Vulnerability-Lookup

RHSA-2026:88861

Vulnerability from csaf_redhat - Published: 2026-10-23 21:28 - Updated: 2026-10-30 07:05

Summary

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Severity

Critical

Notes

Topic: An update for Red Hat Hardened Images RPMs is now available.

Details: This update includes the following RPMs: ruby3.4: * ruby3.4-3.4.12-33.1.hum1 (aarch64, s390x, x86_64) * ruby3.4-bundled-gems-3.4.12-33.1.hum1 (aarch64, s390x, x86_64) * ruby3.4-default-gems-3.4.12-33.1.hum1 (noarch) * ruby3.4-devel-3.4.12-33.1.hum1 (aarch64, s390x, x86_64) * ruby3.4-doc-3.4.12-33.1.hum1 (noarch) * ruby3.4-libs-3.4.12-33.1.hum1 (aarch64, s390x, x86_64) * rubygem3.4-bigdecimal-3.1.8-33.1.hum1 (aarch64, s390x, x86_64) * rubygem3.4-bundler-2.6.9-33.1.hum1 (noarch) * rubygem3.4-devel-3.6.9-33.1.hum1 (noarch) * rubygem3.4-io-console-0.8.1-33.1.hum1 (aarch64, s390x, x86_64) * rubygem3.4-irb-1.14.3-33.1.hum1 (noarch) * rubygem3.4-json-2.9.1-33.1.hum1 (aarch64, s390x, x86_64) * rubygem3.4-minitest-5.25.4-33.1.hum1 (noarch) * rubygem3.4-power_assert-2.0.5-33.1.hum1 (noarch) * rubygem3.4-psych-5.2.2-33.1.hum1 (aarch64, s390x, x86_64) * rubygem3.4-racc-1.8.1-33.1.hum1 (aarch64, s390x, x86_64) * rubygem3.4-rake-13.2.1-33.1.hum1 (noarch) * rubygem3.4-rbs-3.8.0-33.1.hum1 (aarch64, s390x, x86_64) * rubygem3.4-rdoc-6.14.0-33.1.hum1 (noarch) * rubygem3.4-rexml-3.4.4-33.1.hum1 (noarch) * rubygem3.4-rss-0.3.1-33.1.hum1 (noarch) * rubygem3.4-rubygems-3.6.9-33.1.hum1 (noarch) * rubygem3.4-test-unit-3.6.7-33.1.hum1 (noarch) * rubygem3.4-typeprof-0.30.1-33.1.hum1 (noarch) * ruby3.4-3.4.12-33.1.hum1.src (src)

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2026-89078

A flaw was found in Ruby. When compiling a specially crafted regular expression with the methods Regexp.new, Regexp.union, Regexp.compile, or via a string interpolation such as /#{input}/, a double free can occur when parsing a pattern that fails after an alternation. This double free causes memory corruption, potentially resulting in arbitrary code execution.

9.8 (Critical)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-415 - Double Free

Affected products

Fixed 19 products

Product	Version	Remediation
Unresolved product id: Red Hat Hardened Images:ruby3.4-0:3.4.12-33.1.hum1@aarch64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Hardened Images:ruby3.4-0:3.4.12-33.1.hum1@s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Hardened Images:ruby3.4-0:3.4.12-33.1.hum1@src	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Hardened Images:ruby3.4-0:3.4.12-33.1.hum1@x86_64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Hardened Images:ruby3.4-bundled-gems-0:3.4.12-33.1.hum1@aarch64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Hardened Images:ruby3.4-bundled-gems-0:3.4.12-33.1.hum1@s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Hardened Images:ruby3.4-bundled-gems-0:3.4.12-33.1.hum1@x86_64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Hardened Images:ruby3.4-default-gems-0:3.4.12-33.1.hum1@noarch@public-hummingbird-aarch64-rpms	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Hardened Images:ruby3.4-default-gems-0:3.4.12-33.1.hum1@noarch@public-hummingbird-s390x-rpms	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Hardened Images:ruby3.4-default-gems-0:3.4.12-33.1.hum1@noarch@public-hummingbird-x86_64-rpms	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Hardened Images:ruby3.4-devel-0:3.4.12-33.1.hum1@aarch64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Hardened Images:ruby3.4-devel-0:3.4.12-33.1.hum1@s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Hardened Images:ruby3.4-devel-0:3.4.12-33.1.hum1@x86_64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Hardened Images:ruby3.4-doc-0:3.4.12-33.1.hum1@noarch@public-hummingbird-aarch64-rpms	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Hardened Images:ruby3.4-doc-0:3.4.12-33.1.hum1@noarch@public-hummingbird-s390x-rpms	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Hardened Images:ruby3.4-doc-0:3.4.12-33.1.hum1@noarch@public-hummingbird-x86_64-rpms	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Hardened Images:ruby3.4-libs-0:3.4.12-33.1.hum1@aarch64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Hardened Images:ruby3.4-libs-0:3.4.12-33.1.hum1@s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Hardened Images:ruby3.4-libs-0:3.4.12-33.1.hum1@x86_64	—	Vendor Fix fix Workaround

Known not affected 54 products

Product	Version	Remediation
Unresolved product id: Red Hat Hardened Images:rubygem3.4-bigdecimal-0:3.1.8-33.1.hum1@aarch64	—	Workaround
Unresolved product id: Red Hat Hardened Images:rubygem3.4-bigdecimal-0:3.1.8-33.1.hum1@s390x	—	Workaround
Unresolved product id: Red Hat Hardened Images:rubygem3.4-bigdecimal-0:3.1.8-33.1.hum1@x86_64	—	Workaround
Unresolved product id: Red Hat Hardened Images:rubygem3.4-bundler-0:2.6.9-33.1.hum1@noarch@public-hummingbird-aarch64-rpms	—	Workaround
Unresolved product id: Red Hat Hardened Images:rubygem3.4-bundler-0:2.6.9-33.1.hum1@noarch@public-hummingbird-s390x-rpms	—	Workaround
Unresolved product id: Red Hat Hardened Images:rubygem3.4-bundler-0:2.6.9-33.1.hum1@noarch@public-hummingbird-x86_64-rpms	—	Workaround
Unresolved product id: Red Hat Hardened Images:rubygem3.4-devel-0:3.6.9-33.1.hum1@noarch@public-hummingbird-aarch64-rpms	—	Workaround
Unresolved product id: Red Hat Hardened Images:rubygem3.4-devel-0:3.6.9-33.1.hum1@noarch@public-hummingbird-s390x-rpms	—	Workaround
Unresolved product id: Red Hat Hardened Images:rubygem3.4-devel-0:3.6.9-33.1.hum1@noarch@public-hummingbird-x86_64-rpms	—	Workaround
Unresolved product id: Red Hat Hardened Images:rubygem3.4-io-console-0:0.8.1-33.1.hum1@aarch64	—	Workaround
Unresolved product id: Red Hat Hardened Images:rubygem3.4-io-console-0:0.8.1-33.1.hum1@s390x	—	Workaround
Unresolved product id: Red Hat Hardened Images:rubygem3.4-io-console-0:0.8.1-33.1.hum1@x86_64	—	Workaround
Unresolved product id: Red Hat Hardened Images:rubygem3.4-irb-0:1.14.3-33.1.hum1@noarch@public-hummingbird-aarch64-rpms	—	Workaround
Unresolved product id: Red Hat Hardened Images:rubygem3.4-irb-0:1.14.3-33.1.hum1@noarch@public-hummingbird-s390x-rpms	—	Workaround
Unresolved product id: Red Hat Hardened Images:rubygem3.4-irb-0:1.14.3-33.1.hum1@noarch@public-hummingbird-x86_64-rpms	—	Workaround
Unresolved product id: Red Hat Hardened Images:rubygem3.4-json-0:2.9.1-33.1.hum1@aarch64	—	Workaround
Unresolved product id: Red Hat Hardened Images:rubygem3.4-json-0:2.9.1-33.1.hum1@s390x	—	Workaround
Unresolved product id: Red Hat Hardened Images:rubygem3.4-json-0:2.9.1-33.1.hum1@x86_64	—	Workaround
Unresolved product id: Red Hat Hardened Images:rubygem3.4-minitest-0:5.25.4-33.1.hum1@noarch@public-hummingbird-aarch64-rpms	—	Workaround
Unresolved product id: Red Hat Hardened Images:rubygem3.4-minitest-0:5.25.4-33.1.hum1@noarch@public-hummingbird-s390x-rpms	—	Workaround
Unresolved product id: Red Hat Hardened Images:rubygem3.4-minitest-0:5.25.4-33.1.hum1@noarch@public-hummingbird-x86_64-rpms	—	Workaround
Unresolved product id: Red Hat Hardened Images:rubygem3.4-power_assert-0:2.0.5-33.1.hum1@noarch@public-hummingbird-aarch64-rpms	—	Workaround
Unresolved product id: Red Hat Hardened Images:rubygem3.4-power_assert-0:2.0.5-33.1.hum1@noarch@public-hummingbird-s390x-rpms	—	Workaround
Unresolved product id: Red Hat Hardened Images:rubygem3.4-power_assert-0:2.0.5-33.1.hum1@noarch@public-hummingbird-x86_64-rpms	—	Workaround
Unresolved product id: Red Hat Hardened Images:rubygem3.4-psych-0:5.2.2-33.1.hum1@aarch64	—	Workaround
Unresolved product id: Red Hat Hardened Images:rubygem3.4-psych-0:5.2.2-33.1.hum1@s390x	—	Workaround
Unresolved product id: Red Hat Hardened Images:rubygem3.4-psych-0:5.2.2-33.1.hum1@x86_64	—	Workaround
Unresolved product id: Red Hat Hardened Images:rubygem3.4-racc-0:1.8.1-33.1.hum1@aarch64	—	Workaround
Unresolved product id: Red Hat Hardened Images:rubygem3.4-racc-0:1.8.1-33.1.hum1@s390x	—	Workaround
Unresolved product id: Red Hat Hardened Images:rubygem3.4-racc-0:1.8.1-33.1.hum1@x86_64	—	Workaround
Unresolved product id: Red Hat Hardened Images:rubygem3.4-rake-0:13.2.1-33.1.hum1@noarch@public-hummingbird-aarch64-rpms	—	Workaround
Unresolved product id: Red Hat Hardened Images:rubygem3.4-rake-0:13.2.1-33.1.hum1@noarch@public-hummingbird-s390x-rpms	—	Workaround
Unresolved product id: Red Hat Hardened Images:rubygem3.4-rake-0:13.2.1-33.1.hum1@noarch@public-hummingbird-x86_64-rpms	—	Workaround
Unresolved product id: Red Hat Hardened Images:rubygem3.4-rbs-0:3.8.0-33.1.hum1@aarch64	—	Workaround
Unresolved product id: Red Hat Hardened Images:rubygem3.4-rbs-0:3.8.0-33.1.hum1@s390x	—	Workaround
Unresolved product id: Red Hat Hardened Images:rubygem3.4-rbs-0:3.8.0-33.1.hum1@x86_64	—	Workaround
Unresolved product id: Red Hat Hardened Images:rubygem3.4-rdoc-0:6.14.0-33.1.hum1@noarch@public-hummingbird-aarch64-rpms	—	Workaround
Unresolved product id: Red Hat Hardened Images:rubygem3.4-rdoc-0:6.14.0-33.1.hum1@noarch@public-hummingbird-s390x-rpms	—	Workaround
Unresolved product id: Red Hat Hardened Images:rubygem3.4-rdoc-0:6.14.0-33.1.hum1@noarch@public-hummingbird-x86_64-rpms	—	Workaround
Unresolved product id: Red Hat Hardened Images:rubygem3.4-rexml-0:3.4.4-33.1.hum1@noarch@public-hummingbird-aarch64-rpms	—	Workaround
Unresolved product id: Red Hat Hardened Images:rubygem3.4-rexml-0:3.4.4-33.1.hum1@noarch@public-hummingbird-s390x-rpms	—	Workaround
Unresolved product id: Red Hat Hardened Images:rubygem3.4-rexml-0:3.4.4-33.1.hum1@noarch@public-hummingbird-x86_64-rpms	—	Workaround
Unresolved product id: Red Hat Hardened Images:rubygem3.4-rss-0:0.3.1-33.1.hum1@noarch@public-hummingbird-aarch64-rpms	—	Workaround
Unresolved product id: Red Hat Hardened Images:rubygem3.4-rss-0:0.3.1-33.1.hum1@noarch@public-hummingbird-s390x-rpms	—	Workaround
Unresolved product id: Red Hat Hardened Images:rubygem3.4-rss-0:0.3.1-33.1.hum1@noarch@public-hummingbird-x86_64-rpms	—	Workaround
Unresolved product id: Red Hat Hardened Images:rubygem3.4-rubygems-0:3.6.9-33.1.hum1@noarch@public-hummingbird-aarch64-rpms	—	Workaround
Unresolved product id: Red Hat Hardened Images:rubygem3.4-rubygems-0:3.6.9-33.1.hum1@noarch@public-hummingbird-s390x-rpms	—	Workaround
Unresolved product id: Red Hat Hardened Images:rubygem3.4-rubygems-0:3.6.9-33.1.hum1@noarch@public-hummingbird-x86_64-rpms	—	Workaround
Unresolved product id: Red Hat Hardened Images:rubygem3.4-test-unit-0:3.6.7-33.1.hum1@noarch@public-hummingbird-aarch64-rpms	—	Workaround
Unresolved product id: Red Hat Hardened Images:rubygem3.4-test-unit-0:3.6.7-33.1.hum1@noarch@public-hummingbird-s390x-rpms	—	Workaround
Unresolved product id: Red Hat Hardened Images:rubygem3.4-test-unit-0:3.6.7-33.1.hum1@noarch@public-hummingbird-x86_64-rpms	—	Workaround
Unresolved product id: Red Hat Hardened Images:rubygem3.4-typeprof-0:0.30.1-33.1.hum1@noarch@public-hummingbird-aarch64-rpms	—	Workaround
Unresolved product id: Red Hat Hardened Images:rubygem3.4-typeprof-0:0.30.1-33.1.hum1@noarch@public-hummingbird-s390x-rpms	—	Workaround
Unresolved product id: Red Hat Hardened Images:rubygem3.4-typeprof-0:0.30.1-33.1.hum1@noarch@public-hummingbird-x86_64-rpms	—	Workaround

Threats

Impact Critical

CVE-2026-93577

A flaw was found in Ruby. When compiling a specially crafted regular expression with the methods Regexp.new, Regexp.union, Regexp.compile, or via a string interpolation such as /#{input}/, an integer overflow in the size of the compiled pattern can occur. This integer overflow causes memory corruption, potentially resulting in arbitrary code execution.

9.8 (Critical)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-190 - Integer Overflow or Wraparound

Affected products

Fixed 19 products, the same list as for CVE-2026-89078

Known not affected 54 products, the same list as for CVE-2026-89078

Threats

Impact Critical

CVE-2026-97229

A flaw was found in Ruby. When compiling a specially crafted regular expression with the methods Regexp.new, Regexp.union, Regexp.compile, or via a string interpolation such as /#{input}/, an integer overflow in the size of the compiled pattern can occur. This integer overflow causes memory corruption, potentially resulting in arbitrary code execution.

9.8 (Critical)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-190 - Integer Overflow or Wraparound

Affected products

Fixed 19 products, the same list as for CVE-2026-89078

Known not affected 54 products, the same list as for CVE-2026-89078

Threats

Exploit Status CISA: https://www.cisa.gov/known-exploited-vulnerabilities-catalog

Impact Critical

CVE-2026-110264

A flaw was found in Ruby. When compiling a specially crafted regular expression containing an excessive number of repeats with the methods Regexp.new, Regexp.union, Regexp.compile, or via a string interpolation such as /#{input}/, an integer overflow of internal IDs can occur. This integer overflow causes memory corruption, potentially resulting in arbitrary code execution.

9.8 (Critical)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-190 - Integer Overflow or Wraparound

Affected products

Fixed 19 products, the same list as for CVE-2026-89078

Known not affected 54 products, the same list as for CVE-2026-89078

Threats

Impact Critical

References

38 references

URL	Category
https://access.redhat.com/errata/RHSA-2026:88861	self
https://images.redhat.com/	external
https://access.redhat.com/security/cve/CVE-2026-89078	external
https://access.redhat.com/security/updates/classi…	external
https://access.redhat.com/security/cve/CVE-2026-110264	external
https://access.redhat.com/security/cve/CVE-2026-97229	external
https://access.redhat.com/security/cve/CVE-2026-93577	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2026-89078	self
https://bugzilla.redhat.com/show_bug.cgi?id=2539836	external
https://www.cve.org/CVERecord?id=CVE-2026-89078	external
https://nvd.nist.gov/vuln/detail/CVE-2026-89078	external
https://docs.gitlab.com/releases/patches/patch-re…	external
https://gitlab.com/gitlab-org/gitlab/-/work_items…	external
https://hackerone.com/reports/4019059	external
https://www.ruby-lang.org/en/news/2026/10/23/rege…	external
https://access.redhat.com/security/cve/CVE-2026-93577	self
https://bugzilla.redhat.com/show_bug.cgi?id=2539842	external
https://www.cve.org/CVERecord?id=CVE-2026-93577	external
https://nvd.nist.gov/vuln/detail/CVE-2026-93577	external
https://gitlab.com/gitlab-org/gitlab/-/work_items…	external
https://hackerone.com/reports/3995696	external
https://access.redhat.com/security/cve/CVE-2026-97229	self
https://bugzilla.redhat.com/show_bug.cgi?id=2550153	external
https://www.cve.org/CVERecord?id=CVE-2026-97229	external
https://nvd.nist.gov/vuln/detail/CVE-2026-97229	external
https://docs.gitlab.com/releases/patches/patch-re…	external
https://gitlab.com/gitlab-org/gitlab/-/work_items…	external
https://hackerone.com/reports/4055749	external
https://hackerone.com/reports/4058589	external
https://www.cisa.gov/known-exploited-vulnerabilit…	external
https://access.redhat.com/security/cve/CVE-2026-110264	self
https://bugzilla.redhat.com/show_bug.cgi?id=2558632	external
https://www.cve.org/CVERecord?id=CVE-2026-110264	external
https://nvd.nist.gov/vuln/detail/CVE-2026-110264	external
https://docs.gitlab.com/releases/patches/patch-re…	external
https://gitlab.com/gitlab-org/gitlab/-/work_items…	external
https://hackerone.com/reports/4093475	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Critical"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for Red Hat Hardened Images RPMs is now available.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "This update includes the following RPMs:\n\nruby3.4:\n  * ruby3.4-3.4.12-33.1.hum1 (aarch64, s390x, x86_64)\n  * ruby3.4-bundled-gems-3.4.12-33.1.hum1 (aarch64, s390x, x86_64)\n  * ruby3.4-default-gems-3.4.12-33.1.hum1 (noarch)\n  * ruby3.4-devel-3.4.12-33.1.hum1 (aarch64, s390x, x86_64)\n  * ruby3.4-doc-3.4.12-33.1.hum1 (noarch)\n  * ruby3.4-libs-3.4.12-33.1.hum1 (aarch64, s390x, x86_64)\n  * rubygem3.4-bigdecimal-3.1.8-33.1.hum1 (aarch64, s390x, x86_64)\n  * rubygem3.4-bundler-2.6.9-33.1.hum1 (noarch)\n  * rubygem3.4-devel-3.6.9-33.1.hum1 (noarch)\n  * rubygem3.4-io-console-0.8.1-33.1.hum1 (aarch64, s390x, x86_64)\n  * rubygem3.4-irb-1.14.3-33.1.hum1 (noarch)\n  * rubygem3.4-json-2.9.1-33.1.hum1 (aarch64, s390x, x86_64)\n  * rubygem3.4-minitest-5.25.4-33.1.hum1 (noarch)\n  * rubygem3.4-power_assert-2.0.5-33.1.hum1 (noarch)\n  * rubygem3.4-psych-5.2.2-33.1.hum1 (aarch64, s390x, x86_64)\n  * rubygem3.4-racc-1.8.1-33.1.hum1 (aarch64, s390x, x86_64)\n  * rubygem3.4-rake-13.2.1-33.1.hum1 (noarch)\n  * rubygem3.4-rbs-3.8.0-33.1.hum1 (aarch64, s390x, x86_64)\n  * rubygem3.4-rdoc-6.14.0-33.1.hum1 (noarch)\n  * rubygem3.4-rexml-3.4.4-33.1.hum1 (noarch)\n  * rubygem3.4-rss-0.3.1-33.1.hum1 (noarch)\n  * rubygem3.4-rubygems-3.6.9-33.1.hum1 (noarch)\n  * rubygem3.4-test-unit-3.6.7-33.1.hum1 (noarch)\n  * rubygem3.4-typeprof-0.30.1-33.1.hum1 (noarch)\n  * ruby3.4-3.4.12-33.1.hum1.src (src)",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:88861",
        "url": "https://access.redhat.com/errata/RHSA-2026:88861"
      },
      {
        "category": "external",
        "summary": "https://images.redhat.com/",
        "url": "https://images.redhat.com/"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-89078",
        "url": "https://access.redhat.com/security/cve/CVE-2026-89078"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/",
        "url": "https://access.redhat.com/security/updates/classification/"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-110264",
        "url": "https://access.redhat.com/security/cve/CVE-2026-110264"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-97229",
        "url": "https://access.redhat.com/security/cve/CVE-2026-97229"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-93577",
        "url": "https://access.redhat.com/security/cve/CVE-2026-93577"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_88861.json"
      }
    ],
    "title": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update",
    "tracking": {
      "current_release_date": "2026-10-30T07:05:39+00:00",
      "generator": {
        "date": "2026-10-30T07:05:39+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.4.3"
        }
      },
      "id": "RHSA-2026:88861",
      "initial_release_date": "2026-10-23T21:28:41+00:00",
      "revision_history": [
        {
          "date": "2026-10-23T21:28:41+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-10-27T23:49:21+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-10-30T07:05:39+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Hardened Images",
                "product": {
                  "name": "Red Hat Hardened Images",
                  "product_id": "Red Hat Hardened Images",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:hummingbird:1"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Hardened Images"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "ruby3.4-0:3.4.12-33.1.hum1@aarch64",
                "product": {
                  "name": "ruby3.4-0:3.4.12-33.1.hum1@aarch64",
                  "product_id": "ruby3.4-0:3.4.12-33.1.hum1@aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/ruby3.4@3.4.12-33.1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "ruby3.4-bundled-gems-0:3.4.12-33.1.hum1@aarch64",
                "product": {
                  "name": "ruby3.4-bundled-gems-0:3.4.12-33.1.hum1@aarch64",
                  "product_id": "ruby3.4-bundled-gems-0:3.4.12-33.1.hum1@aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/ruby3.4-bundled-gems@3.4.12-33.1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "ruby3.4-devel-0:3.4.12-33.1.hum1@aarch64",
                "product": {
                  "name": "ruby3.4-devel-0:3.4.12-33.1.hum1@aarch64",
                  "product_id": "ruby3.4-devel-0:3.4.12-33.1.hum1@aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/ruby3.4-devel@3.4.12-33.1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "ruby3.4-libs-0:3.4.12-33.1.hum1@aarch64",
                "product": {
                  "name": "ruby3.4-libs-0:3.4.12-33.1.hum1@aarch64",
                  "product_id": "ruby3.4-libs-0:3.4.12-33.1.hum1@aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/ruby3.4-libs@3.4.12-33.1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rubygem3.4-bigdecimal-0:3.1.8-33.1.hum1@aarch64",
                "product": {
                  "name": "rubygem3.4-bigdecimal-0:3.1.8-33.1.hum1@aarch64",
                  "product_id": "rubygem3.4-bigdecimal-0:3.1.8-33.1.hum1@aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rubygem3.4-bigdecimal@3.1.8-33.1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rubygem3.4-io-console-0:0.8.1-33.1.hum1@aarch64",
                "product": {
                  "name": "rubygem3.4-io-console-0:0.8.1-33.1.hum1@aarch64",
                  "product_id": "rubygem3.4-io-console-0:0.8.1-33.1.hum1@aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rubygem3.4-io-console@0.8.1-33.1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rubygem3.4-json-0:2.9.1-33.1.hum1@aarch64",
                "product": {
                  "name": "rubygem3.4-json-0:2.9.1-33.1.hum1@aarch64",
                  "product_id": "rubygem3.4-json-0:2.9.1-33.1.hum1@aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rubygem3.4-json@2.9.1-33.1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rubygem3.4-psych-0:5.2.2-33.1.hum1@aarch64",
                "product": {
                  "name": "rubygem3.4-psych-0:5.2.2-33.1.hum1@aarch64",
                  "product_id": "rubygem3.4-psych-0:5.2.2-33.1.hum1@aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rubygem3.4-psych@5.2.2-33.1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rubygem3.4-racc-0:1.8.1-33.1.hum1@aarch64",
                "product": {
                  "name": "rubygem3.4-racc-0:1.8.1-33.1.hum1@aarch64",
                  "product_id": "rubygem3.4-racc-0:1.8.1-33.1.hum1@aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rubygem3.4-racc@1.8.1-33.1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rubygem3.4-rbs-0:3.8.0-33.1.hum1@aarch64",
                "product": {
                  "name": "rubygem3.4-rbs-0:3.8.0-33.1.hum1@aarch64",
                  "product_id": "rubygem3.4-rbs-0:3.8.0-33.1.hum1@aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rubygem3.4-rbs@3.8.0-33.1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "ruby3.4-0:3.4.12-33.1.hum1@s390x",
                "product": {
                  "name": "ruby3.4-0:3.4.12-33.1.hum1@s390x",
                  "product_id": "ruby3.4-0:3.4.12-33.1.hum1@s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/ruby3.4@3.4.12-33.1.hum1?arch=s390x\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-s390x-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "ruby3.4-bundled-gems-0:3.4.12-33.1.hum1@s390x",
                "product": {
                  "name": "ruby3.4-bundled-gems-0:3.4.12-33.1.hum1@s390x",
                  "product_id": "ruby3.4-bundled-gems-0:3.4.12-33.1.hum1@s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/ruby3.4-bundled-gems@3.4.12-33.1.hum1?arch=s390x\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-s390x-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "ruby3.4-devel-0:3.4.12-33.1.hum1@s390x",
                "product": {
                  "name": "ruby3.4-devel-0:3.4.12-33.1.hum1@s390x",
                  "product_id": "ruby3.4-devel-0:3.4.12-33.1.hum1@s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/ruby3.4-devel@3.4.12-33.1.hum1?arch=s390x\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-s390x-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "ruby3.4-libs-0:3.4.12-33.1.hum1@s390x",
                "product": {
                  "name": "ruby3.4-libs-0:3.4.12-33.1.hum1@s390x",
                  "product_id": "ruby3.4-libs-0:3.4.12-33.1.hum1@s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/ruby3.4-libs@3.4.12-33.1.hum1?arch=s390x\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-s390x-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rubygem3.4-bigdecimal-0:3.1.8-33.1.hum1@s390x",
                "product": {
                  "name": "rubygem3.4-bigdecimal-0:3.1.8-33.1.hum1@s390x",
                  "product_id": "rubygem3.4-bigdecimal-0:3.1.8-33.1.hum1@s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rubygem3.4-bigdecimal@3.1.8-33.1.hum1?arch=s390x\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-s390x-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rubygem3.4-io-console-0:0.8.1-33.1.hum1@s390x",
                "product": {
                  "name": "rubygem3.4-io-console-0:0.8.1-33.1.hum1@s390x",
                  "product_id": "rubygem3.4-io-console-0:0.8.1-33.1.hum1@s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rubygem3.4-io-console@0.8.1-33.1.hum1?arch=s390x\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-s390x-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rubygem3.4-json-0:2.9.1-33.1.hum1@s390x",
                "product": {
                  "name": "rubygem3.4-json-0:2.9.1-33.1.hum1@s390x",
                  "product_id": "rubygem3.4-json-0:2.9.1-33.1.hum1@s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rubygem3.4-json@2.9.1-33.1.hum1?arch=s390x\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-s390x-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rubygem3.4-psych-0:5.2.2-33.1.hum1@s390x",
                "product": {
                  "name": "rubygem3.4-psych-0:5.2.2-33.1.hum1@s390x",
                  "product_id": "rubygem3.4-psych-0:5.2.2-33.1.hum1@s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rubygem3.4-psych@5.2.2-33.1.hum1?arch=s390x\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-s390x-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rubygem3.4-racc-0:1.8.1-33.1.hum1@s390x",
                "product": {
                  "name": "rubygem3.4-racc-0:1.8.1-33.1.hum1@s390x",
                  "product_id": "rubygem3.4-racc-0:1.8.1-33.1.hum1@s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rubygem3.4-racc@1.8.1-33.1.hum1?arch=s390x\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-s390x-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rubygem3.4-rbs-0:3.8.0-33.1.hum1@s390x",
                "product": {
                  "name": "rubygem3.4-rbs-0:3.8.0-33.1.hum1@s390x",
                  "product_id": "rubygem3.4-rbs-0:3.8.0-33.1.hum1@s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rubygem3.4-rbs@3.8.0-33.1.hum1?arch=s390x\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-s390x-rpms"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "ruby3.4-0:3.4.12-33.1.hum1@src",
                "product": {
                  "name": "ruby3.4-0:3.4.12-33.1.hum1@src",
                  "product_id": "ruby3.4-0:3.4.12-33.1.hum1@src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/ruby3.4@3.4.12-33.1.hum1?arch=src\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-source-rpms"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "ruby3.4-0:3.4.12-33.1.hum1@x86_64",
                "product": {
                  "name": "ruby3.4-0:3.4.12-33.1.hum1@x86_64",
                  "product_id": "ruby3.4-0:3.4.12-33.1.hum1@x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/ruby3.4@3.4.12-33.1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "ruby3.4-bundled-gems-0:3.4.12-33.1.hum1@x86_64",
                "product": {
                  "name": "ruby3.4-bundled-gems-0:3.4.12-33.1.hum1@x86_64",
                  "product_id": "ruby3.4-bundled-gems-0:3.4.12-33.1.hum1@x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/ruby3.4-bundled-gems@3.4.12-33.1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "ruby3.4-devel-0:3.4.12-33.1.hum1@x86_64",
                "product": {
                  "name": "ruby3.4-devel-0:3.4.12-33.1.hum1@x86_64",
                  "product_id": "ruby3.4-devel-0:3.4.12-33.1.hum1@x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/ruby3.4-devel@3.4.12-33.1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "ruby3.4-libs-0:3.4.12-33.1.hum1@x86_64",
                "product": {
                  "name": "ruby3.4-libs-0:3.4.12-33.1.hum1@x86_64",
                  "product_id": "ruby3.4-libs-0:3.4.12-33.1.hum1@x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/ruby3.4-libs@3.4.12-33.1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rubygem3.4-bigdecimal-0:3.1.8-33.1.hum1@x86_64",
                "product": {
                  "name": "rubygem3.4-bigdecimal-0:3.1.8-33.1.hum1@x86_64",
                  "product_id": "rubygem3.4-bigdecimal-0:3.1.8-33.1.hum1@x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rubygem3.4-bigdecimal@3.1.8-33.1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rubygem3.4-io-console-0:0.8.1-33.1.hum1@x86_64",
                "product": {
                  "name": "rubygem3.4-io-console-0:0.8.1-33.1.hum1@x86_64",
                  "product_id": "rubygem3.4-io-console-0:0.8.1-33.1.hum1@x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rubygem3.4-io-console@0.8.1-33.1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rubygem3.4-json-0:2.9.1-33.1.hum1@x86_64",
                "product": {
                  "name": "rubygem3.4-json-0:2.9.1-33.1.hum1@x86_64",
                  "product_id": "rubygem3.4-json-0:2.9.1-33.1.hum1@x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rubygem3.4-json@2.9.1-33.1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rubygem3.4-psych-0:5.2.2-33.1.hum1@x86_64",
                "product": {
                  "name": "rubygem3.4-psych-0:5.2.2-33.1.hum1@x86_64",
                  "product_id": "rubygem3.4-psych-0:5.2.2-33.1.hum1@x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rubygem3.4-psych@5.2.2-33.1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rubygem3.4-racc-0:1.8.1-33.1.hum1@x86_64",
                "product": {
                  "name": "rubygem3.4-racc-0:1.8.1-33.1.hum1@x86_64",
                  "product_id": "rubygem3.4-racc-0:1.8.1-33.1.hum1@x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rubygem3.4-racc@1.8.1-33.1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rubygem3.4-rbs-0:3.8.0-33.1.hum1@x86_64",
                "product": {
                  "name": "rubygem3.4-rbs-0:3.8.0-33.1.hum1@x86_64",
                  "product_id": "rubygem3.4-rbs-0:3.8.0-33.1.hum1@x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rubygem3.4-rbs@3.8.0-33.1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "ruby3.4-default-gems-0:3.4.12-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
                "product": {
                  "name": "ruby3.4-default-gems-0:3.4.12-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
                  "product_id": "ruby3.4-default-gems-0:3.4.12-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/ruby3.4-default-gems@3.4.12-33.1.hum1?arch=noarch\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "ruby3.4-default-gems-0:3.4.12-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
                "product": {
                  "name": "ruby3.4-default-gems-0:3.4.12-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
                  "product_id": "ruby3.4-default-gems-0:3.4.12-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/ruby3.4-default-gems@3.4.12-33.1.hum1?arch=noarch\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-s390x-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "ruby3.4-default-gems-0:3.4.12-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
                "product": {
                  "name": "ruby3.4-default-gems-0:3.4.12-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
                  "product_id": "ruby3.4-default-gems-0:3.4.12-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/ruby3.4-default-gems@3.4.12-33.1.hum1?arch=noarch\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "ruby3.4-doc-0:3.4.12-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
                "product": {
                  "name": "ruby3.4-doc-0:3.4.12-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
                  "product_id": "ruby3.4-doc-0:3.4.12-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/ruby3.4-doc@3.4.12-33.1.hum1?arch=noarch\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "ruby3.4-doc-0:3.4.12-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
                "product": {
                  "name": "ruby3.4-doc-0:3.4.12-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
                  "product_id": "ruby3.4-doc-0:3.4.12-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/ruby3.4-doc@3.4.12-33.1.hum1?arch=noarch\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-s390x-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "ruby3.4-doc-0:3.4.12-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
                "product": {
                  "name": "ruby3.4-doc-0:3.4.12-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
                  "product_id": "ruby3.4-doc-0:3.4.12-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/ruby3.4-doc@3.4.12-33.1.hum1?arch=noarch\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rubygem3.4-bundler-0:2.6.9-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
                "product": {
                  "name": "rubygem3.4-bundler-0:2.6.9-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
                  "product_id": "rubygem3.4-bundler-0:2.6.9-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rubygem3.4-bundler@2.6.9-33.1.hum1?arch=noarch\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rubygem3.4-bundler-0:2.6.9-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
                "product": {
                  "name": "rubygem3.4-bundler-0:2.6.9-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
                  "product_id": "rubygem3.4-bundler-0:2.6.9-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rubygem3.4-bundler@2.6.9-33.1.hum1?arch=noarch\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-s390x-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rubygem3.4-bundler-0:2.6.9-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
                "product": {
                  "name": "rubygem3.4-bundler-0:2.6.9-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
                  "product_id": "rubygem3.4-bundler-0:2.6.9-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rubygem3.4-bundler@2.6.9-33.1.hum1?arch=noarch\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rubygem3.4-devel-0:3.6.9-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
                "product": {
                  "name": "rubygem3.4-devel-0:3.6.9-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
                  "product_id": "rubygem3.4-devel-0:3.6.9-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rubygem3.4-devel@3.6.9-33.1.hum1?arch=noarch\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rubygem3.4-devel-0:3.6.9-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
                "product": {
                  "name": "rubygem3.4-devel-0:3.6.9-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
                  "product_id": "rubygem3.4-devel-0:3.6.9-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rubygem3.4-devel@3.6.9-33.1.hum1?arch=noarch\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-s390x-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rubygem3.4-devel-0:3.6.9-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
                "product": {
                  "name": "rubygem3.4-devel-0:3.6.9-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
                  "product_id": "rubygem3.4-devel-0:3.6.9-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rubygem3.4-devel@3.6.9-33.1.hum1?arch=noarch\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rubygem3.4-irb-0:1.14.3-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
                "product": {
                  "name": "rubygem3.4-irb-0:1.14.3-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
                  "product_id": "rubygem3.4-irb-0:1.14.3-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rubygem3.4-irb@1.14.3-33.1.hum1?arch=noarch\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rubygem3.4-irb-0:1.14.3-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
                "product": {
                  "name": "rubygem3.4-irb-0:1.14.3-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
                  "product_id": "rubygem3.4-irb-0:1.14.3-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rubygem3.4-irb@1.14.3-33.1.hum1?arch=noarch\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-s390x-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rubygem3.4-irb-0:1.14.3-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
                "product": {
                  "name": "rubygem3.4-irb-0:1.14.3-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
                  "product_id": "rubygem3.4-irb-0:1.14.3-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rubygem3.4-irb@1.14.3-33.1.hum1?arch=noarch\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rubygem3.4-minitest-0:5.25.4-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
                "product": {
                  "name": "rubygem3.4-minitest-0:5.25.4-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
                  "product_id": "rubygem3.4-minitest-0:5.25.4-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rubygem3.4-minitest@5.25.4-33.1.hum1?arch=noarch\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rubygem3.4-minitest-0:5.25.4-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
                "product": {
                  "name": "rubygem3.4-minitest-0:5.25.4-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
                  "product_id": "rubygem3.4-minitest-0:5.25.4-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rubygem3.4-minitest@5.25.4-33.1.hum1?arch=noarch\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-s390x-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rubygem3.4-minitest-0:5.25.4-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
                "product": {
                  "name": "rubygem3.4-minitest-0:5.25.4-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
                  "product_id": "rubygem3.4-minitest-0:5.25.4-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rubygem3.4-minitest@5.25.4-33.1.hum1?arch=noarch\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rubygem3.4-power_assert-0:2.0.5-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
                "product": {
                  "name": "rubygem3.4-power_assert-0:2.0.5-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
                  "product_id": "rubygem3.4-power_assert-0:2.0.5-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rubygem3.4-power_assert@2.0.5-33.1.hum1?arch=noarch\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rubygem3.4-power_assert-0:2.0.5-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
                "product": {
                  "name": "rubygem3.4-power_assert-0:2.0.5-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
                  "product_id": "rubygem3.4-power_assert-0:2.0.5-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rubygem3.4-power_assert@2.0.5-33.1.hum1?arch=noarch\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-s390x-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rubygem3.4-power_assert-0:2.0.5-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
                "product": {
                  "name": "rubygem3.4-power_assert-0:2.0.5-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
                  "product_id": "rubygem3.4-power_assert-0:2.0.5-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rubygem3.4-power_assert@2.0.5-33.1.hum1?arch=noarch\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rubygem3.4-rake-0:13.2.1-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
                "product": {
                  "name": "rubygem3.4-rake-0:13.2.1-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
                  "product_id": "rubygem3.4-rake-0:13.2.1-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rubygem3.4-rake@13.2.1-33.1.hum1?arch=noarch\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rubygem3.4-rake-0:13.2.1-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
                "product": {
                  "name": "rubygem3.4-rake-0:13.2.1-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
                  "product_id": "rubygem3.4-rake-0:13.2.1-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rubygem3.4-rake@13.2.1-33.1.hum1?arch=noarch\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-s390x-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rubygem3.4-rake-0:13.2.1-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
                "product": {
                  "name": "rubygem3.4-rake-0:13.2.1-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
                  "product_id": "rubygem3.4-rake-0:13.2.1-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rubygem3.4-rake@13.2.1-33.1.hum1?arch=noarch\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rubygem3.4-rdoc-0:6.14.0-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
                "product": {
                  "name": "rubygem3.4-rdoc-0:6.14.0-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
                  "product_id": "rubygem3.4-rdoc-0:6.14.0-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rubygem3.4-rdoc@6.14.0-33.1.hum1?arch=noarch\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rubygem3.4-rdoc-0:6.14.0-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
                "product": {
                  "name": "rubygem3.4-rdoc-0:6.14.0-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
                  "product_id": "rubygem3.4-rdoc-0:6.14.0-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rubygem3.4-rdoc@6.14.0-33.1.hum1?arch=noarch\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-s390x-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rubygem3.4-rdoc-0:6.14.0-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
                "product": {
                  "name": "rubygem3.4-rdoc-0:6.14.0-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
                  "product_id": "rubygem3.4-rdoc-0:6.14.0-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rubygem3.4-rdoc@6.14.0-33.1.hum1?arch=noarch\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rubygem3.4-rexml-0:3.4.4-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
                "product": {
                  "name": "rubygem3.4-rexml-0:3.4.4-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
                  "product_id": "rubygem3.4-rexml-0:3.4.4-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rubygem3.4-rexml@3.4.4-33.1.hum1?arch=noarch\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rubygem3.4-rexml-0:3.4.4-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
                "product": {
                  "name": "rubygem3.4-rexml-0:3.4.4-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
                  "product_id": "rubygem3.4-rexml-0:3.4.4-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rubygem3.4-rexml@3.4.4-33.1.hum1?arch=noarch\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-s390x-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rubygem3.4-rexml-0:3.4.4-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
                "product": {
                  "name": "rubygem3.4-rexml-0:3.4.4-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
                  "product_id": "rubygem3.4-rexml-0:3.4.4-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rubygem3.4-rexml@3.4.4-33.1.hum1?arch=noarch\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rubygem3.4-rss-0:0.3.1-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
                "product": {
                  "name": "rubygem3.4-rss-0:0.3.1-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
                  "product_id": "rubygem3.4-rss-0:0.3.1-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rubygem3.4-rss@0.3.1-33.1.hum1?arch=noarch\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rubygem3.4-rss-0:0.3.1-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
                "product": {
                  "name": "rubygem3.4-rss-0:0.3.1-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
                  "product_id": "rubygem3.4-rss-0:0.3.1-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rubygem3.4-rss@0.3.1-33.1.hum1?arch=noarch\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-s390x-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rubygem3.4-rss-0:0.3.1-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
                "product": {
                  "name": "rubygem3.4-rss-0:0.3.1-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
                  "product_id": "rubygem3.4-rss-0:0.3.1-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rubygem3.4-rss@0.3.1-33.1.hum1?arch=noarch\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rubygem3.4-rubygems-0:3.6.9-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
                "product": {
                  "name": "rubygem3.4-rubygems-0:3.6.9-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
                  "product_id": "rubygem3.4-rubygems-0:3.6.9-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rubygem3.4-rubygems@3.6.9-33.1.hum1?arch=noarch\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rubygem3.4-rubygems-0:3.6.9-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
                "product": {
                  "name": "rubygem3.4-rubygems-0:3.6.9-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
                  "product_id": "rubygem3.4-rubygems-0:3.6.9-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rubygem3.4-rubygems@3.6.9-33.1.hum1?arch=noarch\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-s390x-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rubygem3.4-rubygems-0:3.6.9-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
                "product": {
                  "name": "rubygem3.4-rubygems-0:3.6.9-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
                  "product_id": "rubygem3.4-rubygems-0:3.6.9-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rubygem3.4-rubygems@3.6.9-33.1.hum1?arch=noarch\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rubygem3.4-test-unit-0:3.6.7-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
                "product": {
                  "name": "rubygem3.4-test-unit-0:3.6.7-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
                  "product_id": "rubygem3.4-test-unit-0:3.6.7-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rubygem3.4-test-unit@3.6.7-33.1.hum1?arch=noarch\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rubygem3.4-test-unit-0:3.6.7-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
                "product": {
                  "name": "rubygem3.4-test-unit-0:3.6.7-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
                  "product_id": "rubygem3.4-test-unit-0:3.6.7-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rubygem3.4-test-unit@3.6.7-33.1.hum1?arch=noarch\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-s390x-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rubygem3.4-test-unit-0:3.6.7-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
                "product": {
                  "name": "rubygem3.4-test-unit-0:3.6.7-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
                  "product_id": "rubygem3.4-test-unit-0:3.6.7-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rubygem3.4-test-unit@3.6.7-33.1.hum1?arch=noarch\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rubygem3.4-typeprof-0:0.30.1-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
                "product": {
                  "name": "rubygem3.4-typeprof-0:0.30.1-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
                  "product_id": "rubygem3.4-typeprof-0:0.30.1-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rubygem3.4-typeprof@0.30.1-33.1.hum1?arch=noarch\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rubygem3.4-typeprof-0:0.30.1-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
                "product": {
                  "name": "rubygem3.4-typeprof-0:0.30.1-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
                  "product_id": "rubygem3.4-typeprof-0:0.30.1-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rubygem3.4-typeprof@0.30.1-33.1.hum1?arch=noarch\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-s390x-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rubygem3.4-typeprof-0:0.30.1-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
                "product": {
                  "name": "rubygem3.4-typeprof-0:0.30.1-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
                  "product_id": "rubygem3.4-typeprof-0:0.30.1-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rubygem3.4-typeprof@0.30.1-33.1.hum1?arch=noarch\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ruby3.4-0:3.4.12-33.1.hum1@aarch64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:ruby3.4-0:3.4.12-33.1.hum1@aarch64"
        },
        "product_reference": "ruby3.4-0:3.4.12-33.1.hum1@aarch64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ruby3.4-0:3.4.12-33.1.hum1@s390x as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:ruby3.4-0:3.4.12-33.1.hum1@s390x"
        },
        "product_reference": "ruby3.4-0:3.4.12-33.1.hum1@s390x",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ruby3.4-0:3.4.12-33.1.hum1@src as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:ruby3.4-0:3.4.12-33.1.hum1@src"
        },
        "product_reference": "ruby3.4-0:3.4.12-33.1.hum1@src",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ruby3.4-0:3.4.12-33.1.hum1@x86_64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:ruby3.4-0:3.4.12-33.1.hum1@x86_64"
        },
        "product_reference": "ruby3.4-0:3.4.12-33.1.hum1@x86_64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ruby3.4-bundled-gems-0:3.4.12-33.1.hum1@aarch64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:ruby3.4-bundled-gems-0:3.4.12-33.1.hum1@aarch64"
        },
        "product_reference": "ruby3.4-bundled-gems-0:3.4.12-33.1.hum1@aarch64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ruby3.4-bundled-gems-0:3.4.12-33.1.hum1@s390x as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:ruby3.4-bundled-gems-0:3.4.12-33.1.hum1@s390x"
        },
        "product_reference": "ruby3.4-bundled-gems-0:3.4.12-33.1.hum1@s390x",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ruby3.4-bundled-gems-0:3.4.12-33.1.hum1@x86_64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:ruby3.4-bundled-gems-0:3.4.12-33.1.hum1@x86_64"
        },
        "product_reference": "ruby3.4-bundled-gems-0:3.4.12-33.1.hum1@x86_64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ruby3.4-default-gems-0:3.4.12-33.1.hum1@noarch@public-hummingbird-aarch64-rpms as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:ruby3.4-default-gems-0:3.4.12-33.1.hum1@noarch@public-hummingbird-aarch64-rpms"
        },
        "product_reference": "ruby3.4-default-gems-0:3.4.12-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ruby3.4-default-gems-0:3.4.12-33.1.hum1@noarch@public-hummingbird-s390x-rpms as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:ruby3.4-default-gems-0:3.4.12-33.1.hum1@noarch@public-hummingbird-s390x-rpms"
        },
        "product_reference": "ruby3.4-default-gems-0:3.4.12-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ruby3.4-default-gems-0:3.4.12-33.1.hum1@noarch@public-hummingbird-x86_64-rpms as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:ruby3.4-default-gems-0:3.4.12-33.1.hum1@noarch@public-hummingbird-x86_64-rpms"
        },
        "product_reference": "ruby3.4-default-gems-0:3.4.12-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ruby3.4-devel-0:3.4.12-33.1.hum1@aarch64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:ruby3.4-devel-0:3.4.12-33.1.hum1@aarch64"
        },
        "product_reference": "ruby3.4-devel-0:3.4.12-33.1.hum1@aarch64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ruby3.4-devel-0:3.4.12-33.1.hum1@s390x as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:ruby3.4-devel-0:3.4.12-33.1.hum1@s390x"
        },
        "product_reference": "ruby3.4-devel-0:3.4.12-33.1.hum1@s390x",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ruby3.4-devel-0:3.4.12-33.1.hum1@x86_64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:ruby3.4-devel-0:3.4.12-33.1.hum1@x86_64"
        },
        "product_reference": "ruby3.4-devel-0:3.4.12-33.1.hum1@x86_64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ruby3.4-doc-0:3.4.12-33.1.hum1@noarch@public-hummingbird-aarch64-rpms as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:ruby3.4-doc-0:3.4.12-33.1.hum1@noarch@public-hummingbird-aarch64-rpms"
        },
        "product_reference": "ruby3.4-doc-0:3.4.12-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ruby3.4-doc-0:3.4.12-33.1.hum1@noarch@public-hummingbird-s390x-rpms as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:ruby3.4-doc-0:3.4.12-33.1.hum1@noarch@public-hummingbird-s390x-rpms"
        },
        "product_reference": "ruby3.4-doc-0:3.4.12-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ruby3.4-doc-0:3.4.12-33.1.hum1@noarch@public-hummingbird-x86_64-rpms as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:ruby3.4-doc-0:3.4.12-33.1.hum1@noarch@public-hummingbird-x86_64-rpms"
        },
        "product_reference": "ruby3.4-doc-0:3.4.12-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ruby3.4-libs-0:3.4.12-33.1.hum1@aarch64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:ruby3.4-libs-0:3.4.12-33.1.hum1@aarch64"
        },
        "product_reference": "ruby3.4-libs-0:3.4.12-33.1.hum1@aarch64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ruby3.4-libs-0:3.4.12-33.1.hum1@s390x as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:ruby3.4-libs-0:3.4.12-33.1.hum1@s390x"
        },
        "product_reference": "ruby3.4-libs-0:3.4.12-33.1.hum1@s390x",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ruby3.4-libs-0:3.4.12-33.1.hum1@x86_64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:ruby3.4-libs-0:3.4.12-33.1.hum1@x86_64"
        },
        "product_reference": "ruby3.4-libs-0:3.4.12-33.1.hum1@x86_64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rubygem3.4-bigdecimal-0:3.1.8-33.1.hum1@aarch64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:rubygem3.4-bigdecimal-0:3.1.8-33.1.hum1@aarch64"
        },
        "product_reference": "rubygem3.4-bigdecimal-0:3.1.8-33.1.hum1@aarch64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rubygem3.4-bigdecimal-0:3.1.8-33.1.hum1@s390x as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:rubygem3.4-bigdecimal-0:3.1.8-33.1.hum1@s390x"
        },
        "product_reference": "rubygem3.4-bigdecimal-0:3.1.8-33.1.hum1@s390x",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rubygem3.4-bigdecimal-0:3.1.8-33.1.hum1@x86_64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:rubygem3.4-bigdecimal-0:3.1.8-33.1.hum1@x86_64"
        },
        "product_reference": "rubygem3.4-bigdecimal-0:3.1.8-33.1.hum1@x86_64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rubygem3.4-bundler-0:2.6.9-33.1.hum1@noarch@public-hummingbird-aarch64-rpms as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:rubygem3.4-bundler-0:2.6.9-33.1.hum1@noarch@public-hummingbird-aarch64-rpms"
        },
        "product_reference": "rubygem3.4-bundler-0:2.6.9-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rubygem3.4-bundler-0:2.6.9-33.1.hum1@noarch@public-hummingbird-s390x-rpms as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:rubygem3.4-bundler-0:2.6.9-33.1.hum1@noarch@public-hummingbird-s390x-rpms"
        },
        "product_reference": "rubygem3.4-bundler-0:2.6.9-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rubygem3.4-bundler-0:2.6.9-33.1.hum1@noarch@public-hummingbird-x86_64-rpms as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:rubygem3.4-bundler-0:2.6.9-33.1.hum1@noarch@public-hummingbird-x86_64-rpms"
        },
        "product_reference": "rubygem3.4-bundler-0:2.6.9-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rubygem3.4-devel-0:3.6.9-33.1.hum1@noarch@public-hummingbird-aarch64-rpms as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:rubygem3.4-devel-0:3.6.9-33.1.hum1@noarch@public-hummingbird-aarch64-rpms"
        },
        "product_reference": "rubygem3.4-devel-0:3.6.9-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rubygem3.4-devel-0:3.6.9-33.1.hum1@noarch@public-hummingbird-s390x-rpms as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:rubygem3.4-devel-0:3.6.9-33.1.hum1@noarch@public-hummingbird-s390x-rpms"
        },
        "product_reference": "rubygem3.4-devel-0:3.6.9-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rubygem3.4-devel-0:3.6.9-33.1.hum1@noarch@public-hummingbird-x86_64-rpms as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:rubygem3.4-devel-0:3.6.9-33.1.hum1@noarch@public-hummingbird-x86_64-rpms"
        },
        "product_reference": "rubygem3.4-devel-0:3.6.9-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rubygem3.4-io-console-0:0.8.1-33.1.hum1@aarch64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:rubygem3.4-io-console-0:0.8.1-33.1.hum1@aarch64"
        },
        "product_reference": "rubygem3.4-io-console-0:0.8.1-33.1.hum1@aarch64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rubygem3.4-io-console-0:0.8.1-33.1.hum1@s390x as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:rubygem3.4-io-console-0:0.8.1-33.1.hum1@s390x"
        },
        "product_reference": "rubygem3.4-io-console-0:0.8.1-33.1.hum1@s390x",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rubygem3.4-io-console-0:0.8.1-33.1.hum1@x86_64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:rubygem3.4-io-console-0:0.8.1-33.1.hum1@x86_64"
        },
        "product_reference": "rubygem3.4-io-console-0:0.8.1-33.1.hum1@x86_64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rubygem3.4-irb-0:1.14.3-33.1.hum1@noarch@public-hummingbird-aarch64-rpms as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:rubygem3.4-irb-0:1.14.3-33.1.hum1@noarch@public-hummingbird-aarch64-rpms"
        },
        "product_reference": "rubygem3.4-irb-0:1.14.3-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rubygem3.4-irb-0:1.14.3-33.1.hum1@noarch@public-hummingbird-s390x-rpms as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:rubygem3.4-irb-0:1.14.3-33.1.hum1@noarch@public-hummingbird-s390x-rpms"
        },
        "product_reference": "rubygem3.4-irb-0:1.14.3-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rubygem3.4-irb-0:1.14.3-33.1.hum1@noarch@public-hummingbird-x86_64-rpms as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:rubygem3.4-irb-0:1.14.3-33.1.hum1@noarch@public-hummingbird-x86_64-rpms"
        },
        "product_reference": "rubygem3.4-irb-0:1.14.3-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rubygem3.4-json-0:2.9.1-33.1.hum1@aarch64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:rubygem3.4-json-0:2.9.1-33.1.hum1@aarch64"
        },
        "product_reference": "rubygem3.4-json-0:2.9.1-33.1.hum1@aarch64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rubygem3.4-json-0:2.9.1-33.1.hum1@s390x as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:rubygem3.4-json-0:2.9.1-33.1.hum1@s390x"
        },
        "product_reference": "rubygem3.4-json-0:2.9.1-33.1.hum1@s390x",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rubygem3.4-json-0:2.9.1-33.1.hum1@x86_64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:rubygem3.4-json-0:2.9.1-33.1.hum1@x86_64"
        },
        "product_reference": "rubygem3.4-json-0:2.9.1-33.1.hum1@x86_64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rubygem3.4-minitest-0:5.25.4-33.1.hum1@noarch@public-hummingbird-aarch64-rpms as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:rubygem3.4-minitest-0:5.25.4-33.1.hum1@noarch@public-hummingbird-aarch64-rpms"
        },
        "product_reference": "rubygem3.4-minitest-0:5.25.4-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rubygem3.4-minitest-0:5.25.4-33.1.hum1@noarch@public-hummingbird-s390x-rpms as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:rubygem3.4-minitest-0:5.25.4-33.1.hum1@noarch@public-hummingbird-s390x-rpms"
        },
        "product_reference": "rubygem3.4-minitest-0:5.25.4-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rubygem3.4-minitest-0:5.25.4-33.1.hum1@noarch@public-hummingbird-x86_64-rpms as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:rubygem3.4-minitest-0:5.25.4-33.1.hum1@noarch@public-hummingbird-x86_64-rpms"
        },
        "product_reference": "rubygem3.4-minitest-0:5.25.4-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rubygem3.4-power_assert-0:2.0.5-33.1.hum1@noarch@public-hummingbird-aarch64-rpms as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:rubygem3.4-power_assert-0:2.0.5-33.1.hum1@noarch@public-hummingbird-aarch64-rpms"
        },
        "product_reference": "rubygem3.4-power_assert-0:2.0.5-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rubygem3.4-power_assert-0:2.0.5-33.1.hum1@noarch@public-hummingbird-s390x-rpms as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:rubygem3.4-power_assert-0:2.0.5-33.1.hum1@noarch@public-hummingbird-s390x-rpms"
        },
        "product_reference": "rubygem3.4-power_assert-0:2.0.5-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rubygem3.4-power_assert-0:2.0.5-33.1.hum1@noarch@public-hummingbird-x86_64-rpms as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:rubygem3.4-power_assert-0:2.0.5-33.1.hum1@noarch@public-hummingbird-x86_64-rpms"
        },
        "product_reference": "rubygem3.4-power_assert-0:2.0.5-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rubygem3.4-psych-0:5.2.2-33.1.hum1@aarch64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:rubygem3.4-psych-0:5.2.2-33.1.hum1@aarch64"
        },
        "product_reference": "rubygem3.4-psych-0:5.2.2-33.1.hum1@aarch64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rubygem3.4-psych-0:5.2.2-33.1.hum1@s390x as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:rubygem3.4-psych-0:5.2.2-33.1.hum1@s390x"
        },
        "product_reference": "rubygem3.4-psych-0:5.2.2-33.1.hum1@s390x",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rubygem3.4-psych-0:5.2.2-33.1.hum1@x86_64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:rubygem3.4-psych-0:5.2.2-33.1.hum1@x86_64"
        },
        "product_reference": "rubygem3.4-psych-0:5.2.2-33.1.hum1@x86_64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rubygem3.4-racc-0:1.8.1-33.1.hum1@aarch64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:rubygem3.4-racc-0:1.8.1-33.1.hum1@aarch64"
        },
        "product_reference": "rubygem3.4-racc-0:1.8.1-33.1.hum1@aarch64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rubygem3.4-racc-0:1.8.1-33.1.hum1@s390x as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:rubygem3.4-racc-0:1.8.1-33.1.hum1@s390x"
        },
        "product_reference": "rubygem3.4-racc-0:1.8.1-33.1.hum1@s390x",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rubygem3.4-racc-0:1.8.1-33.1.hum1@x86_64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:rubygem3.4-racc-0:1.8.1-33.1.hum1@x86_64"
        },
        "product_reference": "rubygem3.4-racc-0:1.8.1-33.1.hum1@x86_64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rubygem3.4-rake-0:13.2.1-33.1.hum1@noarch@public-hummingbird-aarch64-rpms as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:rubygem3.4-rake-0:13.2.1-33.1.hum1@noarch@public-hummingbird-aarch64-rpms"
        },
        "product_reference": "rubygem3.4-rake-0:13.2.1-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rubygem3.4-rake-0:13.2.1-33.1.hum1@noarch@public-hummingbird-s390x-rpms as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:rubygem3.4-rake-0:13.2.1-33.1.hum1@noarch@public-hummingbird-s390x-rpms"
        },
        "product_reference": "rubygem3.4-rake-0:13.2.1-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rubygem3.4-rake-0:13.2.1-33.1.hum1@noarch@public-hummingbird-x86_64-rpms as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:rubygem3.4-rake-0:13.2.1-33.1.hum1@noarch@public-hummingbird-x86_64-rpms"
        },
        "product_reference": "rubygem3.4-rake-0:13.2.1-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rubygem3.4-rbs-0:3.8.0-33.1.hum1@aarch64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:rubygem3.4-rbs-0:3.8.0-33.1.hum1@aarch64"
        },
        "product_reference": "rubygem3.4-rbs-0:3.8.0-33.1.hum1@aarch64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rubygem3.4-rbs-0:3.8.0-33.1.hum1@s390x as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:rubygem3.4-rbs-0:3.8.0-33.1.hum1@s390x"
        },
        "product_reference": "rubygem3.4-rbs-0:3.8.0-33.1.hum1@s390x",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rubygem3.4-rbs-0:3.8.0-33.1.hum1@x86_64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:rubygem3.4-rbs-0:3.8.0-33.1.hum1@x86_64"
        },
        "product_reference": "rubygem3.4-rbs-0:3.8.0-33.1.hum1@x86_64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rubygem3.4-rdoc-0:6.14.0-33.1.hum1@noarch@public-hummingbird-aarch64-rpms as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:rubygem3.4-rdoc-0:6.14.0-33.1.hum1@noarch@public-hummingbird-aarch64-rpms"
        },
        "product_reference": "rubygem3.4-rdoc-0:6.14.0-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rubygem3.4-rdoc-0:6.14.0-33.1.hum1@noarch@public-hummingbird-s390x-rpms as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:rubygem3.4-rdoc-0:6.14.0-33.1.hum1@noarch@public-hummingbird-s390x-rpms"
        },
        "product_reference": "rubygem3.4-rdoc-0:6.14.0-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rubygem3.4-rdoc-0:6.14.0-33.1.hum1@noarch@public-hummingbird-x86_64-rpms as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:rubygem3.4-rdoc-0:6.14.0-33.1.hum1@noarch@public-hummingbird-x86_64-rpms"
        },
        "product_reference": "rubygem3.4-rdoc-0:6.14.0-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rubygem3.4-rexml-0:3.4.4-33.1.hum1@noarch@public-hummingbird-aarch64-rpms as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:rubygem3.4-rexml-0:3.4.4-33.1.hum1@noarch@public-hummingbird-aarch64-rpms"
        },
        "product_reference": "rubygem3.4-rexml-0:3.4.4-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rubygem3.4-rexml-0:3.4.4-33.1.hum1@noarch@public-hummingbird-s390x-rpms as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:rubygem3.4-rexml-0:3.4.4-33.1.hum1@noarch@public-hummingbird-s390x-rpms"
        },
        "product_reference": "rubygem3.4-rexml-0:3.4.4-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rubygem3.4-rexml-0:3.4.4-33.1.hum1@noarch@public-hummingbird-x86_64-rpms as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:rubygem3.4-rexml-0:3.4.4-33.1.hum1@noarch@public-hummingbird-x86_64-rpms"
        },
        "product_reference": "rubygem3.4-rexml-0:3.4.4-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rubygem3.4-rss-0:0.3.1-33.1.hum1@noarch@public-hummingbird-aarch64-rpms as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:rubygem3.4-rss-0:0.3.1-33.1.hum1@noarch@public-hummingbird-aarch64-rpms"
        },
        "product_reference": "rubygem3.4-rss-0:0.3.1-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rubygem3.4-rss-0:0.3.1-33.1.hum1@noarch@public-hummingbird-s390x-rpms as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:rubygem3.4-rss-0:0.3.1-33.1.hum1@noarch@public-hummingbird-s390x-rpms"
        },
        "product_reference": "rubygem3.4-rss-0:0.3.1-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rubygem3.4-rss-0:0.3.1-33.1.hum1@noarch@public-hummingbird-x86_64-rpms as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:rubygem3.4-rss-0:0.3.1-33.1.hum1@noarch@public-hummingbird-x86_64-rpms"
        },
        "product_reference": "rubygem3.4-rss-0:0.3.1-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rubygem3.4-rubygems-0:3.6.9-33.1.hum1@noarch@public-hummingbird-aarch64-rpms as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:rubygem3.4-rubygems-0:3.6.9-33.1.hum1@noarch@public-hummingbird-aarch64-rpms"
        },
        "product_reference": "rubygem3.4-rubygems-0:3.6.9-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rubygem3.4-rubygems-0:3.6.9-33.1.hum1@noarch@public-hummingbird-s390x-rpms as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:rubygem3.4-rubygems-0:3.6.9-33.1.hum1@noarch@public-hummingbird-s390x-rpms"
        },
        "product_reference": "rubygem3.4-rubygems-0:3.6.9-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rubygem3.4-rubygems-0:3.6.9-33.1.hum1@noarch@public-hummingbird-x86_64-rpms as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:rubygem3.4-rubygems-0:3.6.9-33.1.hum1@noarch@public-hummingbird-x86_64-rpms"
        },
        "product_reference": "rubygem3.4-rubygems-0:3.6.9-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rubygem3.4-test-unit-0:3.6.7-33.1.hum1@noarch@public-hummingbird-aarch64-rpms as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:rubygem3.4-test-unit-0:3.6.7-33.1.hum1@noarch@public-hummingbird-aarch64-rpms"
        },
        "product_reference": "rubygem3.4-test-unit-0:3.6.7-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rubygem3.4-test-unit-0:3.6.7-33.1.hum1@noarch@public-hummingbird-s390x-rpms as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:rubygem3.4-test-unit-0:3.6.7-33.1.hum1@noarch@public-hummingbird-s390x-rpms"
        },
        "product_reference": "rubygem3.4-test-unit-0:3.6.7-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rubygem3.4-test-unit-0:3.6.7-33.1.hum1@noarch@public-hummingbird-x86_64-rpms as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:rubygem3.4-test-unit-0:3.6.7-33.1.hum1@noarch@public-hummingbird-x86_64-rpms"
        },
        "product_reference": "rubygem3.4-test-unit-0:3.6.7-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rubygem3.4-typeprof-0:0.30.1-33.1.hum1@noarch@public-hummingbird-aarch64-rpms as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:rubygem3.4-typeprof-0:0.30.1-33.1.hum1@noarch@public-hummingbird-aarch64-rpms"
        },
        "product_reference": "rubygem3.4-typeprof-0:0.30.1-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rubygem3.4-typeprof-0:0.30.1-33.1.hum1@noarch@public-hummingbird-s390x-rpms as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:rubygem3.4-typeprof-0:0.30.1-33.1.hum1@noarch@public-hummingbird-s390x-rpms"
        },
        "product_reference": "rubygem3.4-typeprof-0:0.30.1-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rubygem3.4-typeprof-0:0.30.1-33.1.hum1@noarch@public-hummingbird-x86_64-rpms as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:rubygem3.4-typeprof-0:0.30.1-33.1.hum1@noarch@public-hummingbird-x86_64-rpms"
        },
        "product_reference": "rubygem3.4-typeprof-0:0.30.1-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
        "relates_to_product_reference": "Red Hat Hardened Images"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-89078",
      "cwe": {
        "id": "CWE-415",
        "name": "Double Free"
      },
      "discovery_date": "2026-09-23T23:20:51.276943+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Hardened Images:rubygem3.4-bigdecimal-0:3.1.8-33.1.hum1@aarch64",
            "Red Hat Hardened Images:rubygem3.4-bigdecimal-0:3.1.8-33.1.hum1@s390x",
            "Red Hat Hardened Images:rubygem3.4-bigdecimal-0:3.1.8-33.1.hum1@x86_64",
            "Red Hat Hardened Images:rubygem3.4-bundler-0:2.6.9-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-bundler-0:2.6.9-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-bundler-0:2.6.9-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:rubygem3.4-devel-0:3.6.9-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-devel-0:3.6.9-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-devel-0:3.6.9-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:rubygem3.4-io-console-0:0.8.1-33.1.hum1@aarch64",
            "Red Hat Hardened Images:rubygem3.4-io-console-0:0.8.1-33.1.hum1@s390x",
            "Red Hat Hardened Images:rubygem3.4-io-console-0:0.8.1-33.1.hum1@x86_64",
            "Red Hat Hardened Images:rubygem3.4-irb-0:1.14.3-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-irb-0:1.14.3-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-irb-0:1.14.3-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:rubygem3.4-json-0:2.9.1-33.1.hum1@aarch64",
            "Red Hat Hardened Images:rubygem3.4-json-0:2.9.1-33.1.hum1@s390x",
            "Red Hat Hardened Images:rubygem3.4-json-0:2.9.1-33.1.hum1@x86_64",
            "Red Hat Hardened Images:rubygem3.4-minitest-0:5.25.4-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-minitest-0:5.25.4-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-minitest-0:5.25.4-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:rubygem3.4-power_assert-0:2.0.5-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-power_assert-0:2.0.5-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-power_assert-0:2.0.5-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:rubygem3.4-psych-0:5.2.2-33.1.hum1@aarch64",
            "Red Hat Hardened Images:rubygem3.4-psych-0:5.2.2-33.1.hum1@s390x",
            "Red Hat Hardened Images:rubygem3.4-psych-0:5.2.2-33.1.hum1@x86_64",
            "Red Hat Hardened Images:rubygem3.4-racc-0:1.8.1-33.1.hum1@aarch64",
            "Red Hat Hardened Images:rubygem3.4-racc-0:1.8.1-33.1.hum1@s390x",
            "Red Hat Hardened Images:rubygem3.4-racc-0:1.8.1-33.1.hum1@x86_64",
            "Red Hat Hardened Images:rubygem3.4-rake-0:13.2.1-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-rake-0:13.2.1-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-rake-0:13.2.1-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:rubygem3.4-rbs-0:3.8.0-33.1.hum1@aarch64",
            "Red Hat Hardened Images:rubygem3.4-rbs-0:3.8.0-33.1.hum1@s390x",
            "Red Hat Hardened Images:rubygem3.4-rbs-0:3.8.0-33.1.hum1@x86_64",
            "Red Hat Hardened Images:rubygem3.4-rdoc-0:6.14.0-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-rdoc-0:6.14.0-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-rdoc-0:6.14.0-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:rubygem3.4-rexml-0:3.4.4-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-rexml-0:3.4.4-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-rexml-0:3.4.4-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:rubygem3.4-rss-0:0.3.1-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-rss-0:0.3.1-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-rss-0:0.3.1-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:rubygem3.4-rubygems-0:3.6.9-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-rubygems-0:3.6.9-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-rubygems-0:3.6.9-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:rubygem3.4-test-unit-0:3.6.7-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-test-unit-0:3.6.7-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-test-unit-0:3.6.7-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:rubygem3.4-typeprof-0:0.30.1-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-typeprof-0:0.30.1-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-typeprof-0:0.30.1-33.1.hum1@noarch@public-hummingbird-x86_64-rpms"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2539836"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Ruby. When compiling a specially crafted regular expression with the methods Regexp.new, Regexp.union, Regexp.compile, or via a string interpolation such as /#{input}/, a double free can occur when parsing a pattern that fails after an alternation. This double free causes memory corruption, potentially resulting in arbitrary code execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "ruby: double free issue in regular expression parser",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat has rated the impact of these flaws as Moderate for the Ruby packages shipped in Red Hat Enterprise Linux. The Ruby packages provide a language interpreter and standard library and do not accept external input on their own; these flaws are reachable only when an application compiles a regular expression constructed from attacker-controlled input.\n\nUpstream Ruby has published a security advisory for these issues and scopes the flaws narrowly, stating that they \"are reached only when an application compiles a regular expression from a string that an attacker controls, for example by passing it to Regexp.new, Regexp.union or Regexp.compile\", and that \"applications that only use regular expressions written by their own developers are not affected\". Upstream further notes that Ruby \"has generally considered it unsafe to compile and use a regular expression created from untrusted input\".\n\nThe CVE identifiers for these flaws were assigned by GitLab, where the issues were originally reported and where remote code execution was demonstrated against GitLab\u0027s own application. Ruby did not request separate identifiers and has asked downstream distributors to track these issues under GitLab\u0027s CVE IDs.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Hardened Images:ruby3.4-0:3.4.12-33.1.hum1@aarch64",
          "Red Hat Hardened Images:ruby3.4-0:3.4.12-33.1.hum1@s390x",
          "Red Hat Hardened Images:ruby3.4-0:3.4.12-33.1.hum1@src",
          "Red Hat Hardened Images:ruby3.4-0:3.4.12-33.1.hum1@x86_64",
          "Red Hat Hardened Images:ruby3.4-bundled-gems-0:3.4.12-33.1.hum1@aarch64",
          "Red Hat Hardened Images:ruby3.4-bundled-gems-0:3.4.12-33.1.hum1@s390x",
          "Red Hat Hardened Images:ruby3.4-bundled-gems-0:3.4.12-33.1.hum1@x86_64",
          "Red Hat Hardened Images:ruby3.4-default-gems-0:3.4.12-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
          "Red Hat Hardened Images:ruby3.4-default-gems-0:3.4.12-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
          "Red Hat Hardened Images:ruby3.4-default-gems-0:3.4.12-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
          "Red Hat Hardened Images:ruby3.4-devel-0:3.4.12-33.1.hum1@aarch64",
          "Red Hat Hardened Images:ruby3.4-devel-0:3.4.12-33.1.hum1@s390x",
          "Red Hat Hardened Images:ruby3.4-devel-0:3.4.12-33.1.hum1@x86_64",
          "Red Hat Hardened Images:ruby3.4-doc-0:3.4.12-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
          "Red Hat Hardened Images:ruby3.4-doc-0:3.4.12-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
          "Red Hat Hardened Images:ruby3.4-doc-0:3.4.12-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
          "Red Hat Hardened Images:ruby3.4-libs-0:3.4.12-33.1.hum1@aarch64",
          "Red Hat Hardened Images:ruby3.4-libs-0:3.4.12-33.1.hum1@s390x",
          "Red Hat Hardened Images:ruby3.4-libs-0:3.4.12-33.1.hum1@x86_64"
        ],
        "known_not_affected": [
          "Red Hat Hardened Images:rubygem3.4-bigdecimal-0:3.1.8-33.1.hum1@aarch64",
          "Red Hat Hardened Images:rubygem3.4-bigdecimal-0:3.1.8-33.1.hum1@s390x",
          "Red Hat Hardened Images:rubygem3.4-bigdecimal-0:3.1.8-33.1.hum1@x86_64",
          "Red Hat Hardened Images:rubygem3.4-bundler-0:2.6.9-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
          "Red Hat Hardened Images:rubygem3.4-bundler-0:2.6.9-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
          "Red Hat Hardened Images:rubygem3.4-bundler-0:2.6.9-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
          "Red Hat Hardened Images:rubygem3.4-devel-0:3.6.9-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
          "Red Hat Hardened Images:rubygem3.4-devel-0:3.6.9-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
          "Red Hat Hardened Images:rubygem3.4-devel-0:3.6.9-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
          "Red Hat Hardened Images:rubygem3.4-io-console-0:0.8.1-33.1.hum1@aarch64",
          "Red Hat Hardened Images:rubygem3.4-io-console-0:0.8.1-33.1.hum1@s390x",
          "Red Hat Hardened Images:rubygem3.4-io-console-0:0.8.1-33.1.hum1@x86_64",
          "Red Hat Hardened Images:rubygem3.4-irb-0:1.14.3-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
          "Red Hat Hardened Images:rubygem3.4-irb-0:1.14.3-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
          "Red Hat Hardened Images:rubygem3.4-irb-0:1.14.3-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
          "Red Hat Hardened Images:rubygem3.4-json-0:2.9.1-33.1.hum1@aarch64",
          "Red Hat Hardened Images:rubygem3.4-json-0:2.9.1-33.1.hum1@s390x",
          "Red Hat Hardened Images:rubygem3.4-json-0:2.9.1-33.1.hum1@x86_64",
          "Red Hat Hardened Images:rubygem3.4-minitest-0:5.25.4-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
          "Red Hat Hardened Images:rubygem3.4-minitest-0:5.25.4-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
          "Red Hat Hardened Images:rubygem3.4-minitest-0:5.25.4-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
          "Red Hat Hardened Images:rubygem3.4-power_assert-0:2.0.5-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
          "Red Hat Hardened Images:rubygem3.4-power_assert-0:2.0.5-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
          "Red Hat Hardened Images:rubygem3.4-power_assert-0:2.0.5-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
          "Red Hat Hardened Images:rubygem3.4-psych-0:5.2.2-33.1.hum1@aarch64",
          "Red Hat Hardened Images:rubygem3.4-psych-0:5.2.2-33.1.hum1@s390x",
          "Red Hat Hardened Images:rubygem3.4-psych-0:5.2.2-33.1.hum1@x86_64",
          "Red Hat Hardened Images:rubygem3.4-racc-0:1.8.1-33.1.hum1@aarch64",
          "Red Hat Hardened Images:rubygem3.4-racc-0:1.8.1-33.1.hum1@s390x",
          "Red Hat Hardened Images:rubygem3.4-racc-0:1.8.1-33.1.hum1@x86_64",
          "Red Hat Hardened Images:rubygem3.4-rake-0:13.2.1-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
          "Red Hat Hardened Images:rubygem3.4-rake-0:13.2.1-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
          "Red Hat Hardened Images:rubygem3.4-rake-0:13.2.1-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
          "Red Hat Hardened Images:rubygem3.4-rbs-0:3.8.0-33.1.hum1@aarch64",
          "Red Hat Hardened Images:rubygem3.4-rbs-0:3.8.0-33.1.hum1@s390x",
          "Red Hat Hardened Images:rubygem3.4-rbs-0:3.8.0-33.1.hum1@x86_64",
          "Red Hat Hardened Images:rubygem3.4-rdoc-0:6.14.0-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
          "Red Hat Hardened Images:rubygem3.4-rdoc-0:6.14.0-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
          "Red Hat Hardened Images:rubygem3.4-rdoc-0:6.14.0-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
          "Red Hat Hardened Images:rubygem3.4-rexml-0:3.4.4-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
          "Red Hat Hardened Images:rubygem3.4-rexml-0:3.4.4-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
          "Red Hat Hardened Images:rubygem3.4-rexml-0:3.4.4-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
          "Red Hat Hardened Images:rubygem3.4-rss-0:0.3.1-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
          "Red Hat Hardened Images:rubygem3.4-rss-0:0.3.1-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
          "Red Hat Hardened Images:rubygem3.4-rss-0:0.3.1-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
          "Red Hat Hardened Images:rubygem3.4-rubygems-0:3.6.9-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
          "Red Hat Hardened Images:rubygem3.4-rubygems-0:3.6.9-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
          "Red Hat Hardened Images:rubygem3.4-rubygems-0:3.6.9-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
          "Red Hat Hardened Images:rubygem3.4-test-unit-0:3.6.7-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
          "Red Hat Hardened Images:rubygem3.4-test-unit-0:3.6.7-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
          "Red Hat Hardened Images:rubygem3.4-test-unit-0:3.6.7-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
          "Red Hat Hardened Images:rubygem3.4-typeprof-0:0.30.1-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
          "Red Hat Hardened Images:rubygem3.4-typeprof-0:0.30.1-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
          "Red Hat Hardened Images:rubygem3.4-typeprof-0:0.30.1-33.1.hum1@noarch@public-hummingbird-x86_64-rpms"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-89078"
        },
        {
          "category": "external",
          "summary": "RHBZ#2539836",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2539836"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-89078",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-89078"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-89078",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89078"
        },
        {
          "category": "external",
          "summary": "https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-4-1-released/",
          "url": "https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-4-1-released/"
        },
        {
          "category": "external",
          "summary": "https://gitlab.com/gitlab-org/gitlab/-/work_items/628577",
          "url": "https://gitlab.com/gitlab-org/gitlab/-/work_items/628577"
        },
        {
          "category": "external",
          "summary": "https://hackerone.com/reports/4019059",
          "url": "https://hackerone.com/reports/4019059"
        },
        {
          "category": "external",
          "summary": "https://www.ruby-lang.org/en/news/2026/10/23/regexp-fixes-for-gitlab-cves/",
          "url": "https://www.ruby-lang.org/en/news/2026/10/23/regexp-fixes-for-gitlab-cves/"
        }
      ],
      "release_date": "2026-09-23T23:05:20.132000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-23T21:28:41+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
          "product_ids": [
            "Red Hat Hardened Images:ruby3.4-0:3.4.12-33.1.hum1@aarch64",
            "Red Hat Hardened Images:ruby3.4-0:3.4.12-33.1.hum1@s390x",
            "Red Hat Hardened Images:ruby3.4-0:3.4.12-33.1.hum1@src",
            "Red Hat Hardened Images:ruby3.4-0:3.4.12-33.1.hum1@x86_64",
            "Red Hat Hardened Images:ruby3.4-bundled-gems-0:3.4.12-33.1.hum1@aarch64",
            "Red Hat Hardened Images:ruby3.4-bundled-gems-0:3.4.12-33.1.hum1@s390x",
            "Red Hat Hardened Images:ruby3.4-bundled-gems-0:3.4.12-33.1.hum1@x86_64",
            "Red Hat Hardened Images:ruby3.4-default-gems-0:3.4.12-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:ruby3.4-default-gems-0:3.4.12-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:ruby3.4-default-gems-0:3.4.12-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:ruby3.4-devel-0:3.4.12-33.1.hum1@aarch64",
            "Red Hat Hardened Images:ruby3.4-devel-0:3.4.12-33.1.hum1@s390x",
            "Red Hat Hardened Images:ruby3.4-devel-0:3.4.12-33.1.hum1@x86_64",
            "Red Hat Hardened Images:ruby3.4-doc-0:3.4.12-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:ruby3.4-doc-0:3.4.12-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:ruby3.4-doc-0:3.4.12-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:ruby3.4-libs-0:3.4.12-33.1.hum1@aarch64",
            "Red Hat Hardened Images:ruby3.4-libs-0:3.4.12-33.1.hum1@s390x",
            "Red Hat Hardened Images:ruby3.4-libs-0:3.4.12-33.1.hum1@x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:88861"
        },
        {
          "category": "workaround",
          "details": "To mitigate this vulnerability, do not compile regular expressions from untrusted sources. Standard safeguards such as Regexp.timeout or limiting the length of the input pattern do not protect against this issue.",
          "product_ids": [
            "Red Hat Hardened Images:ruby3.4-0:3.4.12-33.1.hum1@aarch64",
            "Red Hat Hardened Images:ruby3.4-0:3.4.12-33.1.hum1@s390x",
            "Red Hat Hardened Images:ruby3.4-0:3.4.12-33.1.hum1@src",
            "Red Hat Hardened Images:ruby3.4-0:3.4.12-33.1.hum1@x86_64",
            "Red Hat Hardened Images:ruby3.4-bundled-gems-0:3.4.12-33.1.hum1@aarch64",
            "Red Hat Hardened Images:ruby3.4-bundled-gems-0:3.4.12-33.1.hum1@s390x",
            "Red Hat Hardened Images:ruby3.4-bundled-gems-0:3.4.12-33.1.hum1@x86_64",
            "Red Hat Hardened Images:ruby3.4-default-gems-0:3.4.12-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:ruby3.4-default-gems-0:3.4.12-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:ruby3.4-default-gems-0:3.4.12-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:ruby3.4-devel-0:3.4.12-33.1.hum1@aarch64",
            "Red Hat Hardened Images:ruby3.4-devel-0:3.4.12-33.1.hum1@s390x",
            "Red Hat Hardened Images:ruby3.4-devel-0:3.4.12-33.1.hum1@x86_64",
            "Red Hat Hardened Images:ruby3.4-doc-0:3.4.12-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:ruby3.4-doc-0:3.4.12-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:ruby3.4-doc-0:3.4.12-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:ruby3.4-libs-0:3.4.12-33.1.hum1@aarch64",
            "Red Hat Hardened Images:ruby3.4-libs-0:3.4.12-33.1.hum1@s390x",
            "Red Hat Hardened Images:ruby3.4-libs-0:3.4.12-33.1.hum1@x86_64",
            "Red Hat Hardened Images:rubygem3.4-bigdecimal-0:3.1.8-33.1.hum1@aarch64",
            "Red Hat Hardened Images:rubygem3.4-bigdecimal-0:3.1.8-33.1.hum1@s390x",
            "Red Hat Hardened Images:rubygem3.4-bigdecimal-0:3.1.8-33.1.hum1@x86_64",
            "Red Hat Hardened Images:rubygem3.4-bundler-0:2.6.9-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-bundler-0:2.6.9-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-bundler-0:2.6.9-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:rubygem3.4-devel-0:3.6.9-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-devel-0:3.6.9-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-devel-0:3.6.9-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:rubygem3.4-io-console-0:0.8.1-33.1.hum1@aarch64",
            "Red Hat Hardened Images:rubygem3.4-io-console-0:0.8.1-33.1.hum1@s390x",
            "Red Hat Hardened Images:rubygem3.4-io-console-0:0.8.1-33.1.hum1@x86_64",
            "Red Hat Hardened Images:rubygem3.4-irb-0:1.14.3-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-irb-0:1.14.3-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-irb-0:1.14.3-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:rubygem3.4-json-0:2.9.1-33.1.hum1@aarch64",
            "Red Hat Hardened Images:rubygem3.4-json-0:2.9.1-33.1.hum1@s390x",
            "Red Hat Hardened Images:rubygem3.4-json-0:2.9.1-33.1.hum1@x86_64",
            "Red Hat Hardened Images:rubygem3.4-minitest-0:5.25.4-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-minitest-0:5.25.4-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-minitest-0:5.25.4-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:rubygem3.4-power_assert-0:2.0.5-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-power_assert-0:2.0.5-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-power_assert-0:2.0.5-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:rubygem3.4-psych-0:5.2.2-33.1.hum1@aarch64",
            "Red Hat Hardened Images:rubygem3.4-psych-0:5.2.2-33.1.hum1@s390x",
            "Red Hat Hardened Images:rubygem3.4-psych-0:5.2.2-33.1.hum1@x86_64",
            "Red Hat Hardened Images:rubygem3.4-racc-0:1.8.1-33.1.hum1@aarch64",
            "Red Hat Hardened Images:rubygem3.4-racc-0:1.8.1-33.1.hum1@s390x",
            "Red Hat Hardened Images:rubygem3.4-racc-0:1.8.1-33.1.hum1@x86_64",
            "Red Hat Hardened Images:rubygem3.4-rake-0:13.2.1-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-rake-0:13.2.1-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-rake-0:13.2.1-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:rubygem3.4-rbs-0:3.8.0-33.1.hum1@aarch64",
            "Red Hat Hardened Images:rubygem3.4-rbs-0:3.8.0-33.1.hum1@s390x",
            "Red Hat Hardened Images:rubygem3.4-rbs-0:3.8.0-33.1.hum1@x86_64",
            "Red Hat Hardened Images:rubygem3.4-rdoc-0:6.14.0-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-rdoc-0:6.14.0-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-rdoc-0:6.14.0-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:rubygem3.4-rexml-0:3.4.4-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-rexml-0:3.4.4-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-rexml-0:3.4.4-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:rubygem3.4-rss-0:0.3.1-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-rss-0:0.3.1-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-rss-0:0.3.1-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:rubygem3.4-rubygems-0:3.6.9-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-rubygems-0:3.6.9-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-rubygems-0:3.6.9-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:rubygem3.4-test-unit-0:3.6.7-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-test-unit-0:3.6.7-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-test-unit-0:3.6.7-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:rubygem3.4-typeprof-0:0.30.1-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-typeprof-0:0.30.1-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-typeprof-0:0.30.1-33.1.hum1@noarch@public-hummingbird-x86_64-rpms"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Hardened Images:ruby3.4-0:3.4.12-33.1.hum1@aarch64",
            "Red Hat Hardened Images:ruby3.4-0:3.4.12-33.1.hum1@s390x",
            "Red Hat Hardened Images:ruby3.4-0:3.4.12-33.1.hum1@src",
            "Red Hat Hardened Images:ruby3.4-0:3.4.12-33.1.hum1@x86_64",
            "Red Hat Hardened Images:ruby3.4-bundled-gems-0:3.4.12-33.1.hum1@aarch64",
            "Red Hat Hardened Images:ruby3.4-bundled-gems-0:3.4.12-33.1.hum1@s390x",
            "Red Hat Hardened Images:ruby3.4-bundled-gems-0:3.4.12-33.1.hum1@x86_64",
            "Red Hat Hardened Images:ruby3.4-default-gems-0:3.4.12-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:ruby3.4-default-gems-0:3.4.12-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:ruby3.4-default-gems-0:3.4.12-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:ruby3.4-devel-0:3.4.12-33.1.hum1@aarch64",
            "Red Hat Hardened Images:ruby3.4-devel-0:3.4.12-33.1.hum1@s390x",
            "Red Hat Hardened Images:ruby3.4-devel-0:3.4.12-33.1.hum1@x86_64",
            "Red Hat Hardened Images:ruby3.4-doc-0:3.4.12-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:ruby3.4-doc-0:3.4.12-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:ruby3.4-doc-0:3.4.12-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:ruby3.4-libs-0:3.4.12-33.1.hum1@aarch64",
            "Red Hat Hardened Images:ruby3.4-libs-0:3.4.12-33.1.hum1@s390x",
            "Red Hat Hardened Images:ruby3.4-libs-0:3.4.12-33.1.hum1@x86_64",
            "Red Hat Hardened Images:rubygem3.4-bigdecimal-0:3.1.8-33.1.hum1@aarch64",
            "Red Hat Hardened Images:rubygem3.4-bigdecimal-0:3.1.8-33.1.hum1@s390x",
            "Red Hat Hardened Images:rubygem3.4-bigdecimal-0:3.1.8-33.1.hum1@x86_64",
            "Red Hat Hardened Images:rubygem3.4-bundler-0:2.6.9-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-bundler-0:2.6.9-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-bundler-0:2.6.9-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:rubygem3.4-devel-0:3.6.9-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-devel-0:3.6.9-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-devel-0:3.6.9-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:rubygem3.4-io-console-0:0.8.1-33.1.hum1@aarch64",
            "Red Hat Hardened Images:rubygem3.4-io-console-0:0.8.1-33.1.hum1@s390x",
            "Red Hat Hardened Images:rubygem3.4-io-console-0:0.8.1-33.1.hum1@x86_64",
            "Red Hat Hardened Images:rubygem3.4-irb-0:1.14.3-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-irb-0:1.14.3-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-irb-0:1.14.3-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:rubygem3.4-json-0:2.9.1-33.1.hum1@aarch64",
            "Red Hat Hardened Images:rubygem3.4-json-0:2.9.1-33.1.hum1@s390x",
            "Red Hat Hardened Images:rubygem3.4-json-0:2.9.1-33.1.hum1@x86_64",
            "Red Hat Hardened Images:rubygem3.4-minitest-0:5.25.4-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-minitest-0:5.25.4-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-minitest-0:5.25.4-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:rubygem3.4-power_assert-0:2.0.5-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-power_assert-0:2.0.5-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-power_assert-0:2.0.5-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:rubygem3.4-psych-0:5.2.2-33.1.hum1@aarch64",
            "Red Hat Hardened Images:rubygem3.4-psych-0:5.2.2-33.1.hum1@s390x",
            "Red Hat Hardened Images:rubygem3.4-psych-0:5.2.2-33.1.hum1@x86_64",
            "Red Hat Hardened Images:rubygem3.4-racc-0:1.8.1-33.1.hum1@aarch64",
            "Red Hat Hardened Images:rubygem3.4-racc-0:1.8.1-33.1.hum1@s390x",
            "Red Hat Hardened Images:rubygem3.4-racc-0:1.8.1-33.1.hum1@x86_64",
            "Red Hat Hardened Images:rubygem3.4-rake-0:13.2.1-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-rake-0:13.2.1-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-rake-0:13.2.1-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:rubygem3.4-rbs-0:3.8.0-33.1.hum1@aarch64",
            "Red Hat Hardened Images:rubygem3.4-rbs-0:3.8.0-33.1.hum1@s390x",
            "Red Hat Hardened Images:rubygem3.4-rbs-0:3.8.0-33.1.hum1@x86_64",
            "Red Hat Hardened Images:rubygem3.4-rdoc-0:6.14.0-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-rdoc-0:6.14.0-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-rdoc-0:6.14.0-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:rubygem3.4-rexml-0:3.4.4-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-rexml-0:3.4.4-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-rexml-0:3.4.4-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:rubygem3.4-rss-0:0.3.1-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-rss-0:0.3.1-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-rss-0:0.3.1-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:rubygem3.4-rubygems-0:3.6.9-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-rubygems-0:3.6.9-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-rubygems-0:3.6.9-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:rubygem3.4-test-unit-0:3.6.7-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-test-unit-0:3.6.7-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-test-unit-0:3.6.7-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:rubygem3.4-typeprof-0:0.30.1-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-typeprof-0:0.30.1-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-typeprof-0:0.30.1-33.1.hum1@noarch@public-hummingbird-x86_64-rpms"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "ruby: double free issue in regular expression parser"
    },
    {
      "cve": "CVE-2026-93577",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "discovery_date": "2026-09-23T23:21:10.955642+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Hardened Images:rubygem3.4-bigdecimal-0:3.1.8-33.1.hum1@aarch64",
            "Red Hat Hardened Images:rubygem3.4-bigdecimal-0:3.1.8-33.1.hum1@s390x",
            "Red Hat Hardened Images:rubygem3.4-bigdecimal-0:3.1.8-33.1.hum1@x86_64",
            "Red Hat Hardened Images:rubygem3.4-bundler-0:2.6.9-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-bundler-0:2.6.9-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-bundler-0:2.6.9-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:rubygem3.4-devel-0:3.6.9-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-devel-0:3.6.9-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-devel-0:3.6.9-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:rubygem3.4-io-console-0:0.8.1-33.1.hum1@aarch64",
            "Red Hat Hardened Images:rubygem3.4-io-console-0:0.8.1-33.1.hum1@s390x",
            "Red Hat Hardened Images:rubygem3.4-io-console-0:0.8.1-33.1.hum1@x86_64",
            "Red Hat Hardened Images:rubygem3.4-irb-0:1.14.3-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-irb-0:1.14.3-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-irb-0:1.14.3-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:rubygem3.4-json-0:2.9.1-33.1.hum1@aarch64",
            "Red Hat Hardened Images:rubygem3.4-json-0:2.9.1-33.1.hum1@s390x",
            "Red Hat Hardened Images:rubygem3.4-json-0:2.9.1-33.1.hum1@x86_64",
            "Red Hat Hardened Images:rubygem3.4-minitest-0:5.25.4-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-minitest-0:5.25.4-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-minitest-0:5.25.4-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:rubygem3.4-power_assert-0:2.0.5-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-power_assert-0:2.0.5-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-power_assert-0:2.0.5-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:rubygem3.4-psych-0:5.2.2-33.1.hum1@aarch64",
            "Red Hat Hardened Images:rubygem3.4-psych-0:5.2.2-33.1.hum1@s390x",
            "Red Hat Hardened Images:rubygem3.4-psych-0:5.2.2-33.1.hum1@x86_64",
            "Red Hat Hardened Images:rubygem3.4-racc-0:1.8.1-33.1.hum1@aarch64",
            "Red Hat Hardened Images:rubygem3.4-racc-0:1.8.1-33.1.hum1@s390x",
            "Red Hat Hardened Images:rubygem3.4-racc-0:1.8.1-33.1.hum1@x86_64",
            "Red Hat Hardened Images:rubygem3.4-rake-0:13.2.1-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-rake-0:13.2.1-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-rake-0:13.2.1-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:rubygem3.4-rbs-0:3.8.0-33.1.hum1@aarch64",
            "Red Hat Hardened Images:rubygem3.4-rbs-0:3.8.0-33.1.hum1@s390x",
            "Red Hat Hardened Images:rubygem3.4-rbs-0:3.8.0-33.1.hum1@x86_64",
            "Red Hat Hardened Images:rubygem3.4-rdoc-0:6.14.0-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-rdoc-0:6.14.0-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-rdoc-0:6.14.0-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:rubygem3.4-rexml-0:3.4.4-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-rexml-0:3.4.4-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-rexml-0:3.4.4-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:rubygem3.4-rss-0:0.3.1-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-rss-0:0.3.1-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-rss-0:0.3.1-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:rubygem3.4-rubygems-0:3.6.9-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-rubygems-0:3.6.9-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-rubygems-0:3.6.9-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:rubygem3.4-test-unit-0:3.6.7-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-test-unit-0:3.6.7-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-test-unit-0:3.6.7-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:rubygem3.4-typeprof-0:0.30.1-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-typeprof-0:0.30.1-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-typeprof-0:0.30.1-33.1.hum1@noarch@public-hummingbird-x86_64-rpms"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2539842"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Ruby. When compiling a specially crafted regular expression with the methods Regexp.new, Regexp.union, Regexp.compile, or via a string interpolation such as /#{input}/, an integer overflow in the size of the compiled pattern can occur. This integer overflow causes memory corruption, potentially resulting in arbitrary code execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "ruby: integer overflow issue in regular expression compiler",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat has rated the impact of these flaws as Moderate for the Ruby packages shipped in Red Hat Enterprise Linux. The Ruby packages provide a language interpreter and standard library and do not accept external input on their own; these flaws are reachable only when an application compiles a regular expression constructed from attacker-controlled input.\n\nUpstream Ruby has published a security advisory for these issues and scopes the flaws narrowly, stating that they \"are reached only when an application compiles a regular expression from a string that an attacker controls, for example by passing it to Regexp.new, Regexp.union or Regexp.compile\", and that \"applications that only use regular expressions written by their own developers are not affected\". Upstream further notes that Ruby \"has generally considered it unsafe to compile and use a regular expression created from untrusted input\".\n\nThe CVE identifiers for these flaws were assigned by GitLab, where the issues were originally reported and where remote code execution was demonstrated against GitLab\u0027s own application. Ruby did not request separate identifiers and has asked downstream distributors to track these issues under GitLab\u0027s CVE IDs.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Hardened Images:ruby3.4-0:3.4.12-33.1.hum1@aarch64",
          "Red Hat Hardened Images:ruby3.4-0:3.4.12-33.1.hum1@s390x",
          "Red Hat Hardened Images:ruby3.4-0:3.4.12-33.1.hum1@src",
          "Red Hat Hardened Images:ruby3.4-0:3.4.12-33.1.hum1@x86_64",
          "Red Hat Hardened Images:ruby3.4-bundled-gems-0:3.4.12-33.1.hum1@aarch64",
          "Red Hat Hardened Images:ruby3.4-bundled-gems-0:3.4.12-33.1.hum1@s390x",
          "Red Hat Hardened Images:ruby3.4-bundled-gems-0:3.4.12-33.1.hum1@x86_64",
          "Red Hat Hardened Images:ruby3.4-default-gems-0:3.4.12-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
          "Red Hat Hardened Images:ruby3.4-default-gems-0:3.4.12-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
          "Red Hat Hardened Images:ruby3.4-default-gems-0:3.4.12-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
          "Red Hat Hardened Images:ruby3.4-devel-0:3.4.12-33.1.hum1@aarch64",
          "Red Hat Hardened Images:ruby3.4-devel-0:3.4.12-33.1.hum1@s390x",
          "Red Hat Hardened Images:ruby3.4-devel-0:3.4.12-33.1.hum1@x86_64",
          "Red Hat Hardened Images:ruby3.4-doc-0:3.4.12-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
          "Red Hat Hardened Images:ruby3.4-doc-0:3.4.12-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
          "Red Hat Hardened Images:ruby3.4-doc-0:3.4.12-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
          "Red Hat Hardened Images:ruby3.4-libs-0:3.4.12-33.1.hum1@aarch64",
          "Red Hat Hardened Images:ruby3.4-libs-0:3.4.12-33.1.hum1@s390x",
          "Red Hat Hardened Images:ruby3.4-libs-0:3.4.12-33.1.hum1@x86_64"
        ],
        "known_not_affected": [
          "Red Hat Hardened Images:rubygem3.4-bigdecimal-0:3.1.8-33.1.hum1@aarch64",
          "Red Hat Hardened Images:rubygem3.4-bigdecimal-0:3.1.8-33.1.hum1@s390x",
          "Red Hat Hardened Images:rubygem3.4-bigdecimal-0:3.1.8-33.1.hum1@x86_64",
          "Red Hat Hardened Images:rubygem3.4-bundler-0:2.6.9-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
          "Red Hat Hardened Images:rubygem3.4-bundler-0:2.6.9-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
          "Red Hat Hardened Images:rubygem3.4-bundler-0:2.6.9-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
          "Red Hat Hardened Images:rubygem3.4-devel-0:3.6.9-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
          "Red Hat Hardened Images:rubygem3.4-devel-0:3.6.9-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
          "Red Hat Hardened Images:rubygem3.4-devel-0:3.6.9-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
          "Red Hat Hardened Images:rubygem3.4-io-console-0:0.8.1-33.1.hum1@aarch64",
          "Red Hat Hardened Images:rubygem3.4-io-console-0:0.8.1-33.1.hum1@s390x",
          "Red Hat Hardened Images:rubygem3.4-io-console-0:0.8.1-33.1.hum1@x86_64",
          "Red Hat Hardened Images:rubygem3.4-irb-0:1.14.3-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
          "Red Hat Hardened Images:rubygem3.4-irb-0:1.14.3-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
          "Red Hat Hardened Images:rubygem3.4-irb-0:1.14.3-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
          "Red Hat Hardened Images:rubygem3.4-json-0:2.9.1-33.1.hum1@aarch64",
          "Red Hat Hardened Images:rubygem3.4-json-0:2.9.1-33.1.hum1@s390x",
          "Red Hat Hardened Images:rubygem3.4-json-0:2.9.1-33.1.hum1@x86_64",
          "Red Hat Hardened Images:rubygem3.4-minitest-0:5.25.4-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
          "Red Hat Hardened Images:rubygem3.4-minitest-0:5.25.4-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
          "Red Hat Hardened Images:rubygem3.4-minitest-0:5.25.4-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
          "Red Hat Hardened Images:rubygem3.4-power_assert-0:2.0.5-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
          "Red Hat Hardened Images:rubygem3.4-power_assert-0:2.0.5-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
          "Red Hat Hardened Images:rubygem3.4-power_assert-0:2.0.5-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
          "Red Hat Hardened Images:rubygem3.4-psych-0:5.2.2-33.1.hum1@aarch64",
          "Red Hat Hardened Images:rubygem3.4-psych-0:5.2.2-33.1.hum1@s390x",
          "Red Hat Hardened Images:rubygem3.4-psych-0:5.2.2-33.1.hum1@x86_64",
          "Red Hat Hardened Images:rubygem3.4-racc-0:1.8.1-33.1.hum1@aarch64",
          "Red Hat Hardened Images:rubygem3.4-racc-0:1.8.1-33.1.hum1@s390x",
          "Red Hat Hardened Images:rubygem3.4-racc-0:1.8.1-33.1.hum1@x86_64",
          "Red Hat Hardened Images:rubygem3.4-rake-0:13.2.1-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
          "Red Hat Hardened Images:rubygem3.4-rake-0:13.2.1-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
          "Red Hat Hardened Images:rubygem3.4-rake-0:13.2.1-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
          "Red Hat Hardened Images:rubygem3.4-rbs-0:3.8.0-33.1.hum1@aarch64",
          "Red Hat Hardened Images:rubygem3.4-rbs-0:3.8.0-33.1.hum1@s390x",
          "Red Hat Hardened Images:rubygem3.4-rbs-0:3.8.0-33.1.hum1@x86_64",
          "Red Hat Hardened Images:rubygem3.4-rdoc-0:6.14.0-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
          "Red Hat Hardened Images:rubygem3.4-rdoc-0:6.14.0-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
          "Red Hat Hardened Images:rubygem3.4-rdoc-0:6.14.0-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
          "Red Hat Hardened Images:rubygem3.4-rexml-0:3.4.4-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
          "Red Hat Hardened Images:rubygem3.4-rexml-0:3.4.4-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
          "Red Hat Hardened Images:rubygem3.4-rexml-0:3.4.4-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
          "Red Hat Hardened Images:rubygem3.4-rss-0:0.3.1-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
          "Red Hat Hardened Images:rubygem3.4-rss-0:0.3.1-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
          "Red Hat Hardened Images:rubygem3.4-rss-0:0.3.1-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
          "Red Hat Hardened Images:rubygem3.4-rubygems-0:3.6.9-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
          "Red Hat Hardened Images:rubygem3.4-rubygems-0:3.6.9-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
          "Red Hat Hardened Images:rubygem3.4-rubygems-0:3.6.9-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
          "Red Hat Hardened Images:rubygem3.4-test-unit-0:3.6.7-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
          "Red Hat Hardened Images:rubygem3.4-test-unit-0:3.6.7-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
          "Red Hat Hardened Images:rubygem3.4-test-unit-0:3.6.7-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
          "Red Hat Hardened Images:rubygem3.4-typeprof-0:0.30.1-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
          "Red Hat Hardened Images:rubygem3.4-typeprof-0:0.30.1-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
          "Red Hat Hardened Images:rubygem3.4-typeprof-0:0.30.1-33.1.hum1@noarch@public-hummingbird-x86_64-rpms"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-93577"
        },
        {
          "category": "external",
          "summary": "RHBZ#2539842",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2539842"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-93577",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-93577"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-93577",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-93577"
        },
        {
          "category": "external",
          "summary": "https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-4-1-released/",
          "url": "https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-4-1-released/"
        },
        {
          "category": "external",
          "summary": "https://gitlab.com/gitlab-org/gitlab/-/work_items/629758",
          "url": "https://gitlab.com/gitlab-org/gitlab/-/work_items/629758"
        },
        {
          "category": "external",
          "summary": "https://hackerone.com/reports/3995696",
          "url": "https://hackerone.com/reports/3995696"
        },
        {
          "category": "external",
          "summary": "https://www.ruby-lang.org/en/news/2026/10/23/regexp-fixes-for-gitlab-cves/",
          "url": "https://www.ruby-lang.org/en/news/2026/10/23/regexp-fixes-for-gitlab-cves/"
        }
      ],
      "release_date": "2026-09-23T23:04:45.296000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-23T21:28:41+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
          "product_ids": [
            "Red Hat Hardened Images:ruby3.4-0:3.4.12-33.1.hum1@aarch64",
            "Red Hat Hardened Images:ruby3.4-0:3.4.12-33.1.hum1@s390x",
            "Red Hat Hardened Images:ruby3.4-0:3.4.12-33.1.hum1@src",
            "Red Hat Hardened Images:ruby3.4-0:3.4.12-33.1.hum1@x86_64",
            "Red Hat Hardened Images:ruby3.4-bundled-gems-0:3.4.12-33.1.hum1@aarch64",
            "Red Hat Hardened Images:ruby3.4-bundled-gems-0:3.4.12-33.1.hum1@s390x",
            "Red Hat Hardened Images:ruby3.4-bundled-gems-0:3.4.12-33.1.hum1@x86_64",
            "Red Hat Hardened Images:ruby3.4-default-gems-0:3.4.12-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:ruby3.4-default-gems-0:3.4.12-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:ruby3.4-default-gems-0:3.4.12-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:ruby3.4-devel-0:3.4.12-33.1.hum1@aarch64",
            "Red Hat Hardened Images:ruby3.4-devel-0:3.4.12-33.1.hum1@s390x",
            "Red Hat Hardened Images:ruby3.4-devel-0:3.4.12-33.1.hum1@x86_64",
            "Red Hat Hardened Images:ruby3.4-doc-0:3.4.12-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:ruby3.4-doc-0:3.4.12-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:ruby3.4-doc-0:3.4.12-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:ruby3.4-libs-0:3.4.12-33.1.hum1@aarch64",
            "Red Hat Hardened Images:ruby3.4-libs-0:3.4.12-33.1.hum1@s390x",
            "Red Hat Hardened Images:ruby3.4-libs-0:3.4.12-33.1.hum1@x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:88861"
        },
        {
          "category": "workaround",
          "details": "To mitigate this vulnerability, do not compile regular expressions from untrusted sources. Standard safeguards such as Regexp.timeout or limiting the length of the input pattern do not protect against this issue.",
          "product_ids": [
            "Red Hat Hardened Images:ruby3.4-0:3.4.12-33.1.hum1@aarch64",
            "Red Hat Hardened Images:ruby3.4-0:3.4.12-33.1.hum1@s390x",
            "Red Hat Hardened Images:ruby3.4-0:3.4.12-33.1.hum1@src",
            "Red Hat Hardened Images:ruby3.4-0:3.4.12-33.1.hum1@x86_64",
            "Red Hat Hardened Images:ruby3.4-bundled-gems-0:3.4.12-33.1.hum1@aarch64",
            "Red Hat Hardened Images:ruby3.4-bundled-gems-0:3.4.12-33.1.hum1@s390x",
            "Red Hat Hardened Images:ruby3.4-bundled-gems-0:3.4.12-33.1.hum1@x86_64",
            "Red Hat Hardened Images:ruby3.4-default-gems-0:3.4.12-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:ruby3.4-default-gems-0:3.4.12-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:ruby3.4-default-gems-0:3.4.12-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:ruby3.4-devel-0:3.4.12-33.1.hum1@aarch64",
            "Red Hat Hardened Images:ruby3.4-devel-0:3.4.12-33.1.hum1@s390x",
            "Red Hat Hardened Images:ruby3.4-devel-0:3.4.12-33.1.hum1@x86_64",
            "Red Hat Hardened Images:ruby3.4-doc-0:3.4.12-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:ruby3.4-doc-0:3.4.12-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:ruby3.4-doc-0:3.4.12-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:ruby3.4-libs-0:3.4.12-33.1.hum1@aarch64",
            "Red Hat Hardened Images:ruby3.4-libs-0:3.4.12-33.1.hum1@s390x",
            "Red Hat Hardened Images:ruby3.4-libs-0:3.4.12-33.1.hum1@x86_64",
            "Red Hat Hardened Images:rubygem3.4-bigdecimal-0:3.1.8-33.1.hum1@aarch64",
            "Red Hat Hardened Images:rubygem3.4-bigdecimal-0:3.1.8-33.1.hum1@s390x",
            "Red Hat Hardened Images:rubygem3.4-bigdecimal-0:3.1.8-33.1.hum1@x86_64",
            "Red Hat Hardened Images:rubygem3.4-bundler-0:2.6.9-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-bundler-0:2.6.9-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-bundler-0:2.6.9-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:rubygem3.4-devel-0:3.6.9-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-devel-0:3.6.9-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-devel-0:3.6.9-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:rubygem3.4-io-console-0:0.8.1-33.1.hum1@aarch64",
            "Red Hat Hardened Images:rubygem3.4-io-console-0:0.8.1-33.1.hum1@s390x",
            "Red Hat Hardened Images:rubygem3.4-io-console-0:0.8.1-33.1.hum1@x86_64",
            "Red Hat Hardened Images:rubygem3.4-irb-0:1.14.3-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-irb-0:1.14.3-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-irb-0:1.14.3-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:rubygem3.4-json-0:2.9.1-33.1.hum1@aarch64",
            "Red Hat Hardened Images:rubygem3.4-json-0:2.9.1-33.1.hum1@s390x",
            "Red Hat Hardened Images:rubygem3.4-json-0:2.9.1-33.1.hum1@x86_64",
            "Red Hat Hardened Images:rubygem3.4-minitest-0:5.25.4-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-minitest-0:5.25.4-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-minitest-0:5.25.4-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:rubygem3.4-power_assert-0:2.0.5-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-power_assert-0:2.0.5-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-power_assert-0:2.0.5-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:rubygem3.4-psych-0:5.2.2-33.1.hum1@aarch64",
            "Red Hat Hardened Images:rubygem3.4-psych-0:5.2.2-33.1.hum1@s390x",
            "Red Hat Hardened Images:rubygem3.4-psych-0:5.2.2-33.1.hum1@x86_64",
            "Red Hat Hardened Images:rubygem3.4-racc-0:1.8.1-33.1.hum1@aarch64",
            "Red Hat Hardened Images:rubygem3.4-racc-0:1.8.1-33.1.hum1@s390x",
            "Red Hat Hardened Images:rubygem3.4-racc-0:1.8.1-33.1.hum1@x86_64",
            "Red Hat Hardened Images:rubygem3.4-rake-0:13.2.1-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-rake-0:13.2.1-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-rake-0:13.2.1-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:rubygem3.4-rbs-0:3.8.0-33.1.hum1@aarch64",
            "Red Hat Hardened Images:rubygem3.4-rbs-0:3.8.0-33.1.hum1@s390x",
            "Red Hat Hardened Images:rubygem3.4-rbs-0:3.8.0-33.1.hum1@x86_64",
            "Red Hat Hardened Images:rubygem3.4-rdoc-0:6.14.0-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-rdoc-0:6.14.0-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-rdoc-0:6.14.0-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:rubygem3.4-rexml-0:3.4.4-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-rexml-0:3.4.4-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-rexml-0:3.4.4-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:rubygem3.4-rss-0:0.3.1-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-rss-0:0.3.1-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-rss-0:0.3.1-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:rubygem3.4-rubygems-0:3.6.9-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-rubygems-0:3.6.9-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-rubygems-0:3.6.9-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:rubygem3.4-test-unit-0:3.6.7-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-test-unit-0:3.6.7-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-test-unit-0:3.6.7-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:rubygem3.4-typeprof-0:0.30.1-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-typeprof-0:0.30.1-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-typeprof-0:0.30.1-33.1.hum1@noarch@public-hummingbird-x86_64-rpms"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Hardened Images:ruby3.4-0:3.4.12-33.1.hum1@aarch64",
            "Red Hat Hardened Images:ruby3.4-0:3.4.12-33.1.hum1@s390x",
            "Red Hat Hardened Images:ruby3.4-0:3.4.12-33.1.hum1@src",
            "Red Hat Hardened Images:ruby3.4-0:3.4.12-33.1.hum1@x86_64",
            "Red Hat Hardened Images:ruby3.4-bundled-gems-0:3.4.12-33.1.hum1@aarch64",
            "Red Hat Hardened Images:ruby3.4-bundled-gems-0:3.4.12-33.1.hum1@s390x",
            "Red Hat Hardened Images:ruby3.4-bundled-gems-0:3.4.12-33.1.hum1@x86_64",
            "Red Hat Hardened Images:ruby3.4-default-gems-0:3.4.12-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:ruby3.4-default-gems-0:3.4.12-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:ruby3.4-default-gems-0:3.4.12-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:ruby3.4-devel-0:3.4.12-33.1.hum1@aarch64",
            "Red Hat Hardened Images:ruby3.4-devel-0:3.4.12-33.1.hum1@s390x",
            "Red Hat Hardened Images:ruby3.4-devel-0:3.4.12-33.1.hum1@x86_64",
            "Red Hat Hardened Images:ruby3.4-doc-0:3.4.12-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:ruby3.4-doc-0:3.4.12-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:ruby3.4-doc-0:3.4.12-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:ruby3.4-libs-0:3.4.12-33.1.hum1@aarch64",
            "Red Hat Hardened Images:ruby3.4-libs-0:3.4.12-33.1.hum1@s390x",
            "Red Hat Hardened Images:ruby3.4-libs-0:3.4.12-33.1.hum1@x86_64",
            "Red Hat Hardened Images:rubygem3.4-bigdecimal-0:3.1.8-33.1.hum1@aarch64",
            "Red Hat Hardened Images:rubygem3.4-bigdecimal-0:3.1.8-33.1.hum1@s390x",
            "Red Hat Hardened Images:rubygem3.4-bigdecimal-0:3.1.8-33.1.hum1@x86_64",
            "Red Hat Hardened Images:rubygem3.4-bundler-0:2.6.9-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-bundler-0:2.6.9-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-bundler-0:2.6.9-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:rubygem3.4-devel-0:3.6.9-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-devel-0:3.6.9-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-devel-0:3.6.9-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:rubygem3.4-io-console-0:0.8.1-33.1.hum1@aarch64",
            "Red Hat Hardened Images:rubygem3.4-io-console-0:0.8.1-33.1.hum1@s390x",
            "Red Hat Hardened Images:rubygem3.4-io-console-0:0.8.1-33.1.hum1@x86_64",
            "Red Hat Hardened Images:rubygem3.4-irb-0:1.14.3-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-irb-0:1.14.3-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-irb-0:1.14.3-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:rubygem3.4-json-0:2.9.1-33.1.hum1@aarch64",
            "Red Hat Hardened Images:rubygem3.4-json-0:2.9.1-33.1.hum1@s390x",
            "Red Hat Hardened Images:rubygem3.4-json-0:2.9.1-33.1.hum1@x86_64",
            "Red Hat Hardened Images:rubygem3.4-minitest-0:5.25.4-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-minitest-0:5.25.4-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-minitest-0:5.25.4-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:rubygem3.4-power_assert-0:2.0.5-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-power_assert-0:2.0.5-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-power_assert-0:2.0.5-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:rubygem3.4-psych-0:5.2.2-33.1.hum1@aarch64",
            "Red Hat Hardened Images:rubygem3.4-psych-0:5.2.2-33.1.hum1@s390x",
            "Red Hat Hardened Images:rubygem3.4-psych-0:5.2.2-33.1.hum1@x86_64",
            "Red Hat Hardened Images:rubygem3.4-racc-0:1.8.1-33.1.hum1@aarch64",
            "Red Hat Hardened Images:rubygem3.4-racc-0:1.8.1-33.1.hum1@s390x",
            "Red Hat Hardened Images:rubygem3.4-racc-0:1.8.1-33.1.hum1@x86_64",
            "Red Hat Hardened Images:rubygem3.4-rake-0:13.2.1-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-rake-0:13.2.1-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-rake-0:13.2.1-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:rubygem3.4-rbs-0:3.8.0-33.1.hum1@aarch64",
            "Red Hat Hardened Images:rubygem3.4-rbs-0:3.8.0-33.1.hum1@s390x",
            "Red Hat Hardened Images:rubygem3.4-rbs-0:3.8.0-33.1.hum1@x86_64",
            "Red Hat Hardened Images:rubygem3.4-rdoc-0:6.14.0-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-rdoc-0:6.14.0-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-rdoc-0:6.14.0-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:rubygem3.4-rexml-0:3.4.4-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-rexml-0:3.4.4-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-rexml-0:3.4.4-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:rubygem3.4-rss-0:0.3.1-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-rss-0:0.3.1-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-rss-0:0.3.1-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:rubygem3.4-rubygems-0:3.6.9-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-rubygems-0:3.6.9-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-rubygems-0:3.6.9-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:rubygem3.4-test-unit-0:3.6.7-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-test-unit-0:3.6.7-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-test-unit-0:3.6.7-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:rubygem3.4-typeprof-0:0.30.1-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-typeprof-0:0.30.1-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-typeprof-0:0.30.1-33.1.hum1@noarch@public-hummingbird-x86_64-rpms"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "ruby: integer overflow issue in regular expression compiler"
    },
    {
      "cve": "CVE-2026-97229",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "discovery_date": "2026-10-23T00:00:00+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Hardened Images:rubygem3.4-bigdecimal-0:3.1.8-33.1.hum1@aarch64",
            "Red Hat Hardened Images:rubygem3.4-bigdecimal-0:3.1.8-33.1.hum1@s390x",
            "Red Hat Hardened Images:rubygem3.4-bigdecimal-0:3.1.8-33.1.hum1@x86_64",
            "Red Hat Hardened Images:rubygem3.4-bundler-0:2.6.9-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-bundler-0:2.6.9-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-bundler-0:2.6.9-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:rubygem3.4-devel-0:3.6.9-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-devel-0:3.6.9-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-devel-0:3.6.9-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:rubygem3.4-io-console-0:0.8.1-33.1.hum1@aarch64",
            "Red Hat Hardened Images:rubygem3.4-io-console-0:0.8.1-33.1.hum1@s390x",
            "Red Hat Hardened Images:rubygem3.4-io-console-0:0.8.1-33.1.hum1@x86_64",
            "Red Hat Hardened Images:rubygem3.4-irb-0:1.14.3-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-irb-0:1.14.3-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-irb-0:1.14.3-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:rubygem3.4-json-0:2.9.1-33.1.hum1@aarch64",
            "Red Hat Hardened Images:rubygem3.4-json-0:2.9.1-33.1.hum1@s390x",
            "Red Hat Hardened Images:rubygem3.4-json-0:2.9.1-33.1.hum1@x86_64",
            "Red Hat Hardened Images:rubygem3.4-minitest-0:5.25.4-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-minitest-0:5.25.4-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-minitest-0:5.25.4-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:rubygem3.4-power_assert-0:2.0.5-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-power_assert-0:2.0.5-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-power_assert-0:2.0.5-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:rubygem3.4-psych-0:5.2.2-33.1.hum1@aarch64",
            "Red Hat Hardened Images:rubygem3.4-psych-0:5.2.2-33.1.hum1@s390x",
            "Red Hat Hardened Images:rubygem3.4-psych-0:5.2.2-33.1.hum1@x86_64",
            "Red Hat Hardened Images:rubygem3.4-racc-0:1.8.1-33.1.hum1@aarch64",
            "Red Hat Hardened Images:rubygem3.4-racc-0:1.8.1-33.1.hum1@s390x",
            "Red Hat Hardened Images:rubygem3.4-racc-0:1.8.1-33.1.hum1@x86_64",
            "Red Hat Hardened Images:rubygem3.4-rake-0:13.2.1-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-rake-0:13.2.1-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-rake-0:13.2.1-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:rubygem3.4-rbs-0:3.8.0-33.1.hum1@aarch64",
            "Red Hat Hardened Images:rubygem3.4-rbs-0:3.8.0-33.1.hum1@s390x",
            "Red Hat Hardened Images:rubygem3.4-rbs-0:3.8.0-33.1.hum1@x86_64",
            "Red Hat Hardened Images:rubygem3.4-rdoc-0:6.14.0-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-rdoc-0:6.14.0-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-rdoc-0:6.14.0-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:rubygem3.4-rexml-0:3.4.4-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-rexml-0:3.4.4-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-rexml-0:3.4.4-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:rubygem3.4-rss-0:0.3.1-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-rss-0:0.3.1-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-rss-0:0.3.1-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:rubygem3.4-rubygems-0:3.6.9-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-rubygems-0:3.6.9-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-rubygems-0:3.6.9-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:rubygem3.4-test-unit-0:3.6.7-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-test-unit-0:3.6.7-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-test-unit-0:3.6.7-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:rubygem3.4-typeprof-0:0.30.1-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-typeprof-0:0.30.1-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-typeprof-0:0.30.1-33.1.hum1@noarch@public-hummingbird-x86_64-rpms"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2550153"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Ruby. When compiling a specially crafted regular expression with the methods Regexp.new, Regexp.union, Regexp.compile, or via a string interpolation such as /#{input}/, an integer overflow in the size of the compiled pattern can occur. This integer overflow causes memory corruption, potentially resulting in arbitrary code execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "ruby: integer overflow issue in CI/CD regular expression compiler",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat has rated the impact of these flaws as Moderate for the Ruby packages shipped in Red Hat Enterprise Linux. The Ruby packages provide a language interpreter and standard library and do not accept external input on their own; these flaws are reachable only when an application compiles a regular expression constructed from attacker-controlled input.\n\nUpstream Ruby has published a security advisory for these issues and scopes the flaws narrowly, stating that they \"are reached only when an application compiles a regular expression from a string that an attacker controls, for example by passing it to Regexp.new, Regexp.union or Regexp.compile\", and that \"applications that only use regular expressions written by their own developers are not affected\". Upstream further notes that Ruby \"has generally considered it unsafe to compile and use a regular expression created from untrusted input\".\n\nThe CVE identifiers for these flaws were assigned by GitLab, where the issues were originally reported and where remote code execution was demonstrated against GitLab\u0027s own application. Ruby did not request separate identifiers and has asked downstream distributors to track these issues under GitLab\u0027s CVE IDs.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Hardened Images:ruby3.4-0:3.4.12-33.1.hum1@aarch64",
          "Red Hat Hardened Images:ruby3.4-0:3.4.12-33.1.hum1@s390x",
          "Red Hat Hardened Images:ruby3.4-0:3.4.12-33.1.hum1@src",
          "Red Hat Hardened Images:ruby3.4-0:3.4.12-33.1.hum1@x86_64",
          "Red Hat Hardened Images:ruby3.4-bundled-gems-0:3.4.12-33.1.hum1@aarch64",
          "Red Hat Hardened Images:ruby3.4-bundled-gems-0:3.4.12-33.1.hum1@s390x",
          "Red Hat Hardened Images:ruby3.4-bundled-gems-0:3.4.12-33.1.hum1@x86_64",
          "Red Hat Hardened Images:ruby3.4-default-gems-0:3.4.12-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
          "Red Hat Hardened Images:ruby3.4-default-gems-0:3.4.12-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
          "Red Hat Hardened Images:ruby3.4-default-gems-0:3.4.12-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
          "Red Hat Hardened Images:ruby3.4-devel-0:3.4.12-33.1.hum1@aarch64",
          "Red Hat Hardened Images:ruby3.4-devel-0:3.4.12-33.1.hum1@s390x",
          "Red Hat Hardened Images:ruby3.4-devel-0:3.4.12-33.1.hum1@x86_64",
          "Red Hat Hardened Images:ruby3.4-doc-0:3.4.12-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
          "Red Hat Hardened Images:ruby3.4-doc-0:3.4.12-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
          "Red Hat Hardened Images:ruby3.4-doc-0:3.4.12-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
          "Red Hat Hardened Images:ruby3.4-libs-0:3.4.12-33.1.hum1@aarch64",
          "Red Hat Hardened Images:ruby3.4-libs-0:3.4.12-33.1.hum1@s390x",
          "Red Hat Hardened Images:ruby3.4-libs-0:3.4.12-33.1.hum1@x86_64"
        ],
        "known_not_affected": [
          "Red Hat Hardened Images:rubygem3.4-bigdecimal-0:3.1.8-33.1.hum1@aarch64",
          "Red Hat Hardened Images:rubygem3.4-bigdecimal-0:3.1.8-33.1.hum1@s390x",
          "Red Hat Hardened Images:rubygem3.4-bigdecimal-0:3.1.8-33.1.hum1@x86_64",
          "Red Hat Hardened Images:rubygem3.4-bundler-0:2.6.9-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
          "Red Hat Hardened Images:rubygem3.4-bundler-0:2.6.9-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
          "Red Hat Hardened Images:rubygem3.4-bundler-0:2.6.9-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
          "Red Hat Hardened Images:rubygem3.4-devel-0:3.6.9-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
          "Red Hat Hardened Images:rubygem3.4-devel-0:3.6.9-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
          "Red Hat Hardened Images:rubygem3.4-devel-0:3.6.9-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
          "Red Hat Hardened Images:rubygem3.4-io-console-0:0.8.1-33.1.hum1@aarch64",
          "Red Hat Hardened Images:rubygem3.4-io-console-0:0.8.1-33.1.hum1@s390x",
          "Red Hat Hardened Images:rubygem3.4-io-console-0:0.8.1-33.1.hum1@x86_64",
          "Red Hat Hardened Images:rubygem3.4-irb-0:1.14.3-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
          "Red Hat Hardened Images:rubygem3.4-irb-0:1.14.3-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
          "Red Hat Hardened Images:rubygem3.4-irb-0:1.14.3-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
          "Red Hat Hardened Images:rubygem3.4-json-0:2.9.1-33.1.hum1@aarch64",
          "Red Hat Hardened Images:rubygem3.4-json-0:2.9.1-33.1.hum1@s390x",
          "Red Hat Hardened Images:rubygem3.4-json-0:2.9.1-33.1.hum1@x86_64",
          "Red Hat Hardened Images:rubygem3.4-minitest-0:5.25.4-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
          "Red Hat Hardened Images:rubygem3.4-minitest-0:5.25.4-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
          "Red Hat Hardened Images:rubygem3.4-minitest-0:5.25.4-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
          "Red Hat Hardened Images:rubygem3.4-power_assert-0:2.0.5-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
          "Red Hat Hardened Images:rubygem3.4-power_assert-0:2.0.5-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
          "Red Hat Hardened Images:rubygem3.4-power_assert-0:2.0.5-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
          "Red Hat Hardened Images:rubygem3.4-psych-0:5.2.2-33.1.hum1@aarch64",
          "Red Hat Hardened Images:rubygem3.4-psych-0:5.2.2-33.1.hum1@s390x",
          "Red Hat Hardened Images:rubygem3.4-psych-0:5.2.2-33.1.hum1@x86_64",
          "Red Hat Hardened Images:rubygem3.4-racc-0:1.8.1-33.1.hum1@aarch64",
          "Red Hat Hardened Images:rubygem3.4-racc-0:1.8.1-33.1.hum1@s390x",
          "Red Hat Hardened Images:rubygem3.4-racc-0:1.8.1-33.1.hum1@x86_64",
          "Red Hat Hardened Images:rubygem3.4-rake-0:13.2.1-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
          "Red Hat Hardened Images:rubygem3.4-rake-0:13.2.1-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
          "Red Hat Hardened Images:rubygem3.4-rake-0:13.2.1-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
          "Red Hat Hardened Images:rubygem3.4-rbs-0:3.8.0-33.1.hum1@aarch64",
          "Red Hat Hardened Images:rubygem3.4-rbs-0:3.8.0-33.1.hum1@s390x",
          "Red Hat Hardened Images:rubygem3.4-rbs-0:3.8.0-33.1.hum1@x86_64",
          "Red Hat Hardened Images:rubygem3.4-rdoc-0:6.14.0-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
          "Red Hat Hardened Images:rubygem3.4-rdoc-0:6.14.0-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
          "Red Hat Hardened Images:rubygem3.4-rdoc-0:6.14.0-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
          "Red Hat Hardened Images:rubygem3.4-rexml-0:3.4.4-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
          "Red Hat Hardened Images:rubygem3.4-rexml-0:3.4.4-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
          "Red Hat Hardened Images:rubygem3.4-rexml-0:3.4.4-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
          "Red Hat Hardened Images:rubygem3.4-rss-0:0.3.1-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
          "Red Hat Hardened Images:rubygem3.4-rss-0:0.3.1-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
          "Red Hat Hardened Images:rubygem3.4-rss-0:0.3.1-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
          "Red Hat Hardened Images:rubygem3.4-rubygems-0:3.6.9-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
          "Red Hat Hardened Images:rubygem3.4-rubygems-0:3.6.9-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
          "Red Hat Hardened Images:rubygem3.4-rubygems-0:3.6.9-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
          "Red Hat Hardened Images:rubygem3.4-test-unit-0:3.6.7-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
          "Red Hat Hardened Images:rubygem3.4-test-unit-0:3.6.7-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
          "Red Hat Hardened Images:rubygem3.4-test-unit-0:3.6.7-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
          "Red Hat Hardened Images:rubygem3.4-typeprof-0:0.30.1-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
          "Red Hat Hardened Images:rubygem3.4-typeprof-0:0.30.1-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
          "Red Hat Hardened Images:rubygem3.4-typeprof-0:0.30.1-33.1.hum1@noarch@public-hummingbird-x86_64-rpms"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-97229"
        },
        {
          "category": "external",
          "summary": "RHBZ#2550153",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2550153"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-97229",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-97229"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-97229",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-97229"
        },
        {
          "category": "external",
          "summary": "https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-4-2-released/",
          "url": "https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-4-2-released/"
        },
        {
          "category": "external",
          "summary": "https://gitlab.com/gitlab-org/gitlab/-/work_items/630686",
          "url": "https://gitlab.com/gitlab-org/gitlab/-/work_items/630686"
        },
        {
          "category": "external",
          "summary": "https://hackerone.com/reports/4055749",
          "url": "https://hackerone.com/reports/4055749"
        },
        {
          "category": "external",
          "summary": "https://hackerone.com/reports/4058589",
          "url": "https://hackerone.com/reports/4058589"
        },
        {
          "category": "external",
          "summary": "https://www.ruby-lang.org/en/news/2026/10/23/regexp-fixes-for-gitlab-cves/",
          "url": "https://www.ruby-lang.org/en/news/2026/10/23/regexp-fixes-for-gitlab-cves/"
        },
        {
          "category": "external",
          "summary": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
          "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
        }
      ],
      "release_date": "2026-10-13T01:05:46.166000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-23T21:28:41+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
          "product_ids": [
            "Red Hat Hardened Images:ruby3.4-0:3.4.12-33.1.hum1@aarch64",
            "Red Hat Hardened Images:ruby3.4-0:3.4.12-33.1.hum1@s390x",
            "Red Hat Hardened Images:ruby3.4-0:3.4.12-33.1.hum1@src",
            "Red Hat Hardened Images:ruby3.4-0:3.4.12-33.1.hum1@x86_64",
            "Red Hat Hardened Images:ruby3.4-bundled-gems-0:3.4.12-33.1.hum1@aarch64",
            "Red Hat Hardened Images:ruby3.4-bundled-gems-0:3.4.12-33.1.hum1@s390x",
            "Red Hat Hardened Images:ruby3.4-bundled-gems-0:3.4.12-33.1.hum1@x86_64",
            "Red Hat Hardened Images:ruby3.4-default-gems-0:3.4.12-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:ruby3.4-default-gems-0:3.4.12-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:ruby3.4-default-gems-0:3.4.12-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:ruby3.4-devel-0:3.4.12-33.1.hum1@aarch64",
            "Red Hat Hardened Images:ruby3.4-devel-0:3.4.12-33.1.hum1@s390x",
            "Red Hat Hardened Images:ruby3.4-devel-0:3.4.12-33.1.hum1@x86_64",
            "Red Hat Hardened Images:ruby3.4-doc-0:3.4.12-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:ruby3.4-doc-0:3.4.12-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:ruby3.4-doc-0:3.4.12-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:ruby3.4-libs-0:3.4.12-33.1.hum1@aarch64",
            "Red Hat Hardened Images:ruby3.4-libs-0:3.4.12-33.1.hum1@s390x",
            "Red Hat Hardened Images:ruby3.4-libs-0:3.4.12-33.1.hum1@x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:88861"
        },
        {
          "category": "workaround",
          "details": "To mitigate this vulnerability, do not compile regular expressions from untrusted sources. Standard safeguards such as Regexp.timeout or limiting the length of the input pattern do not protect against this issue.",
          "product_ids": [
            "Red Hat Hardened Images:ruby3.4-0:3.4.12-33.1.hum1@aarch64",
            "Red Hat Hardened Images:ruby3.4-0:3.4.12-33.1.hum1@s390x",
            "Red Hat Hardened Images:ruby3.4-0:3.4.12-33.1.hum1@src",
            "Red Hat Hardened Images:ruby3.4-0:3.4.12-33.1.hum1@x86_64",
            "Red Hat Hardened Images:ruby3.4-bundled-gems-0:3.4.12-33.1.hum1@aarch64",
            "Red Hat Hardened Images:ruby3.4-bundled-gems-0:3.4.12-33.1.hum1@s390x",
            "Red Hat Hardened Images:ruby3.4-bundled-gems-0:3.4.12-33.1.hum1@x86_64",
            "Red Hat Hardened Images:ruby3.4-default-gems-0:3.4.12-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:ruby3.4-default-gems-0:3.4.12-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:ruby3.4-default-gems-0:3.4.12-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:ruby3.4-devel-0:3.4.12-33.1.hum1@aarch64",
            "Red Hat Hardened Images:ruby3.4-devel-0:3.4.12-33.1.hum1@s390x",
            "Red Hat Hardened Images:ruby3.4-devel-0:3.4.12-33.1.hum1@x86_64",
            "Red Hat Hardened Images:ruby3.4-doc-0:3.4.12-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:ruby3.4-doc-0:3.4.12-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:ruby3.4-doc-0:3.4.12-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:ruby3.4-libs-0:3.4.12-33.1.hum1@aarch64",
            "Red Hat Hardened Images:ruby3.4-libs-0:3.4.12-33.1.hum1@s390x",
            "Red Hat Hardened Images:ruby3.4-libs-0:3.4.12-33.1.hum1@x86_64",
            "Red Hat Hardened Images:rubygem3.4-bigdecimal-0:3.1.8-33.1.hum1@aarch64",
            "Red Hat Hardened Images:rubygem3.4-bigdecimal-0:3.1.8-33.1.hum1@s390x",
            "Red Hat Hardened Images:rubygem3.4-bigdecimal-0:3.1.8-33.1.hum1@x86_64",
            "Red Hat Hardened Images:rubygem3.4-bundler-0:2.6.9-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-bundler-0:2.6.9-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-bundler-0:2.6.9-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:rubygem3.4-devel-0:3.6.9-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-devel-0:3.6.9-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-devel-0:3.6.9-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:rubygem3.4-io-console-0:0.8.1-33.1.hum1@aarch64",
            "Red Hat Hardened Images:rubygem3.4-io-console-0:0.8.1-33.1.hum1@s390x",
            "Red Hat Hardened Images:rubygem3.4-io-console-0:0.8.1-33.1.hum1@x86_64",
            "Red Hat Hardened Images:rubygem3.4-irb-0:1.14.3-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-irb-0:1.14.3-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-irb-0:1.14.3-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:rubygem3.4-json-0:2.9.1-33.1.hum1@aarch64",
            "Red Hat Hardened Images:rubygem3.4-json-0:2.9.1-33.1.hum1@s390x",
            "Red Hat Hardened Images:rubygem3.4-json-0:2.9.1-33.1.hum1@x86_64",
            "Red Hat Hardened Images:rubygem3.4-minitest-0:5.25.4-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-minitest-0:5.25.4-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-minitest-0:5.25.4-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:rubygem3.4-power_assert-0:2.0.5-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-power_assert-0:2.0.5-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-power_assert-0:2.0.5-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:rubygem3.4-psych-0:5.2.2-33.1.hum1@aarch64",
            "Red Hat Hardened Images:rubygem3.4-psych-0:5.2.2-33.1.hum1@s390x",
            "Red Hat Hardened Images:rubygem3.4-psych-0:5.2.2-33.1.hum1@x86_64",
            "Red Hat Hardened Images:rubygem3.4-racc-0:1.8.1-33.1.hum1@aarch64",
            "Red Hat Hardened Images:rubygem3.4-racc-0:1.8.1-33.1.hum1@s390x",
            "Red Hat Hardened Images:rubygem3.4-racc-0:1.8.1-33.1.hum1@x86_64",
            "Red Hat Hardened Images:rubygem3.4-rake-0:13.2.1-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-rake-0:13.2.1-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-rake-0:13.2.1-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:rubygem3.4-rbs-0:3.8.0-33.1.hum1@aarch64",
            "Red Hat Hardened Images:rubygem3.4-rbs-0:3.8.0-33.1.hum1@s390x",
            "Red Hat Hardened Images:rubygem3.4-rbs-0:3.8.0-33.1.hum1@x86_64",
            "Red Hat Hardened Images:rubygem3.4-rdoc-0:6.14.0-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-rdoc-0:6.14.0-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-rdoc-0:6.14.0-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:rubygem3.4-rexml-0:3.4.4-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-rexml-0:3.4.4-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-rexml-0:3.4.4-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:rubygem3.4-rss-0:0.3.1-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-rss-0:0.3.1-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-rss-0:0.3.1-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:rubygem3.4-rubygems-0:3.6.9-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-rubygems-0:3.6.9-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-rubygems-0:3.6.9-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:rubygem3.4-test-unit-0:3.6.7-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-test-unit-0:3.6.7-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-test-unit-0:3.6.7-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:rubygem3.4-typeprof-0:0.30.1-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-typeprof-0:0.30.1-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-typeprof-0:0.30.1-33.1.hum1@noarch@public-hummingbird-x86_64-rpms"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Hardened Images:ruby3.4-0:3.4.12-33.1.hum1@aarch64",
            "Red Hat Hardened Images:ruby3.4-0:3.4.12-33.1.hum1@s390x",
            "Red Hat Hardened Images:ruby3.4-0:3.4.12-33.1.hum1@src",
            "Red Hat Hardened Images:ruby3.4-0:3.4.12-33.1.hum1@x86_64",
            "Red Hat Hardened Images:ruby3.4-bundled-gems-0:3.4.12-33.1.hum1@aarch64",
            "Red Hat Hardened Images:ruby3.4-bundled-gems-0:3.4.12-33.1.hum1@s390x",
            "Red Hat Hardened Images:ruby3.4-bundled-gems-0:3.4.12-33.1.hum1@x86_64",
            "Red Hat Hardened Images:ruby3.4-default-gems-0:3.4.12-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:ruby3.4-default-gems-0:3.4.12-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:ruby3.4-default-gems-0:3.4.12-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:ruby3.4-devel-0:3.4.12-33.1.hum1@aarch64",
            "Red Hat Hardened Images:ruby3.4-devel-0:3.4.12-33.1.hum1@s390x",
            "Red Hat Hardened Images:ruby3.4-devel-0:3.4.12-33.1.hum1@x86_64",
            "Red Hat Hardened Images:ruby3.4-doc-0:3.4.12-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:ruby3.4-doc-0:3.4.12-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:ruby3.4-doc-0:3.4.12-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:ruby3.4-libs-0:3.4.12-33.1.hum1@aarch64",
            "Red Hat Hardened Images:ruby3.4-libs-0:3.4.12-33.1.hum1@s390x",
            "Red Hat Hardened Images:ruby3.4-libs-0:3.4.12-33.1.hum1@x86_64",
            "Red Hat Hardened Images:rubygem3.4-bigdecimal-0:3.1.8-33.1.hum1@aarch64",
            "Red Hat Hardened Images:rubygem3.4-bigdecimal-0:3.1.8-33.1.hum1@s390x",
            "Red Hat Hardened Images:rubygem3.4-bigdecimal-0:3.1.8-33.1.hum1@x86_64",
            "Red Hat Hardened Images:rubygem3.4-bundler-0:2.6.9-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-bundler-0:2.6.9-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-bundler-0:2.6.9-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:rubygem3.4-devel-0:3.6.9-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-devel-0:3.6.9-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-devel-0:3.6.9-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:rubygem3.4-io-console-0:0.8.1-33.1.hum1@aarch64",
            "Red Hat Hardened Images:rubygem3.4-io-console-0:0.8.1-33.1.hum1@s390x",
            "Red Hat Hardened Images:rubygem3.4-io-console-0:0.8.1-33.1.hum1@x86_64",
            "Red Hat Hardened Images:rubygem3.4-irb-0:1.14.3-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-irb-0:1.14.3-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-irb-0:1.14.3-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:rubygem3.4-json-0:2.9.1-33.1.hum1@aarch64",
            "Red Hat Hardened Images:rubygem3.4-json-0:2.9.1-33.1.hum1@s390x",
            "Red Hat Hardened Images:rubygem3.4-json-0:2.9.1-33.1.hum1@x86_64",
            "Red Hat Hardened Images:rubygem3.4-minitest-0:5.25.4-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-minitest-0:5.25.4-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-minitest-0:5.25.4-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:rubygem3.4-power_assert-0:2.0.5-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-power_assert-0:2.0.5-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-power_assert-0:2.0.5-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:rubygem3.4-psych-0:5.2.2-33.1.hum1@aarch64",
            "Red Hat Hardened Images:rubygem3.4-psych-0:5.2.2-33.1.hum1@s390x",
            "Red Hat Hardened Images:rubygem3.4-psych-0:5.2.2-33.1.hum1@x86_64",
            "Red Hat Hardened Images:rubygem3.4-racc-0:1.8.1-33.1.hum1@aarch64",
            "Red Hat Hardened Images:rubygem3.4-racc-0:1.8.1-33.1.hum1@s390x",
            "Red Hat Hardened Images:rubygem3.4-racc-0:1.8.1-33.1.hum1@x86_64",
            "Red Hat Hardened Images:rubygem3.4-rake-0:13.2.1-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-rake-0:13.2.1-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-rake-0:13.2.1-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:rubygem3.4-rbs-0:3.8.0-33.1.hum1@aarch64",
            "Red Hat Hardened Images:rubygem3.4-rbs-0:3.8.0-33.1.hum1@s390x",
            "Red Hat Hardened Images:rubygem3.4-rbs-0:3.8.0-33.1.hum1@x86_64",
            "Red Hat Hardened Images:rubygem3.4-rdoc-0:6.14.0-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-rdoc-0:6.14.0-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-rdoc-0:6.14.0-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:rubygem3.4-rexml-0:3.4.4-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-rexml-0:3.4.4-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-rexml-0:3.4.4-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:rubygem3.4-rss-0:0.3.1-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-rss-0:0.3.1-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-rss-0:0.3.1-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:rubygem3.4-rubygems-0:3.6.9-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-rubygems-0:3.6.9-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-rubygems-0:3.6.9-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:rubygem3.4-test-unit-0:3.6.7-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-test-unit-0:3.6.7-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-test-unit-0:3.6.7-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:rubygem3.4-typeprof-0:0.30.1-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-typeprof-0:0.30.1-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-typeprof-0:0.30.1-33.1.hum1@noarch@public-hummingbird-x86_64-rpms"
          ]
        }
      ],
      "threats": [
        {
          "category": "exploit_status",
          "date": "2026-10-29T00:00:00+00:00",
          "details": "CISA: https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
        },
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "ruby: integer overflow issue in CI/CD regular expression compiler"
    },
    {
      "cve": "CVE-2026-110264",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "discovery_date": "2026-10-23T00:00:00+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Hardened Images:rubygem3.4-bigdecimal-0:3.1.8-33.1.hum1@aarch64",
            "Red Hat Hardened Images:rubygem3.4-bigdecimal-0:3.1.8-33.1.hum1@s390x",
            "Red Hat Hardened Images:rubygem3.4-bigdecimal-0:3.1.8-33.1.hum1@x86_64",
            "Red Hat Hardened Images:rubygem3.4-bundler-0:2.6.9-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-bundler-0:2.6.9-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-bundler-0:2.6.9-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:rubygem3.4-devel-0:3.6.9-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-devel-0:3.6.9-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-devel-0:3.6.9-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:rubygem3.4-io-console-0:0.8.1-33.1.hum1@aarch64",
            "Red Hat Hardened Images:rubygem3.4-io-console-0:0.8.1-33.1.hum1@s390x",
            "Red Hat Hardened Images:rubygem3.4-io-console-0:0.8.1-33.1.hum1@x86_64",
            "Red Hat Hardened Images:rubygem3.4-irb-0:1.14.3-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-irb-0:1.14.3-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-irb-0:1.14.3-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:rubygem3.4-json-0:2.9.1-33.1.hum1@aarch64",
            "Red Hat Hardened Images:rubygem3.4-json-0:2.9.1-33.1.hum1@s390x",
            "Red Hat Hardened Images:rubygem3.4-json-0:2.9.1-33.1.hum1@x86_64",
            "Red Hat Hardened Images:rubygem3.4-minitest-0:5.25.4-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-minitest-0:5.25.4-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-minitest-0:5.25.4-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:rubygem3.4-power_assert-0:2.0.5-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-power_assert-0:2.0.5-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-power_assert-0:2.0.5-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:rubygem3.4-psych-0:5.2.2-33.1.hum1@aarch64",
            "Red Hat Hardened Images:rubygem3.4-psych-0:5.2.2-33.1.hum1@s390x",
            "Red Hat Hardened Images:rubygem3.4-psych-0:5.2.2-33.1.hum1@x86_64",
            "Red Hat Hardened Images:rubygem3.4-racc-0:1.8.1-33.1.hum1@aarch64",
            "Red Hat Hardened Images:rubygem3.4-racc-0:1.8.1-33.1.hum1@s390x",
            "Red Hat Hardened Images:rubygem3.4-racc-0:1.8.1-33.1.hum1@x86_64",
            "Red Hat Hardened Images:rubygem3.4-rake-0:13.2.1-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-rake-0:13.2.1-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-rake-0:13.2.1-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:rubygem3.4-rbs-0:3.8.0-33.1.hum1@aarch64",
            "Red Hat Hardened Images:rubygem3.4-rbs-0:3.8.0-33.1.hum1@s390x",
            "Red Hat Hardened Images:rubygem3.4-rbs-0:3.8.0-33.1.hum1@x86_64",
            "Red Hat Hardened Images:rubygem3.4-rdoc-0:6.14.0-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-rdoc-0:6.14.0-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-rdoc-0:6.14.0-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:rubygem3.4-rexml-0:3.4.4-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-rexml-0:3.4.4-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-rexml-0:3.4.4-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:rubygem3.4-rss-0:0.3.1-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-rss-0:0.3.1-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-rss-0:0.3.1-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:rubygem3.4-rubygems-0:3.6.9-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-rubygems-0:3.6.9-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-rubygems-0:3.6.9-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:rubygem3.4-test-unit-0:3.6.7-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-test-unit-0:3.6.7-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-test-unit-0:3.6.7-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:rubygem3.4-typeprof-0:0.30.1-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-typeprof-0:0.30.1-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-typeprof-0:0.30.1-33.1.hum1@noarch@public-hummingbird-x86_64-rpms"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2558632"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Ruby. When compiling a specially crafted regular expression containing an excessive number of repeats with the methods Regexp.new, Regexp.union, Regexp.compile, or via a string interpolation such as /#{input}/, an integer overflow of internal IDs can occur. This integer overflow causes memory corruption, potentially resulting in arbitrary code execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "ruby: integer overflow issue in regular expression compiler",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat has rated the impact of these flaws as Moderate for the Ruby packages shipped in Red Hat Enterprise Linux. The Ruby packages provide a language interpreter and standard library and do not accept external input on their own; these flaws are reachable only when an application compiles a regular expression constructed from attacker-controlled input.\n\nUpstream Ruby has published a security advisory for these issues and scopes the flaws narrowly, stating that they \"are reached only when an application compiles a regular expression from a string that an attacker controls, for example by passing it to Regexp.new, Regexp.union or Regexp.compile\", and that \"applications that only use regular expressions written by their own developers are not affected\". Upstream further notes that Ruby \"has generally considered it unsafe to compile and use a regular expression created from untrusted input\".\n\nThe CVE identifiers for these flaws were assigned by GitLab, where the issues were originally reported and where remote code execution was demonstrated against GitLab\u0027s own application. Ruby did not request separate identifiers and has asked downstream distributors to track these issues under GitLab\u0027s CVE IDs.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Hardened Images:ruby3.4-0:3.4.12-33.1.hum1@aarch64",
          "Red Hat Hardened Images:ruby3.4-0:3.4.12-33.1.hum1@s390x",
          "Red Hat Hardened Images:ruby3.4-0:3.4.12-33.1.hum1@src",
          "Red Hat Hardened Images:ruby3.4-0:3.4.12-33.1.hum1@x86_64",
          "Red Hat Hardened Images:ruby3.4-bundled-gems-0:3.4.12-33.1.hum1@aarch64",
          "Red Hat Hardened Images:ruby3.4-bundled-gems-0:3.4.12-33.1.hum1@s390x",
          "Red Hat Hardened Images:ruby3.4-bundled-gems-0:3.4.12-33.1.hum1@x86_64",
          "Red Hat Hardened Images:ruby3.4-default-gems-0:3.4.12-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
          "Red Hat Hardened Images:ruby3.4-default-gems-0:3.4.12-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
          "Red Hat Hardened Images:ruby3.4-default-gems-0:3.4.12-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
          "Red Hat Hardened Images:ruby3.4-devel-0:3.4.12-33.1.hum1@aarch64",
          "Red Hat Hardened Images:ruby3.4-devel-0:3.4.12-33.1.hum1@s390x",
          "Red Hat Hardened Images:ruby3.4-devel-0:3.4.12-33.1.hum1@x86_64",
          "Red Hat Hardened Images:ruby3.4-doc-0:3.4.12-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
          "Red Hat Hardened Images:ruby3.4-doc-0:3.4.12-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
          "Red Hat Hardened Images:ruby3.4-doc-0:3.4.12-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
          "Red Hat Hardened Images:ruby3.4-libs-0:3.4.12-33.1.hum1@aarch64",
          "Red Hat Hardened Images:ruby3.4-libs-0:3.4.12-33.1.hum1@s390x",
          "Red Hat Hardened Images:ruby3.4-libs-0:3.4.12-33.1.hum1@x86_64"
        ],
        "known_not_affected": [
          "Red Hat Hardened Images:rubygem3.4-bigdecimal-0:3.1.8-33.1.hum1@aarch64",
          "Red Hat Hardened Images:rubygem3.4-bigdecimal-0:3.1.8-33.1.hum1@s390x",
          "Red Hat Hardened Images:rubygem3.4-bigdecimal-0:3.1.8-33.1.hum1@x86_64",
          "Red Hat Hardened Images:rubygem3.4-bundler-0:2.6.9-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
          "Red Hat Hardened Images:rubygem3.4-bundler-0:2.6.9-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
          "Red Hat Hardened Images:rubygem3.4-bundler-0:2.6.9-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
          "Red Hat Hardened Images:rubygem3.4-devel-0:3.6.9-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
          "Red Hat Hardened Images:rubygem3.4-devel-0:3.6.9-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
          "Red Hat Hardened Images:rubygem3.4-devel-0:3.6.9-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
          "Red Hat Hardened Images:rubygem3.4-io-console-0:0.8.1-33.1.hum1@aarch64",
          "Red Hat Hardened Images:rubygem3.4-io-console-0:0.8.1-33.1.hum1@s390x",
          "Red Hat Hardened Images:rubygem3.4-io-console-0:0.8.1-33.1.hum1@x86_64",
          "Red Hat Hardened Images:rubygem3.4-irb-0:1.14.3-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
          "Red Hat Hardened Images:rubygem3.4-irb-0:1.14.3-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
          "Red Hat Hardened Images:rubygem3.4-irb-0:1.14.3-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
          "Red Hat Hardened Images:rubygem3.4-json-0:2.9.1-33.1.hum1@aarch64",
          "Red Hat Hardened Images:rubygem3.4-json-0:2.9.1-33.1.hum1@s390x",
          "Red Hat Hardened Images:rubygem3.4-json-0:2.9.1-33.1.hum1@x86_64",
          "Red Hat Hardened Images:rubygem3.4-minitest-0:5.25.4-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
          "Red Hat Hardened Images:rubygem3.4-minitest-0:5.25.4-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
          "Red Hat Hardened Images:rubygem3.4-minitest-0:5.25.4-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
          "Red Hat Hardened Images:rubygem3.4-power_assert-0:2.0.5-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
          "Red Hat Hardened Images:rubygem3.4-power_assert-0:2.0.5-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
          "Red Hat Hardened Images:rubygem3.4-power_assert-0:2.0.5-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
          "Red Hat Hardened Images:rubygem3.4-psych-0:5.2.2-33.1.hum1@aarch64",
          "Red Hat Hardened Images:rubygem3.4-psych-0:5.2.2-33.1.hum1@s390x",
          "Red Hat Hardened Images:rubygem3.4-psych-0:5.2.2-33.1.hum1@x86_64",
          "Red Hat Hardened Images:rubygem3.4-racc-0:1.8.1-33.1.hum1@aarch64",
          "Red Hat Hardened Images:rubygem3.4-racc-0:1.8.1-33.1.hum1@s390x",
          "Red Hat Hardened Images:rubygem3.4-racc-0:1.8.1-33.1.hum1@x86_64",
          "Red Hat Hardened Images:rubygem3.4-rake-0:13.2.1-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
          "Red Hat Hardened Images:rubygem3.4-rake-0:13.2.1-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
          "Red Hat Hardened Images:rubygem3.4-rake-0:13.2.1-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
          "Red Hat Hardened Images:rubygem3.4-rbs-0:3.8.0-33.1.hum1@aarch64",
          "Red Hat Hardened Images:rubygem3.4-rbs-0:3.8.0-33.1.hum1@s390x",
          "Red Hat Hardened Images:rubygem3.4-rbs-0:3.8.0-33.1.hum1@x86_64",
          "Red Hat Hardened Images:rubygem3.4-rdoc-0:6.14.0-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
          "Red Hat Hardened Images:rubygem3.4-rdoc-0:6.14.0-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
          "Red Hat Hardened Images:rubygem3.4-rdoc-0:6.14.0-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
          "Red Hat Hardened Images:rubygem3.4-rexml-0:3.4.4-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
          "Red Hat Hardened Images:rubygem3.4-rexml-0:3.4.4-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
          "Red Hat Hardened Images:rubygem3.4-rexml-0:3.4.4-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
          "Red Hat Hardened Images:rubygem3.4-rss-0:0.3.1-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
          "Red Hat Hardened Images:rubygem3.4-rss-0:0.3.1-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
          "Red Hat Hardened Images:rubygem3.4-rss-0:0.3.1-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
          "Red Hat Hardened Images:rubygem3.4-rubygems-0:3.6.9-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
          "Red Hat Hardened Images:rubygem3.4-rubygems-0:3.6.9-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
          "Red Hat Hardened Images:rubygem3.4-rubygems-0:3.6.9-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
          "Red Hat Hardened Images:rubygem3.4-test-unit-0:3.6.7-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
          "Red Hat Hardened Images:rubygem3.4-test-unit-0:3.6.7-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
          "Red Hat Hardened Images:rubygem3.4-test-unit-0:3.6.7-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
          "Red Hat Hardened Images:rubygem3.4-typeprof-0:0.30.1-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
          "Red Hat Hardened Images:rubygem3.4-typeprof-0:0.30.1-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
          "Red Hat Hardened Images:rubygem3.4-typeprof-0:0.30.1-33.1.hum1@noarch@public-hummingbird-x86_64-rpms"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-110264"
        },
        {
          "category": "external",
          "summary": "RHBZ#2558632",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2558632"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-110264",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-110264"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-110264",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-110264"
        },
        {
          "category": "external",
          "summary": "https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-5-1-released/",
          "url": "https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-5-1-released/"
        },
        {
          "category": "external",
          "summary": "https://gitlab.com/gitlab-org/gitlab/-/work_items/633633",
          "url": "https://gitlab.com/gitlab-org/gitlab/-/work_items/633633"
        },
        {
          "category": "external",
          "summary": "https://hackerone.com/reports/4093475",
          "url": "https://hackerone.com/reports/4093475"
        },
        {
          "category": "external",
          "summary": "https://www.ruby-lang.org/en/news/2026/10/23/regexp-fixes-for-gitlab-cves/",
          "url": "https://www.ruby-lang.org/en/news/2026/10/23/regexp-fixes-for-gitlab-cves/"
        }
      ],
      "release_date": "2026-10-22T00:33:48.179000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-23T21:28:41+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
          "product_ids": [
            "Red Hat Hardened Images:ruby3.4-0:3.4.12-33.1.hum1@aarch64",
            "Red Hat Hardened Images:ruby3.4-0:3.4.12-33.1.hum1@s390x",
            "Red Hat Hardened Images:ruby3.4-0:3.4.12-33.1.hum1@src",
            "Red Hat Hardened Images:ruby3.4-0:3.4.12-33.1.hum1@x86_64",
            "Red Hat Hardened Images:ruby3.4-bundled-gems-0:3.4.12-33.1.hum1@aarch64",
            "Red Hat Hardened Images:ruby3.4-bundled-gems-0:3.4.12-33.1.hum1@s390x",
            "Red Hat Hardened Images:ruby3.4-bundled-gems-0:3.4.12-33.1.hum1@x86_64",
            "Red Hat Hardened Images:ruby3.4-default-gems-0:3.4.12-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:ruby3.4-default-gems-0:3.4.12-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:ruby3.4-default-gems-0:3.4.12-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:ruby3.4-devel-0:3.4.12-33.1.hum1@aarch64",
            "Red Hat Hardened Images:ruby3.4-devel-0:3.4.12-33.1.hum1@s390x",
            "Red Hat Hardened Images:ruby3.4-devel-0:3.4.12-33.1.hum1@x86_64",
            "Red Hat Hardened Images:ruby3.4-doc-0:3.4.12-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:ruby3.4-doc-0:3.4.12-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:ruby3.4-doc-0:3.4.12-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:ruby3.4-libs-0:3.4.12-33.1.hum1@aarch64",
            "Red Hat Hardened Images:ruby3.4-libs-0:3.4.12-33.1.hum1@s390x",
            "Red Hat Hardened Images:ruby3.4-libs-0:3.4.12-33.1.hum1@x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:88861"
        },
        {
          "category": "workaround",
          "details": "To mitigate this vulnerability, do not compile regular expressions from untrusted sources. Standard safeguards such as Regexp.timeout or limiting the length of the input pattern do not protect against this issue.",
          "product_ids": [
            "Red Hat Hardened Images:ruby3.4-0:3.4.12-33.1.hum1@aarch64",
            "Red Hat Hardened Images:ruby3.4-0:3.4.12-33.1.hum1@s390x",
            "Red Hat Hardened Images:ruby3.4-0:3.4.12-33.1.hum1@src",
            "Red Hat Hardened Images:ruby3.4-0:3.4.12-33.1.hum1@x86_64",
            "Red Hat Hardened Images:ruby3.4-bundled-gems-0:3.4.12-33.1.hum1@aarch64",
            "Red Hat Hardened Images:ruby3.4-bundled-gems-0:3.4.12-33.1.hum1@s390x",
            "Red Hat Hardened Images:ruby3.4-bundled-gems-0:3.4.12-33.1.hum1@x86_64",
            "Red Hat Hardened Images:ruby3.4-default-gems-0:3.4.12-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:ruby3.4-default-gems-0:3.4.12-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:ruby3.4-default-gems-0:3.4.12-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:ruby3.4-devel-0:3.4.12-33.1.hum1@aarch64",
            "Red Hat Hardened Images:ruby3.4-devel-0:3.4.12-33.1.hum1@s390x",
            "Red Hat Hardened Images:ruby3.4-devel-0:3.4.12-33.1.hum1@x86_64",
            "Red Hat Hardened Images:ruby3.4-doc-0:3.4.12-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:ruby3.4-doc-0:3.4.12-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:ruby3.4-doc-0:3.4.12-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:ruby3.4-libs-0:3.4.12-33.1.hum1@aarch64",
            "Red Hat Hardened Images:ruby3.4-libs-0:3.4.12-33.1.hum1@s390x",
            "Red Hat Hardened Images:ruby3.4-libs-0:3.4.12-33.1.hum1@x86_64",
            "Red Hat Hardened Images:rubygem3.4-bigdecimal-0:3.1.8-33.1.hum1@aarch64",
            "Red Hat Hardened Images:rubygem3.4-bigdecimal-0:3.1.8-33.1.hum1@s390x",
            "Red Hat Hardened Images:rubygem3.4-bigdecimal-0:3.1.8-33.1.hum1@x86_64",
            "Red Hat Hardened Images:rubygem3.4-bundler-0:2.6.9-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-bundler-0:2.6.9-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-bundler-0:2.6.9-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:rubygem3.4-devel-0:3.6.9-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-devel-0:3.6.9-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-devel-0:3.6.9-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:rubygem3.4-io-console-0:0.8.1-33.1.hum1@aarch64",
            "Red Hat Hardened Images:rubygem3.4-io-console-0:0.8.1-33.1.hum1@s390x",
            "Red Hat Hardened Images:rubygem3.4-io-console-0:0.8.1-33.1.hum1@x86_64",
            "Red Hat Hardened Images:rubygem3.4-irb-0:1.14.3-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-irb-0:1.14.3-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-irb-0:1.14.3-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:rubygem3.4-json-0:2.9.1-33.1.hum1@aarch64",
            "Red Hat Hardened Images:rubygem3.4-json-0:2.9.1-33.1.hum1@s390x",
            "Red Hat Hardened Images:rubygem3.4-json-0:2.9.1-33.1.hum1@x86_64",
            "Red Hat Hardened Images:rubygem3.4-minitest-0:5.25.4-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-minitest-0:5.25.4-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-minitest-0:5.25.4-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:rubygem3.4-power_assert-0:2.0.5-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-power_assert-0:2.0.5-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-power_assert-0:2.0.5-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:rubygem3.4-psych-0:5.2.2-33.1.hum1@aarch64",
            "Red Hat Hardened Images:rubygem3.4-psych-0:5.2.2-33.1.hum1@s390x",
            "Red Hat Hardened Images:rubygem3.4-psych-0:5.2.2-33.1.hum1@x86_64",
            "Red Hat Hardened Images:rubygem3.4-racc-0:1.8.1-33.1.hum1@aarch64",
            "Red Hat Hardened Images:rubygem3.4-racc-0:1.8.1-33.1.hum1@s390x",
            "Red Hat Hardened Images:rubygem3.4-racc-0:1.8.1-33.1.hum1@x86_64",
            "Red Hat Hardened Images:rubygem3.4-rake-0:13.2.1-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-rake-0:13.2.1-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-rake-0:13.2.1-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:rubygem3.4-rbs-0:3.8.0-33.1.hum1@aarch64",
            "Red Hat Hardened Images:rubygem3.4-rbs-0:3.8.0-33.1.hum1@s390x",
            "Red Hat Hardened Images:rubygem3.4-rbs-0:3.8.0-33.1.hum1@x86_64",
            "Red Hat Hardened Images:rubygem3.4-rdoc-0:6.14.0-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-rdoc-0:6.14.0-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-rdoc-0:6.14.0-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:rubygem3.4-rexml-0:3.4.4-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-rexml-0:3.4.4-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-rexml-0:3.4.4-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:rubygem3.4-rss-0:0.3.1-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-rss-0:0.3.1-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-rss-0:0.3.1-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:rubygem3.4-rubygems-0:3.6.9-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-rubygems-0:3.6.9-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-rubygems-0:3.6.9-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:rubygem3.4-test-unit-0:3.6.7-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-test-unit-0:3.6.7-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-test-unit-0:3.6.7-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:rubygem3.4-typeprof-0:0.30.1-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-typeprof-0:0.30.1-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-typeprof-0:0.30.1-33.1.hum1@noarch@public-hummingbird-x86_64-rpms"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Hardened Images:ruby3.4-0:3.4.12-33.1.hum1@aarch64",
            "Red Hat Hardened Images:ruby3.4-0:3.4.12-33.1.hum1@s390x",
            "Red Hat Hardened Images:ruby3.4-0:3.4.12-33.1.hum1@src",
            "Red Hat Hardened Images:ruby3.4-0:3.4.12-33.1.hum1@x86_64",
            "Red Hat Hardened Images:ruby3.4-bundled-gems-0:3.4.12-33.1.hum1@aarch64",
            "Red Hat Hardened Images:ruby3.4-bundled-gems-0:3.4.12-33.1.hum1@s390x",
            "Red Hat Hardened Images:ruby3.4-bundled-gems-0:3.4.12-33.1.hum1@x86_64",
            "Red Hat Hardened Images:ruby3.4-default-gems-0:3.4.12-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:ruby3.4-default-gems-0:3.4.12-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:ruby3.4-default-gems-0:3.4.12-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:ruby3.4-devel-0:3.4.12-33.1.hum1@aarch64",
            "Red Hat Hardened Images:ruby3.4-devel-0:3.4.12-33.1.hum1@s390x",
            "Red Hat Hardened Images:ruby3.4-devel-0:3.4.12-33.1.hum1@x86_64",
            "Red Hat Hardened Images:ruby3.4-doc-0:3.4.12-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:ruby3.4-doc-0:3.4.12-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:ruby3.4-doc-0:3.4.12-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:ruby3.4-libs-0:3.4.12-33.1.hum1@aarch64",
            "Red Hat Hardened Images:ruby3.4-libs-0:3.4.12-33.1.hum1@s390x",
            "Red Hat Hardened Images:ruby3.4-libs-0:3.4.12-33.1.hum1@x86_64",
            "Red Hat Hardened Images:rubygem3.4-bigdecimal-0:3.1.8-33.1.hum1@aarch64",
            "Red Hat Hardened Images:rubygem3.4-bigdecimal-0:3.1.8-33.1.hum1@s390x",
            "Red Hat Hardened Images:rubygem3.4-bigdecimal-0:3.1.8-33.1.hum1@x86_64",
            "Red Hat Hardened Images:rubygem3.4-bundler-0:2.6.9-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-bundler-0:2.6.9-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-bundler-0:2.6.9-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:rubygem3.4-devel-0:3.6.9-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-devel-0:3.6.9-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-devel-0:3.6.9-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:rubygem3.4-io-console-0:0.8.1-33.1.hum1@aarch64",
            "Red Hat Hardened Images:rubygem3.4-io-console-0:0.8.1-33.1.hum1@s390x",
            "Red Hat Hardened Images:rubygem3.4-io-console-0:0.8.1-33.1.hum1@x86_64",
            "Red Hat Hardened Images:rubygem3.4-irb-0:1.14.3-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-irb-0:1.14.3-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-irb-0:1.14.3-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:rubygem3.4-json-0:2.9.1-33.1.hum1@aarch64",
            "Red Hat Hardened Images:rubygem3.4-json-0:2.9.1-33.1.hum1@s390x",
            "Red Hat Hardened Images:rubygem3.4-json-0:2.9.1-33.1.hum1@x86_64",
            "Red Hat Hardened Images:rubygem3.4-minitest-0:5.25.4-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-minitest-0:5.25.4-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-minitest-0:5.25.4-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:rubygem3.4-power_assert-0:2.0.5-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-power_assert-0:2.0.5-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-power_assert-0:2.0.5-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:rubygem3.4-psych-0:5.2.2-33.1.hum1@aarch64",
            "Red Hat Hardened Images:rubygem3.4-psych-0:5.2.2-33.1.hum1@s390x",
            "Red Hat Hardened Images:rubygem3.4-psych-0:5.2.2-33.1.hum1@x86_64",
            "Red Hat Hardened Images:rubygem3.4-racc-0:1.8.1-33.1.hum1@aarch64",
            "Red Hat Hardened Images:rubygem3.4-racc-0:1.8.1-33.1.hum1@s390x",
            "Red Hat Hardened Images:rubygem3.4-racc-0:1.8.1-33.1.hum1@x86_64",
            "Red Hat Hardened Images:rubygem3.4-rake-0:13.2.1-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-rake-0:13.2.1-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-rake-0:13.2.1-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:rubygem3.4-rbs-0:3.8.0-33.1.hum1@aarch64",
            "Red Hat Hardened Images:rubygem3.4-rbs-0:3.8.0-33.1.hum1@s390x",
            "Red Hat Hardened Images:rubygem3.4-rbs-0:3.8.0-33.1.hum1@x86_64",
            "Red Hat Hardened Images:rubygem3.4-rdoc-0:6.14.0-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-rdoc-0:6.14.0-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-rdoc-0:6.14.0-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:rubygem3.4-rexml-0:3.4.4-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-rexml-0:3.4.4-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-rexml-0:3.4.4-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:rubygem3.4-rss-0:0.3.1-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-rss-0:0.3.1-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-rss-0:0.3.1-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:rubygem3.4-rubygems-0:3.6.9-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-rubygems-0:3.6.9-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-rubygems-0:3.6.9-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:rubygem3.4-test-unit-0:3.6.7-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-test-unit-0:3.6.7-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-test-unit-0:3.6.7-33.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:rubygem3.4-typeprof-0:0.30.1-33.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:rubygem3.4-typeprof-0:0.30.1-33.1.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:rubygem3.4-typeprof-0:0.30.1-33.1.hum1@noarch@public-hummingbird-x86_64-rpms"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "ruby: integer overflow issue in regular expression compiler"
    }
  ]
}

CVE-2026-110264 (GCVE-0-2026-110264)

Vulnerability from cvelistv5 – Published: 2026-10-22 00:33 – Updated: 2026-10-22 23:05

Title

Integer Overflow or Wraparound in GitLab

Summary

An issue has been discovered in GitLab CE/EE affecting all versions from 7.0 before 18.11.13, 19.0 before 19.0.10, 19.1 before 19.1.9, 19.2 before 19.2.9, 19.3 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, under certain conditions, could have allowed an unauthenticated user to execute arbitrary code on the GitLab server due to integer overflow when compiling a specially crafted regular expression.

Severity

10 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: yes Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-10-21 00:00 UTC

CWE

CWE-190 - Integer Overflow or Wraparound

Assigner

GitLab CNA under the mitre root

CNA scorecard B 75/100 over 296 records in the last 180 days details

References

3 references

URL	Tags
https://gitlab.com/gitlab-org/gitlab/-/work_items…
https://hackerone.com/reports/4093475	technical-descriptionexploitpermissions-required
https://docs.gitlab.com/releases/patches/patch-re…

Impacted products

1 product

Vendor	Product	Version
GitLab	GitLab	Affected: 7.0 , < 18.11.13 (semver) Affected: 19.0 , < 19.0.10 (semver) Affected: 19.1 , < 19.1.9 (semver) Affected: 19.2 , < 19.2.9 (semver) Affected: 19.3 , < 19.3.6 (semver) Affected: 19.4 , < 19.4.3 (semver) Affected: 19.5 , < 19.5.1 (semver) cpe:2.3:a:gitlab:gitlab::::::::

Credits

Thanks [joaxcar](https://hackerone.com/joaxcar) for reporting this vulnerability through our HackerOne bug bounty program

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-110264",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-21T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-22T23:05:04.898Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unaffected",
          "product": "GitLab",
          "repo": "https://gitlab.com/gitlab-org/gitlab",
          "vendor": "GitLab",
          "versions": [
            {
              "lessThan": "18.11.13",
              "status": "affected",
              "version": "7.0",
              "versionType": "semver"
            },
            {
              "lessThan": "19.0.10",
              "status": "affected",
              "version": "19.0",
              "versionType": "semver"
            },
            {
              "lessThan": "19.1.9",
              "status": "affected",
              "version": "19.1",
              "versionType": "semver"
            },
            {
              "lessThan": "19.2.9",
              "status": "affected",
              "version": "19.2",
              "versionType": "semver"
            },
            {
              "lessThan": "19.3.6",
              "status": "affected",
              "version": "19.3",
              "versionType": "semver"
            },
            {
              "lessThan": "19.4.3",
              "status": "affected",
              "version": "19.4",
              "versionType": "semver"
            },
            {
              "lessThan": "19.5.1",
              "status": "affected",
              "version": "19.5",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Thanks [joaxcar](https://hackerone.com/joaxcar) for reporting this vulnerability through our HackerOne bug bounty program"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An issue has been discovered in GitLab CE/EE affecting all versions from 7.0 before 18.11.13, 19.0 before 19.0.10, 19.1 before 19.1.9, 19.2 before 19.2.9, 19.3 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, under certain conditions, could have allowed an unauthenticated user to execute arbitrary code on the GitLab server due to integer overflow when compiling a specially crafted regular expression."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 10,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-190",
              "description": "CWE-190: Integer Overflow or Wraparound",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-22T00:33:48.179Z",
        "orgId": "ceab7361-8a18-47b1-92ba-4d7d25f6715a",
        "shortName": "GitLab"
      },
      "references": [
        {
          "url": "https://gitlab.com/gitlab-org/gitlab/-/work_items/633633"
        },
        {
          "name": "HackerOne Bug Bounty Report #4093475",
          "tags": [
            "technical-description",
            "exploit",
            "permissions-required"
          ],
          "url": "https://hackerone.com/reports/4093475"
        },
        {
          "url": "https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-5-1-released/"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "value": "Upgrade to versions 18.11.13, 19.0.10, 19.1.9, 19.2.9, 19.3.6, 19.4.3, 19.5.1, or later."
        }
      ],
      "title": "Integer Overflow or Wraparound in GitLab"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ceab7361-8a18-47b1-92ba-4d7d25f6715a",
    "assignerShortName": "GitLab",
    "cveId": "CVE-2026-110264",
    "datePublished": "2026-10-22T00:33:48.179Z",
    "dateReserved": "2026-10-13T18:34:15.123Z",
    "dateUpdated": "2026-10-22T23:05:04.898Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-89078 (GCVE-0-2026-89078)

Vulnerability from cvelistv5 – Published: 2026-09-23 23:05 – Updated: 2026-09-25 03:55

Title

Double Free in GitLab

Summary

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an authenticated user to execute arbitrary code on the GitLab server due to a double free issue when parsing a specially crafted regular expression in a CI/CD configuration.

Severity

9.9 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-09-24 00:00 UTC

CWE

CWE-415 - Double Free

Assigner

GitLab CNA under the mitre root

CNA scorecard B 75/100 over 296 records in the last 180 days details

References

3 references

URL	Tags
https://gitlab.com/gitlab-org/gitlab/-/work_items…
https://hackerone.com/reports/4019059	technical-descriptionexploitpermissions-required
https://docs.gitlab.com/releases/patches/patch-re…

Impacted products

1 product

Vendor	Product	Version
GitLab	GitLab	Affected: 19.2 , < 19.2.7 (semver) Affected: 19.3 , < 19.3.3 (semver) Affected: 19.4 , < 19.4.1 (semver) cpe:2.3:a:gitlab:gitlab::::::::

Credits

Thanks [joaxcar](https://hackerone.com/joaxcar) for reporting this vulnerability through our HackerOne bug bounty program

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-89078",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-24T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-25T03:55:18.413Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unaffected",
          "product": "GitLab",
          "repo": "git://git@gitlab.com:gitlab-org/gitlab.git",
          "vendor": "GitLab",
          "versions": [
            {
              "lessThan": "19.2.7",
              "status": "affected",
              "version": "19.2",
              "versionType": "semver"
            },
            {
              "lessThan": "19.3.3",
              "status": "affected",
              "version": "19.3",
              "versionType": "semver"
            },
            {
              "lessThan": "19.4.1",
              "status": "affected",
              "version": "19.4",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Thanks [joaxcar](https://hackerone.com/joaxcar) for reporting this vulnerability through our HackerOne bug bounty program"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an authenticated user to execute arbitrary code on the GitLab server due to a double free issue when parsing a specially crafted regular expression in a CI/CD configuration."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 9.9,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-415",
              "description": "CWE-415: Double Free",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-23T23:05:20.132Z",
        "orgId": "ceab7361-8a18-47b1-92ba-4d7d25f6715a",
        "shortName": "GitLab"
      },
      "references": [
        {
          "url": "https://gitlab.com/gitlab-org/gitlab/-/work_items/628577"
        },
        {
          "name": "HackerOne Bug Bounty Report #4019059",
          "tags": [
            "technical-description",
            "exploit",
            "permissions-required"
          ],
          "url": "https://hackerone.com/reports/4019059"
        },
        {
          "url": "https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-4-1-released/"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "value": "Upgrade to versions 19.2.7, 19.3.3, 19.4.1 or above."
        }
      ],
      "title": "Double Free in GitLab"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ceab7361-8a18-47b1-92ba-4d7d25f6715a",
    "assignerShortName": "GitLab",
    "cveId": "CVE-2026-89078",
    "datePublished": "2026-09-23T23:05:20.132Z",
    "dateReserved": "2026-09-10T19:06:37.759Z",
    "dateUpdated": "2026-09-25T03:55:18.413Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-93577 (GCVE-0-2026-93577)

Vulnerability from cvelistv5 – Published: 2026-09-23 23:04 – Updated: 2026-09-25 03:55

Title

Integer Overflow or Wraparound in GitLab

Summary

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an authenticated user to execute arbitrary code on the GitLab server due to an integer overflow issue when compiling a specially crafted regular expression in a CI/CD configuration.

Severity

9.9 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-09-24 00:00 UTC

CWE

CWE-190 - Integer Overflow or Wraparound

Assigner

GitLab CNA under the mitre root

CNA scorecard B 75/100 over 296 records in the last 180 days details

References

3 references

URL	Tags
https://gitlab.com/gitlab-org/gitlab/-/work_items…
https://hackerone.com/reports/3995696	technical-descriptionexploitpermissions-required
https://docs.gitlab.com/releases/patches/patch-re…

Impacted products

1 product

Vendor	Product	Version
GitLab	GitLab	Affected: 19.2 , < 19.2.7 (semver) Affected: 19.3 , < 19.3.3 (semver) Affected: 19.4 , < 19.4.1 (semver) cpe:2.3:a:gitlab:gitlab::::::::

Credits

Thanks [joaxcar](https://hackerone.com/joaxcar) for reporting this vulnerability through our HackerOne bug bounty program

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-93577",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-24T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-25T03:55:24.099Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unaffected",
          "product": "GitLab",
          "repo": "git://git@gitlab.com:gitlab-org/gitlab.git",
          "vendor": "GitLab",
          "versions": [
            {
              "lessThan": "19.2.7",
              "status": "affected",
              "version": "19.2",
              "versionType": "semver"
            },
            {
              "lessThan": "19.3.3",
              "status": "affected",
              "version": "19.3",
              "versionType": "semver"
            },
            {
              "lessThan": "19.4.1",
              "status": "affected",
              "version": "19.4",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Thanks [joaxcar](https://hackerone.com/joaxcar) for reporting this vulnerability through our HackerOne bug bounty program"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an authenticated user to execute arbitrary code on the GitLab server due to an integer overflow issue when compiling a specially crafted regular expression in a CI/CD configuration."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.9,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-190",
              "description": "CWE-190: Integer Overflow or Wraparound",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-23T23:04:45.296Z",
        "orgId": "ceab7361-8a18-47b1-92ba-4d7d25f6715a",
        "shortName": "GitLab"
      },
      "references": [
        {
          "url": "https://gitlab.com/gitlab-org/gitlab/-/work_items/629758"
        },
        {
          "name": "HackerOne Bug Bounty Report #3995696",
          "tags": [
            "technical-description",
            "exploit",
            "permissions-required"
          ],
          "url": "https://hackerone.com/reports/3995696"
        },
        {
          "url": "https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-4-1-released/"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "value": "Upgrade to versions 19.2.7, 19.3.3, 19.4.1 or above."
        }
      ],
      "title": "Integer Overflow or Wraparound in GitLab"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ceab7361-8a18-47b1-92ba-4d7d25f6715a",
    "assignerShortName": "GitLab",
    "cveId": "CVE-2026-93577",
    "datePublished": "2026-09-23T23:04:45.296Z",
    "dateReserved": "2026-09-18T10:34:29.905Z",
    "dateUpdated": "2026-09-25T03:55:24.099Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-97229 (GCVE-0-2026-97229)

Vulnerability from cvelistv5 – Published: 2026-10-13 01:05 – Updated: 2026-10-30 03:55

Title

Integer Overflow or Wraparound in GitLab

Summary

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an unauthenticated user to execute arbitrary code on the GitLab server via a specially crafted regular expression in a CI/CD configuration, due to insufficient regular expression validation.

Severity

10 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

SSVC

Exploitation: active Automatable: yes Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-10-13 00:00 UTC

CWE

CWE-190 - Integer Overflow or Wraparound

Assigner

GitLab CNA under the mitre root

CNA scorecard B 75/100 over 296 records in the last 180 days details

References

5 references

URL	Tags
https://gitlab.com/gitlab-org/gitlab/-/work_items…
https://hackerone.com/reports/4055749	technical-descriptionexploitpermissions-required
https://hackerone.com/reports/4058589	technical-descriptionexploitpermissions-required
https://docs.gitlab.com/releases/patches/patch-re…
https://www.cisa.gov/known-exploited-vulnerabilit…	government-resource

Impacted products

1 product

Vendor	Product	Version
GitLab	GitLab	Affected: 19.2 , < 19.2.8 (semver) Affected: 19.3 , < 19.3.5 (semver) Affected: 19.4 , < 19.4.2 (semver) cpe:2.3:a:gitlab:gitlab::::::::

Credits

Thanks [joaxcar](https://hackerone.com/joaxcar) for reporting this vulnerability through our HackerOne bug bounty program

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-97229",
                "options": [
                  {
                    "Exploitation": "active"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-13T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          },
          {
            "other": {
              "content": {
                "dateAdded": "2026-10-29",
                "reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-97229"
              },
              "type": "kev"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-30T03:55:54.495Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "government-resource"
            ],
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-97229"
          }
        ],
        "timeline": [
          {
            "lang": "en",
            "time": "2026-10-29T00:00:00.000Z",
            "value": "CVE-2026-97229 added to CISA KEV"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unaffected",
          "product": "GitLab",
          "repo": "https://gitlab.com/gitlab-org/gitlab",
          "vendor": "GitLab",
          "versions": [
            {
              "lessThan": "19.2.8",
              "status": "affected",
              "version": "19.2",
              "versionType": "semver"
            },
            {
              "lessThan": "19.3.5",
              "status": "affected",
              "version": "19.3",
              "versionType": "semver"
            },
            {
              "lessThan": "19.4.2",
              "status": "affected",
              "version": "19.4",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Thanks [joaxcar](https://hackerone.com/joaxcar) for reporting this vulnerability through our HackerOne bug bounty program"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an unauthenticated user to execute arbitrary code on the GitLab server via a specially crafted regular expression in a CI/CD configuration, due to insufficient regular expression validation."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 10,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-190",
              "description": "CWE-190: Integer Overflow or Wraparound",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-13T01:05:46.166Z",
        "orgId": "ceab7361-8a18-47b1-92ba-4d7d25f6715a",
        "shortName": "GitLab"
      },
      "references": [
        {
          "url": "https://gitlab.com/gitlab-org/gitlab/-/work_items/630686"
        },
        {
          "name": "HackerOne Bug Bounty Report #4055749",
          "tags": [
            "technical-description",
            "exploit",
            "permissions-required"
          ],
          "url": "https://hackerone.com/reports/4055749"
        },
        {
          "name": "HackerOne Bug Bounty Report #4058589",
          "tags": [
            "technical-description",
            "exploit",
            "permissions-required"
          ],
          "url": "https://hackerone.com/reports/4058589"
        },
        {
          "url": "https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-4-2-released/"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "value": "Upgrade to versions 19.2.8, 19.3.5, 19.4.2 or above."
        }
      ],
      "title": "Integer Overflow or Wraparound in GitLab"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ceab7361-8a18-47b1-92ba-4d7d25f6715a",
    "assignerShortName": "GitLab",
    "cveId": "CVE-2026-97229",
    "datePublished": "2026-10-13T01:05:46.166Z",
    "dateReserved": "2026-09-24T10:04:47.421Z",
    "dateUpdated": "2026-10-30T03:55:54.495Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

Order JSON

Publication & reservation Sightings KEV catalogs Other timestamps

Loading timeline…

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

RHSA-2026:88861

CVE-2026-110264 (GCVE-0-2026-110264)

CVE-2026-89078 (GCVE-0-2026-89078)

CVE-2026-93577 (GCVE-0-2026-93577)

CVE-2026-97229 (GCVE-0-2026-97229)

Tags

Sightings

Nomenclature

Vulnerability timeline

Related by attack behaviour