1223… external
https://github.com/getkin/kin-openapi/pull/923 external
https://github.com/getkin/kin-openapi/releases/ta… external
https://github.com/getkin/kin-openapi/security/ad… external
To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "A new version of Migration Toolkit for Applications (MTA) is now available.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Migration Toolkit for Applications (MTA) accelerates large-scale application modernization efforts across hybrid cloud environments on Red Hat OpenShift. \nThis solution provides insight throughout the adoption process, at both the portfolio and application levels: inventory, assess, analyze, and manage\napplications for faster migration to OpenShift via the user interface.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:82315",
        "url": "https://access.redhat.com/errata/RHSA-2026:82315"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-33818",
        "url": "https://access.redhat.com/security/cve/CVE-2026-33818"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-41178",
        "url": "https://access.redhat.com/security/cve/CVE-2026-41178"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-56852",
        "url": "https://access.redhat.com/security/cve/CVE-2026-56852"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-56853",
        "url": "https://access.redhat.com/security/cve/CVE-2026-56853"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-56858",
        "url": "https://access.redhat.com/security/cve/CVE-2026-56858"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-56859",
        "url": "https://access.redhat.com/security/cve/CVE-2026-56859"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-56860",
        "url": "https://access.redhat.com/security/cve/CVE-2026-56860"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-56862",
        "url": "https://access.redhat.com/security/cve/CVE-2026-56862"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-73501",
        "url": "https://access.redhat.com/security/cve/CVE-2026-73501"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-73502",
        "url": "https://access.redhat.com/security/cve/CVE-2026-73502"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-76905",
        "url": "https://access.redhat.com/security/cve/CVE-2026-76905"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-77354",
        "url": "https://access.redhat.com/security/cve/CVE-2026-77354"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/",
        "url": "https://access.redhat.com/security/updates/classification/"
      },
      {
        "category": "external",
        "summary": "https://developers.redhat.com/products/mta/overview",
        "url": "https://developers.redhat.com/products/mta/overview"
      },
      {
        "category": "external",
        "summary": "https://docs.redhat.com/en/documentation/migration_toolkit_for_applications/",
        "url": "https://docs.redhat.com/en/documentation/migration_toolkit_for_applications/"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_82315.json"
      }
    ],
    "title": "Red Hat Security Advisory: Migration Toolkit for Applications",
    "tracking": {
      "current_release_date": "2026-10-15T13:09:57+00:00",
      "generator": {
        "date": "2026-10-15T13:09:57+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.4.2"
        }
      },
      "id": "RHSA-2026:82315",
      "initial_release_date": "2026-10-13T14:54:49+00:00",
      "revision_history": [
        {
          "date": "2026-10-13T14:54:49+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-10-13T14:54:51+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-10-15T13:09:57+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Migration Toolkit for Applications 8.2",
                "product": {
                  "name": "Red Hat Migration Toolkit for Applications 8.2",
                  "product_id": "Red Hat Migration Toolkit for Applications 8.2",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:migration_toolkit_applications:8.2::el9"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Migration Toolkit for Applications"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:2221fdeae6c54896ebae60984f914b8ad6a7900c99308b2fded8ed424c1de855_amd64",
                "product": {
                  "name": "registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:2221fdeae6c54896ebae60984f914b8ad6a7900c99308b2fded8ed424c1de855_amd64",
                  "product_id": "registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:2221fdeae6c54896ebae60984f914b8ad6a7900c99308b2fded8ed424c1de855_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/mta-analyzer-addon-rhel9@sha256%3A2221fdeae6c54896ebae60984f914b8ad6a7900c99308b2fded8ed424c1de855?arch=amd64\u0026repository_url=registry.redhat.io/mta/mta-analyzer-addon-rhel9\u0026tag=1791458385"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/mta/mta-cli-rhel9@sha256:5c3201937cedd6d9581b51dc5e2c4afbbb4dc0ac18989f661fb8468935e88f7b_amd64",
                "product": {
                  "name": "registry.redhat.io/mta/mta-cli-rhel9@sha256:5c3201937cedd6d9581b51dc5e2c4afbbb4dc0ac18989f661fb8468935e88f7b_amd64",
                  "product_id": "registry.redhat.io/mta/mta-cli-rhel9@sha256:5c3201937cedd6d9581b51dc5e2c4afbbb4dc0ac18989f661fb8468935e88f7b_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/mta-cli-rhel9@sha256%3A5c3201937cedd6d9581b51dc5e2c4afbbb4dc0ac18989f661fb8468935e88f7b?arch=amd64\u0026repository_url=registry.redhat.io/mta/mta-cli-rhel9\u0026tag=1791460004"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:15bb6993f3830cb001fe4671432ed8ce7609f23f83083189c06658fc3eb28f73_amd64",
                "product": {
                  "name": "registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:15bb6993f3830cb001fe4671432ed8ce7609f23f83083189c06658fc3eb28f73_amd64",
                  "product_id": "registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:15bb6993f3830cb001fe4671432ed8ce7609f23f83083189c06658fc3eb28f73_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/mta-discovery-addon-rhel9@sha256%3A15bb6993f3830cb001fe4671432ed8ce7609f23f83083189c06658fc3eb28f73?arch=amd64\u0026repository_url=registry.redhat.io/mta/mta-discovery-addon-rhel9\u0026tag=1791457435"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:968a0ea4f8dcd6fdfb2c13502046ec10946241b7d3a49188e1c207f5db71af96_amd64",
                "product": {
                  "name": "registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:968a0ea4f8dcd6fdfb2c13502046ec10946241b7d3a49188e1c207f5db71af96_amd64",
                  "product_id": "registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:968a0ea4f8dcd6fdfb2c13502046ec10946241b7d3a49188e1c207f5db71af96_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/mta-dotnet-external-provider-rhel9@sha256%3A968a0ea4f8dcd6fdfb2c13502046ec10946241b7d3a49188e1c207f5db71af96?arch=amd64\u0026repository_url=registry.redhat.io/mta/mta-dotnet-external-provider-rhel9\u0026tag=1791457385"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:78009fe42a94b562a856296d23c0f7f2c7fa9ce70f867b16687de3909a2537da_amd64",
                "product": {
                  "name": "registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:78009fe42a94b562a856296d23c0f7f2c7fa9ce70f867b16687de3909a2537da_amd64",
                  "product_id": "registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:78009fe42a94b562a856296d23c0f7f2c7fa9ce70f867b16687de3909a2537da_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/mta-go-external-provider-rhel9@sha256%3A78009fe42a94b562a856296d23c0f7f2c7fa9ce70f867b16687de3909a2537da?arch=amd64\u0026repository_url=registry.redhat.io/mta/mta-go-external-provider-rhel9\u0026tag=1791457444"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/mta/mta-hub-rhel9@sha256:1dc7fbf6a8ee7d1c807f25fb3a26812a24a3bbac0efad68c797fd9070f9b6d3f_amd64",
                "product": {
                  "name": "registry.redhat.io/mta/mta-hub-rhel9@sha256:1dc7fbf6a8ee7d1c807f25fb3a26812a24a3bbac0efad68c797fd9070f9b6d3f_amd64",
                  "product_id": "registry.redhat.io/mta/mta-hub-rhel9@sha256:1dc7fbf6a8ee7d1c807f25fb3a26812a24a3bbac0efad68c797fd9070f9b6d3f_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/mta-hub-rhel9@sha256%3A1dc7fbf6a8ee7d1c807f25fb3a26812a24a3bbac0efad68c797fd9070f9b6d3f?arch=amd64\u0026repository_url=registry.redhat.io/mta/mta-hub-rhel9\u0026tag=1791458244"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:beb1c01c5869fb1f9de3463980d3ee3aafe2cc50d1f0053e45e1b9adb6c843ba_amd64",
                "product": {
                  "name": "registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:beb1c01c5869fb1f9de3463980d3ee3aafe2cc50d1f0053e45e1b9adb6c843ba_amd64",
                  "product_id": "registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:beb1c01c5869fb1f9de3463980d3ee3aafe2cc50d1f0053e45e1b9adb6c843ba_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/mta-java-external-provider-rhel9@sha256%3Abeb1c01c5869fb1f9de3463980d3ee3aafe2cc50d1f0053e45e1b9adb6c843ba?arch=amd64\u0026repository_url=registry.redhat.io/mta/mta-java-external-provider-rhel9\u0026tag=1791458796"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:657915791d6c3e0ce8feda6007cce676a003154ebc1e7cc19b810f90e88b523b_amd64",
                "product": {
                  "name": "registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:657915791d6c3e0ce8feda6007cce676a003154ebc1e7cc19b810f90e88b523b_amd64",
                  "product_id": "registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:657915791d6c3e0ce8feda6007cce676a003154ebc1e7cc19b810f90e88b523b_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/mta-nodejs-external-provider-rhel9@sha256%3A657915791d6c3e0ce8feda6007cce676a003154ebc1e7cc19b810f90e88b523b?arch=amd64\u0026repository_url=registry.redhat.io/mta/mta-nodejs-external-provider-rhel9\u0026tag=1791457506"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/mta/mta-rhel9-operator@sha256:f1e3927868af9d970c5f74aa788855d8c2498c07a46d26cab7b36100f3ab099b_amd64",
                "product": {
                  "name": "registry.redhat.io/mta/mta-rhel9-operator@sha256:f1e3927868af9d970c5f74aa788855d8c2498c07a46d26cab7b36100f3ab099b_amd64",
                  "product_id": "registry.redhat.io/mta/mta-rhel9-operator@sha256:f1e3927868af9d970c5f74aa788855d8c2498c07a46d26cab7b36100f3ab099b_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/mta-rhel9-operator@sha256%3Af1e3927868af9d970c5f74aa788855d8c2498c07a46d26cab7b36100f3ab099b?arch=amd64\u0026repository_url=registry.redhat.io/mta/mta-rhel9-operator\u0026tag=1791456959"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/mta/mta-operator-bundle@sha256:53accce8f784339f74b2ede47e56a9e8744be3f25f8c87c9a8aa8d817caa0e3e_amd64",
                "product": {
                  "name": "registry.redhat.io/mta/mta-operator-bundle@sha256:53accce8f784339f74b2ede47e56a9e8744be3f25f8c87c9a8aa8d817caa0e3e_amd64",
                  "product_id": "registry.redhat.io/mta/mta-operator-bundle@sha256:53accce8f784339f74b2ede47e56a9e8744be3f25f8c87c9a8aa8d817caa0e3e_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/mta-operator-bundle@sha256%3A53accce8f784339f74b2ede47e56a9e8744be3f25f8c87c9a8aa8d817caa0e3e?arch=amd64\u0026repository_url=registry.redhat.io/mta/mta-operator-bundle\u0026tag=1791461957"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:6e46d1165993320b994b94a71a89279cab160f5b222b8a74e0d815028abbdd1b_amd64",
                "product": {
                  "name": "registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:6e46d1165993320b994b94a71a89279cab160f5b222b8a74e0d815028abbdd1b_amd64",
                  "product_id": "registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:6e46d1165993320b994b94a71a89279cab160f5b222b8a74e0d815028abbdd1b_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/mta-platform-addon-rhel9@sha256%3A6e46d1165993320b994b94a71a89279cab160f5b222b8a74e0d815028abbdd1b?arch=amd64\u0026repository_url=registry.redhat.io/mta/mta-platform-addon-rhel9\u0026tag=1791457437"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:903dc961ededd0d53ed3173e083216ad362f545dd9fbc448ee77e9b2a211572f_amd64",
                "product": {
                  "name": "registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:903dc961ededd0d53ed3173e083216ad362f545dd9fbc448ee77e9b2a211572f_amd64",
                  "product_id": "registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:903dc961ededd0d53ed3173e083216ad362f545dd9fbc448ee77e9b2a211572f_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/mta-python-external-provider-rhel9@sha256%3A903dc961ededd0d53ed3173e083216ad362f545dd9fbc448ee77e9b2a211572f?arch=amd64\u0026repository_url=registry.redhat.io/mta/mta-python-external-provider-rhel9\u0026tag=1791457543"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/mta/mta-solution-server-rhel9@sha256:ee4dbe222bd778ef272ddf3e59dac0844289cc719cd87dea1e24df74f344e097_amd64",
                "product": {
                  "name": "registry.redhat.io/mta/mta-solution-server-rhel9@sha256:ee4dbe222bd778ef272ddf3e59dac0844289cc719cd87dea1e24df74f344e097_amd64",
                  "product_id": "registry.redhat.io/mta/mta-solution-server-rhel9@sha256:ee4dbe222bd778ef272ddf3e59dac0844289cc719cd87dea1e24df74f344e097_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/mta-solution-server-rhel9@sha256%3Aee4dbe222bd778ef272ddf3e59dac0844289cc719cd87dea1e24df74f344e097?arch=amd64\u0026repository_url=registry.redhat.io/mta/mta-solution-server-rhel9\u0026tag=1791457401"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/mta/mta-ui-rhel9@sha256:f889c64dd327ef718643ad2023d267a9db05e5dd1b05b66ccdc7af16909227ee_amd64",
                "product": {
                  "name": "registry.redhat.io/mta/mta-ui-rhel9@sha256:f889c64dd327ef718643ad2023d267a9db05e5dd1b05b66ccdc7af16909227ee_amd64",
                  "product_id": "registry.redhat.io/mta/mta-ui-rhel9@sha256:f889c64dd327ef718643ad2023d267a9db05e5dd1b05b66ccdc7af16909227ee_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/mta-ui-rhel9@sha256%3Af889c64dd327ef718643ad2023d267a9db05e5dd1b05b66ccdc7af16909227ee?arch=amd64\u0026repository_url=registry.redhat.io/mta/mta-ui-rhel9\u0026tag=1789882048"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "amd64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:0429aea51eeb7ffd6367a88cea433710249a2f62ad51a566b363dbb032ed119d_arm64",
                "product": {
                  "name": "registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:0429aea51eeb7ffd6367a88cea433710249a2f62ad51a566b363dbb032ed119d_arm64",
                  "product_id": "registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:0429aea51eeb7ffd6367a88cea433710249a2f62ad51a566b363dbb032ed119d_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/mta-analyzer-addon-rhel9@sha256%3A0429aea51eeb7ffd6367a88cea433710249a2f62ad51a566b363dbb032ed119d?arch=arm64\u0026repository_url=registry.redhat.io/mta/mta-analyzer-addon-rhel9\u0026tag=1791458385"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/mta/mta-cli-rhel9@sha256:9163ed14379a7a06d309a9333ad36459312ce0efb4bfde11cde4e51977b4ddd9_arm64",
                "product": {
                  "name": "registry.redhat.io/mta/mta-cli-rhel9@sha256:9163ed14379a7a06d309a9333ad36459312ce0efb4bfde11cde4e51977b4ddd9_arm64",
                  "product_id": "registry.redhat.io/mta/mta-cli-rhel9@sha256:9163ed14379a7a06d309a9333ad36459312ce0efb4bfde11cde4e51977b4ddd9_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/mta-cli-rhel9@sha256%3A9163ed14379a7a06d309a9333ad36459312ce0efb4bfde11cde4e51977b4ddd9?arch=arm64\u0026repository_url=registry.redhat.io/mta/mta-cli-rhel9\u0026tag=1791460004"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:36e32b3d4958a474f85fb657394672c54fd8acb4f52dd29cd4f24730adace677_arm64",
                "product": {
                  "name": "registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:36e32b3d4958a474f85fb657394672c54fd8acb4f52dd29cd4f24730adace677_arm64",
                  "product_id": "registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:36e32b3d4958a474f85fb657394672c54fd8acb4f52dd29cd4f24730adace677_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/mta-discovery-addon-rhel9@sha256%3A36e32b3d4958a474f85fb657394672c54fd8acb4f52dd29cd4f24730adace677?arch=arm64\u0026repository_url=registry.redhat.io/mta/mta-discovery-addon-rhel9\u0026tag=1791457435"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:03323c7a4c2ce6a6eba28632cd19183de5e12b3883d791a88269a0e8b1eb5801_arm64",
                "product": {
                  "name": "registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:03323c7a4c2ce6a6eba28632cd19183de5e12b3883d791a88269a0e8b1eb5801_arm64",
                  "product_id": "registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:03323c7a4c2ce6a6eba28632cd19183de5e12b3883d791a88269a0e8b1eb5801_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/mta-dotnet-external-provider-rhel9@sha256%3A03323c7a4c2ce6a6eba28632cd19183de5e12b3883d791a88269a0e8b1eb5801?arch=arm64\u0026repository_url=registry.redhat.io/mta/mta-dotnet-external-provider-rhel9\u0026tag=1791457385"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:c049384124f893bc66f0e525b65c62a56c3436b8878644bc5928873c0106aebe_arm64",
                "product": {
                  "name": "registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:c049384124f893bc66f0e525b65c62a56c3436b8878644bc5928873c0106aebe_arm64",
                  "product_id": "registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:c049384124f893bc66f0e525b65c62a56c3436b8878644bc5928873c0106aebe_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/mta-go-external-provider-rhel9@sha256%3Ac049384124f893bc66f0e525b65c62a56c3436b8878644bc5928873c0106aebe?arch=arm64\u0026repository_url=registry.redhat.io/mta/mta-go-external-provider-rhel9\u0026tag=1791457444"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/mta/mta-hub-rhel9@sha256:33de12a53b8f8ab35b2db56f5aeb2edee0b9a0738fb33f8aab2e7cffdc281c36_arm64",
                "product": {
                  "name": "registry.redhat.io/mta/mta-hub-rhel9@sha256:33de12a53b8f8ab35b2db56f5aeb2edee0b9a0738fb33f8aab2e7cffdc281c36_arm64",
                  "product_id": "registry.redhat.io/mta/mta-hub-rhel9@sha256:33de12a53b8f8ab35b2db56f5aeb2edee0b9a0738fb33f8aab2e7cffdc281c36_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/mta-hub-rhel9@sha256%3A33de12a53b8f8ab35b2db56f5aeb2edee0b9a0738fb33f8aab2e7cffdc281c36?arch=arm64\u0026repository_url=registry.redhat.io/mta/mta-hub-rhel9\u0026tag=1791458244"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:bc9d6063d9d042a1f9b2a11c71a773075a216933f5cf5af3e538614c8ff31d1b_arm64",
                "product": {
                  "name": "registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:bc9d6063d9d042a1f9b2a11c71a773075a216933f5cf5af3e538614c8ff31d1b_arm64",
                  "product_id": "registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:bc9d6063d9d042a1f9b2a11c71a773075a216933f5cf5af3e538614c8ff31d1b_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/mta-java-external-provider-rhel9@sha256%3Abc9d6063d9d042a1f9b2a11c71a773075a216933f5cf5af3e538614c8ff31d1b?arch=arm64\u0026repository_url=registry.redhat.io/mta/mta-java-external-provider-rhel9\u0026tag=1791458796"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12e5096d8fa16c377611d87044c2c132843b82baa14d94f316a8bada9f9a2c82_arm64",
                "product": {
                  "name": "registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12e5096d8fa16c377611d87044c2c132843b82baa14d94f316a8bada9f9a2c82_arm64",
                  "product_id": "registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12e5096d8fa16c377611d87044c2c132843b82baa14d94f316a8bada9f9a2c82_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/mta-nodejs-external-provider-rhel9@sha256%3A12e5096d8fa16c377611d87044c2c132843b82baa14d94f316a8bada9f9a2c82?arch=arm64\u0026repository_url=registry.redhat.io/mta/mta-nodejs-external-provider-rhel9\u0026tag=1791457506"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/mta/mta-rhel9-operator@sha256:0c686cd1556801582b2093553d20cc5484519605a327401bfd710902a3d76be0_arm64",
                "product": {
                  "name": "registry.redhat.io/mta/mta-rhel9-operator@sha256:0c686cd1556801582b2093553d20cc5484519605a327401bfd710902a3d76be0_arm64",
                  "product_id": "registry.redhat.io/mta/mta-rhel9-operator@sha256:0c686cd1556801582b2093553d20cc5484519605a327401bfd710902a3d76be0_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/mta-rhel9-operator@sha256%3A0c686cd1556801582b2093553d20cc5484519605a327401bfd710902a3d76be0?arch=arm64\u0026repository_url=registry.redhat.io/mta/mta-rhel9-operator\u0026tag=1791456959"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:1fad9ff6e53a5d8929431a2929b79a268c8d040a11ea71783fe2d6e4bedcb95f_arm64",
                "product": {
                  "name": "registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:1fad9ff6e53a5d8929431a2929b79a268c8d040a11ea71783fe2d6e4bedcb95f_arm64",
                  "product_id": "registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:1fad9ff6e53a5d8929431a2929b79a268c8d040a11ea71783fe2d6e4bedcb95f_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/mta-platform-addon-rhel9@sha256%3A1fad9ff6e53a5d8929431a2929b79a268c8d040a11ea71783fe2d6e4bedcb95f?arch=arm64\u0026repository_url=registry.redhat.io/mta/mta-platform-addon-rhel9\u0026tag=1791457437"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:2753c02ffa2f5a03c183fb3f4818a2374f8365e1bcaed52f5aa4dbb26c040646_arm64",
                "product": {
                  "name": "registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:2753c02ffa2f5a03c183fb3f4818a2374f8365e1bcaed52f5aa4dbb26c040646_arm64",
                  "product_id": "registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:2753c02ffa2f5a03c183fb3f4818a2374f8365e1bcaed52f5aa4dbb26c040646_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/mta-python-external-provider-rhel9@sha256%3A2753c02ffa2f5a03c183fb3f4818a2374f8365e1bcaed52f5aa4dbb26c040646?arch=arm64\u0026repository_url=registry.redhat.io/mta/mta-python-external-provider-rhel9\u0026tag=1791457543"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/mta/mta-solution-server-rhel9@sha256:fea4e17c615d460eaf8d4d55dc85d55a3adfe40465bb977adfd29d9f381982af_arm64",
                "product": {
                  "name": "registry.redhat.io/mta/mta-solution-server-rhel9@sha256:fea4e17c615d460eaf8d4d55dc85d55a3adfe40465bb977adfd29d9f381982af_arm64",
                  "product_id": "registry.redhat.io/mta/mta-solution-server-rhel9@sha256:fea4e17c615d460eaf8d4d55dc85d55a3adfe40465bb977adfd29d9f381982af_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/mta-solution-server-rhel9@sha256%3Afea4e17c615d460eaf8d4d55dc85d55a3adfe40465bb977adfd29d9f381982af?arch=arm64\u0026repository_url=registry.redhat.io/mta/mta-solution-server-rhel9\u0026tag=1791457401"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/mta/mta-ui-rhel9@sha256:7ce47660456e5a3ab4d0880c2b07e21ac0ddced59e62f1e4e483506b3aa6e888_arm64",
                "product": {
                  "name": "registry.redhat.io/mta/mta-ui-rhel9@sha256:7ce47660456e5a3ab4d0880c2b07e21ac0ddced59e62f1e4e483506b3aa6e888_arm64",
                  "product_id": "registry.redhat.io/mta/mta-ui-rhel9@sha256:7ce47660456e5a3ab4d0880c2b07e21ac0ddced59e62f1e4e483506b3aa6e888_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/mta-ui-rhel9@sha256%3A7ce47660456e5a3ab4d0880c2b07e21ac0ddced59e62f1e4e483506b3aa6e888?arch=arm64\u0026repository_url=registry.redhat.io/mta/mta-ui-rhel9\u0026tag=1789882048"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "arm64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:0429aea51eeb7ffd6367a88cea433710249a2f62ad51a566b363dbb032ed119d_arm64 as a component of Red Hat Migration Toolkit for Applications 8.2",
          "product_id": "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:0429aea51eeb7ffd6367a88cea433710249a2f62ad51a566b363dbb032ed119d_arm64"
        },
        "product_reference": "registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:0429aea51eeb7ffd6367a88cea433710249a2f62ad51a566b363dbb032ed119d_arm64",
        "relates_to_product_reference": "Red Hat Migration Toolkit for Applications 8.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:2221fdeae6c54896ebae60984f914b8ad6a7900c99308b2fded8ed424c1de855_amd64 as a component of Red Hat Migration Toolkit for Applications 8.2",
          "product_id": "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:2221fdeae6c54896ebae60984f914b8ad6a7900c99308b2fded8ed424c1de855_amd64"
        },
        "product_reference": "registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:2221fdeae6c54896ebae60984f914b8ad6a7900c99308b2fded8ed424c1de855_amd64",
        "relates_to_product_reference": "Red Hat Migration Toolkit for Applications 8.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/mta/mta-cli-rhel9@sha256:5c3201937cedd6d9581b51dc5e2c4afbbb4dc0ac18989f661fb8468935e88f7b_amd64 as a component of Red Hat Migration Toolkit for Applications 8.2",
          "product_id": "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:5c3201937cedd6d9581b51dc5e2c4afbbb4dc0ac18989f661fb8468935e88f7b_amd64"
        },
        "product_reference": "registry.redhat.io/mta/mta-cli-rhel9@sha256:5c3201937cedd6d9581b51dc5e2c4afbbb4dc0ac18989f661fb8468935e88f7b_amd64",
        "relates_to_product_reference": "Red Hat Migration Toolkit for Applications 8.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/mta/mta-cli-rhel9@sha256:9163ed14379a7a06d309a9333ad36459312ce0efb4bfde11cde4e51977b4ddd9_arm64 as a component of Red Hat Migration Toolkit for Applications 8.2",
          "product_id": "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:9163ed14379a7a06d309a9333ad36459312ce0efb4bfde11cde4e51977b4ddd9_arm64"
        },
        "product_reference": "registry.redhat.io/mta/mta-cli-rhel9@sha256:9163ed14379a7a06d309a9333ad36459312ce0efb4bfde11cde4e51977b4ddd9_arm64",
        "relates_to_product_reference": "Red Hat Migration Toolkit for Applications 8.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:15bb6993f3830cb001fe4671432ed8ce7609f23f83083189c06658fc3eb28f73_amd64 as a component of Red Hat Migration Toolkit for Applications 8.2",
          "product_id": "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:15bb6993f3830cb001fe4671432ed8ce7609f23f83083189c06658fc3eb28f73_amd64"
        },
        "product_reference": "registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:15bb6993f3830cb001fe4671432ed8ce7609f23f83083189c06658fc3eb28f73_amd64",
        "relates_to_product_reference": "Red Hat Migration Toolkit for Applications 8.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:36e32b3d4958a474f85fb657394672c54fd8acb4f52dd29cd4f24730adace677_arm64 as a component of Red Hat Migration Toolkit for Applications 8.2",
          "product_id": "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:36e32b3d4958a474f85fb657394672c54fd8acb4f52dd29cd4f24730adace677_arm64"
        },
        "product_reference": "registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:36e32b3d4958a474f85fb657394672c54fd8acb4f52dd29cd4f24730adace677_arm64",
        "relates_to_product_reference": "Red Hat Migration Toolkit for Applications 8.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:03323c7a4c2ce6a6eba28632cd19183de5e12b3883d791a88269a0e8b1eb5801_arm64 as a component of Red Hat Migration Toolkit for Applications 8.2",
          "product_id": "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:03323c7a4c2ce6a6eba28632cd19183de5e12b3883d791a88269a0e8b1eb5801_arm64"
        },
        "product_reference": "registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:03323c7a4c2ce6a6eba28632cd19183de5e12b3883d791a88269a0e8b1eb5801_arm64",
        "relates_to_product_reference": "Red Hat Migration Toolkit for Applications 8.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:968a0ea4f8dcd6fdfb2c13502046ec10946241b7d3a49188e1c207f5db71af96_amd64 as a component of Red Hat Migration Toolkit for Applications 8.2",
          "product_id": "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:968a0ea4f8dcd6fdfb2c13502046ec10946241b7d3a49188e1c207f5db71af96_amd64"
        },
        "product_reference": "registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:968a0ea4f8dcd6fdfb2c13502046ec10946241b7d3a49188e1c207f5db71af96_amd64",
        "relates_to_product_reference": "Red Hat Migration Toolkit for Applications 8.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:78009fe42a94b562a856296d23c0f7f2c7fa9ce70f867b16687de3909a2537da_amd64 as a component of Red Hat Migration Toolkit for Applications 8.2",
          "product_id": "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:78009fe42a94b562a856296d23c0f7f2c7fa9ce70f867b16687de3909a2537da_amd64"
        },
        "product_reference": "registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:78009fe42a94b562a856296d23c0f7f2c7fa9ce70f867b16687de3909a2537da_amd64",
        "relates_to_product_reference": "Red Hat Migration Toolkit for Applications 8.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:c049384124f893bc66f0e525b65c62a56c3436b8878644bc5928873c0106aebe_arm64 as a component of Red Hat Migration Toolkit for Applications 8.2",
          "product_id": "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:c049384124f893bc66f0e525b65c62a56c3436b8878644bc5928873c0106aebe_arm64"
        },
        "product_reference": "registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:c049384124f893bc66f0e525b65c62a56c3436b8878644bc5928873c0106aebe_arm64",
        "relates_to_product_reference": "Red Hat Migration Toolkit for Applications 8.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/mta/mta-hub-rhel9@sha256:1dc7fbf6a8ee7d1c807f25fb3a26812a24a3bbac0efad68c797fd9070f9b6d3f_amd64 as a component of Red Hat Migration Toolkit for Applications 8.2",
          "product_id": "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:1dc7fbf6a8ee7d1c807f25fb3a26812a24a3bbac0efad68c797fd9070f9b6d3f_amd64"
        },
        "product_reference": "registry.redhat.io/mta/mta-hub-rhel9@sha256:1dc7fbf6a8ee7d1c807f25fb3a26812a24a3bbac0efad68c797fd9070f9b6d3f_amd64",
        "relates_to_product_reference": "Red Hat Migration Toolkit for Applications 8.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/mta/mta-hub-rhel9@sha256:33de12a53b8f8ab35b2db56f5aeb2edee0b9a0738fb33f8aab2e7cffdc281c36_arm64 as a component of Red Hat Migration Toolkit for Applications 8.2",
          "product_id": "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:33de12a53b8f8ab35b2db56f5aeb2edee0b9a0738fb33f8aab2e7cffdc281c36_arm64"
        },
        "product_reference": "registry.redhat.io/mta/mta-hub-rhel9@sha256:33de12a53b8f8ab35b2db56f5aeb2edee0b9a0738fb33f8aab2e7cffdc281c36_arm64",
        "relates_to_product_reference": "Red Hat Migration Toolkit for Applications 8.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:bc9d6063d9d042a1f9b2a11c71a773075a216933f5cf5af3e538614c8ff31d1b_arm64 as a component of Red Hat Migration Toolkit for Applications 8.2",
          "product_id": "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:bc9d6063d9d042a1f9b2a11c71a773075a216933f5cf5af3e538614c8ff31d1b_arm64"
        },
        "product_reference": "registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:bc9d6063d9d042a1f9b2a11c71a773075a216933f5cf5af3e538614c8ff31d1b_arm64",
        "relates_to_product_reference": "Red Hat Migration Toolkit for Applications 8.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:beb1c01c5869fb1f9de3463980d3ee3aafe2cc50d1f0053e45e1b9adb6c843ba_amd64 as a component of Red Hat Migration Toolkit for Applications 8.2",
          "product_id": "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:beb1c01c5869fb1f9de3463980d3ee3aafe2cc50d1f0053e45e1b9adb6c843ba_amd64"
        },
        "product_reference": "registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:beb1c01c5869fb1f9de3463980d3ee3aafe2cc50d1f0053e45e1b9adb6c843ba_amd64",
        "relates_to_product_reference": "Red Hat Migration Toolkit for Applications 8.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12e5096d8fa16c377611d87044c2c132843b82baa14d94f316a8bada9f9a2c82_arm64 as a component of Red Hat Migration Toolkit for Applications 8.2",
          "product_id": "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12e5096d8fa16c377611d87044c2c132843b82baa14d94f316a8bada9f9a2c82_arm64"
        },
        "product_reference": "registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12e5096d8fa16c377611d87044c2c132843b82baa14d94f316a8bada9f9a2c82_arm64",
        "relates_to_product_reference": "Red Hat Migration Toolkit for Applications 8.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:657915791d6c3e0ce8feda6007cce676a003154ebc1e7cc19b810f90e88b523b_amd64 as a component of Red Hat Migration Toolkit for Applications 8.2",
          "product_id": "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:657915791d6c3e0ce8feda6007cce676a003154ebc1e7cc19b810f90e88b523b_amd64"
        },
        "product_reference": "registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:657915791d6c3e0ce8feda6007cce676a003154ebc1e7cc19b810f90e88b523b_amd64",
        "relates_to_product_reference": "Red Hat Migration Toolkit for Applications 8.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/mta/mta-operator-bundle@sha256:53accce8f784339f74b2ede47e56a9e8744be3f25f8c87c9a8aa8d817caa0e3e_amd64 as a component of Red Hat Migration Toolkit for Applications 8.2",
          "product_id": "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:53accce8f784339f74b2ede47e56a9e8744be3f25f8c87c9a8aa8d817caa0e3e_amd64"
        },
        "product_reference": "registry.redhat.io/mta/mta-operator-bundle@sha256:53accce8f784339f74b2ede47e56a9e8744be3f25f8c87c9a8aa8d817caa0e3e_amd64",
        "relates_to_product_reference": "Red Hat Migration Toolkit for Applications 8.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:1fad9ff6e53a5d8929431a2929b79a268c8d040a11ea71783fe2d6e4bedcb95f_arm64 as a component of Red Hat Migration Toolkit for Applications 8.2",
          "product_id": "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:1fad9ff6e53a5d8929431a2929b79a268c8d040a11ea71783fe2d6e4bedcb95f_arm64"
        },
        "product_reference": "registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:1fad9ff6e53a5d8929431a2929b79a268c8d040a11ea71783fe2d6e4bedcb95f_arm64",
        "relates_to_product_reference": "Red Hat Migration Toolkit for Applications 8.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:6e46d1165993320b994b94a71a89279cab160f5b222b8a74e0d815028abbdd1b_amd64 as a component of Red Hat Migration Toolkit for Applications 8.2",
          "product_id": "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:6e46d1165993320b994b94a71a89279cab160f5b222b8a74e0d815028abbdd1b_amd64"
        },
        "product_reference": "registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:6e46d1165993320b994b94a71a89279cab160f5b222b8a74e0d815028abbdd1b_amd64",
        "relates_to_product_reference": "Red Hat Migration Toolkit for Applications 8.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:2753c02ffa2f5a03c183fb3f4818a2374f8365e1bcaed52f5aa4dbb26c040646_arm64 as a component of Red Hat Migration Toolkit for Applications 8.2",
          "product_id": "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:2753c02ffa2f5a03c183fb3f4818a2374f8365e1bcaed52f5aa4dbb26c040646_arm64"
        },
        "product_reference": "registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:2753c02ffa2f5a03c183fb3f4818a2374f8365e1bcaed52f5aa4dbb26c040646_arm64",
        "relates_to_product_reference": "Red Hat Migration Toolkit for Applications 8.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:903dc961ededd0d53ed3173e083216ad362f545dd9fbc448ee77e9b2a211572f_amd64 as a component of Red Hat Migration Toolkit for Applications 8.2",
          "product_id": "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:903dc961ededd0d53ed3173e083216ad362f545dd9fbc448ee77e9b2a211572f_amd64"
        },
        "product_reference": "registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:903dc961ededd0d53ed3173e083216ad362f545dd9fbc448ee77e9b2a211572f_amd64",
        "relates_to_product_reference": "Red Hat Migration Toolkit for Applications 8.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/mta/mta-rhel9-operator@sha256:0c686cd1556801582b2093553d20cc5484519605a327401bfd710902a3d76be0_arm64 as a component of Red Hat Migration Toolkit for Applications 8.2",
          "product_id": "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:0c686cd1556801582b2093553d20cc5484519605a327401bfd710902a3d76be0_arm64"
        },
        "product_reference": "registry.redhat.io/mta/mta-rhel9-operator@sha256:0c686cd1556801582b2093553d20cc5484519605a327401bfd710902a3d76be0_arm64",
        "relates_to_product_reference": "Red Hat Migration Toolkit for Applications 8.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/mta/mta-rhel9-operator@sha256:f1e3927868af9d970c5f74aa788855d8c2498c07a46d26cab7b36100f3ab099b_amd64 as a component of Red Hat Migration Toolkit for Applications 8.2",
          "product_id": "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:f1e3927868af9d970c5f74aa788855d8c2498c07a46d26cab7b36100f3ab099b_amd64"
        },
        "product_reference": "registry.redhat.io/mta/mta-rhel9-operator@sha256:f1e3927868af9d970c5f74aa788855d8c2498c07a46d26cab7b36100f3ab099b_amd64",
        "relates_to_product_reference": "Red Hat Migration Toolkit for Applications 8.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/mta/mta-solution-server-rhel9@sha256:ee4dbe222bd778ef272ddf3e59dac0844289cc719cd87dea1e24df74f344e097_amd64 as a component of Red Hat Migration Toolkit for Applications 8.2",
          "product_id": "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:ee4dbe222bd778ef272ddf3e59dac0844289cc719cd87dea1e24df74f344e097_amd64"
        },
        "product_reference": "registry.redhat.io/mta/mta-solution-server-rhel9@sha256:ee4dbe222bd778ef272ddf3e59dac0844289cc719cd87dea1e24df74f344e097_amd64",
        "relates_to_product_reference": "Red Hat Migration Toolkit for Applications 8.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/mta/mta-solution-server-rhel9@sha256:fea4e17c615d460eaf8d4d55dc85d55a3adfe40465bb977adfd29d9f381982af_arm64 as a component of Red Hat Migration Toolkit for Applications 8.2",
          "product_id": "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:fea4e17c615d460eaf8d4d55dc85d55a3adfe40465bb977adfd29d9f381982af_arm64"
        },
        "product_reference": "registry.redhat.io/mta/mta-solution-server-rhel9@sha256:fea4e17c615d460eaf8d4d55dc85d55a3adfe40465bb977adfd29d9f381982af_arm64",
        "relates_to_product_reference": "Red Hat Migration Toolkit for Applications 8.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/mta/mta-ui-rhel9@sha256:7ce47660456e5a3ab4d0880c2b07e21ac0ddced59e62f1e4e483506b3aa6e888_arm64 as a component of Red Hat Migration Toolkit for Applications 8.2",
          "product_id": "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:7ce47660456e5a3ab4d0880c2b07e21ac0ddced59e62f1e4e483506b3aa6e888_arm64"
        },
        "product_reference": "registry.redhat.io/mta/mta-ui-rhel9@sha256:7ce47660456e5a3ab4d0880c2b07e21ac0ddced59e62f1e4e483506b3aa6e888_arm64",
        "relates_to_product_reference": "Red Hat Migration Toolkit for Applications 8.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/mta/mta-ui-rhel9@sha256:f889c64dd327ef718643ad2023d267a9db05e5dd1b05b66ccdc7af16909227ee_amd64 as a component of Red Hat Migration Toolkit for Applications 8.2",
          "product_id": "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f889c64dd327ef718643ad2023d267a9db05e5dd1b05b66ccdc7af16909227ee_amd64"
        },
        "product_reference": "registry.redhat.io/mta/mta-ui-rhel9@sha256:f889c64dd327ef718643ad2023d267a9db05e5dd1b05b66ccdc7af16909227ee_amd64",
        "relates_to_product_reference": "Red Hat Migration Toolkit for Applications 8.2"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-33818",
      "cwe": {
        "id": "CWE-776",
        "name": "Improper Restriction of Recursive Entity References in DTDs (\u0027XML Entity Expansion\u0027)"
      },
      "discovery_date": "2026-08-13T22:12:37.151735+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:0429aea51eeb7ffd6367a88cea433710249a2f62ad51a566b363dbb032ed119d_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:2221fdeae6c54896ebae60984f914b8ad6a7900c99308b2fded8ed424c1de855_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:15bb6993f3830cb001fe4671432ed8ce7609f23f83083189c06658fc3eb28f73_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:36e32b3d4958a474f85fb657394672c54fd8acb4f52dd29cd4f24730adace677_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:03323c7a4c2ce6a6eba28632cd19183de5e12b3883d791a88269a0e8b1eb5801_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:968a0ea4f8dcd6fdfb2c13502046ec10946241b7d3a49188e1c207f5db71af96_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:78009fe42a94b562a856296d23c0f7f2c7fa9ce70f867b16687de3909a2537da_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:c049384124f893bc66f0e525b65c62a56c3436b8878644bc5928873c0106aebe_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:1dc7fbf6a8ee7d1c807f25fb3a26812a24a3bbac0efad68c797fd9070f9b6d3f_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:33de12a53b8f8ab35b2db56f5aeb2edee0b9a0738fb33f8aab2e7cffdc281c36_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:bc9d6063d9d042a1f9b2a11c71a773075a216933f5cf5af3e538614c8ff31d1b_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:beb1c01c5869fb1f9de3463980d3ee3aafe2cc50d1f0053e45e1b9adb6c843ba_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12e5096d8fa16c377611d87044c2c132843b82baa14d94f316a8bada9f9a2c82_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:657915791d6c3e0ce8feda6007cce676a003154ebc1e7cc19b810f90e88b523b_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:53accce8f784339f74b2ede47e56a9e8744be3f25f8c87c9a8aa8d817caa0e3e_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:1fad9ff6e53a5d8929431a2929b79a268c8d040a11ea71783fe2d6e4bedcb95f_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:6e46d1165993320b994b94a71a89279cab160f5b222b8a74e0d815028abbdd1b_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:2753c02ffa2f5a03c183fb3f4818a2374f8365e1bcaed52f5aa4dbb26c040646_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:903dc961ededd0d53ed3173e083216ad362f545dd9fbc448ee77e9b2a211572f_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:0c686cd1556801582b2093553d20cc5484519605a327401bfd710902a3d76be0_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:f1e3927868af9d970c5f74aa788855d8c2498c07a46d26cab7b36100f3ab099b_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:ee4dbe222bd778ef272ddf3e59dac0844289cc719cd87dea1e24df74f344e097_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:fea4e17c615d460eaf8d4d55dc85d55a3adfe40465bb977adfd29d9f381982af_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:7ce47660456e5a3ab4d0880c2b07e21ac0ddced59e62f1e4e483506b3aa6e888_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f889c64dd327ef718643ad2023d267a9db05e5dd1b05b66ccdc7af16909227ee_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2515815"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the `encoding/asn1` package in Go. An attacker could provide a specially crafted, deeply-nested Abstract Syntax Notation One (ASN.1) structure, leading to excessive recursion during the `Unmarshal` operation. This could result in stack exhaustion and a Denial of Service (DoS) condition.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important denial of service flaw in the Go encoding/asn1 package, as it can be triggered remotely without authentication. An attacker can provide a malformed ASN.1 structure, causing excessive recursion during unmarshalling and leading to stack exhaustion, which can render the service unavailable.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:5c3201937cedd6d9581b51dc5e2c4afbbb4dc0ac18989f661fb8468935e88f7b_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:9163ed14379a7a06d309a9333ad36459312ce0efb4bfde11cde4e51977b4ddd9_arm64"
        ],
        "known_not_affected": [
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:0429aea51eeb7ffd6367a88cea433710249a2f62ad51a566b363dbb032ed119d_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:2221fdeae6c54896ebae60984f914b8ad6a7900c99308b2fded8ed424c1de855_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:15bb6993f3830cb001fe4671432ed8ce7609f23f83083189c06658fc3eb28f73_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:36e32b3d4958a474f85fb657394672c54fd8acb4f52dd29cd4f24730adace677_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:03323c7a4c2ce6a6eba28632cd19183de5e12b3883d791a88269a0e8b1eb5801_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:968a0ea4f8dcd6fdfb2c13502046ec10946241b7d3a49188e1c207f5db71af96_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:78009fe42a94b562a856296d23c0f7f2c7fa9ce70f867b16687de3909a2537da_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:c049384124f893bc66f0e525b65c62a56c3436b8878644bc5928873c0106aebe_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:1dc7fbf6a8ee7d1c807f25fb3a26812a24a3bbac0efad68c797fd9070f9b6d3f_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:33de12a53b8f8ab35b2db56f5aeb2edee0b9a0738fb33f8aab2e7cffdc281c36_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:bc9d6063d9d042a1f9b2a11c71a773075a216933f5cf5af3e538614c8ff31d1b_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:beb1c01c5869fb1f9de3463980d3ee3aafe2cc50d1f0053e45e1b9adb6c843ba_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12e5096d8fa16c377611d87044c2c132843b82baa14d94f316a8bada9f9a2c82_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:657915791d6c3e0ce8feda6007cce676a003154ebc1e7cc19b810f90e88b523b_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:53accce8f784339f74b2ede47e56a9e8744be3f25f8c87c9a8aa8d817caa0e3e_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:1fad9ff6e53a5d8929431a2929b79a268c8d040a11ea71783fe2d6e4bedcb95f_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:6e46d1165993320b994b94a71a89279cab160f5b222b8a74e0d815028abbdd1b_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:2753c02ffa2f5a03c183fb3f4818a2374f8365e1bcaed52f5aa4dbb26c040646_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:903dc961ededd0d53ed3173e083216ad362f545dd9fbc448ee77e9b2a211572f_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:0c686cd1556801582b2093553d20cc5484519605a327401bfd710902a3d76be0_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:f1e3927868af9d970c5f74aa788855d8c2498c07a46d26cab7b36100f3ab099b_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:ee4dbe222bd778ef272ddf3e59dac0844289cc719cd87dea1e24df74f344e097_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:fea4e17c615d460eaf8d4d55dc85d55a3adfe40465bb977adfd29d9f381982af_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:7ce47660456e5a3ab4d0880c2b07e21ac0ddced59e62f1e4e483506b3aa6e888_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f889c64dd327ef718643ad2023d267a9db05e5dd1b05b66ccdc7af16909227ee_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-33818"
        },
        {
          "category": "external",
          "summary": "RHBZ#2515815",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515815"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-33818",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-33818"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33818",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33818"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/814980",
          "url": "https://go.dev/cl/814980"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/80405",
          "url": "https://go.dev/issue/80405"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/94pEornpRlI",
          "url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-5972",
          "url": "https://pkg.go.dev/vuln/GO-2026-5972"
        }
      ],
      "release_date": "2026-08-13T21:58:52.821000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-13T14:54:49+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
          "product_ids": [
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:5c3201937cedd6d9581b51dc5e2c4afbbb4dc0ac18989f661fb8468935e88f7b_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:9163ed14379a7a06d309a9333ad36459312ce0efb4bfde11cde4e51977b4ddd9_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:82315"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:0429aea51eeb7ffd6367a88cea433710249a2f62ad51a566b363dbb032ed119d_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:2221fdeae6c54896ebae60984f914b8ad6a7900c99308b2fded8ed424c1de855_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:5c3201937cedd6d9581b51dc5e2c4afbbb4dc0ac18989f661fb8468935e88f7b_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:9163ed14379a7a06d309a9333ad36459312ce0efb4bfde11cde4e51977b4ddd9_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:15bb6993f3830cb001fe4671432ed8ce7609f23f83083189c06658fc3eb28f73_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:36e32b3d4958a474f85fb657394672c54fd8acb4f52dd29cd4f24730adace677_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:03323c7a4c2ce6a6eba28632cd19183de5e12b3883d791a88269a0e8b1eb5801_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:968a0ea4f8dcd6fdfb2c13502046ec10946241b7d3a49188e1c207f5db71af96_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:78009fe42a94b562a856296d23c0f7f2c7fa9ce70f867b16687de3909a2537da_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:c049384124f893bc66f0e525b65c62a56c3436b8878644bc5928873c0106aebe_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:1dc7fbf6a8ee7d1c807f25fb3a26812a24a3bbac0efad68c797fd9070f9b6d3f_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:33de12a53b8f8ab35b2db56f5aeb2edee0b9a0738fb33f8aab2e7cffdc281c36_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:bc9d6063d9d042a1f9b2a11c71a773075a216933f5cf5af3e538614c8ff31d1b_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:beb1c01c5869fb1f9de3463980d3ee3aafe2cc50d1f0053e45e1b9adb6c843ba_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12e5096d8fa16c377611d87044c2c132843b82baa14d94f316a8bada9f9a2c82_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:657915791d6c3e0ce8feda6007cce676a003154ebc1e7cc19b810f90e88b523b_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:53accce8f784339f74b2ede47e56a9e8744be3f25f8c87c9a8aa8d817caa0e3e_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:1fad9ff6e53a5d8929431a2929b79a268c8d040a11ea71783fe2d6e4bedcb95f_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:6e46d1165993320b994b94a71a89279cab160f5b222b8a74e0d815028abbdd1b_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:2753c02ffa2f5a03c183fb3f4818a2374f8365e1bcaed52f5aa4dbb26c040646_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:903dc961ededd0d53ed3173e083216ad362f545dd9fbc448ee77e9b2a211572f_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:0c686cd1556801582b2093553d20cc5484519605a327401bfd710902a3d76be0_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:f1e3927868af9d970c5f74aa788855d8c2498c07a46d26cab7b36100f3ab099b_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:ee4dbe222bd778ef272ddf3e59dac0844289cc719cd87dea1e24df74f344e097_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:fea4e17c615d460eaf8d4d55dc85d55a3adfe40465bb977adfd29d9f381982af_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:7ce47660456e5a3ab4d0880c2b07e21ac0ddced59e62f1e4e483506b3aa6e888_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f889c64dd327ef718643ad2023d267a9db05e5dd1b05b66ccdc7af16909227ee_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal"
    },
    {
      "cve": "CVE-2026-41178",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-06-04T16:01:10.300537+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:0429aea51eeb7ffd6367a88cea433710249a2f62ad51a566b363dbb032ed119d_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:2221fdeae6c54896ebae60984f914b8ad6a7900c99308b2fded8ed424c1de855_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:5c3201937cedd6d9581b51dc5e2c4afbbb4dc0ac18989f661fb8468935e88f7b_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:9163ed14379a7a06d309a9333ad36459312ce0efb4bfde11cde4e51977b4ddd9_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:15bb6993f3830cb001fe4671432ed8ce7609f23f83083189c06658fc3eb28f73_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:36e32b3d4958a474f85fb657394672c54fd8acb4f52dd29cd4f24730adace677_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:03323c7a4c2ce6a6eba28632cd19183de5e12b3883d791a88269a0e8b1eb5801_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:968a0ea4f8dcd6fdfb2c13502046ec10946241b7d3a49188e1c207f5db71af96_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:78009fe42a94b562a856296d23c0f7f2c7fa9ce70f867b16687de3909a2537da_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:c049384124f893bc66f0e525b65c62a56c3436b8878644bc5928873c0106aebe_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:bc9d6063d9d042a1f9b2a11c71a773075a216933f5cf5af3e538614c8ff31d1b_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:beb1c01c5869fb1f9de3463980d3ee3aafe2cc50d1f0053e45e1b9adb6c843ba_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12e5096d8fa16c377611d87044c2c132843b82baa14d94f316a8bada9f9a2c82_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:657915791d6c3e0ce8feda6007cce676a003154ebc1e7cc19b810f90e88b523b_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:53accce8f784339f74b2ede47e56a9e8744be3f25f8c87c9a8aa8d817caa0e3e_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:1fad9ff6e53a5d8929431a2929b79a268c8d040a11ea71783fe2d6e4bedcb95f_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:6e46d1165993320b994b94a71a89279cab160f5b222b8a74e0d815028abbdd1b_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:2753c02ffa2f5a03c183fb3f4818a2374f8365e1bcaed52f5aa4dbb26c040646_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:903dc961ededd0d53ed3173e083216ad362f545dd9fbc448ee77e9b2a211572f_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:0c686cd1556801582b2093553d20cc5484519605a327401bfd710902a3d76be0_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:f1e3927868af9d970c5f74aa788855d8c2498c07a46d26cab7b36100f3ab099b_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:ee4dbe222bd778ef272ddf3e59dac0844289cc719cd87dea1e24df74f344e097_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:fea4e17c615d460eaf8d4d55dc85d55a3adfe40465bb977adfd29d9f381982af_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:7ce47660456e5a3ab4d0880c2b07e21ac0ddced59e62f1e4e483506b3aa6e888_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f889c64dd327ef718643ad2023d267a9db05e5dd1b05b66ccdc7af16909227ee_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2484830"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in OpenTelemetry-Go. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by sending oversized or invalid baggage headers. The `Parse` function, in affected versions, failed to reject raw-length inputs, leading to excessive processing and error logging when handling these large inputs.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "github.com/open-telemetry/opentelemetry-go: go.opentelemetry.io/otel/baggage: go.opentelemetry.io/otel/propagation: OpenTelemetry-Go: Denial of Service via oversized baggage headers",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important denial of service vulnerability in OpenTelemetry-Go, affecting versions 1.41.0 and 1.43.0. An attacker can exploit this flaw by sending oversized baggage headers, causing the `Parse` function to process invalid inputs and log errors, which can lead to resource exhaustion and service disruption in Red Hat products utilizing these affected OpenTelemetry-Go versions. The impact is considered Important due to the potential for remote, unauthenticated denial of service.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:1dc7fbf6a8ee7d1c807f25fb3a26812a24a3bbac0efad68c797fd9070f9b6d3f_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:33de12a53b8f8ab35b2db56f5aeb2edee0b9a0738fb33f8aab2e7cffdc281c36_arm64"
        ],
        "known_not_affected": [
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:0429aea51eeb7ffd6367a88cea433710249a2f62ad51a566b363dbb032ed119d_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:2221fdeae6c54896ebae60984f914b8ad6a7900c99308b2fded8ed424c1de855_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:5c3201937cedd6d9581b51dc5e2c4afbbb4dc0ac18989f661fb8468935e88f7b_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:9163ed14379a7a06d309a9333ad36459312ce0efb4bfde11cde4e51977b4ddd9_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:15bb6993f3830cb001fe4671432ed8ce7609f23f83083189c06658fc3eb28f73_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:36e32b3d4958a474f85fb657394672c54fd8acb4f52dd29cd4f24730adace677_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:03323c7a4c2ce6a6eba28632cd19183de5e12b3883d791a88269a0e8b1eb5801_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:968a0ea4f8dcd6fdfb2c13502046ec10946241b7d3a49188e1c207f5db71af96_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:78009fe42a94b562a856296d23c0f7f2c7fa9ce70f867b16687de3909a2537da_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:c049384124f893bc66f0e525b65c62a56c3436b8878644bc5928873c0106aebe_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:bc9d6063d9d042a1f9b2a11c71a773075a216933f5cf5af3e538614c8ff31d1b_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:beb1c01c5869fb1f9de3463980d3ee3aafe2cc50d1f0053e45e1b9adb6c843ba_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12e5096d8fa16c377611d87044c2c132843b82baa14d94f316a8bada9f9a2c82_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:657915791d6c3e0ce8feda6007cce676a003154ebc1e7cc19b810f90e88b523b_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:53accce8f784339f74b2ede47e56a9e8744be3f25f8c87c9a8aa8d817caa0e3e_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:1fad9ff6e53a5d8929431a2929b79a268c8d040a11ea71783fe2d6e4bedcb95f_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:6e46d1165993320b994b94a71a89279cab160f5b222b8a74e0d815028abbdd1b_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:2753c02ffa2f5a03c183fb3f4818a2374f8365e1bcaed52f5aa4dbb26c040646_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:903dc961ededd0d53ed3173e083216ad362f545dd9fbc448ee77e9b2a211572f_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:0c686cd1556801582b2093553d20cc5484519605a327401bfd710902a3d76be0_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:f1e3927868af9d970c5f74aa788855d8c2498c07a46d26cab7b36100f3ab099b_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:ee4dbe222bd778ef272ddf3e59dac0844289cc719cd87dea1e24df74f344e097_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:fea4e17c615d460eaf8d4d55dc85d55a3adfe40465bb977adfd29d9f381982af_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:7ce47660456e5a3ab4d0880c2b07e21ac0ddced59e62f1e4e483506b3aa6e888_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f889c64dd327ef718643ad2023d267a9db05e5dd1b05b66ccdc7af16909227ee_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-41178"
        },
        {
          "category": "external",
          "summary": "RHBZ#2484830",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484830"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-41178",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-41178"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-41178",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-41178"
        },
        {
          "category": "external",
          "summary": "https://github.com/open-telemetry/opentelemetry-go/pull/7880",
          "url": "https://github.com/open-telemetry/opentelemetry-go/pull/7880"
        },
        {
          "category": "external",
          "summary": "https://github.com/open-telemetry/opentelemetry-go/security/advisories/GHSA-5wrp-cwcj-q835",
          "url": "https://github.com/open-telemetry/opentelemetry-go/security/advisories/GHSA-5wrp-cwcj-q835"
        }
      ],
      "release_date": "2026-06-04T14:38:23.707000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-13T14:54:49+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
          "product_ids": [
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:1dc7fbf6a8ee7d1c807f25fb3a26812a24a3bbac0efad68c797fd9070f9b6d3f_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:33de12a53b8f8ab35b2db56f5aeb2edee0b9a0738fb33f8aab2e7cffdc281c36_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:82315"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:0429aea51eeb7ffd6367a88cea433710249a2f62ad51a566b363dbb032ed119d_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:2221fdeae6c54896ebae60984f914b8ad6a7900c99308b2fded8ed424c1de855_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:5c3201937cedd6d9581b51dc5e2c4afbbb4dc0ac18989f661fb8468935e88f7b_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:9163ed14379a7a06d309a9333ad36459312ce0efb4bfde11cde4e51977b4ddd9_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:15bb6993f3830cb001fe4671432ed8ce7609f23f83083189c06658fc3eb28f73_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:36e32b3d4958a474f85fb657394672c54fd8acb4f52dd29cd4f24730adace677_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:03323c7a4c2ce6a6eba28632cd19183de5e12b3883d791a88269a0e8b1eb5801_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:968a0ea4f8dcd6fdfb2c13502046ec10946241b7d3a49188e1c207f5db71af96_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:78009fe42a94b562a856296d23c0f7f2c7fa9ce70f867b16687de3909a2537da_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:c049384124f893bc66f0e525b65c62a56c3436b8878644bc5928873c0106aebe_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:1dc7fbf6a8ee7d1c807f25fb3a26812a24a3bbac0efad68c797fd9070f9b6d3f_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:33de12a53b8f8ab35b2db56f5aeb2edee0b9a0738fb33f8aab2e7cffdc281c36_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:bc9d6063d9d042a1f9b2a11c71a773075a216933f5cf5af3e538614c8ff31d1b_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:beb1c01c5869fb1f9de3463980d3ee3aafe2cc50d1f0053e45e1b9adb6c843ba_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12e5096d8fa16c377611d87044c2c132843b82baa14d94f316a8bada9f9a2c82_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:657915791d6c3e0ce8feda6007cce676a003154ebc1e7cc19b810f90e88b523b_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:53accce8f784339f74b2ede47e56a9e8744be3f25f8c87c9a8aa8d817caa0e3e_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:1fad9ff6e53a5d8929431a2929b79a268c8d040a11ea71783fe2d6e4bedcb95f_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:6e46d1165993320b994b94a71a89279cab160f5b222b8a74e0d815028abbdd1b_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:2753c02ffa2f5a03c183fb3f4818a2374f8365e1bcaed52f5aa4dbb26c040646_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:903dc961ededd0d53ed3173e083216ad362f545dd9fbc448ee77e9b2a211572f_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:0c686cd1556801582b2093553d20cc5484519605a327401bfd710902a3d76be0_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:f1e3927868af9d970c5f74aa788855d8c2498c07a46d26cab7b36100f3ab099b_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:ee4dbe222bd778ef272ddf3e59dac0844289cc719cd87dea1e24df74f344e097_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:fea4e17c615d460eaf8d4d55dc85d55a3adfe40465bb977adfd29d9f381982af_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:7ce47660456e5a3ab4d0880c2b07e21ac0ddced59e62f1e4e483506b3aa6e888_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f889c64dd327ef718643ad2023d267a9db05e5dd1b05b66ccdc7af16909227ee_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "github.com/open-telemetry/opentelemetry-go: go.opentelemetry.io/otel/baggage: go.opentelemetry.io/otel/propagation: OpenTelemetry-Go: Denial of Service via oversized baggage headers"
    },
    {
      "cve": "CVE-2026-56852",
      "cwe": {
        "id": "CWE-835",
        "name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
      },
      "discovery_date": "2026-07-21T20:01:56.266823+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:0429aea51eeb7ffd6367a88cea433710249a2f62ad51a566b363dbb032ed119d_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:2221fdeae6c54896ebae60984f914b8ad6a7900c99308b2fded8ed424c1de855_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:15bb6993f3830cb001fe4671432ed8ce7609f23f83083189c06658fc3eb28f73_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:36e32b3d4958a474f85fb657394672c54fd8acb4f52dd29cd4f24730adace677_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:03323c7a4c2ce6a6eba28632cd19183de5e12b3883d791a88269a0e8b1eb5801_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:968a0ea4f8dcd6fdfb2c13502046ec10946241b7d3a49188e1c207f5db71af96_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:78009fe42a94b562a856296d23c0f7f2c7fa9ce70f867b16687de3909a2537da_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:c049384124f893bc66f0e525b65c62a56c3436b8878644bc5928873c0106aebe_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:1dc7fbf6a8ee7d1c807f25fb3a26812a24a3bbac0efad68c797fd9070f9b6d3f_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:33de12a53b8f8ab35b2db56f5aeb2edee0b9a0738fb33f8aab2e7cffdc281c36_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:bc9d6063d9d042a1f9b2a11c71a773075a216933f5cf5af3e538614c8ff31d1b_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:beb1c01c5869fb1f9de3463980d3ee3aafe2cc50d1f0053e45e1b9adb6c843ba_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12e5096d8fa16c377611d87044c2c132843b82baa14d94f316a8bada9f9a2c82_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:657915791d6c3e0ce8feda6007cce676a003154ebc1e7cc19b810f90e88b523b_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:53accce8f784339f74b2ede47e56a9e8744be3f25f8c87c9a8aa8d817caa0e3e_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:1fad9ff6e53a5d8929431a2929b79a268c8d040a11ea71783fe2d6e4bedcb95f_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:6e46d1165993320b994b94a71a89279cab160f5b222b8a74e0d815028abbdd1b_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:2753c02ffa2f5a03c183fb3f4818a2374f8365e1bcaed52f5aa4dbb26c040646_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:903dc961ededd0d53ed3173e083216ad362f545dd9fbc448ee77e9b2a211572f_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:0c686cd1556801582b2093553d20cc5484519605a327401bfd710902a3d76be0_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:f1e3927868af9d970c5f74aa788855d8c2498c07a46d26cab7b36100f3ab099b_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:ee4dbe222bd778ef272ddf3e59dac0844289cc719cd87dea1e24df74f344e097_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:fea4e17c615d460eaf8d4d55dc85d55a3adfe40465bb977adfd29d9f381982af_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:7ce47660456e5a3ab4d0880c2b07e21ac0ddced59e62f1e4e483506b3aa6e888_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f889c64dd327ef718643ad2023d267a9db05e5dd1b05b66ccdc7af16909227ee_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2504233"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in golang.org/x/text. The norm.Iter component can enter an infinite loop when processing input that contains invalid UTF-8 (Unicode Transformation Format - 8-bit) bytes. A remote attacker could exploit this vulnerability by providing specially crafted input, leading to a Denial of Service (DoS) condition where the affected application becomes unresponsive.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang.org/x/text: golang.org/x/text: Denial of Service via invalid UTF-8 input",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Important: This flaw in the `golang.org/x/text` library can lead to a denial of service. An attacker could provide specially crafted invalid UTF-8 input to an application using the affected `norm.Iter` functionality, causing it to enter an infinite loop and become unresponsive.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:5c3201937cedd6d9581b51dc5e2c4afbbb4dc0ac18989f661fb8468935e88f7b_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:9163ed14379a7a06d309a9333ad36459312ce0efb4bfde11cde4e51977b4ddd9_arm64"
        ],
        "known_not_affected": [
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:0429aea51eeb7ffd6367a88cea433710249a2f62ad51a566b363dbb032ed119d_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:2221fdeae6c54896ebae60984f914b8ad6a7900c99308b2fded8ed424c1de855_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:15bb6993f3830cb001fe4671432ed8ce7609f23f83083189c06658fc3eb28f73_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:36e32b3d4958a474f85fb657394672c54fd8acb4f52dd29cd4f24730adace677_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:03323c7a4c2ce6a6eba28632cd19183de5e12b3883d791a88269a0e8b1eb5801_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:968a0ea4f8dcd6fdfb2c13502046ec10946241b7d3a49188e1c207f5db71af96_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:78009fe42a94b562a856296d23c0f7f2c7fa9ce70f867b16687de3909a2537da_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:c049384124f893bc66f0e525b65c62a56c3436b8878644bc5928873c0106aebe_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:1dc7fbf6a8ee7d1c807f25fb3a26812a24a3bbac0efad68c797fd9070f9b6d3f_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:33de12a53b8f8ab35b2db56f5aeb2edee0b9a0738fb33f8aab2e7cffdc281c36_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:bc9d6063d9d042a1f9b2a11c71a773075a216933f5cf5af3e538614c8ff31d1b_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:beb1c01c5869fb1f9de3463980d3ee3aafe2cc50d1f0053e45e1b9adb6c843ba_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12e5096d8fa16c377611d87044c2c132843b82baa14d94f316a8bada9f9a2c82_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:657915791d6c3e0ce8feda6007cce676a003154ebc1e7cc19b810f90e88b523b_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:53accce8f784339f74b2ede47e56a9e8744be3f25f8c87c9a8aa8d817caa0e3e_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:1fad9ff6e53a5d8929431a2929b79a268c8d040a11ea71783fe2d6e4bedcb95f_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:6e46d1165993320b994b94a71a89279cab160f5b222b8a74e0d815028abbdd1b_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:2753c02ffa2f5a03c183fb3f4818a2374f8365e1bcaed52f5aa4dbb26c040646_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:903dc961ededd0d53ed3173e083216ad362f545dd9fbc448ee77e9b2a211572f_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:0c686cd1556801582b2093553d20cc5484519605a327401bfd710902a3d76be0_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:f1e3927868af9d970c5f74aa788855d8c2498c07a46d26cab7b36100f3ab099b_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:ee4dbe222bd778ef272ddf3e59dac0844289cc719cd87dea1e24df74f344e097_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:fea4e17c615d460eaf8d4d55dc85d55a3adfe40465bb977adfd29d9f381982af_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:7ce47660456e5a3ab4d0880c2b07e21ac0ddced59e62f1e4e483506b3aa6e888_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f889c64dd327ef718643ad2023d267a9db05e5dd1b05b66ccdc7af16909227ee_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-56852"
        },
        {
          "category": "external",
          "summary": "RHBZ#2504233",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2504233"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-56852",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-56852"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56852",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56852"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/794100",
          "url": "https://go.dev/cl/794100"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/80142",
          "url": "https://go.dev/issue/80142"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-5970",
          "url": "https://pkg.go.dev/vuln/GO-2026-5970"
        }
      ],
      "release_date": "2026-07-21T19:18:59.951000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-13T14:54:49+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
          "product_ids": [
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:5c3201937cedd6d9581b51dc5e2c4afbbb4dc0ac18989f661fb8468935e88f7b_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:9163ed14379a7a06d309a9333ad36459312ce0efb4bfde11cde4e51977b4ddd9_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:82315"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:0429aea51eeb7ffd6367a88cea433710249a2f62ad51a566b363dbb032ed119d_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:2221fdeae6c54896ebae60984f914b8ad6a7900c99308b2fded8ed424c1de855_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:5c3201937cedd6d9581b51dc5e2c4afbbb4dc0ac18989f661fb8468935e88f7b_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:9163ed14379a7a06d309a9333ad36459312ce0efb4bfde11cde4e51977b4ddd9_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:15bb6993f3830cb001fe4671432ed8ce7609f23f83083189c06658fc3eb28f73_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:36e32b3d4958a474f85fb657394672c54fd8acb4f52dd29cd4f24730adace677_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:03323c7a4c2ce6a6eba28632cd19183de5e12b3883d791a88269a0e8b1eb5801_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:968a0ea4f8dcd6fdfb2c13502046ec10946241b7d3a49188e1c207f5db71af96_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:78009fe42a94b562a856296d23c0f7f2c7fa9ce70f867b16687de3909a2537da_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:c049384124f893bc66f0e525b65c62a56c3436b8878644bc5928873c0106aebe_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:1dc7fbf6a8ee7d1c807f25fb3a26812a24a3bbac0efad68c797fd9070f9b6d3f_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:33de12a53b8f8ab35b2db56f5aeb2edee0b9a0738fb33f8aab2e7cffdc281c36_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:bc9d6063d9d042a1f9b2a11c71a773075a216933f5cf5af3e538614c8ff31d1b_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:beb1c01c5869fb1f9de3463980d3ee3aafe2cc50d1f0053e45e1b9adb6c843ba_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12e5096d8fa16c377611d87044c2c132843b82baa14d94f316a8bada9f9a2c82_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:657915791d6c3e0ce8feda6007cce676a003154ebc1e7cc19b810f90e88b523b_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:53accce8f784339f74b2ede47e56a9e8744be3f25f8c87c9a8aa8d817caa0e3e_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:1fad9ff6e53a5d8929431a2929b79a268c8d040a11ea71783fe2d6e4bedcb95f_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:6e46d1165993320b994b94a71a89279cab160f5b222b8a74e0d815028abbdd1b_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:2753c02ffa2f5a03c183fb3f4818a2374f8365e1bcaed52f5aa4dbb26c040646_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:903dc961ededd0d53ed3173e083216ad362f545dd9fbc448ee77e9b2a211572f_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:0c686cd1556801582b2093553d20cc5484519605a327401bfd710902a3d76be0_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:f1e3927868af9d970c5f74aa788855d8c2498c07a46d26cab7b36100f3ab099b_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:ee4dbe222bd778ef272ddf3e59dac0844289cc719cd87dea1e24df74f344e097_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:fea4e17c615d460eaf8d4d55dc85d55a3adfe40465bb977adfd29d9f381982af_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:7ce47660456e5a3ab4d0880c2b07e21ac0ddced59e62f1e4e483506b3aa6e888_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f889c64dd327ef718643ad2023d267a9db05e5dd1b05b66ccdc7af16909227ee_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:0429aea51eeb7ffd6367a88cea433710249a2f62ad51a566b363dbb032ed119d_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:2221fdeae6c54896ebae60984f914b8ad6a7900c99308b2fded8ed424c1de855_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:5c3201937cedd6d9581b51dc5e2c4afbbb4dc0ac18989f661fb8468935e88f7b_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:9163ed14379a7a06d309a9333ad36459312ce0efb4bfde11cde4e51977b4ddd9_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:15bb6993f3830cb001fe4671432ed8ce7609f23f83083189c06658fc3eb28f73_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:36e32b3d4958a474f85fb657394672c54fd8acb4f52dd29cd4f24730adace677_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:03323c7a4c2ce6a6eba28632cd19183de5e12b3883d791a88269a0e8b1eb5801_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:968a0ea4f8dcd6fdfb2c13502046ec10946241b7d3a49188e1c207f5db71af96_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:78009fe42a94b562a856296d23c0f7f2c7fa9ce70f867b16687de3909a2537da_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:c049384124f893bc66f0e525b65c62a56c3436b8878644bc5928873c0106aebe_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:1dc7fbf6a8ee7d1c807f25fb3a26812a24a3bbac0efad68c797fd9070f9b6d3f_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:33de12a53b8f8ab35b2db56f5aeb2edee0b9a0738fb33f8aab2e7cffdc281c36_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:bc9d6063d9d042a1f9b2a11c71a773075a216933f5cf5af3e538614c8ff31d1b_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:beb1c01c5869fb1f9de3463980d3ee3aafe2cc50d1f0053e45e1b9adb6c843ba_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12e5096d8fa16c377611d87044c2c132843b82baa14d94f316a8bada9f9a2c82_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:657915791d6c3e0ce8feda6007cce676a003154ebc1e7cc19b810f90e88b523b_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:53accce8f784339f74b2ede47e56a9e8744be3f25f8c87c9a8aa8d817caa0e3e_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:1fad9ff6e53a5d8929431a2929b79a268c8d040a11ea71783fe2d6e4bedcb95f_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:6e46d1165993320b994b94a71a89279cab160f5b222b8a74e0d815028abbdd1b_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:2753c02ffa2f5a03c183fb3f4818a2374f8365e1bcaed52f5aa4dbb26c040646_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:903dc961ededd0d53ed3173e083216ad362f545dd9fbc448ee77e9b2a211572f_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:0c686cd1556801582b2093553d20cc5484519605a327401bfd710902a3d76be0_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:f1e3927868af9d970c5f74aa788855d8c2498c07a46d26cab7b36100f3ab099b_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:ee4dbe222bd778ef272ddf3e59dac0844289cc719cd87dea1e24df74f344e097_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:fea4e17c615d460eaf8d4d55dc85d55a3adfe40465bb977adfd29d9f381982af_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:7ce47660456e5a3ab4d0880c2b07e21ac0ddced59e62f1e4e483506b3aa6e888_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f889c64dd327ef718643ad2023d267a9db05e5dd1b05b66ccdc7af16909227ee_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "golang.org/x/text: golang.org/x/text: Denial of Service via invalid UTF-8 input"
    },
    {
      "cve": "CVE-2026-56853",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-08-13T22:14:53.561638+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:0429aea51eeb7ffd6367a88cea433710249a2f62ad51a566b363dbb032ed119d_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:2221fdeae6c54896ebae60984f914b8ad6a7900c99308b2fded8ed424c1de855_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:15bb6993f3830cb001fe4671432ed8ce7609f23f83083189c06658fc3eb28f73_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:36e32b3d4958a474f85fb657394672c54fd8acb4f52dd29cd4f24730adace677_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:03323c7a4c2ce6a6eba28632cd19183de5e12b3883d791a88269a0e8b1eb5801_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:968a0ea4f8dcd6fdfb2c13502046ec10946241b7d3a49188e1c207f5db71af96_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:78009fe42a94b562a856296d23c0f7f2c7fa9ce70f867b16687de3909a2537da_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:c049384124f893bc66f0e525b65c62a56c3436b8878644bc5928873c0106aebe_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:1dc7fbf6a8ee7d1c807f25fb3a26812a24a3bbac0efad68c797fd9070f9b6d3f_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:33de12a53b8f8ab35b2db56f5aeb2edee0b9a0738fb33f8aab2e7cffdc281c36_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:bc9d6063d9d042a1f9b2a11c71a773075a216933f5cf5af3e538614c8ff31d1b_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:beb1c01c5869fb1f9de3463980d3ee3aafe2cc50d1f0053e45e1b9adb6c843ba_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12e5096d8fa16c377611d87044c2c132843b82baa14d94f316a8bada9f9a2c82_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:657915791d6c3e0ce8feda6007cce676a003154ebc1e7cc19b810f90e88b523b_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:53accce8f784339f74b2ede47e56a9e8744be3f25f8c87c9a8aa8d817caa0e3e_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:1fad9ff6e53a5d8929431a2929b79a268c8d040a11ea71783fe2d6e4bedcb95f_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:6e46d1165993320b994b94a71a89279cab160f5b222b8a74e0d815028abbdd1b_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:2753c02ffa2f5a03c183fb3f4818a2374f8365e1bcaed52f5aa4dbb26c040646_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:903dc961ededd0d53ed3173e083216ad362f545dd9fbc448ee77e9b2a211572f_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:0c686cd1556801582b2093553d20cc5484519605a327401bfd710902a3d76be0_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:f1e3927868af9d970c5f74aa788855d8c2498c07a46d26cab7b36100f3ab099b_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:ee4dbe222bd778ef272ddf3e59dac0844289cc719cd87dea1e24df74f344e097_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:fea4e17c615d460eaf8d4d55dc85d55a3adfe40465bb977adfd29d9f381982af_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:7ce47660456e5a3ab4d0880c2b07e21ac0ddced59e62f1e4e483506b3aa6e888_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f889c64dd327ef718643ad2023d267a9db05e5dd1b05b66ccdc7af16909227ee_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2515827"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the `net/http` component of the Go standard library. When a server is configured to support unencrypted HTTP/2, it reads initial bytes from new connections to detect the HTTP/2 client preface. However, the `ReadHeaderTimeout` is not correctly applied during this process. This oversight could allow a remote attacker to maintain open connections indefinitely, potentially leading to a Denial of Service (DoS) by exhausting server resources.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Important: Unencrypted HTTP/2 servers are susceptible to a denial of service due to improper handling of ReadHeaderTimeout during the client preface reading phase. This can lead to resource exhaustion and service unavailability in affected Red Hat products configured to support unencrypted HTTP/2.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:5c3201937cedd6d9581b51dc5e2c4afbbb4dc0ac18989f661fb8468935e88f7b_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:9163ed14379a7a06d309a9333ad36459312ce0efb4bfde11cde4e51977b4ddd9_arm64"
        ],
        "known_not_affected": [
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:0429aea51eeb7ffd6367a88cea433710249a2f62ad51a566b363dbb032ed119d_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:2221fdeae6c54896ebae60984f914b8ad6a7900c99308b2fded8ed424c1de855_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:15bb6993f3830cb001fe4671432ed8ce7609f23f83083189c06658fc3eb28f73_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:36e32b3d4958a474f85fb657394672c54fd8acb4f52dd29cd4f24730adace677_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:03323c7a4c2ce6a6eba28632cd19183de5e12b3883d791a88269a0e8b1eb5801_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:968a0ea4f8dcd6fdfb2c13502046ec10946241b7d3a49188e1c207f5db71af96_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:78009fe42a94b562a856296d23c0f7f2c7fa9ce70f867b16687de3909a2537da_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:c049384124f893bc66f0e525b65c62a56c3436b8878644bc5928873c0106aebe_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:1dc7fbf6a8ee7d1c807f25fb3a26812a24a3bbac0efad68c797fd9070f9b6d3f_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:33de12a53b8f8ab35b2db56f5aeb2edee0b9a0738fb33f8aab2e7cffdc281c36_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:bc9d6063d9d042a1f9b2a11c71a773075a216933f5cf5af3e538614c8ff31d1b_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:beb1c01c5869fb1f9de3463980d3ee3aafe2cc50d1f0053e45e1b9adb6c843ba_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12e5096d8fa16c377611d87044c2c132843b82baa14d94f316a8bada9f9a2c82_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:657915791d6c3e0ce8feda6007cce676a003154ebc1e7cc19b810f90e88b523b_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:53accce8f784339f74b2ede47e56a9e8744be3f25f8c87c9a8aa8d817caa0e3e_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:1fad9ff6e53a5d8929431a2929b79a268c8d040a11ea71783fe2d6e4bedcb95f_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:6e46d1165993320b994b94a71a89279cab160f5b222b8a74e0d815028abbdd1b_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:2753c02ffa2f5a03c183fb3f4818a2374f8365e1bcaed52f5aa4dbb26c040646_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:903dc961ededd0d53ed3173e083216ad362f545dd9fbc448ee77e9b2a211572f_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:0c686cd1556801582b2093553d20cc5484519605a327401bfd710902a3d76be0_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:f1e3927868af9d970c5f74aa788855d8c2498c07a46d26cab7b36100f3ab099b_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:ee4dbe222bd778ef272ddf3e59dac0844289cc719cd87dea1e24df74f344e097_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:fea4e17c615d460eaf8d4d55dc85d55a3adfe40465bb977adfd29d9f381982af_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:7ce47660456e5a3ab4d0880c2b07e21ac0ddced59e62f1e4e483506b3aa6e888_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f889c64dd327ef718643ad2023d267a9db05e5dd1b05b66ccdc7af16909227ee_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-56853"
        },
        {
          "category": "external",
          "summary": "RHBZ#2515827",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515827"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-56853",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-56853"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56853",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56853"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/795540",
          "url": "https://go.dev/cl/795540"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/80205",
          "url": "https://go.dev/issue/80205"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/94pEornpRlI",
          "url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-6089",
          "url": "https://pkg.go.dev/vuln/GO-2026-6089"
        }
      ],
      "release_date": "2026-08-13T21:58:53.092000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-13T14:54:49+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
          "product_ids": [
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:5c3201937cedd6d9581b51dc5e2c4afbbb4dc0ac18989f661fb8468935e88f7b_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:9163ed14379a7a06d309a9333ad36459312ce0efb4bfde11cde4e51977b4ddd9_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:82315"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:0429aea51eeb7ffd6367a88cea433710249a2f62ad51a566b363dbb032ed119d_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:2221fdeae6c54896ebae60984f914b8ad6a7900c99308b2fded8ed424c1de855_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:5c3201937cedd6d9581b51dc5e2c4afbbb4dc0ac18989f661fb8468935e88f7b_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:9163ed14379a7a06d309a9333ad36459312ce0efb4bfde11cde4e51977b4ddd9_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:15bb6993f3830cb001fe4671432ed8ce7609f23f83083189c06658fc3eb28f73_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:36e32b3d4958a474f85fb657394672c54fd8acb4f52dd29cd4f24730adace677_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:03323c7a4c2ce6a6eba28632cd19183de5e12b3883d791a88269a0e8b1eb5801_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:968a0ea4f8dcd6fdfb2c13502046ec10946241b7d3a49188e1c207f5db71af96_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:78009fe42a94b562a856296d23c0f7f2c7fa9ce70f867b16687de3909a2537da_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:c049384124f893bc66f0e525b65c62a56c3436b8878644bc5928873c0106aebe_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:1dc7fbf6a8ee7d1c807f25fb3a26812a24a3bbac0efad68c797fd9070f9b6d3f_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:33de12a53b8f8ab35b2db56f5aeb2edee0b9a0738fb33f8aab2e7cffdc281c36_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:bc9d6063d9d042a1f9b2a11c71a773075a216933f5cf5af3e538614c8ff31d1b_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:beb1c01c5869fb1f9de3463980d3ee3aafe2cc50d1f0053e45e1b9adb6c843ba_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12e5096d8fa16c377611d87044c2c132843b82baa14d94f316a8bada9f9a2c82_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:657915791d6c3e0ce8feda6007cce676a003154ebc1e7cc19b810f90e88b523b_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:53accce8f784339f74b2ede47e56a9e8744be3f25f8c87c9a8aa8d817caa0e3e_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:1fad9ff6e53a5d8929431a2929b79a268c8d040a11ea71783fe2d6e4bedcb95f_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:6e46d1165993320b994b94a71a89279cab160f5b222b8a74e0d815028abbdd1b_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:2753c02ffa2f5a03c183fb3f4818a2374f8365e1bcaed52f5aa4dbb26c040646_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:903dc961ededd0d53ed3173e083216ad362f545dd9fbc448ee77e9b2a211572f_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:0c686cd1556801582b2093553d20cc5484519605a327401bfd710902a3d76be0_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:f1e3927868af9d970c5f74aa788855d8c2498c07a46d26cab7b36100f3ab099b_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:ee4dbe222bd778ef272ddf3e59dac0844289cc719cd87dea1e24df74f344e097_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:fea4e17c615d460eaf8d4d55dc85d55a3adfe40465bb977adfd29d9f381982af_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:7ce47660456e5a3ab4d0880c2b07e21ac0ddced59e62f1e4e483506b3aa6e888_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f889c64dd327ef718643ad2023d267a9db05e5dd1b05b66ccdc7af16909227ee_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service"
    },
    {
      "cve": "CVE-2026-56858",
      "cwe": {
        "id": "CWE-79",
        "name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
      },
      "discovery_date": "2026-08-13T22:16:32.034590+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:0429aea51eeb7ffd6367a88cea433710249a2f62ad51a566b363dbb032ed119d_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:2221fdeae6c54896ebae60984f914b8ad6a7900c99308b2fded8ed424c1de855_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:15bb6993f3830cb001fe4671432ed8ce7609f23f83083189c06658fc3eb28f73_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:36e32b3d4958a474f85fb657394672c54fd8acb4f52dd29cd4f24730adace677_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:03323c7a4c2ce6a6eba28632cd19183de5e12b3883d791a88269a0e8b1eb5801_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:968a0ea4f8dcd6fdfb2c13502046ec10946241b7d3a49188e1c207f5db71af96_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:78009fe42a94b562a856296d23c0f7f2c7fa9ce70f867b16687de3909a2537da_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:c049384124f893bc66f0e525b65c62a56c3436b8878644bc5928873c0106aebe_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:1dc7fbf6a8ee7d1c807f25fb3a26812a24a3bbac0efad68c797fd9070f9b6d3f_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:33de12a53b8f8ab35b2db56f5aeb2edee0b9a0738fb33f8aab2e7cffdc281c36_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:bc9d6063d9d042a1f9b2a11c71a773075a216933f5cf5af3e538614c8ff31d1b_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:beb1c01c5869fb1f9de3463980d3ee3aafe2cc50d1f0053e45e1b9adb6c843ba_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12e5096d8fa16c377611d87044c2c132843b82baa14d94f316a8bada9f9a2c82_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:657915791d6c3e0ce8feda6007cce676a003154ebc1e7cc19b810f90e88b523b_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:53accce8f784339f74b2ede47e56a9e8744be3f25f8c87c9a8aa8d817caa0e3e_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:1fad9ff6e53a5d8929431a2929b79a268c8d040a11ea71783fe2d6e4bedcb95f_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:6e46d1165993320b994b94a71a89279cab160f5b222b8a74e0d815028abbdd1b_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:2753c02ffa2f5a03c183fb3f4818a2374f8365e1bcaed52f5aa4dbb26c040646_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:903dc961ededd0d53ed3173e083216ad362f545dd9fbc448ee77e9b2a211572f_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:0c686cd1556801582b2093553d20cc5484519605a327401bfd710902a3d76be0_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:f1e3927868af9d970c5f74aa788855d8c2498c07a46d26cab7b36100f3ab099b_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:ee4dbe222bd778ef272ddf3e59dac0844289cc719cd87dea1e24df74f344e097_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:fea4e17c615d460eaf8d4d55dc85d55a3adfe40465bb977adfd29d9f381982af_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:7ce47660456e5a3ab4d0880c2b07e21ac0ddced59e62f1e4e483506b3aa6e888_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f889c64dd327ef718643ad2023d267a9db05e5dd1b05b66ccdc7af16909227ee_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2515838"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the `html/template` component of Go (golang). Pathological inputs could prematurely close an unescaped forward slash (\u0027/\u0027), allowing an attacker to inject arbitrary content. This could lead to Cross-Site Scripting (XSS), where malicious scripts are executed in a user\u0027s browser, potentially compromising user data or actions.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "html/template: golang: Go html/template: Cross-Site Scripting via pathological input",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important cross-site scripting (XSS) vulnerability in the Go `html/template` package. Applications utilizing this package to render untrusted input are susceptible to arbitrary content injection due to a flaw in how pathological inputs are handled, potentially leading to client-side script execution.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:5c3201937cedd6d9581b51dc5e2c4afbbb4dc0ac18989f661fb8468935e88f7b_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:9163ed14379a7a06d309a9333ad36459312ce0efb4bfde11cde4e51977b4ddd9_arm64"
        ],
        "known_not_affected": [
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:0429aea51eeb7ffd6367a88cea433710249a2f62ad51a566b363dbb032ed119d_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:2221fdeae6c54896ebae60984f914b8ad6a7900c99308b2fded8ed424c1de855_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:15bb6993f3830cb001fe4671432ed8ce7609f23f83083189c06658fc3eb28f73_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:36e32b3d4958a474f85fb657394672c54fd8acb4f52dd29cd4f24730adace677_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:03323c7a4c2ce6a6eba28632cd19183de5e12b3883d791a88269a0e8b1eb5801_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:968a0ea4f8dcd6fdfb2c13502046ec10946241b7d3a49188e1c207f5db71af96_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:78009fe42a94b562a856296d23c0f7f2c7fa9ce70f867b16687de3909a2537da_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:c049384124f893bc66f0e525b65c62a56c3436b8878644bc5928873c0106aebe_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:1dc7fbf6a8ee7d1c807f25fb3a26812a24a3bbac0efad68c797fd9070f9b6d3f_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:33de12a53b8f8ab35b2db56f5aeb2edee0b9a0738fb33f8aab2e7cffdc281c36_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:bc9d6063d9d042a1f9b2a11c71a773075a216933f5cf5af3e538614c8ff31d1b_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:beb1c01c5869fb1f9de3463980d3ee3aafe2cc50d1f0053e45e1b9adb6c843ba_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12e5096d8fa16c377611d87044c2c132843b82baa14d94f316a8bada9f9a2c82_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:657915791d6c3e0ce8feda6007cce676a003154ebc1e7cc19b810f90e88b523b_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:53accce8f784339f74b2ede47e56a9e8744be3f25f8c87c9a8aa8d817caa0e3e_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:1fad9ff6e53a5d8929431a2929b79a268c8d040a11ea71783fe2d6e4bedcb95f_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:6e46d1165993320b994b94a71a89279cab160f5b222b8a74e0d815028abbdd1b_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:2753c02ffa2f5a03c183fb3f4818a2374f8365e1bcaed52f5aa4dbb26c040646_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:903dc961ededd0d53ed3173e083216ad362f545dd9fbc448ee77e9b2a211572f_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:0c686cd1556801582b2093553d20cc5484519605a327401bfd710902a3d76be0_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:f1e3927868af9d970c5f74aa788855d8c2498c07a46d26cab7b36100f3ab099b_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:ee4dbe222bd778ef272ddf3e59dac0844289cc719cd87dea1e24df74f344e097_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:fea4e17c615d460eaf8d4d55dc85d55a3adfe40465bb977adfd29d9f381982af_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:7ce47660456e5a3ab4d0880c2b07e21ac0ddced59e62f1e4e483506b3aa6e888_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f889c64dd327ef718643ad2023d267a9db05e5dd1b05b66ccdc7af16909227ee_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-56858"
        },
        {
          "category": "external",
          "summary": "RHBZ#2515838",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515838"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-56858",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-56858"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56858",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56858"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/807100",
          "url": "https://go.dev/cl/807100"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/80435",
          "url": "https://go.dev/issue/80435"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/94pEornpRlI",
          "url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-6091",
          "url": "https://pkg.go.dev/vuln/GO-2026-6091"
        }
      ],
      "release_date": "2026-08-13T21:58:53.354000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-13T14:54:49+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
          "product_ids": [
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:5c3201937cedd6d9581b51dc5e2c4afbbb4dc0ac18989f661fb8468935e88f7b_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:9163ed14379a7a06d309a9333ad36459312ce0efb4bfde11cde4e51977b4ddd9_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:82315"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:0429aea51eeb7ffd6367a88cea433710249a2f62ad51a566b363dbb032ed119d_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:2221fdeae6c54896ebae60984f914b8ad6a7900c99308b2fded8ed424c1de855_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:5c3201937cedd6d9581b51dc5e2c4afbbb4dc0ac18989f661fb8468935e88f7b_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:9163ed14379a7a06d309a9333ad36459312ce0efb4bfde11cde4e51977b4ddd9_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:15bb6993f3830cb001fe4671432ed8ce7609f23f83083189c06658fc3eb28f73_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:36e32b3d4958a474f85fb657394672c54fd8acb4f52dd29cd4f24730adace677_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:03323c7a4c2ce6a6eba28632cd19183de5e12b3883d791a88269a0e8b1eb5801_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:968a0ea4f8dcd6fdfb2c13502046ec10946241b7d3a49188e1c207f5db71af96_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:78009fe42a94b562a856296d23c0f7f2c7fa9ce70f867b16687de3909a2537da_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:c049384124f893bc66f0e525b65c62a56c3436b8878644bc5928873c0106aebe_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:1dc7fbf6a8ee7d1c807f25fb3a26812a24a3bbac0efad68c797fd9070f9b6d3f_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:33de12a53b8f8ab35b2db56f5aeb2edee0b9a0738fb33f8aab2e7cffdc281c36_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:bc9d6063d9d042a1f9b2a11c71a773075a216933f5cf5af3e538614c8ff31d1b_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:beb1c01c5869fb1f9de3463980d3ee3aafe2cc50d1f0053e45e1b9adb6c843ba_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12e5096d8fa16c377611d87044c2c132843b82baa14d94f316a8bada9f9a2c82_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:657915791d6c3e0ce8feda6007cce676a003154ebc1e7cc19b810f90e88b523b_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:53accce8f784339f74b2ede47e56a9e8744be3f25f8c87c9a8aa8d817caa0e3e_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:1fad9ff6e53a5d8929431a2929b79a268c8d040a11ea71783fe2d6e4bedcb95f_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:6e46d1165993320b994b94a71a89279cab160f5b222b8a74e0d815028abbdd1b_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:2753c02ffa2f5a03c183fb3f4818a2374f8365e1bcaed52f5aa4dbb26c040646_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:903dc961ededd0d53ed3173e083216ad362f545dd9fbc448ee77e9b2a211572f_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:0c686cd1556801582b2093553d20cc5484519605a327401bfd710902a3d76be0_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:f1e3927868af9d970c5f74aa788855d8c2498c07a46d26cab7b36100f3ab099b_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:ee4dbe222bd778ef272ddf3e59dac0844289cc719cd87dea1e24df74f344e097_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:fea4e17c615d460eaf8d4d55dc85d55a3adfe40465bb977adfd29d9f381982af_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:7ce47660456e5a3ab4d0880c2b07e21ac0ddced59e62f1e4e483506b3aa6e888_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f889c64dd327ef718643ad2023d267a9db05e5dd1b05b66ccdc7af16909227ee_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "html/template: golang: Go html/template: Cross-Site Scripting via pathological input"
    },
    {
      "cve": "CVE-2026-56859",
      "cwe": {
        "id": "CWE-776",
        "name": "Improper Restriction of Recursive Entity References in DTDs (\u0027XML Entity Expansion\u0027)"
      },
      "discovery_date": "2026-08-13T22:16:52.493058+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:0429aea51eeb7ffd6367a88cea433710249a2f62ad51a566b363dbb032ed119d_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:2221fdeae6c54896ebae60984f914b8ad6a7900c99308b2fded8ed424c1de855_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:15bb6993f3830cb001fe4671432ed8ce7609f23f83083189c06658fc3eb28f73_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:36e32b3d4958a474f85fb657394672c54fd8acb4f52dd29cd4f24730adace677_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:03323c7a4c2ce6a6eba28632cd19183de5e12b3883d791a88269a0e8b1eb5801_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:968a0ea4f8dcd6fdfb2c13502046ec10946241b7d3a49188e1c207f5db71af96_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:78009fe42a94b562a856296d23c0f7f2c7fa9ce70f867b16687de3909a2537da_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:c049384124f893bc66f0e525b65c62a56c3436b8878644bc5928873c0106aebe_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:1dc7fbf6a8ee7d1c807f25fb3a26812a24a3bbac0efad68c797fd9070f9b6d3f_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:33de12a53b8f8ab35b2db56f5aeb2edee0b9a0738fb33f8aab2e7cffdc281c36_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:bc9d6063d9d042a1f9b2a11c71a773075a216933f5cf5af3e538614c8ff31d1b_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:beb1c01c5869fb1f9de3463980d3ee3aafe2cc50d1f0053e45e1b9adb6c843ba_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12e5096d8fa16c377611d87044c2c132843b82baa14d94f316a8bada9f9a2c82_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:657915791d6c3e0ce8feda6007cce676a003154ebc1e7cc19b810f90e88b523b_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:53accce8f784339f74b2ede47e56a9e8744be3f25f8c87c9a8aa8d817caa0e3e_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:1fad9ff6e53a5d8929431a2929b79a268c8d040a11ea71783fe2d6e4bedcb95f_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:6e46d1165993320b994b94a71a89279cab160f5b222b8a74e0d815028abbdd1b_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:2753c02ffa2f5a03c183fb3f4818a2374f8365e1bcaed52f5aa4dbb26c040646_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:903dc961ededd0d53ed3173e083216ad362f545dd9fbc448ee77e9b2a211572f_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:0c686cd1556801582b2093553d20cc5484519605a327401bfd710902a3d76be0_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:f1e3927868af9d970c5f74aa788855d8c2498c07a46d26cab7b36100f3ab099b_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:ee4dbe222bd778ef272ddf3e59dac0844289cc719cd87dea1e24df74f344e097_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:fea4e17c615d460eaf8d4d55dc85d55a3adfe40465bb977adfd29d9f381982af_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:7ce47660456e5a3ab4d0880c2b07e21ac0ddced59e62f1e4e483506b3aa6e888_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f889c64dd327ef718643ad2023d267a9db05e5dd1b05b66ccdc7af16909227ee_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2515840"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the `encoding/xml` package of Go. The `DecodeElement` function failed to correctly track recursion depth, which could lead to stack exhaustion. A remote attacker could exploit this vulnerability by providing a specially crafted XML input, resulting in a Denial of Service (DoS) for the affected application.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "An Important denial of service flaw affects applications utilizing the Go `encoding/xml` package. This vulnerability arises from an issue in XML decoding where a recursion depth counter fails to reset, potentially leading to stack exhaustion when processing malicious XML input.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:5c3201937cedd6d9581b51dc5e2c4afbbb4dc0ac18989f661fb8468935e88f7b_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:9163ed14379a7a06d309a9333ad36459312ce0efb4bfde11cde4e51977b4ddd9_arm64"
        ],
        "known_not_affected": [
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:0429aea51eeb7ffd6367a88cea433710249a2f62ad51a566b363dbb032ed119d_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:2221fdeae6c54896ebae60984f914b8ad6a7900c99308b2fded8ed424c1de855_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:15bb6993f3830cb001fe4671432ed8ce7609f23f83083189c06658fc3eb28f73_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:36e32b3d4958a474f85fb657394672c54fd8acb4f52dd29cd4f24730adace677_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:03323c7a4c2ce6a6eba28632cd19183de5e12b3883d791a88269a0e8b1eb5801_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:968a0ea4f8dcd6fdfb2c13502046ec10946241b7d3a49188e1c207f5db71af96_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:78009fe42a94b562a856296d23c0f7f2c7fa9ce70f867b16687de3909a2537da_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:c049384124f893bc66f0e525b65c62a56c3436b8878644bc5928873c0106aebe_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:1dc7fbf6a8ee7d1c807f25fb3a26812a24a3bbac0efad68c797fd9070f9b6d3f_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:33de12a53b8f8ab35b2db56f5aeb2edee0b9a0738fb33f8aab2e7cffdc281c36_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:bc9d6063d9d042a1f9b2a11c71a773075a216933f5cf5af3e538614c8ff31d1b_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:beb1c01c5869fb1f9de3463980d3ee3aafe2cc50d1f0053e45e1b9adb6c843ba_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12e5096d8fa16c377611d87044c2c132843b82baa14d94f316a8bada9f9a2c82_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:657915791d6c3e0ce8feda6007cce676a003154ebc1e7cc19b810f90e88b523b_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:53accce8f784339f74b2ede47e56a9e8744be3f25f8c87c9a8aa8d817caa0e3e_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:1fad9ff6e53a5d8929431a2929b79a268c8d040a11ea71783fe2d6e4bedcb95f_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:6e46d1165993320b994b94a71a89279cab160f5b222b8a74e0d815028abbdd1b_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:2753c02ffa2f5a03c183fb3f4818a2374f8365e1bcaed52f5aa4dbb26c040646_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:903dc961ededd0d53ed3173e083216ad362f545dd9fbc448ee77e9b2a211572f_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:0c686cd1556801582b2093553d20cc5484519605a327401bfd710902a3d76be0_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:f1e3927868af9d970c5f74aa788855d8c2498c07a46d26cab7b36100f3ab099b_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:ee4dbe222bd778ef272ddf3e59dac0844289cc719cd87dea1e24df74f344e097_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:fea4e17c615d460eaf8d4d55dc85d55a3adfe40465bb977adfd29d9f381982af_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:7ce47660456e5a3ab4d0880c2b07e21ac0ddced59e62f1e4e483506b3aa6e888_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f889c64dd327ef718643ad2023d267a9db05e5dd1b05b66ccdc7af16909227ee_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-56859"
        },
        {
          "category": "external",
          "summary": "RHBZ#2515840",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515840"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-56859",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-56859"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56859",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56859"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/803320",
          "url": "https://go.dev/cl/803320"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/80481",
          "url": "https://go.dev/issue/80481"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/94pEornpRlI",
          "url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-6088",
          "url": "https://pkg.go.dev/vuln/GO-2026-6088"
        }
      ],
      "release_date": "2026-08-13T21:58:52.959000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-13T14:54:49+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
          "product_ids": [
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:5c3201937cedd6d9581b51dc5e2c4afbbb4dc0ac18989f661fb8468935e88f7b_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:9163ed14379a7a06d309a9333ad36459312ce0efb4bfde11cde4e51977b4ddd9_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:82315"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:0429aea51eeb7ffd6367a88cea433710249a2f62ad51a566b363dbb032ed119d_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:2221fdeae6c54896ebae60984f914b8ad6a7900c99308b2fded8ed424c1de855_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:5c3201937cedd6d9581b51dc5e2c4afbbb4dc0ac18989f661fb8468935e88f7b_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:9163ed14379a7a06d309a9333ad36459312ce0efb4bfde11cde4e51977b4ddd9_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:15bb6993f3830cb001fe4671432ed8ce7609f23f83083189c06658fc3eb28f73_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:36e32b3d4958a474f85fb657394672c54fd8acb4f52dd29cd4f24730adace677_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:03323c7a4c2ce6a6eba28632cd19183de5e12b3883d791a88269a0e8b1eb5801_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:968a0ea4f8dcd6fdfb2c13502046ec10946241b7d3a49188e1c207f5db71af96_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:78009fe42a94b562a856296d23c0f7f2c7fa9ce70f867b16687de3909a2537da_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:c049384124f893bc66f0e525b65c62a56c3436b8878644bc5928873c0106aebe_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:1dc7fbf6a8ee7d1c807f25fb3a26812a24a3bbac0efad68c797fd9070f9b6d3f_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:33de12a53b8f8ab35b2db56f5aeb2edee0b9a0738fb33f8aab2e7cffdc281c36_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:bc9d6063d9d042a1f9b2a11c71a773075a216933f5cf5af3e538614c8ff31d1b_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:beb1c01c5869fb1f9de3463980d3ee3aafe2cc50d1f0053e45e1b9adb6c843ba_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12e5096d8fa16c377611d87044c2c132843b82baa14d94f316a8bada9f9a2c82_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:657915791d6c3e0ce8feda6007cce676a003154ebc1e7cc19b810f90e88b523b_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:53accce8f784339f74b2ede47e56a9e8744be3f25f8c87c9a8aa8d817caa0e3e_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:1fad9ff6e53a5d8929431a2929b79a268c8d040a11ea71783fe2d6e4bedcb95f_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:6e46d1165993320b994b94a71a89279cab160f5b222b8a74e0d815028abbdd1b_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:2753c02ffa2f5a03c183fb3f4818a2374f8365e1bcaed52f5aa4dbb26c040646_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:903dc961ededd0d53ed3173e083216ad362f545dd9fbc448ee77e9b2a211572f_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:0c686cd1556801582b2093553d20cc5484519605a327401bfd710902a3d76be0_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:f1e3927868af9d970c5f74aa788855d8c2498c07a46d26cab7b36100f3ab099b_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:ee4dbe222bd778ef272ddf3e59dac0844289cc719cd87dea1e24df74f344e097_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:fea4e17c615d460eaf8d4d55dc85d55a3adfe40465bb977adfd29d9f381982af_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:7ce47660456e5a3ab4d0880c2b07e21ac0ddced59e62f1e4e483506b3aa6e888_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f889c64dd327ef718643ad2023d267a9db05e5dd1b05b66ccdc7af16909227ee_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:0429aea51eeb7ffd6367a88cea433710249a2f62ad51a566b363dbb032ed119d_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:2221fdeae6c54896ebae60984f914b8ad6a7900c99308b2fded8ed424c1de855_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:5c3201937cedd6d9581b51dc5e2c4afbbb4dc0ac18989f661fb8468935e88f7b_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:9163ed14379a7a06d309a9333ad36459312ce0efb4bfde11cde4e51977b4ddd9_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:15bb6993f3830cb001fe4671432ed8ce7609f23f83083189c06658fc3eb28f73_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:36e32b3d4958a474f85fb657394672c54fd8acb4f52dd29cd4f24730adace677_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:03323c7a4c2ce6a6eba28632cd19183de5e12b3883d791a88269a0e8b1eb5801_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:968a0ea4f8dcd6fdfb2c13502046ec10946241b7d3a49188e1c207f5db71af96_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:78009fe42a94b562a856296d23c0f7f2c7fa9ce70f867b16687de3909a2537da_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:c049384124f893bc66f0e525b65c62a56c3436b8878644bc5928873c0106aebe_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:1dc7fbf6a8ee7d1c807f25fb3a26812a24a3bbac0efad68c797fd9070f9b6d3f_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:33de12a53b8f8ab35b2db56f5aeb2edee0b9a0738fb33f8aab2e7cffdc281c36_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:bc9d6063d9d042a1f9b2a11c71a773075a216933f5cf5af3e538614c8ff31d1b_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:beb1c01c5869fb1f9de3463980d3ee3aafe2cc50d1f0053e45e1b9adb6c843ba_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12e5096d8fa16c377611d87044c2c132843b82baa14d94f316a8bada9f9a2c82_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:657915791d6c3e0ce8feda6007cce676a003154ebc1e7cc19b810f90e88b523b_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:53accce8f784339f74b2ede47e56a9e8744be3f25f8c87c9a8aa8d817caa0e3e_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:1fad9ff6e53a5d8929431a2929b79a268c8d040a11ea71783fe2d6e4bedcb95f_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:6e46d1165993320b994b94a71a89279cab160f5b222b8a74e0d815028abbdd1b_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:2753c02ffa2f5a03c183fb3f4818a2374f8365e1bcaed52f5aa4dbb26c040646_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:903dc961ededd0d53ed3173e083216ad362f545dd9fbc448ee77e9b2a211572f_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:0c686cd1556801582b2093553d20cc5484519605a327401bfd710902a3d76be0_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:f1e3927868af9d970c5f74aa788855d8c2498c07a46d26cab7b36100f3ab099b_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:ee4dbe222bd778ef272ddf3e59dac0844289cc719cd87dea1e24df74f344e097_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:fea4e17c615d460eaf8d4d55dc85d55a3adfe40465bb977adfd29d9f381982af_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:7ce47660456e5a3ab4d0880c2b07e21ac0ddced59e62f1e4e483506b3aa6e888_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f889c64dd327ef718643ad2023d267a9db05e5dd1b05b66ccdc7af16909227ee_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue"
    },
    {
      "cve": "CVE-2026-56860",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-08-13T22:13:18.319384+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:0429aea51eeb7ffd6367a88cea433710249a2f62ad51a566b363dbb032ed119d_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:2221fdeae6c54896ebae60984f914b8ad6a7900c99308b2fded8ed424c1de855_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:15bb6993f3830cb001fe4671432ed8ce7609f23f83083189c06658fc3eb28f73_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:36e32b3d4958a474f85fb657394672c54fd8acb4f52dd29cd4f24730adace677_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:03323c7a4c2ce6a6eba28632cd19183de5e12b3883d791a88269a0e8b1eb5801_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:968a0ea4f8dcd6fdfb2c13502046ec10946241b7d3a49188e1c207f5db71af96_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:78009fe42a94b562a856296d23c0f7f2c7fa9ce70f867b16687de3909a2537da_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:c049384124f893bc66f0e525b65c62a56c3436b8878644bc5928873c0106aebe_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:1dc7fbf6a8ee7d1c807f25fb3a26812a24a3bbac0efad68c797fd9070f9b6d3f_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:33de12a53b8f8ab35b2db56f5aeb2edee0b9a0738fb33f8aab2e7cffdc281c36_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:bc9d6063d9d042a1f9b2a11c71a773075a216933f5cf5af3e538614c8ff31d1b_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:beb1c01c5869fb1f9de3463980d3ee3aafe2cc50d1f0053e45e1b9adb6c843ba_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12e5096d8fa16c377611d87044c2c132843b82baa14d94f316a8bada9f9a2c82_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:657915791d6c3e0ce8feda6007cce676a003154ebc1e7cc19b810f90e88b523b_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:53accce8f784339f74b2ede47e56a9e8744be3f25f8c87c9a8aa8d817caa0e3e_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:1fad9ff6e53a5d8929431a2929b79a268c8d040a11ea71783fe2d6e4bedcb95f_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:6e46d1165993320b994b94a71a89279cab160f5b222b8a74e0d815028abbdd1b_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:2753c02ffa2f5a03c183fb3f4818a2374f8365e1bcaed52f5aa4dbb26c040646_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:903dc961ededd0d53ed3173e083216ad362f545dd9fbc448ee77e9b2a211572f_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:0c686cd1556801582b2093553d20cc5484519605a327401bfd710902a3d76be0_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:f1e3927868af9d970c5f74aa788855d8c2498c07a46d26cab7b36100f3ab099b_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:ee4dbe222bd778ef272ddf3e59dac0844289cc719cd87dea1e24df74f344e097_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:fea4e17c615d460eaf8d4d55dc85d55a3adfe40465bb977adfd29d9f381982af_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:7ce47660456e5a3ab4d0880c2b07e21ac0ddced59e62f1e4e483506b3aa6e888_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f889c64dd327ef718643ad2023d267a9db05e5dd1b05b66ccdc7af16909227ee_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2515820"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in `net/url`, a component of `golang`. This vulnerability arises when resolving relative paths that contain numerous parent directory (\u0027..\u0027) segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory allocation. This can result in a Denial of Service (DoS) due to resource exhaustion.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important denial of service flaw in the Go `net/url` package. Applications built with Go that process untrusted URLs containing parent directory segments (\u0027..\u0027) may be vulnerable to excessive resource consumption due to quadratic time complexity in path resolution. This can lead to a denial of service, impacting the availability of affected services.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:5c3201937cedd6d9581b51dc5e2c4afbbb4dc0ac18989f661fb8468935e88f7b_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:9163ed14379a7a06d309a9333ad36459312ce0efb4bfde11cde4e51977b4ddd9_arm64"
        ],
        "known_not_affected": [
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:0429aea51eeb7ffd6367a88cea433710249a2f62ad51a566b363dbb032ed119d_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:2221fdeae6c54896ebae60984f914b8ad6a7900c99308b2fded8ed424c1de855_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:15bb6993f3830cb001fe4671432ed8ce7609f23f83083189c06658fc3eb28f73_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:36e32b3d4958a474f85fb657394672c54fd8acb4f52dd29cd4f24730adace677_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:03323c7a4c2ce6a6eba28632cd19183de5e12b3883d791a88269a0e8b1eb5801_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:968a0ea4f8dcd6fdfb2c13502046ec10946241b7d3a49188e1c207f5db71af96_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:78009fe42a94b562a856296d23c0f7f2c7fa9ce70f867b16687de3909a2537da_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:c049384124f893bc66f0e525b65c62a56c3436b8878644bc5928873c0106aebe_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:1dc7fbf6a8ee7d1c807f25fb3a26812a24a3bbac0efad68c797fd9070f9b6d3f_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:33de12a53b8f8ab35b2db56f5aeb2edee0b9a0738fb33f8aab2e7cffdc281c36_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:bc9d6063d9d042a1f9b2a11c71a773075a216933f5cf5af3e538614c8ff31d1b_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:beb1c01c5869fb1f9de3463980d3ee3aafe2cc50d1f0053e45e1b9adb6c843ba_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12e5096d8fa16c377611d87044c2c132843b82baa14d94f316a8bada9f9a2c82_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:657915791d6c3e0ce8feda6007cce676a003154ebc1e7cc19b810f90e88b523b_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:53accce8f784339f74b2ede47e56a9e8744be3f25f8c87c9a8aa8d817caa0e3e_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:1fad9ff6e53a5d8929431a2929b79a268c8d040a11ea71783fe2d6e4bedcb95f_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:6e46d1165993320b994b94a71a89279cab160f5b222b8a74e0d815028abbdd1b_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:2753c02ffa2f5a03c183fb3f4818a2374f8365e1bcaed52f5aa4dbb26c040646_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:903dc961ededd0d53ed3173e083216ad362f545dd9fbc448ee77e9b2a211572f_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:0c686cd1556801582b2093553d20cc5484519605a327401bfd710902a3d76be0_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:f1e3927868af9d970c5f74aa788855d8c2498c07a46d26cab7b36100f3ab099b_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:ee4dbe222bd778ef272ddf3e59dac0844289cc719cd87dea1e24df74f344e097_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:fea4e17c615d460eaf8d4d55dc85d55a3adfe40465bb977adfd29d9f381982af_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:7ce47660456e5a3ab4d0880c2b07e21ac0ddced59e62f1e4e483506b3aa6e888_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f889c64dd327ef718643ad2023d267a9db05e5dd1b05b66ccdc7af16909227ee_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-56860"
        },
        {
          "category": "external",
          "summary": "RHBZ#2515820",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515820"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-56860",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-56860"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56860",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56860"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/803681",
          "url": "https://go.dev/cl/803681"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/80494",
          "url": "https://go.dev/issue/80494"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/94pEornpRlI",
          "url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-6218",
          "url": "https://pkg.go.dev/vuln/GO-2026-6218"
        }
      ],
      "release_date": "2026-08-13T21:58:53.731000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-13T14:54:49+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
          "product_ids": [
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:5c3201937cedd6d9581b51dc5e2c4afbbb4dc0ac18989f661fb8468935e88f7b_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:9163ed14379a7a06d309a9333ad36459312ce0efb4bfde11cde4e51977b4ddd9_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:82315"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:0429aea51eeb7ffd6367a88cea433710249a2f62ad51a566b363dbb032ed119d_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:2221fdeae6c54896ebae60984f914b8ad6a7900c99308b2fded8ed424c1de855_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:5c3201937cedd6d9581b51dc5e2c4afbbb4dc0ac18989f661fb8468935e88f7b_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:9163ed14379a7a06d309a9333ad36459312ce0efb4bfde11cde4e51977b4ddd9_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:15bb6993f3830cb001fe4671432ed8ce7609f23f83083189c06658fc3eb28f73_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:36e32b3d4958a474f85fb657394672c54fd8acb4f52dd29cd4f24730adace677_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:03323c7a4c2ce6a6eba28632cd19183de5e12b3883d791a88269a0e8b1eb5801_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:968a0ea4f8dcd6fdfb2c13502046ec10946241b7d3a49188e1c207f5db71af96_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:78009fe42a94b562a856296d23c0f7f2c7fa9ce70f867b16687de3909a2537da_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:c049384124f893bc66f0e525b65c62a56c3436b8878644bc5928873c0106aebe_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:1dc7fbf6a8ee7d1c807f25fb3a26812a24a3bbac0efad68c797fd9070f9b6d3f_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:33de12a53b8f8ab35b2db56f5aeb2edee0b9a0738fb33f8aab2e7cffdc281c36_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:bc9d6063d9d042a1f9b2a11c71a773075a216933f5cf5af3e538614c8ff31d1b_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:beb1c01c5869fb1f9de3463980d3ee3aafe2cc50d1f0053e45e1b9adb6c843ba_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12e5096d8fa16c377611d87044c2c132843b82baa14d94f316a8bada9f9a2c82_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:657915791d6c3e0ce8feda6007cce676a003154ebc1e7cc19b810f90e88b523b_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:53accce8f784339f74b2ede47e56a9e8744be3f25f8c87c9a8aa8d817caa0e3e_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:1fad9ff6e53a5d8929431a2929b79a268c8d040a11ea71783fe2d6e4bedcb95f_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:6e46d1165993320b994b94a71a89279cab160f5b222b8a74e0d815028abbdd1b_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:2753c02ffa2f5a03c183fb3f4818a2374f8365e1bcaed52f5aa4dbb26c040646_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:903dc961ededd0d53ed3173e083216ad362f545dd9fbc448ee77e9b2a211572f_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:0c686cd1556801582b2093553d20cc5484519605a327401bfd710902a3d76be0_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:f1e3927868af9d970c5f74aa788855d8c2498c07a46d26cab7b36100f3ab099b_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:ee4dbe222bd778ef272ddf3e59dac0844289cc719cd87dea1e24df74f344e097_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:fea4e17c615d460eaf8d4d55dc85d55a3adfe40465bb977adfd29d9f381982af_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:7ce47660456e5a3ab4d0880c2b07e21ac0ddced59e62f1e4e483506b3aa6e888_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f889c64dd327ef718643ad2023d267a9db05e5dd1b05b66ccdc7af16909227ee_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution"
    },
    {
      "cve": "CVE-2026-56862",
      "cwe": {
        "id": "CWE-1050",
        "name": "Excessive Platform Resource Consumption within a Loop"
      },
      "discovery_date": "2026-08-13T22:16:41.928450+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:0429aea51eeb7ffd6367a88cea433710249a2f62ad51a566b363dbb032ed119d_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:2221fdeae6c54896ebae60984f914b8ad6a7900c99308b2fded8ed424c1de855_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:15bb6993f3830cb001fe4671432ed8ce7609f23f83083189c06658fc3eb28f73_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:36e32b3d4958a474f85fb657394672c54fd8acb4f52dd29cd4f24730adace677_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:03323c7a4c2ce6a6eba28632cd19183de5e12b3883d791a88269a0e8b1eb5801_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:968a0ea4f8dcd6fdfb2c13502046ec10946241b7d3a49188e1c207f5db71af96_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:78009fe42a94b562a856296d23c0f7f2c7fa9ce70f867b16687de3909a2537da_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:c049384124f893bc66f0e525b65c62a56c3436b8878644bc5928873c0106aebe_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:1dc7fbf6a8ee7d1c807f25fb3a26812a24a3bbac0efad68c797fd9070f9b6d3f_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:33de12a53b8f8ab35b2db56f5aeb2edee0b9a0738fb33f8aab2e7cffdc281c36_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:bc9d6063d9d042a1f9b2a11c71a773075a216933f5cf5af3e538614c8ff31d1b_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:beb1c01c5869fb1f9de3463980d3ee3aafe2cc50d1f0053e45e1b9adb6c843ba_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12e5096d8fa16c377611d87044c2c132843b82baa14d94f316a8bada9f9a2c82_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:657915791d6c3e0ce8feda6007cce676a003154ebc1e7cc19b810f90e88b523b_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:53accce8f784339f74b2ede47e56a9e8744be3f25f8c87c9a8aa8d817caa0e3e_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:1fad9ff6e53a5d8929431a2929b79a268c8d040a11ea71783fe2d6e4bedcb95f_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:6e46d1165993320b994b94a71a89279cab160f5b222b8a74e0d815028abbdd1b_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:2753c02ffa2f5a03c183fb3f4818a2374f8365e1bcaed52f5aa4dbb26c040646_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:903dc961ededd0d53ed3173e083216ad362f545dd9fbc448ee77e9b2a211572f_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:0c686cd1556801582b2093553d20cc5484519605a327401bfd710902a3d76be0_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:f1e3927868af9d970c5f74aa788855d8c2498c07a46d26cab7b36100f3ab099b_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:ee4dbe222bd778ef272ddf3e59dac0844289cc719cd87dea1e24df74f344e097_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:fea4e17c615d460eaf8d4d55dc85d55a3adfe40465bb977adfd29d9f381982af_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:7ce47660456e5a3ab4d0880c2b07e21ac0ddced59e62f1e4e483506b3aa6e888_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f889c64dd327ef718643ad2023d267a9db05e5dd1b05b66ccdc7af16909227ee_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2515839"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the `crypto/tls` package, part of `golang`. A malicious client can exploit this vulnerability by continuously sending KeyUpdate messages to a server. This forces the server to perform indefinite key derivation operations, leading to resource exhaustion and a Denial of Service (DoS) condition.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important denial of service vulnerability in the `golang` `crypto/tls` package. A remote, unauthenticated attacker can exploit this flaw by continuously sending `KeyUpdate` messages during a TLS handshake, forcing the server to perform indefinite key derivation operations. This resource exhaustion can lead to a denial of service for applications and services in Red Hat products that use the affected `crypto/tls` library and are exposed to untrusted network clients.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:5c3201937cedd6d9581b51dc5e2c4afbbb4dc0ac18989f661fb8468935e88f7b_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:9163ed14379a7a06d309a9333ad36459312ce0efb4bfde11cde4e51977b4ddd9_arm64"
        ],
        "known_not_affected": [
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:0429aea51eeb7ffd6367a88cea433710249a2f62ad51a566b363dbb032ed119d_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:2221fdeae6c54896ebae60984f914b8ad6a7900c99308b2fded8ed424c1de855_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:15bb6993f3830cb001fe4671432ed8ce7609f23f83083189c06658fc3eb28f73_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:36e32b3d4958a474f85fb657394672c54fd8acb4f52dd29cd4f24730adace677_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:03323c7a4c2ce6a6eba28632cd19183de5e12b3883d791a88269a0e8b1eb5801_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:968a0ea4f8dcd6fdfb2c13502046ec10946241b7d3a49188e1c207f5db71af96_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:78009fe42a94b562a856296d23c0f7f2c7fa9ce70f867b16687de3909a2537da_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:c049384124f893bc66f0e525b65c62a56c3436b8878644bc5928873c0106aebe_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:1dc7fbf6a8ee7d1c807f25fb3a26812a24a3bbac0efad68c797fd9070f9b6d3f_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:33de12a53b8f8ab35b2db56f5aeb2edee0b9a0738fb33f8aab2e7cffdc281c36_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:bc9d6063d9d042a1f9b2a11c71a773075a216933f5cf5af3e538614c8ff31d1b_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:beb1c01c5869fb1f9de3463980d3ee3aafe2cc50d1f0053e45e1b9adb6c843ba_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12e5096d8fa16c377611d87044c2c132843b82baa14d94f316a8bada9f9a2c82_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:657915791d6c3e0ce8feda6007cce676a003154ebc1e7cc19b810f90e88b523b_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:53accce8f784339f74b2ede47e56a9e8744be3f25f8c87c9a8aa8d817caa0e3e_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:1fad9ff6e53a5d8929431a2929b79a268c8d040a11ea71783fe2d6e4bedcb95f_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:6e46d1165993320b994b94a71a89279cab160f5b222b8a74e0d815028abbdd1b_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:2753c02ffa2f5a03c183fb3f4818a2374f8365e1bcaed52f5aa4dbb26c040646_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:903dc961ededd0d53ed3173e083216ad362f545dd9fbc448ee77e9b2a211572f_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:0c686cd1556801582b2093553d20cc5484519605a327401bfd710902a3d76be0_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:f1e3927868af9d970c5f74aa788855d8c2498c07a46d26cab7b36100f3ab099b_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:ee4dbe222bd778ef272ddf3e59dac0844289cc719cd87dea1e24df74f344e097_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:fea4e17c615d460eaf8d4d55dc85d55a3adfe40465bb977adfd29d9f381982af_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:7ce47660456e5a3ab4d0880c2b07e21ac0ddced59e62f1e4e483506b3aa6e888_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f889c64dd327ef718643ad2023d267a9db05e5dd1b05b66ccdc7af16909227ee_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-56862"
        },
        {
          "category": "external",
          "summary": "RHBZ#2515839",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515839"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-56862",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-56862"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56862",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56862"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/804261",
          "url": "https://go.dev/cl/804261"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/80528",
          "url": "https://go.dev/issue/80528"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/94pEornpRlI",
          "url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-6090",
          "url": "https://pkg.go.dev/vuln/GO-2026-6090"
        }
      ],
      "release_date": "2026-08-13T21:58:53.216000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-13T14:54:49+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
          "product_ids": [
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:5c3201937cedd6d9581b51dc5e2c4afbbb4dc0ac18989f661fb8468935e88f7b_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:9163ed14379a7a06d309a9333ad36459312ce0efb4bfde11cde4e51977b4ddd9_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:82315"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:0429aea51eeb7ffd6367a88cea433710249a2f62ad51a566b363dbb032ed119d_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:2221fdeae6c54896ebae60984f914b8ad6a7900c99308b2fded8ed424c1de855_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:5c3201937cedd6d9581b51dc5e2c4afbbb4dc0ac18989f661fb8468935e88f7b_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:9163ed14379a7a06d309a9333ad36459312ce0efb4bfde11cde4e51977b4ddd9_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:15bb6993f3830cb001fe4671432ed8ce7609f23f83083189c06658fc3eb28f73_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:36e32b3d4958a474f85fb657394672c54fd8acb4f52dd29cd4f24730adace677_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:03323c7a4c2ce6a6eba28632cd19183de5e12b3883d791a88269a0e8b1eb5801_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:968a0ea4f8dcd6fdfb2c13502046ec10946241b7d3a49188e1c207f5db71af96_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:78009fe42a94b562a856296d23c0f7f2c7fa9ce70f867b16687de3909a2537da_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:c049384124f893bc66f0e525b65c62a56c3436b8878644bc5928873c0106aebe_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:1dc7fbf6a8ee7d1c807f25fb3a26812a24a3bbac0efad68c797fd9070f9b6d3f_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:33de12a53b8f8ab35b2db56f5aeb2edee0b9a0738fb33f8aab2e7cffdc281c36_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:bc9d6063d9d042a1f9b2a11c71a773075a216933f5cf5af3e538614c8ff31d1b_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:beb1c01c5869fb1f9de3463980d3ee3aafe2cc50d1f0053e45e1b9adb6c843ba_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12e5096d8fa16c377611d87044c2c132843b82baa14d94f316a8bada9f9a2c82_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:657915791d6c3e0ce8feda6007cce676a003154ebc1e7cc19b810f90e88b523b_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:53accce8f784339f74b2ede47e56a9e8744be3f25f8c87c9a8aa8d817caa0e3e_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:1fad9ff6e53a5d8929431a2929b79a268c8d040a11ea71783fe2d6e4bedcb95f_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:6e46d1165993320b994b94a71a89279cab160f5b222b8a74e0d815028abbdd1b_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:2753c02ffa2f5a03c183fb3f4818a2374f8365e1bcaed52f5aa4dbb26c040646_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:903dc961ededd0d53ed3173e083216ad362f545dd9fbc448ee77e9b2a211572f_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:0c686cd1556801582b2093553d20cc5484519605a327401bfd710902a3d76be0_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:f1e3927868af9d970c5f74aa788855d8c2498c07a46d26cab7b36100f3ab099b_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:ee4dbe222bd778ef272ddf3e59dac0844289cc719cd87dea1e24df74f344e097_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:fea4e17c615d460eaf8d4d55dc85d55a3adfe40465bb977adfd29d9f381982af_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:7ce47660456e5a3ab4d0880c2b07e21ac0ddced59e62f1e4e483506b3aa6e888_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f889c64dd327ef718643ad2023d267a9db05e5dd1b05b66ccdc7af16909227ee_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages"
    },
    {
      "cve": "CVE-2026-73501",
      "cwe": {
        "id": "CWE-306",
        "name": "Missing Authentication for Critical Function"
      },
      "discovery_date": "2026-08-12T21:41:02.246848+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:0429aea51eeb7ffd6367a88cea433710249a2f62ad51a566b363dbb032ed119d_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:2221fdeae6c54896ebae60984f914b8ad6a7900c99308b2fded8ed424c1de855_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:15bb6993f3830cb001fe4671432ed8ce7609f23f83083189c06658fc3eb28f73_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:36e32b3d4958a474f85fb657394672c54fd8acb4f52dd29cd4f24730adace677_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:03323c7a4c2ce6a6eba28632cd19183de5e12b3883d791a88269a0e8b1eb5801_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:968a0ea4f8dcd6fdfb2c13502046ec10946241b7d3a49188e1c207f5db71af96_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:78009fe42a94b562a856296d23c0f7f2c7fa9ce70f867b16687de3909a2537da_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:c049384124f893bc66f0e525b65c62a56c3436b8878644bc5928873c0106aebe_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:1dc7fbf6a8ee7d1c807f25fb3a26812a24a3bbac0efad68c797fd9070f9b6d3f_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:33de12a53b8f8ab35b2db56f5aeb2edee0b9a0738fb33f8aab2e7cffdc281c36_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:bc9d6063d9d042a1f9b2a11c71a773075a216933f5cf5af3e538614c8ff31d1b_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:beb1c01c5869fb1f9de3463980d3ee3aafe2cc50d1f0053e45e1b9adb6c843ba_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12e5096d8fa16c377611d87044c2c132843b82baa14d94f316a8bada9f9a2c82_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:657915791d6c3e0ce8feda6007cce676a003154ebc1e7cc19b810f90e88b523b_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:53accce8f784339f74b2ede47e56a9e8744be3f25f8c87c9a8aa8d817caa0e3e_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:1fad9ff6e53a5d8929431a2929b79a268c8d040a11ea71783fe2d6e4bedcb95f_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:6e46d1165993320b994b94a71a89279cab160f5b222b8a74e0d815028abbdd1b_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:2753c02ffa2f5a03c183fb3f4818a2374f8365e1bcaed52f5aa4dbb26c040646_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:903dc961ededd0d53ed3173e083216ad362f545dd9fbc448ee77e9b2a211572f_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:0c686cd1556801582b2093553d20cc5484519605a327401bfd710902a3d76be0_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:f1e3927868af9d970c5f74aa788855d8c2498c07a46d26cab7b36100f3ab099b_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:ee4dbe222bd778ef272ddf3e59dac0844289cc719cd87dea1e24df74f344e097_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:fea4e17c615d460eaf8d4d55dc85d55a3adfe40465bb977adfd29d9f381982af_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:7ce47660456e5a3ab4d0880c2b07e21ac0ddced59e62f1e4e483506b3aa6e888_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f889c64dd327ef718643ad2023d267a9db05e5dd1b05b66ccdc7af16909227ee_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2515006"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in kin-openapi. This vulnerability allows a remote attacker to bypass authentication checks. Specifically, the system incorrectly handles missing authentication configurations, substituting them with a function that does not verify user credentials. This enables unauthorized access to protected resources that should require proper authentication, compromising the application\u0027s security.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "github.com/getkin/kin-openapi: kin-openapi: kin-openapi: ValidationHandler.Load() Fail-Open Authentication Bypass via NoopAuthenticationFunc Default",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat rates this as Important rather than Critical because exploitation requires the target application to explicitly instantiate and load the ValidationHandler middleware instead of ValidateRequest() or the Validator middleware.  \n\nRHOAI images ship kin-openapi 0.131\u20130.133 but do not invoke ValidationHandler as auth middleware in default roles (KServe, model-registry, mod-arch verified; BFF has no package). Hence, RHOAI is not affected by this vulnerability.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:5c3201937cedd6d9581b51dc5e2c4afbbb4dc0ac18989f661fb8468935e88f7b_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:9163ed14379a7a06d309a9333ad36459312ce0efb4bfde11cde4e51977b4ddd9_arm64"
        ],
        "known_not_affected": [
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:0429aea51eeb7ffd6367a88cea433710249a2f62ad51a566b363dbb032ed119d_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:2221fdeae6c54896ebae60984f914b8ad6a7900c99308b2fded8ed424c1de855_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:15bb6993f3830cb001fe4671432ed8ce7609f23f83083189c06658fc3eb28f73_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:36e32b3d4958a474f85fb657394672c54fd8acb4f52dd29cd4f24730adace677_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:03323c7a4c2ce6a6eba28632cd19183de5e12b3883d791a88269a0e8b1eb5801_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:968a0ea4f8dcd6fdfb2c13502046ec10946241b7d3a49188e1c207f5db71af96_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:78009fe42a94b562a856296d23c0f7f2c7fa9ce70f867b16687de3909a2537da_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:c049384124f893bc66f0e525b65c62a56c3436b8878644bc5928873c0106aebe_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:1dc7fbf6a8ee7d1c807f25fb3a26812a24a3bbac0efad68c797fd9070f9b6d3f_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:33de12a53b8f8ab35b2db56f5aeb2edee0b9a0738fb33f8aab2e7cffdc281c36_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:bc9d6063d9d042a1f9b2a11c71a773075a216933f5cf5af3e538614c8ff31d1b_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:beb1c01c5869fb1f9de3463980d3ee3aafe2cc50d1f0053e45e1b9adb6c843ba_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12e5096d8fa16c377611d87044c2c132843b82baa14d94f316a8bada9f9a2c82_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:657915791d6c3e0ce8feda6007cce676a003154ebc1e7cc19b810f90e88b523b_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:53accce8f784339f74b2ede47e56a9e8744be3f25f8c87c9a8aa8d817caa0e3e_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:1fad9ff6e53a5d8929431a2929b79a268c8d040a11ea71783fe2d6e4bedcb95f_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:6e46d1165993320b994b94a71a89279cab160f5b222b8a74e0d815028abbdd1b_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:2753c02ffa2f5a03c183fb3f4818a2374f8365e1bcaed52f5aa4dbb26c040646_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:903dc961ededd0d53ed3173e083216ad362f545dd9fbc448ee77e9b2a211572f_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:0c686cd1556801582b2093553d20cc5484519605a327401bfd710902a3d76be0_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:f1e3927868af9d970c5f74aa788855d8c2498c07a46d26cab7b36100f3ab099b_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:ee4dbe222bd778ef272ddf3e59dac0844289cc719cd87dea1e24df74f344e097_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:fea4e17c615d460eaf8d4d55dc85d55a3adfe40465bb977adfd29d9f381982af_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:7ce47660456e5a3ab4d0880c2b07e21ac0ddced59e62f1e4e483506b3aa6e888_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f889c64dd327ef718643ad2023d267a9db05e5dd1b05b66ccdc7af16909227ee_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-73501"
        },
        {
          "category": "external",
          "summary": "RHBZ#2515006",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515006"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-73501",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-73501"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-73501",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-73501"
        },
        {
          "category": "external",
          "summary": "https://github.com/getkin/kin-openapi/commit/f0407d53b0730280266f454b755010e7eeb985da",
          "url": "https://github.com/getkin/kin-openapi/commit/f0407d53b0730280266f454b755010e7eeb985da"
        },
        {
          "category": "external",
          "summary": "https://github.com/getkin/kin-openapi/releases/tag/v0.144.0",
          "url": "https://github.com/getkin/kin-openapi/releases/tag/v0.144.0"
        },
        {
          "category": "external",
          "summary": "https://github.com/getkin/kin-openapi/security/advisories/GHSA-r277-6w6q-xmqw",
          "url": "https://github.com/getkin/kin-openapi/security/advisories/GHSA-r277-6w6q-xmqw"
        }
      ],
      "release_date": "2026-08-12T21:23:40.623000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-13T14:54:49+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
          "product_ids": [
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:5c3201937cedd6d9581b51dc5e2c4afbbb4dc0ac18989f661fb8468935e88f7b_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:9163ed14379a7a06d309a9333ad36459312ce0efb4bfde11cde4e51977b4ddd9_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:82315"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 9.1,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:0429aea51eeb7ffd6367a88cea433710249a2f62ad51a566b363dbb032ed119d_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:2221fdeae6c54896ebae60984f914b8ad6a7900c99308b2fded8ed424c1de855_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:5c3201937cedd6d9581b51dc5e2c4afbbb4dc0ac18989f661fb8468935e88f7b_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:9163ed14379a7a06d309a9333ad36459312ce0efb4bfde11cde4e51977b4ddd9_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:15bb6993f3830cb001fe4671432ed8ce7609f23f83083189c06658fc3eb28f73_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:36e32b3d4958a474f85fb657394672c54fd8acb4f52dd29cd4f24730adace677_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:03323c7a4c2ce6a6eba28632cd19183de5e12b3883d791a88269a0e8b1eb5801_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:968a0ea4f8dcd6fdfb2c13502046ec10946241b7d3a49188e1c207f5db71af96_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:78009fe42a94b562a856296d23c0f7f2c7fa9ce70f867b16687de3909a2537da_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:c049384124f893bc66f0e525b65c62a56c3436b8878644bc5928873c0106aebe_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:1dc7fbf6a8ee7d1c807f25fb3a26812a24a3bbac0efad68c797fd9070f9b6d3f_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:33de12a53b8f8ab35b2db56f5aeb2edee0b9a0738fb33f8aab2e7cffdc281c36_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:bc9d6063d9d042a1f9b2a11c71a773075a216933f5cf5af3e538614c8ff31d1b_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:beb1c01c5869fb1f9de3463980d3ee3aafe2cc50d1f0053e45e1b9adb6c843ba_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12e5096d8fa16c377611d87044c2c132843b82baa14d94f316a8bada9f9a2c82_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:657915791d6c3e0ce8feda6007cce676a003154ebc1e7cc19b810f90e88b523b_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:53accce8f784339f74b2ede47e56a9e8744be3f25f8c87c9a8aa8d817caa0e3e_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:1fad9ff6e53a5d8929431a2929b79a268c8d040a11ea71783fe2d6e4bedcb95f_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:6e46d1165993320b994b94a71a89279cab160f5b222b8a74e0d815028abbdd1b_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:2753c02ffa2f5a03c183fb3f4818a2374f8365e1bcaed52f5aa4dbb26c040646_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:903dc961ededd0d53ed3173e083216ad362f545dd9fbc448ee77e9b2a211572f_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:0c686cd1556801582b2093553d20cc5484519605a327401bfd710902a3d76be0_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:f1e3927868af9d970c5f74aa788855d8c2498c07a46d26cab7b36100f3ab099b_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:ee4dbe222bd778ef272ddf3e59dac0844289cc719cd87dea1e24df74f344e097_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:fea4e17c615d460eaf8d4d55dc85d55a3adfe40465bb977adfd29d9f381982af_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:7ce47660456e5a3ab4d0880c2b07e21ac0ddced59e62f1e4e483506b3aa6e888_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f889c64dd327ef718643ad2023d267a9db05e5dd1b05b66ccdc7af16909227ee_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "github.com/getkin/kin-openapi: kin-openapi: kin-openapi: ValidationHandler.Load() Fail-Open Authentication Bypass via NoopAuthenticationFunc Default"
    },
    {
      "cve": "CVE-2026-73502",
      "cwe": {
        "id": "CWE-476",
        "name": "NULL Pointer Dereference"
      },
      "discovery_date": "2026-08-18T18:02:00.185346+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:0429aea51eeb7ffd6367a88cea433710249a2f62ad51a566b363dbb032ed119d_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:2221fdeae6c54896ebae60984f914b8ad6a7900c99308b2fded8ed424c1de855_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:15bb6993f3830cb001fe4671432ed8ce7609f23f83083189c06658fc3eb28f73_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:36e32b3d4958a474f85fb657394672c54fd8acb4f52dd29cd4f24730adace677_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:03323c7a4c2ce6a6eba28632cd19183de5e12b3883d791a88269a0e8b1eb5801_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:968a0ea4f8dcd6fdfb2c13502046ec10946241b7d3a49188e1c207f5db71af96_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:78009fe42a94b562a856296d23c0f7f2c7fa9ce70f867b16687de3909a2537da_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:c049384124f893bc66f0e525b65c62a56c3436b8878644bc5928873c0106aebe_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:1dc7fbf6a8ee7d1c807f25fb3a26812a24a3bbac0efad68c797fd9070f9b6d3f_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:33de12a53b8f8ab35b2db56f5aeb2edee0b9a0738fb33f8aab2e7cffdc281c36_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:bc9d6063d9d042a1f9b2a11c71a773075a216933f5cf5af3e538614c8ff31d1b_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:beb1c01c5869fb1f9de3463980d3ee3aafe2cc50d1f0053e45e1b9adb6c843ba_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12e5096d8fa16c377611d87044c2c132843b82baa14d94f316a8bada9f9a2c82_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:657915791d6c3e0ce8feda6007cce676a003154ebc1e7cc19b810f90e88b523b_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:53accce8f784339f74b2ede47e56a9e8744be3f25f8c87c9a8aa8d817caa0e3e_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:1fad9ff6e53a5d8929431a2929b79a268c8d040a11ea71783fe2d6e4bedcb95f_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:6e46d1165993320b994b94a71a89279cab160f5b222b8a74e0d815028abbdd1b_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:2753c02ffa2f5a03c183fb3f4818a2374f8365e1bcaed52f5aa4dbb26c040646_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:903dc961ededd0d53ed3173e083216ad362f545dd9fbc448ee77e9b2a211572f_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:0c686cd1556801582b2093553d20cc5484519605a327401bfd710902a3d76be0_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:f1e3927868af9d970c5f74aa788855d8c2498c07a46d26cab7b36100f3ab099b_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:ee4dbe222bd778ef272ddf3e59dac0844289cc719cd87dea1e24df74f344e097_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:fea4e17c615d460eaf8d4d55dc85d55a3adfe40465bb977adfd29d9f381982af_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:7ce47660456e5a3ab4d0880c2b07e21ac0ddced59e62f1e4e483506b3aa6e888_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f889c64dd327ef718643ad2023d267a9db05e5dd1b05b66ccdc7af16909227ee_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2518119"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in kin-openapi. An unauthenticated remote attacker can trigger a null-pointer dereference in the `openapi3filter.ValidateRequest` function. This occurs when validating a request against a `content` parameter whose `application/json` media type has no schema. Successful exploitation leads to a denial of service, causing request validation to panic and potentially resulting in an aborted request or a full process crash.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "github.com/getkin/kin-openapi: kin-openapi: Denial of Service via unauthenticated nil-pointer dereference",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat rates this flaw as Moderate severity because in Go services built on the standard net/http server \u2014 which includes all affected Red Hat products \u2014 panics inside HTTP handlers are recovered automatically per-goroutine. Only the individual request fails; the service continues to serve subsequent requests without data loss or state corruption.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:5c3201937cedd6d9581b51dc5e2c4afbbb4dc0ac18989f661fb8468935e88f7b_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:9163ed14379a7a06d309a9333ad36459312ce0efb4bfde11cde4e51977b4ddd9_arm64"
        ],
        "known_not_affected": [
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:0429aea51eeb7ffd6367a88cea433710249a2f62ad51a566b363dbb032ed119d_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:2221fdeae6c54896ebae60984f914b8ad6a7900c99308b2fded8ed424c1de855_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:15bb6993f3830cb001fe4671432ed8ce7609f23f83083189c06658fc3eb28f73_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:36e32b3d4958a474f85fb657394672c54fd8acb4f52dd29cd4f24730adace677_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:03323c7a4c2ce6a6eba28632cd19183de5e12b3883d791a88269a0e8b1eb5801_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:968a0ea4f8dcd6fdfb2c13502046ec10946241b7d3a49188e1c207f5db71af96_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:78009fe42a94b562a856296d23c0f7f2c7fa9ce70f867b16687de3909a2537da_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:c049384124f893bc66f0e525b65c62a56c3436b8878644bc5928873c0106aebe_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:1dc7fbf6a8ee7d1c807f25fb3a26812a24a3bbac0efad68c797fd9070f9b6d3f_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:33de12a53b8f8ab35b2db56f5aeb2edee0b9a0738fb33f8aab2e7cffdc281c36_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:bc9d6063d9d042a1f9b2a11c71a773075a216933f5cf5af3e538614c8ff31d1b_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:beb1c01c5869fb1f9de3463980d3ee3aafe2cc50d1f0053e45e1b9adb6c843ba_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12e5096d8fa16c377611d87044c2c132843b82baa14d94f316a8bada9f9a2c82_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:657915791d6c3e0ce8feda6007cce676a003154ebc1e7cc19b810f90e88b523b_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:53accce8f784339f74b2ede47e56a9e8744be3f25f8c87c9a8aa8d817caa0e3e_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:1fad9ff6e53a5d8929431a2929b79a268c8d040a11ea71783fe2d6e4bedcb95f_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:6e46d1165993320b994b94a71a89279cab160f5b222b8a74e0d815028abbdd1b_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:2753c02ffa2f5a03c183fb3f4818a2374f8365e1bcaed52f5aa4dbb26c040646_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:903dc961ededd0d53ed3173e083216ad362f545dd9fbc448ee77e9b2a211572f_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:0c686cd1556801582b2093553d20cc5484519605a327401bfd710902a3d76be0_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:f1e3927868af9d970c5f74aa788855d8c2498c07a46d26cab7b36100f3ab099b_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:ee4dbe222bd778ef272ddf3e59dac0844289cc719cd87dea1e24df74f344e097_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:fea4e17c615d460eaf8d4d55dc85d55a3adfe40465bb977adfd29d9f381982af_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:7ce47660456e5a3ab4d0880c2b07e21ac0ddced59e62f1e4e483506b3aa6e888_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f889c64dd327ef718643ad2023d267a9db05e5dd1b05b66ccdc7af16909227ee_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-73502"
        },
        {
          "category": "external",
          "summary": "RHBZ#2518119",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2518119"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-73502",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-73502"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-73502",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-73502"
        },
        {
          "category": "external",
          "summary": "https://github.com/getkin/kin-openapi/commit/68ac2affa325514d7d6e731204d6a1edf6bdff64",
          "url": "https://github.com/getkin/kin-openapi/commit/68ac2affa325514d7d6e731204d6a1edf6bdff64"
        },
        {
          "category": "external",
          "summary": "https://github.com/getkin/kin-openapi/releases/tag/v0.144.0",
          "url": "https://github.com/getkin/kin-openapi/releases/tag/v0.144.0"
        },
        {
          "category": "external",
          "summary": "https://github.com/getkin/kin-openapi/security/advisories/GHSA-jpcw-4wr7-c3vq",
          "url": "https://github.com/getkin/kin-openapi/security/advisories/GHSA-jpcw-4wr7-c3vq"
        }
      ],
      "release_date": "2026-08-18T17:58:21.320000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-13T14:54:49+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
          "product_ids": [
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:5c3201937cedd6d9581b51dc5e2c4afbbb4dc0ac18989f661fb8468935e88f7b_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:9163ed14379a7a06d309a9333ad36459312ce0efb4bfde11cde4e51977b4ddd9_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:82315"
        },
        {
          "category": "workaround",
          "details": "As a partial workaround, administrators can audit their OpenAPI specification files and ensure every content parameter declares an explicit schema for each media type, which prevents the nil-dereference code path from being reached.",
          "product_ids": [
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:0429aea51eeb7ffd6367a88cea433710249a2f62ad51a566b363dbb032ed119d_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:2221fdeae6c54896ebae60984f914b8ad6a7900c99308b2fded8ed424c1de855_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:5c3201937cedd6d9581b51dc5e2c4afbbb4dc0ac18989f661fb8468935e88f7b_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:9163ed14379a7a06d309a9333ad36459312ce0efb4bfde11cde4e51977b4ddd9_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:15bb6993f3830cb001fe4671432ed8ce7609f23f83083189c06658fc3eb28f73_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:36e32b3d4958a474f85fb657394672c54fd8acb4f52dd29cd4f24730adace677_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:03323c7a4c2ce6a6eba28632cd19183de5e12b3883d791a88269a0e8b1eb5801_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:968a0ea4f8dcd6fdfb2c13502046ec10946241b7d3a49188e1c207f5db71af96_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:78009fe42a94b562a856296d23c0f7f2c7fa9ce70f867b16687de3909a2537da_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:c049384124f893bc66f0e525b65c62a56c3436b8878644bc5928873c0106aebe_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:1dc7fbf6a8ee7d1c807f25fb3a26812a24a3bbac0efad68c797fd9070f9b6d3f_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:33de12a53b8f8ab35b2db56f5aeb2edee0b9a0738fb33f8aab2e7cffdc281c36_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:bc9d6063d9d042a1f9b2a11c71a773075a216933f5cf5af3e538614c8ff31d1b_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:beb1c01c5869fb1f9de3463980d3ee3aafe2cc50d1f0053e45e1b9adb6c843ba_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12e5096d8fa16c377611d87044c2c132843b82baa14d94f316a8bada9f9a2c82_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:657915791d6c3e0ce8feda6007cce676a003154ebc1e7cc19b810f90e88b523b_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:53accce8f784339f74b2ede47e56a9e8744be3f25f8c87c9a8aa8d817caa0e3e_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:1fad9ff6e53a5d8929431a2929b79a268c8d040a11ea71783fe2d6e4bedcb95f_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:6e46d1165993320b994b94a71a89279cab160f5b222b8a74e0d815028abbdd1b_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:2753c02ffa2f5a03c183fb3f4818a2374f8365e1bcaed52f5aa4dbb26c040646_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:903dc961ededd0d53ed3173e083216ad362f545dd9fbc448ee77e9b2a211572f_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:0c686cd1556801582b2093553d20cc5484519605a327401bfd710902a3d76be0_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:f1e3927868af9d970c5f74aa788855d8c2498c07a46d26cab7b36100f3ab099b_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:ee4dbe222bd778ef272ddf3e59dac0844289cc719cd87dea1e24df74f344e097_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:fea4e17c615d460eaf8d4d55dc85d55a3adfe40465bb977adfd29d9f381982af_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:7ce47660456e5a3ab4d0880c2b07e21ac0ddced59e62f1e4e483506b3aa6e888_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f889c64dd327ef718643ad2023d267a9db05e5dd1b05b66ccdc7af16909227ee_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:0429aea51eeb7ffd6367a88cea433710249a2f62ad51a566b363dbb032ed119d_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:2221fdeae6c54896ebae60984f914b8ad6a7900c99308b2fded8ed424c1de855_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:5c3201937cedd6d9581b51dc5e2c4afbbb4dc0ac18989f661fb8468935e88f7b_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:9163ed14379a7a06d309a9333ad36459312ce0efb4bfde11cde4e51977b4ddd9_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:15bb6993f3830cb001fe4671432ed8ce7609f23f83083189c06658fc3eb28f73_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:36e32b3d4958a474f85fb657394672c54fd8acb4f52dd29cd4f24730adace677_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:03323c7a4c2ce6a6eba28632cd19183de5e12b3883d791a88269a0e8b1eb5801_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:968a0ea4f8dcd6fdfb2c13502046ec10946241b7d3a49188e1c207f5db71af96_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:78009fe42a94b562a856296d23c0f7f2c7fa9ce70f867b16687de3909a2537da_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:c049384124f893bc66f0e525b65c62a56c3436b8878644bc5928873c0106aebe_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:1dc7fbf6a8ee7d1c807f25fb3a26812a24a3bbac0efad68c797fd9070f9b6d3f_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:33de12a53b8f8ab35b2db56f5aeb2edee0b9a0738fb33f8aab2e7cffdc281c36_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:bc9d6063d9d042a1f9b2a11c71a773075a216933f5cf5af3e538614c8ff31d1b_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:beb1c01c5869fb1f9de3463980d3ee3aafe2cc50d1f0053e45e1b9adb6c843ba_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12e5096d8fa16c377611d87044c2c132843b82baa14d94f316a8bada9f9a2c82_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:657915791d6c3e0ce8feda6007cce676a003154ebc1e7cc19b810f90e88b523b_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:53accce8f784339f74b2ede47e56a9e8744be3f25f8c87c9a8aa8d817caa0e3e_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:1fad9ff6e53a5d8929431a2929b79a268c8d040a11ea71783fe2d6e4bedcb95f_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:6e46d1165993320b994b94a71a89279cab160f5b222b8a74e0d815028abbdd1b_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:2753c02ffa2f5a03c183fb3f4818a2374f8365e1bcaed52f5aa4dbb26c040646_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:903dc961ededd0d53ed3173e083216ad362f545dd9fbc448ee77e9b2a211572f_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:0c686cd1556801582b2093553d20cc5484519605a327401bfd710902a3d76be0_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:f1e3927868af9d970c5f74aa788855d8c2498c07a46d26cab7b36100f3ab099b_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:ee4dbe222bd778ef272ddf3e59dac0844289cc719cd87dea1e24df74f344e097_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:fea4e17c615d460eaf8d4d55dc85d55a3adfe40465bb977adfd29d9f381982af_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:7ce47660456e5a3ab4d0880c2b07e21ac0ddced59e62f1e4e483506b3aa6e888_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f889c64dd327ef718643ad2023d267a9db05e5dd1b05b66ccdc7af16909227ee_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "github.com/getkin/kin-openapi: kin-openapi: Denial of Service via unauthenticated nil-pointer dereference"
    },
    {
      "cve": "CVE-2026-76905",
      "cwe": {
        "id": "CWE-476",
        "name": "NULL Pointer Dereference"
      },
      "discovery_date": "2026-08-21T21:01:10.263717+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:0429aea51eeb7ffd6367a88cea433710249a2f62ad51a566b363dbb032ed119d_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:2221fdeae6c54896ebae60984f914b8ad6a7900c99308b2fded8ed424c1de855_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:15bb6993f3830cb001fe4671432ed8ce7609f23f83083189c06658fc3eb28f73_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:36e32b3d4958a474f85fb657394672c54fd8acb4f52dd29cd4f24730adace677_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:03323c7a4c2ce6a6eba28632cd19183de5e12b3883d791a88269a0e8b1eb5801_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:968a0ea4f8dcd6fdfb2c13502046ec10946241b7d3a49188e1c207f5db71af96_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:78009fe42a94b562a856296d23c0f7f2c7fa9ce70f867b16687de3909a2537da_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:c049384124f893bc66f0e525b65c62a56c3436b8878644bc5928873c0106aebe_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:1dc7fbf6a8ee7d1c807f25fb3a26812a24a3bbac0efad68c797fd9070f9b6d3f_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:33de12a53b8f8ab35b2db56f5aeb2edee0b9a0738fb33f8aab2e7cffdc281c36_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:bc9d6063d9d042a1f9b2a11c71a773075a216933f5cf5af3e538614c8ff31d1b_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:beb1c01c5869fb1f9de3463980d3ee3aafe2cc50d1f0053e45e1b9adb6c843ba_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12e5096d8fa16c377611d87044c2c132843b82baa14d94f316a8bada9f9a2c82_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:657915791d6c3e0ce8feda6007cce676a003154ebc1e7cc19b810f90e88b523b_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:53accce8f784339f74b2ede47e56a9e8744be3f25f8c87c9a8aa8d817caa0e3e_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:1fad9ff6e53a5d8929431a2929b79a268c8d040a11ea71783fe2d6e4bedcb95f_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:6e46d1165993320b994b94a71a89279cab160f5b222b8a74e0d815028abbdd1b_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:2753c02ffa2f5a03c183fb3f4818a2374f8365e1bcaed52f5aa4dbb26c040646_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:903dc961ededd0d53ed3173e083216ad362f545dd9fbc448ee77e9b2a211572f_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:0c686cd1556801582b2093553d20cc5484519605a327401bfd710902a3d76be0_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:f1e3927868af9d970c5f74aa788855d8c2498c07a46d26cab7b36100f3ab099b_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:ee4dbe222bd778ef272ddf3e59dac0844289cc719cd87dea1e24df74f344e097_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:fea4e17c615d460eaf8d4d55dc85d55a3adfe40465bb977adfd29d9f381982af_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:7ce47660456e5a3ab4d0880c2b07e21ac0ddced59e62f1e4e483506b3aa6e888_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f889c64dd327ef718643ad2023d267a9db05e5dd1b05b66ccdc7af16909227ee_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2521202"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in kin-openapi, a Go project for handling OpenAPI files. An unauthenticated client can exploit this vulnerability by sending a malformed non-string scalar field in a multipart/form-data request body. This can cause applications that render validation errors through specific error-rendering helpers to panic, leading to a Denial of Service (DoS). JSON request bodies and applications that do not use these error-rendering helpers are not affected.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "github.com/getkin/kin-openapi: kin-openapi: Denial of Service via malformed multipart/form-data body",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat scores A:L because the panic occurs inside an HTTP handler goroutine where Go\u0027s net/http automatically recovers it. Only the individual request fails; the server continues serving. The CNA scores A:H based on the theoretical case of no recovery boundary.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:5c3201937cedd6d9581b51dc5e2c4afbbb4dc0ac18989f661fb8468935e88f7b_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:9163ed14379a7a06d309a9333ad36459312ce0efb4bfde11cde4e51977b4ddd9_arm64"
        ],
        "known_not_affected": [
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:0429aea51eeb7ffd6367a88cea433710249a2f62ad51a566b363dbb032ed119d_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:2221fdeae6c54896ebae60984f914b8ad6a7900c99308b2fded8ed424c1de855_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:15bb6993f3830cb001fe4671432ed8ce7609f23f83083189c06658fc3eb28f73_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:36e32b3d4958a474f85fb657394672c54fd8acb4f52dd29cd4f24730adace677_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:03323c7a4c2ce6a6eba28632cd19183de5e12b3883d791a88269a0e8b1eb5801_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:968a0ea4f8dcd6fdfb2c13502046ec10946241b7d3a49188e1c207f5db71af96_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:78009fe42a94b562a856296d23c0f7f2c7fa9ce70f867b16687de3909a2537da_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:c049384124f893bc66f0e525b65c62a56c3436b8878644bc5928873c0106aebe_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:1dc7fbf6a8ee7d1c807f25fb3a26812a24a3bbac0efad68c797fd9070f9b6d3f_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:33de12a53b8f8ab35b2db56f5aeb2edee0b9a0738fb33f8aab2e7cffdc281c36_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:bc9d6063d9d042a1f9b2a11c71a773075a216933f5cf5af3e538614c8ff31d1b_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:beb1c01c5869fb1f9de3463980d3ee3aafe2cc50d1f0053e45e1b9adb6c843ba_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12e5096d8fa16c377611d87044c2c132843b82baa14d94f316a8bada9f9a2c82_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:657915791d6c3e0ce8feda6007cce676a003154ebc1e7cc19b810f90e88b523b_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:53accce8f784339f74b2ede47e56a9e8744be3f25f8c87c9a8aa8d817caa0e3e_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:1fad9ff6e53a5d8929431a2929b79a268c8d040a11ea71783fe2d6e4bedcb95f_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:6e46d1165993320b994b94a71a89279cab160f5b222b8a74e0d815028abbdd1b_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:2753c02ffa2f5a03c183fb3f4818a2374f8365e1bcaed52f5aa4dbb26c040646_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:903dc961ededd0d53ed3173e083216ad362f545dd9fbc448ee77e9b2a211572f_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:0c686cd1556801582b2093553d20cc5484519605a327401bfd710902a3d76be0_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:f1e3927868af9d970c5f74aa788855d8c2498c07a46d26cab7b36100f3ab099b_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:ee4dbe222bd778ef272ddf3e59dac0844289cc719cd87dea1e24df74f344e097_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:fea4e17c615d460eaf8d4d55dc85d55a3adfe40465bb977adfd29d9f381982af_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:7ce47660456e5a3ab4d0880c2b07e21ac0ddced59e62f1e4e483506b3aa6e888_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f889c64dd327ef718643ad2023d267a9db05e5dd1b05b66ccdc7af16909227ee_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-76905"
        },
        {
          "category": "external",
          "summary": "RHBZ#2521202",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2521202"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-76905",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-76905"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-76905",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-76905"
        },
        {
          "category": "external",
          "summary": "https://github.com/getkin/kin-openapi/commit/1d0a337c9b1570fab283be8a04c8af6e43b9a22c",
          "url": "https://github.com/getkin/kin-openapi/commit/1d0a337c9b1570fab283be8a04c8af6e43b9a22c"
        },
        {
          "category": "external",
          "summary": "https://github.com/getkin/kin-openapi/releases/tag/v0.141.0",
          "url": "https://github.com/getkin/kin-openapi/releases/tag/v0.141.0"
        },
        {
          "category": "external",
          "summary": "https://github.com/getkin/kin-openapi/security/advisories/GHSA-mmfr-pmjx-hw9w",
          "url": "https://github.com/getkin/kin-openapi/security/advisories/GHSA-mmfr-pmjx-hw9w"
        }
      ],
      "release_date": "2026-08-21T20:43:07.066000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-13T14:54:49+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
          "product_ids": [
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:5c3201937cedd6d9581b51dc5e2c4afbbb4dc0ac18989f661fb8468935e88f7b_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:9163ed14379a7a06d309a9333ad36459312ce0efb4bfde11cde4e51977b4ddd9_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:82315"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:0429aea51eeb7ffd6367a88cea433710249a2f62ad51a566b363dbb032ed119d_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:2221fdeae6c54896ebae60984f914b8ad6a7900c99308b2fded8ed424c1de855_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:5c3201937cedd6d9581b51dc5e2c4afbbb4dc0ac18989f661fb8468935e88f7b_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:9163ed14379a7a06d309a9333ad36459312ce0efb4bfde11cde4e51977b4ddd9_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:15bb6993f3830cb001fe4671432ed8ce7609f23f83083189c06658fc3eb28f73_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:36e32b3d4958a474f85fb657394672c54fd8acb4f52dd29cd4f24730adace677_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:03323c7a4c2ce6a6eba28632cd19183de5e12b3883d791a88269a0e8b1eb5801_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:968a0ea4f8dcd6fdfb2c13502046ec10946241b7d3a49188e1c207f5db71af96_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:78009fe42a94b562a856296d23c0f7f2c7fa9ce70f867b16687de3909a2537da_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:c049384124f893bc66f0e525b65c62a56c3436b8878644bc5928873c0106aebe_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:1dc7fbf6a8ee7d1c807f25fb3a26812a24a3bbac0efad68c797fd9070f9b6d3f_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:33de12a53b8f8ab35b2db56f5aeb2edee0b9a0738fb33f8aab2e7cffdc281c36_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:bc9d6063d9d042a1f9b2a11c71a773075a216933f5cf5af3e538614c8ff31d1b_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:beb1c01c5869fb1f9de3463980d3ee3aafe2cc50d1f0053e45e1b9adb6c843ba_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12e5096d8fa16c377611d87044c2c132843b82baa14d94f316a8bada9f9a2c82_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:657915791d6c3e0ce8feda6007cce676a003154ebc1e7cc19b810f90e88b523b_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:53accce8f784339f74b2ede47e56a9e8744be3f25f8c87c9a8aa8d817caa0e3e_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:1fad9ff6e53a5d8929431a2929b79a268c8d040a11ea71783fe2d6e4bedcb95f_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:6e46d1165993320b994b94a71a89279cab160f5b222b8a74e0d815028abbdd1b_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:2753c02ffa2f5a03c183fb3f4818a2374f8365e1bcaed52f5aa4dbb26c040646_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:903dc961ededd0d53ed3173e083216ad362f545dd9fbc448ee77e9b2a211572f_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:0c686cd1556801582b2093553d20cc5484519605a327401bfd710902a3d76be0_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:f1e3927868af9d970c5f74aa788855d8c2498c07a46d26cab7b36100f3ab099b_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:ee4dbe222bd778ef272ddf3e59dac0844289cc719cd87dea1e24df74f344e097_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:fea4e17c615d460eaf8d4d55dc85d55a3adfe40465bb977adfd29d9f381982af_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:7ce47660456e5a3ab4d0880c2b07e21ac0ddced59e62f1e4e483506b3aa6e888_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f889c64dd327ef718643ad2023d267a9db05e5dd1b05b66ccdc7af16909227ee_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "github.com/getkin/kin-openapi: kin-openapi: Denial of Service via malformed multipart/form-data body"
    },
    {
      "cve": "CVE-2026-77354",
      "cwe": {
        "id": "CWE-1285",
        "name": "Improper Validation of Specified Index, Position, or Offset in Input"
      },
      "discovery_date": "2026-08-21T21:01:36.238326+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:0429aea51eeb7ffd6367a88cea433710249a2f62ad51a566b363dbb032ed119d_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:2221fdeae6c54896ebae60984f914b8ad6a7900c99308b2fded8ed424c1de855_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:15bb6993f3830cb001fe4671432ed8ce7609f23f83083189c06658fc3eb28f73_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:36e32b3d4958a474f85fb657394672c54fd8acb4f52dd29cd4f24730adace677_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:03323c7a4c2ce6a6eba28632cd19183de5e12b3883d791a88269a0e8b1eb5801_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:968a0ea4f8dcd6fdfb2c13502046ec10946241b7d3a49188e1c207f5db71af96_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:78009fe42a94b562a856296d23c0f7f2c7fa9ce70f867b16687de3909a2537da_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:c049384124f893bc66f0e525b65c62a56c3436b8878644bc5928873c0106aebe_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:1dc7fbf6a8ee7d1c807f25fb3a26812a24a3bbac0efad68c797fd9070f9b6d3f_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:33de12a53b8f8ab35b2db56f5aeb2edee0b9a0738fb33f8aab2e7cffdc281c36_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:bc9d6063d9d042a1f9b2a11c71a773075a216933f5cf5af3e538614c8ff31d1b_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:beb1c01c5869fb1f9de3463980d3ee3aafe2cc50d1f0053e45e1b9adb6c843ba_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12e5096d8fa16c377611d87044c2c132843b82baa14d94f316a8bada9f9a2c82_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:657915791d6c3e0ce8feda6007cce676a003154ebc1e7cc19b810f90e88b523b_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:53accce8f784339f74b2ede47e56a9e8744be3f25f8c87c9a8aa8d817caa0e3e_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:1fad9ff6e53a5d8929431a2929b79a268c8d040a11ea71783fe2d6e4bedcb95f_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:6e46d1165993320b994b94a71a89279cab160f5b222b8a74e0d815028abbdd1b_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:2753c02ffa2f5a03c183fb3f4818a2374f8365e1bcaed52f5aa4dbb26c040646_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:903dc961ededd0d53ed3173e083216ad362f545dd9fbc448ee77e9b2a211572f_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:0c686cd1556801582b2093553d20cc5484519605a327401bfd710902a3d76be0_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:f1e3927868af9d970c5f74aa788855d8c2498c07a46d26cab7b36100f3ab099b_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:ee4dbe222bd778ef272ddf3e59dac0844289cc719cd87dea1e24df74f344e097_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:fea4e17c615d460eaf8d4d55dc85d55a3adfe40465bb977adfd29d9f381982af_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:7ce47660456e5a3ab4d0880c2b07e21ac0ddced59e62f1e4e483506b3aa6e888_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f889c64dd327ef718643ad2023d267a9db05e5dd1b05b66ccdc7af16909227ee_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2521204"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in kin-openapi, a Go project for handling OpenAPI files. An unauthenticated client can exploit this vulnerability by sending a specially crafted query with a large index in a deepObject query parameter. This forces the application to allocate multi-gigabyte memory, leading to an Out-of-Memory (OOM) error or a restart loop, effectively causing a Denial of Service (DoS).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "github.com/getkin/kin-openapi: kin-openapi: Denial of Service via uncontrolled resource consumption in deepObject query parameter decoding",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat rates this flaw as Important because a small request can exhaust memory and terminate an exposed service. Exploitation requires an application to decode attacker-controlled query parameters using kin-openapi\u2019s deepObject handling with an array-containing schema. Schema limits such as maxItems do not prevent the allocation, and HTTP handler panic recovery does not protect against process termination from memory exhaustion.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:5c3201937cedd6d9581b51dc5e2c4afbbb4dc0ac18989f661fb8468935e88f7b_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:9163ed14379a7a06d309a9333ad36459312ce0efb4bfde11cde4e51977b4ddd9_arm64"
        ],
        "known_not_affected": [
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:0429aea51eeb7ffd6367a88cea433710249a2f62ad51a566b363dbb032ed119d_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:2221fdeae6c54896ebae60984f914b8ad6a7900c99308b2fded8ed424c1de855_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:15bb6993f3830cb001fe4671432ed8ce7609f23f83083189c06658fc3eb28f73_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:36e32b3d4958a474f85fb657394672c54fd8acb4f52dd29cd4f24730adace677_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:03323c7a4c2ce6a6eba28632cd19183de5e12b3883d791a88269a0e8b1eb5801_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:968a0ea4f8dcd6fdfb2c13502046ec10946241b7d3a49188e1c207f5db71af96_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:78009fe42a94b562a856296d23c0f7f2c7fa9ce70f867b16687de3909a2537da_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:c049384124f893bc66f0e525b65c62a56c3436b8878644bc5928873c0106aebe_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:1dc7fbf6a8ee7d1c807f25fb3a26812a24a3bbac0efad68c797fd9070f9b6d3f_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:33de12a53b8f8ab35b2db56f5aeb2edee0b9a0738fb33f8aab2e7cffdc281c36_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:bc9d6063d9d042a1f9b2a11c71a773075a216933f5cf5af3e538614c8ff31d1b_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:beb1c01c5869fb1f9de3463980d3ee3aafe2cc50d1f0053e45e1b9adb6c843ba_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12e5096d8fa16c377611d87044c2c132843b82baa14d94f316a8bada9f9a2c82_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:657915791d6c3e0ce8feda6007cce676a003154ebc1e7cc19b810f90e88b523b_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:53accce8f784339f74b2ede47e56a9e8744be3f25f8c87c9a8aa8d817caa0e3e_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:1fad9ff6e53a5d8929431a2929b79a268c8d040a11ea71783fe2d6e4bedcb95f_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:6e46d1165993320b994b94a71a89279cab160f5b222b8a74e0d815028abbdd1b_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:2753c02ffa2f5a03c183fb3f4818a2374f8365e1bcaed52f5aa4dbb26c040646_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:903dc961ededd0d53ed3173e083216ad362f545dd9fbc448ee77e9b2a211572f_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:0c686cd1556801582b2093553d20cc5484519605a327401bfd710902a3d76be0_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:f1e3927868af9d970c5f74aa788855d8c2498c07a46d26cab7b36100f3ab099b_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:ee4dbe222bd778ef272ddf3e59dac0844289cc719cd87dea1e24df74f344e097_amd64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:fea4e17c615d460eaf8d4d55dc85d55a3adfe40465bb977adfd29d9f381982af_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:7ce47660456e5a3ab4d0880c2b07e21ac0ddced59e62f1e4e483506b3aa6e888_arm64",
          "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f889c64dd327ef718643ad2023d267a9db05e5dd1b05b66ccdc7af16909227ee_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-77354"
        },
        {
          "category": "external",
          "summary": "RHBZ#2521204",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2521204"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-77354",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-77354"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-77354",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-77354"
        },
        {
          "category": "external",
          "summary": "https://github.com/getkin/kin-openapi/commit/1223a0f215d2cf9beb2d9eb9ea2649d001c21388",
          "url": "https://github.com/getkin/kin-openapi/commit/1223a0f215d2cf9beb2d9eb9ea2649d001c21388"
        },
        {
          "category": "external",
          "summary": "https://github.com/getkin/kin-openapi/pull/923",
          "url": "https://github.com/getkin/kin-openapi/pull/923"
        },
        {
          "category": "external",
          "summary": "https://github.com/getkin/kin-openapi/releases/tag/v0.142.0",
          "url": "https://github.com/getkin/kin-openapi/releases/tag/v0.142.0"
        },
        {
          "category": "external",
          "summary": "https://github.com/getkin/kin-openapi/security/advisories/GHSA-xhj3-7xw9-vr34",
          "url": "https://github.com/getkin/kin-openapi/security/advisories/GHSA-xhj3-7xw9-vr34"
        }
      ],
      "release_date": "2026-08-21T20:44:47.792000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-13T14:54:49+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
          "product_ids": [
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:5c3201937cedd6d9581b51dc5e2c4afbbb4dc0ac18989f661fb8468935e88f7b_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:9163ed14379a7a06d309a9333ad36459312ce0efb4bfde11cde4e51977b4ddd9_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:82315"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:0429aea51eeb7ffd6367a88cea433710249a2f62ad51a566b363dbb032ed119d_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:2221fdeae6c54896ebae60984f914b8ad6a7900c99308b2fded8ed424c1de855_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:5c3201937cedd6d9581b51dc5e2c4afbbb4dc0ac18989f661fb8468935e88f7b_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-cli-rhel9@sha256:9163ed14379a7a06d309a9333ad36459312ce0efb4bfde11cde4e51977b4ddd9_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:15bb6993f3830cb001fe4671432ed8ce7609f23f83083189c06658fc3eb28f73_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:36e32b3d4958a474f85fb657394672c54fd8acb4f52dd29cd4f24730adace677_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:03323c7a4c2ce6a6eba28632cd19183de5e12b3883d791a88269a0e8b1eb5801_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:968a0ea4f8dcd6fdfb2c13502046ec10946241b7d3a49188e1c207f5db71af96_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:78009fe42a94b562a856296d23c0f7f2c7fa9ce70f867b16687de3909a2537da_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-go-external-provider-rhel9@sha256:c049384124f893bc66f0e525b65c62a56c3436b8878644bc5928873c0106aebe_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:1dc7fbf6a8ee7d1c807f25fb3a26812a24a3bbac0efad68c797fd9070f9b6d3f_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-hub-rhel9@sha256:33de12a53b8f8ab35b2db56f5aeb2edee0b9a0738fb33f8aab2e7cffdc281c36_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:bc9d6063d9d042a1f9b2a11c71a773075a216933f5cf5af3e538614c8ff31d1b_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:beb1c01c5869fb1f9de3463980d3ee3aafe2cc50d1f0053e45e1b9adb6c843ba_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:12e5096d8fa16c377611d87044c2c132843b82baa14d94f316a8bada9f9a2c82_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:657915791d6c3e0ce8feda6007cce676a003154ebc1e7cc19b810f90e88b523b_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-operator-bundle@sha256:53accce8f784339f74b2ede47e56a9e8744be3f25f8c87c9a8aa8d817caa0e3e_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:1fad9ff6e53a5d8929431a2929b79a268c8d040a11ea71783fe2d6e4bedcb95f_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:6e46d1165993320b994b94a71a89279cab160f5b222b8a74e0d815028abbdd1b_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:2753c02ffa2f5a03c183fb3f4818a2374f8365e1bcaed52f5aa4dbb26c040646_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:903dc961ededd0d53ed3173e083216ad362f545dd9fbc448ee77e9b2a211572f_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:0c686cd1556801582b2093553d20cc5484519605a327401bfd710902a3d76be0_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-rhel9-operator@sha256:f1e3927868af9d970c5f74aa788855d8c2498c07a46d26cab7b36100f3ab099b_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:ee4dbe222bd778ef272ddf3e59dac0844289cc719cd87dea1e24df74f344e097_amd64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-solution-server-rhel9@sha256:fea4e17c615d460eaf8d4d55dc85d55a3adfe40465bb977adfd29d9f381982af_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:7ce47660456e5a3ab4d0880c2b07e21ac0ddced59e62f1e4e483506b3aa6e888_arm64",
            "Red Hat Migration Toolkit for Applications 8.2:registry.redhat.io/mta/mta-ui-rhel9@sha256:f889c64dd327ef718643ad2023d267a9db05e5dd1b05b66ccdc7af16909227ee_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "github.com/getkin/kin-openapi: kin-openapi: Denial of Service via uncontrolled resource consumption in deepObject query parameter decoding"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Drag nodes to arrange them. Double-click a related vulnerability to open it, or a source to visit its link. The Physics button on the left tunes the layout and the simulation; the legend at the bottom left hides or shows nodes by kind and by sighting type.

Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

JSON

Loading timeline…




    Related by attack behaviour

    Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.