{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Critical"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Updated images are now available for Red Hat Ansible Automation Platform 2.2, which include new features, bug fixes, and enhancements for the Red Hat Ansible Automation Portal bootable container image.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Red Hat Ansible Automation Platform 2.2 delivers the Ansible Automation Portal\nas a bootable container (bootc) image. The image provides a self-contained automation portal\nwith pre-configured services, dynamic plugins, and support for air-gapped deployments.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:88200",
        "url": "https://access.redhat.com/errata/RHSA-2026:88200"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-100721",
        "url": "https://access.redhat.com/security/cve/CVE-2026-100721"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-19553",
        "url": "https://access.redhat.com/security/cve/CVE-2026-19553"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-85393",
        "url": "https://access.redhat.com/security/cve/CVE-2026-85393"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-87776",
        "url": "https://access.redhat.com/security/cve/CVE-2026-87776"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-89011",
        "url": "https://access.redhat.com/security/cve/CVE-2026-89011"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-9496",
        "url": "https://access.redhat.com/security/cve/CVE-2026-9496"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/",
        "url": "https://access.redhat.com/security/updates/classification/"
      },
      {
        "category": "external",
        "summary": "https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform",
        "url": "https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_88200.json"
      }
    ],
    "title": "Red Hat Security Advisory: Ansible automation portal Red Hat Enterprise Linux Images",
    "tracking": {
      "current_release_date": "2026-10-23T05:21:48+00:00",
      "generator": {
        "date": "2026-10-23T05:21:48+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.4.2"
        }
      },
      "id": "RHSA-2026:88200",
      "initial_release_date": "2026-10-22T12:19:50+00:00",
      "revision_history": [
        {
          "date": "2026-10-22T12:19:50+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-10-22T12:19:53+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-10-23T05:21:48+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Ansible Automation Platform 2.2",
                "product": {
                  "name": "Red Hat Ansible Automation Platform 2.2",
                  "product_id": "Red Hat Ansible Automation Platform 2.2",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:ansible_portal:2.2::el9"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Ansible Automation Platform"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/ansible-automation-platform/bootc-automation-portal-rhel9@sha256:7d6233bea4613d45dba38fdfba791bb3cb40aa77a8b2192a38d32e6e4b230529_amd64",
                "product": {
                  "name": "registry.redhat.io/ansible-automation-platform/bootc-automation-portal-rhel9@sha256:7d6233bea4613d45dba38fdfba791bb3cb40aa77a8b2192a38d32e6e4b230529_amd64",
                  "product_id": "registry.redhat.io/ansible-automation-platform/bootc-automation-portal-rhel9@sha256:7d6233bea4613d45dba38fdfba791bb3cb40aa77a8b2192a38d32e6e4b230529_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/bootc-automation-portal-rhel9@sha256%3A7d6233bea4613d45dba38fdfba791bb3cb40aa77a8b2192a38d32e6e4b230529?arch=amd64\u0026repository_url=registry.redhat.io/ansible-automation-platform/bootc-automation-portal-rhel9\u0026tag=1792641102"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "amd64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/ansible-automation-platform/bootc-automation-portal-rhel9@sha256:7d6233bea4613d45dba38fdfba791bb3cb40aa77a8b2192a38d32e6e4b230529_amd64 as a component of Red Hat Ansible Automation Platform 2.2",
          "product_id": "Red Hat Ansible Automation Platform 2.2:registry.redhat.io/ansible-automation-platform/bootc-automation-portal-rhel9@sha256:7d6233bea4613d45dba38fdfba791bb3cb40aa77a8b2192a38d32e6e4b230529_amd64"
        },
        "product_reference": "registry.redhat.io/ansible-automation-platform/bootc-automation-portal-rhel9@sha256:7d6233bea4613d45dba38fdfba791bb3cb40aa77a8b2192a38d32e6e4b230529_amd64",
        "relates_to_product_reference": "Red Hat Ansible Automation Platform 2.2"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-9496",
      "cwe": {
        "id": "CWE-1333",
        "name": "Inefficient Regular Expression Complexity"
      },
      "discovery_date": "2026-05-26T07:00:51.002449+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2481394"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the pacote component. A remote attacker can exploit this denial of service (DoS) vulnerability by providing a specially crafted input to the `addGitSha` function. This malicious input triggers excessive CPU consumption due to regex replacement and string manipulation, which can lead to the process stalling or crashing.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "pacote: Pacote: Denial of Service via crafted spec.rawSpec value in addGitSha function",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "A flaw was found in the pacote npm package. Pacote retrieves package metadata and archives from npm registries, Git repositories, and other sources. In affected versions, the addGitSha function strips Git committish information from a package specification using a regular expression that is vulnerable to inefficient backtracking. An attacker who can supply a crafted spec.rawSpec value can cause the Node.js process that calls pacote to consume excessive CPU and become unresponsive, resulting in denial of service.\n\nRed Hat products that include pacote versions from 11.2.7 up to (but not including) 21.5.1 may be affected when Node.js workloads process package specifications through pacote or through npm operations that depend on pacote. The impact is limited to the Node.js process performing that work; host operating systems are not directly affected.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Ansible Automation Platform 2.2:registry.redhat.io/ansible-automation-platform/bootc-automation-portal-rhel9@sha256:7d6233bea4613d45dba38fdfba791bb3cb40aa77a8b2192a38d32e6e4b230529_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-9496"
        },
        {
          "category": "external",
          "summary": "RHBZ#2481394",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481394"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-9496",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-9496"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-9496",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-9496"
        },
        {
          "category": "external",
          "summary": "https://github.com/npm/pacote/blob/9d7459440826ab4cf962ef98d8f3fd0c4d464b5c/lib/util/add-git-sha.js%23L2C1-L13C2",
          "url": "https://github.com/npm/pacote/blob/9d7459440826ab4cf962ef98d8f3fd0c4d464b5c/lib/util/add-git-sha.js%23L2C1-L13C2"
        },
        {
          "category": "external",
          "summary": "https://security.snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-16874025",
          "url": "https://security.snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-16874025"
        },
        {
          "category": "external",
          "summary": "https://security.snyk.io/vuln/SNYK-JS-PACOTE-8225084",
          "url": "https://security.snyk.io/vuln/SNYK-JS-PACOTE-8225084"
        }
      ],
      "release_date": "2026-05-26T05:00:07.813000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-22T12:19:50+00:00",
          "details": "For more about Ansible Portal Installer Bootc, see References links",
          "product_ids": [
            "Red Hat Ansible Automation Platform 2.2:registry.redhat.io/ansible-automation-platform/bootc-automation-portal-rhel9@sha256:7d6233bea4613d45dba38fdfba791bb3cb40aa77a8b2192a38d32e6e4b230529_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:88200"
        },
        {
          "category": "workaround",
          "details": "To mitigate this limit the length of incoming package specifiers (spec.rawSpec) before they reach the resolution service. Enforce hard CPU time limits or timeouts on isolated build jobs and package resolution processes.",
          "product_ids": [
            "Red Hat Ansible Automation Platform 2.2:registry.redhat.io/ansible-automation-platform/bootc-automation-portal-rhel9@sha256:7d6233bea4613d45dba38fdfba791bb3cb40aa77a8b2192a38d32e6e4b230529_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Ansible Automation Platform 2.2:registry.redhat.io/ansible-automation-platform/bootc-automation-portal-rhel9@sha256:7d6233bea4613d45dba38fdfba791bb3cb40aa77a8b2192a38d32e6e4b230529_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "pacote: Pacote: Denial of Service via crafted spec.rawSpec value in addGitSha function"
    },
    {
      "cve": "CVE-2026-19553",
      "cwe": {
        "id": "CWE-297",
        "name": "Improper Validation of Certificate with Host Mismatch"
      },
      "discovery_date": "2026-09-30T16:41:50.203373+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2544127"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Python. When establishing secure connections using the SSLContext.wrap_bio() function with hostname checking enabled, the module fails to validate that a target server hostname is supplied. Because of this missing check, certificate hostname verification is silently skipped rather than triggering an error. A remote man-in-the-middle attacker could exploit this defect to spoof trusted endpoints and intercept or tamper with sensitive encrypted traffic.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "python: python: Certificate verification bypass via missing server_hostname validation in SSLContext.wrap_bio()",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue is rated Important because a man-in-the-middle attacker can cause Python clients using SSLContext.wrap_bio() (or asyncio TLS helpers that call it) to skip certificate hostname verification when check_hostname is enabled but server_hostname is omitted or empty, compromising confidentiality and integrity of the TLS session (C:H/I:H). It is not Critical: exploitation requires an on-path attacker and that specific API misuse (AC:H).",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Ansible Automation Platform 2.2:registry.redhat.io/ansible-automation-platform/bootc-automation-portal-rhel9@sha256:7d6233bea4613d45dba38fdfba791bb3cb40aa77a8b2192a38d32e6e4b230529_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-19553"
        },
        {
          "category": "external",
          "summary": "RHBZ#2544127",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2544127"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-19553",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-19553"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-19553",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-19553"
        },
        {
          "category": "external",
          "summary": "https://github.com/python/cpython/issues/156793",
          "url": "https://github.com/python/cpython/issues/156793"
        },
        {
          "category": "external",
          "summary": "https://github.com/python/cpython/pull/158503",
          "url": "https://github.com/python/cpython/pull/158503"
        },
        {
          "category": "external",
          "summary": "https://mail.python.org/archives/list/security-announce@python.org/thread/QNZRG3YOAMTHDCMVCICXGY6YEFPY2VDL/",
          "url": "https://mail.python.org/archives/list/security-announce@python.org/thread/QNZRG3YOAMTHDCMVCICXGY6YEFPY2VDL/"
        }
      ],
      "release_date": "2026-09-30T16:17:39.368000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-22T12:19:50+00:00",
          "details": "For more about Ansible Portal Installer Bootc, see References links",
          "product_ids": [
            "Red Hat Ansible Automation Platform 2.2:registry.redhat.io/ansible-automation-platform/bootc-automation-portal-rhel9@sha256:7d6233bea4613d45dba38fdfba791bb3cb40aa77a8b2192a38d32e6e4b230529_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:88200"
        },
        {
          "category": "workaround",
          "details": "Restrict Python TLS clients to trusted networks so an on-path attacker cannot intercept sessions. Applications that use SSLContext.wrap_bio(), asyncio.create_connection(), or loop.start_tls() with check_hostname enabled must pass a non-empty server_hostname; hostname verification then proceeds and this flaw is not reachable. Optionally pin expected server certificates so a mismatched host certificate is rejected even if hostname checking is skipped.",
          "product_ids": [
            "Red Hat Ansible Automation Platform 2.2:registry.redhat.io/ansible-automation-platform/bootc-automation-portal-rhel9@sha256:7d6233bea4613d45dba38fdfba791bb3cb40aa77a8b2192a38d32e6e4b230529_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Ansible Automation Platform 2.2:registry.redhat.io/ansible-automation-platform/bootc-automation-portal-rhel9@sha256:7d6233bea4613d45dba38fdfba791bb3cb40aa77a8b2192a38d32e6e4b230529_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "python: python: Certificate verification bypass via missing server_hostname validation in SSLContext.wrap_bio()"
    },
    {
      "cve": "CVE-2026-85393",
      "cwe": {
        "id": "CWE-1284",
        "name": "Improper Validation of Specified Quantity in Input"
      },
      "discovery_date": "2026-09-03T19:02:24.629508+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2528186"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in node-forge. This vulnerability allows a remote attacker to forge valid RSA PKCS#1 v1.5 signatures for arbitrary messages. The flaw occurs because the software fails to properly validate the element count in nested DigestAlgorithm sequences during signature verification. By embedding specially crafted data, an attacker can bypass signature validation, leading to potential integrity compromise.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "node-forge: node-forge: Signature forgery vulnerability in RSA PKCS#1 v1.5 verification",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Ansible Automation Platform 2.2:registry.redhat.io/ansible-automation-platform/bootc-automation-portal-rhel9@sha256:7d6233bea4613d45dba38fdfba791bb3cb40aa77a8b2192a38d32e6e4b230529_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-85393"
        },
        {
          "category": "external",
          "summary": "RHBZ#2528186",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2528186"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-85393",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-85393"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-85393",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-85393"
        },
        {
          "category": "external",
          "summary": "https://github.com/advisories/GHSA-ppp5-5v6c-4jwp",
          "url": "https://github.com/advisories/GHSA-ppp5-5v6c-4jwp"
        },
        {
          "category": "external",
          "summary": "https://github.com/digitalbazaar/forge",
          "url": "https://github.com/digitalbazaar/forge"
        },
        {
          "category": "external",
          "summary": "https://github.com/digitalbazaar/forge/blob/v1.4.0/lib/asn1.js",
          "url": "https://github.com/digitalbazaar/forge/blob/v1.4.0/lib/asn1.js"
        },
        {
          "category": "external",
          "summary": "https://github.com/digitalbazaar/forge/blob/v1.4.0/lib/rsa.js",
          "url": "https://github.com/digitalbazaar/forge/blob/v1.4.0/lib/rsa.js"
        },
        {
          "category": "external",
          "summary": "https://github.com/digitalbazaar/forge/issues/1149",
          "url": "https://github.com/digitalbazaar/forge/issues/1149"
        },
        {
          "category": "external",
          "summary": "https://www.vulncheck.com/advisories/node-forge-through-1.4.0-rsa-pkcs-1-1.5-signature-forgery-via-nested-digestalgorithm-padding",
          "url": "https://www.vulncheck.com/advisories/node-forge-through-1.4.0-rsa-pkcs-1-1.5-signature-forgery-via-nested-digestalgorithm-padding"
        }
      ],
      "release_date": "2026-09-03T18:54:25.878000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-22T12:19:50+00:00",
          "details": "For more about Ansible Portal Installer Bootc, see References links",
          "product_ids": [
            "Red Hat Ansible Automation Platform 2.2:registry.redhat.io/ansible-automation-platform/bootc-automation-portal-rhel9@sha256:7d6233bea4613d45dba38fdfba791bb3cb40aa77a8b2192a38d32e6e4b230529_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:88200"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Ansible Automation Platform 2.2:registry.redhat.io/ansible-automation-platform/bootc-automation-portal-rhel9@sha256:7d6233bea4613d45dba38fdfba791bb3cb40aa77a8b2192a38d32e6e4b230529_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "node-forge: node-forge: Signature forgery vulnerability in RSA PKCS#1 v1.5 verification"
    },
    {
      "cve": "CVE-2026-87776",
      "cwe": {
        "id": "CWE-772",
        "name": "Missing Release of Resource after Effective Lifetime"
      },
      "discovery_date": "2026-09-11T11:40:59.000487+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2531852"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the `compression` Node.js and Express middleware. A remote unauthenticated attacker can exploit this vulnerability by repeatedly initiating and then prematurely aborting connections while compressed responses are being sent. This action prevents the zlib stream, used for compression, from being properly destroyed, leading to a memory leak. Over time, this memory exhaustion can cause the server to crash, resulting in a Denial of Service (DoS).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "compression: compression: Denial of Service via memory leak on premature response close",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat has rated this vulnerability as Important. A remote unauthenticated attacker can cause a denial of service by repeatedly aborting connections while compressed responses are being sent, which can lead to memory exhaustion and server termination.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Ansible Automation Platform 2.2:registry.redhat.io/ansible-automation-platform/bootc-automation-portal-rhel9@sha256:7d6233bea4613d45dba38fdfba791bb3cb40aa77a8b2192a38d32e6e4b230529_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-87776"
        },
        {
          "category": "external",
          "summary": "RHBZ#2531852",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2531852"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-87776",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-87776"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-87776",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-87776"
        },
        {
          "category": "external",
          "summary": "https://cna.openjsf.org/security-advisories.html",
          "url": "https://cna.openjsf.org/security-advisories.html"
        },
        {
          "category": "external",
          "summary": "https://github.com/expressjs/compression/security/advisories/GHSA-vc2v-76pw-4v95",
          "url": "https://github.com/expressjs/compression/security/advisories/GHSA-vc2v-76pw-4v95"
        }
      ],
      "release_date": "2026-09-11T11:24:55.150000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-22T12:19:50+00:00",
          "details": "For more about Ansible Portal Installer Bootc, see References links",
          "product_ids": [
            "Red Hat Ansible Automation Platform 2.2:registry.redhat.io/ansible-automation-platform/bootc-automation-portal-rhel9@sha256:7d6233bea4613d45dba38fdfba791bb3cb40aa77a8b2192a38d32e6e4b230529_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:88200"
        },
        {
          "category": "workaround",
          "details": "Update the compression middleware to version 1.8.2 or later. No supported workaround is currently available if the affected version cannot be updated.",
          "product_ids": [
            "Red Hat Ansible Automation Platform 2.2:registry.redhat.io/ansible-automation-platform/bootc-automation-portal-rhel9@sha256:7d6233bea4613d45dba38fdfba791bb3cb40aa77a8b2192a38d32e6e4b230529_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Ansible Automation Platform 2.2:registry.redhat.io/ansible-automation-platform/bootc-automation-portal-rhel9@sha256:7d6233bea4613d45dba38fdfba791bb3cb40aa77a8b2192a38d32e6e4b230529_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "compression: compression: Denial of Service via memory leak on premature response close"
    },
    {
      "cve": "CVE-2026-89011",
      "cwe": {
        "id": "CWE-915",
        "name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
      },
      "discovery_date": "2026-09-10T20:01:29.938454+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2531620"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in isomorphic-git. This prototype pollution vulnerability in the getRemoteInfo function allows a malicious Git server operator to manipulate object properties by advertising specially crafted reference names. This can reroute network operations through an attacker-controlled proxy, leading to the transmission of user credentials to the attacker.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "isomorphic-git: isomorphic-git: Information disclosure via prototype pollution in getRemoteInfo function.",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Ansible Automation Platform 2.2:registry.redhat.io/ansible-automation-platform/bootc-automation-portal-rhel9@sha256:7d6233bea4613d45dba38fdfba791bb3cb40aa77a8b2192a38d32e6e4b230529_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-89011"
        },
        {
          "category": "external",
          "summary": "RHBZ#2531620",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2531620"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-89011",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-89011"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-89011",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89011"
        },
        {
          "category": "external",
          "summary": "https://github.com/isomorphic-git/isomorphic-git/commit/b3db111885230bac9a648e0a2312c65ca66f76eb",
          "url": "https://github.com/isomorphic-git/isomorphic-git/commit/b3db111885230bac9a648e0a2312c65ca66f76eb"
        },
        {
          "category": "external",
          "summary": "https://github.com/isomorphic-git/isomorphic-git/pull/2426",
          "url": "https://github.com/isomorphic-git/isomorphic-git/pull/2426"
        },
        {
          "category": "external",
          "summary": "https://github.com/isomorphic-git/isomorphic-git/releases/tag/v1.42.0",
          "url": "https://github.com/isomorphic-git/isomorphic-git/releases/tag/v1.42.0"
        },
        {
          "category": "external",
          "summary": "https://github.com/isomorphic-git/isomorphic-git/security/advisories/GHSA-83vg-jxvh-fx76",
          "url": "https://github.com/isomorphic-git/isomorphic-git/security/advisories/GHSA-83vg-jxvh-fx76"
        },
        {
          "category": "external",
          "summary": "https://www.vulncheck.com/advisories/isomorphic-git-prototype-pollution-via-getremoteinfo",
          "url": "https://www.vulncheck.com/advisories/isomorphic-git-prototype-pollution-via-getremoteinfo"
        }
      ],
      "release_date": "2026-09-10T19:56:25.335000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-22T12:19:50+00:00",
          "details": "For more about Ansible Portal Installer Bootc, see References links",
          "product_ids": [
            "Red Hat Ansible Automation Platform 2.2:registry.redhat.io/ansible-automation-platform/bootc-automation-portal-rhel9@sha256:7d6233bea4613d45dba38fdfba791bb3cb40aa77a8b2192a38d32e6e4b230529_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:88200"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Ansible Automation Platform 2.2:registry.redhat.io/ansible-automation-platform/bootc-automation-portal-rhel9@sha256:7d6233bea4613d45dba38fdfba791bb3cb40aa77a8b2192a38d32e6e4b230529_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "isomorphic-git: isomorphic-git: Information disclosure via prototype pollution in getRemoteInfo function."
    },
    {
      "cve": "CVE-2026-100721",
      "cwe": {
        "id": "CWE-863",
        "name": "Incorrect Authorization"
      },
      "discovery_date": "2026-09-27T01:50:52.875418+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2541992"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in vm2. An attacker running untrusted guest code inside the sandbox can escape isolation and achieve arbitrary code execution on the underlying host system. When an application configures a custom external module resolver, vm2 fails to enforce strict file path boundaries when validating permitted module directories. Consequently, guest code can load unauthorized host files that share a path prefix with an approved module, allowing unvetted code to execute directly in the host environment.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "vm2: vm2 before 3.12.2 Authorization Bypass via Custom Resolver",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated Critical because an unauthenticated remote attacker can escape sandbox isolation to execute arbitrary code in the host process context, leading to full compromise of confidentiality, integrity, and availability. Exploitation requires specific architectural preconditions where an application embeds NodeVM configured with host-context execution and a custom external module resolver. Red Hat Developer Hub does not expose this specific sandbox implementation in its configuration so it is not affected.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Ansible Automation Platform 2.2:registry.redhat.io/ansible-automation-platform/bootc-automation-portal-rhel9@sha256:7d6233bea4613d45dba38fdfba791bb3cb40aa77a8b2192a38d32e6e4b230529_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-100721"
        },
        {
          "category": "external",
          "summary": "RHBZ#2541992",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2541992"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-100721",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-100721"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-100721",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100721"
        },
        {
          "category": "external",
          "summary": "https://github.com/patriksimek/vm2/commit/6ac3916da84e060c403e407b6b6318fcc66b0e72",
          "url": "https://github.com/patriksimek/vm2/commit/6ac3916da84e060c403e407b6b6318fcc66b0e72"
        },
        {
          "category": "external",
          "summary": "https://github.com/patriksimek/vm2/commit/91034466bfb7f56b95fd48083ec6ca36d058f164",
          "url": "https://github.com/patriksimek/vm2/commit/91034466bfb7f56b95fd48083ec6ca36d058f164"
        },
        {
          "category": "external",
          "summary": "https://github.com/patriksimek/vm2/commit/ab4ee7d803e8c80155e9eb3672226bddbca4aa9c",
          "url": "https://github.com/patriksimek/vm2/commit/ab4ee7d803e8c80155e9eb3672226bddbca4aa9c"
        },
        {
          "category": "external",
          "summary": "https://github.com/patriksimek/vm2/security/advisories/GHSA-5h3f-q97h-ccvc",
          "url": "https://github.com/patriksimek/vm2/security/advisories/GHSA-5h3f-q97h-ccvc"
        },
        {
          "category": "external",
          "summary": "https://www.vulncheck.com/advisories/vm2-before-3.12.2-authorization-bypass-via-custom-resolver",
          "url": "https://www.vulncheck.com/advisories/vm2-before-3.12.2-authorization-bypass-via-custom-resolver"
        }
      ],
      "release_date": "2026-09-27T01:28:28.596000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-22T12:19:50+00:00",
          "details": "For more about Ansible Portal Installer Bootc, see References links",
          "product_ids": [
            "Red Hat Ansible Automation Platform 2.2:registry.redhat.io/ansible-automation-platform/bootc-automation-portal-rhel9@sha256:7d6233bea4613d45dba38fdfba791bb3cb40aa77a8b2192a38d32e6e4b230529_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:88200"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat Ansible Automation Platform 2.2:registry.redhat.io/ansible-automation-platform/bootc-automation-portal-rhel9@sha256:7d6233bea4613d45dba38fdfba791bb3cb40aa77a8b2192a38d32e6e4b230529_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.0,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Ansible Automation Platform 2.2:registry.redhat.io/ansible-automation-platform/bootc-automation-portal-rhel9@sha256:7d6233bea4613d45dba38fdfba791bb3cb40aa77a8b2192a38d32e6e4b230529_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "vm2: vm2 before 3.12.2 Authorization Bypass via Custom Resolver"
    }
  ]
}