RHSA-2026:90909
Vulnerability from csaf_redhat - Published: 2026-10-27 16:00 - Updated: 2026-10-29 22:09Summary
Red Hat Security Advisory: pki-deps:10.6 security update
Severity
Important
Notes
Topic: An update for the pki-deps:10.6 module is now available for Red Hat Enterprise Linux 8.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: The Public Key Infrastructure (PKI) Core contains fundamental packages required by Red Hat Certificate System.
Security Fix(es):
* com.fasterxml.jackson.core/jackson-core: Jackson-core: Denial of Service via unbounded StringBuilder growth during malformed token processing (CVE-2026-89425)
* com.fasterxml.jackson.core/jackson-databind: tools.jackson.core:jackson-databind: Jackson-databind: Denial of Service via quadratic forward-reference completion (CVE-2026-91777)
* com.fasterxml.jackson.core/jackson-core: tools.jackson.core/jackson-core: jackson-core: Denial of Service via excessively long JSON property names (CVE-2026-68498)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in jackson-core. When parsing JSON data from character-based inputs, the parser does not enforce configured property name length limits while reading object keys into memory. A remote, unauthenticated attacker can exploit this flaw by submitting a crafted JSON payload containing an excessively long property name. Processing such input can exhaust system memory, causing the application to crash and resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
55 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:apache-commons-collections-0:3.2.2-10.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:apache-commons-collections-0:3.2.2-10.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:apache-commons-lang-0:2.6-21.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:apache-commons-lang-0:2.6-21.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:apache-commons-net-0:3.6-3.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:apache-commons-net-0:3.6-3.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:bea-stax-0:1.2.0-16.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:bea-stax-api-0:1.2.0-16.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:glassfish-fastinfoset-0:1.2.13-9.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:glassfish-fastinfoset-0:1.2.13-9.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:glassfish-jaxb-0:2.2.11-12.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:glassfish-jaxb-api-0:2.2.12-8.module+el8.10.0+21035+a01f6469.noarch::pki-deps:10.6 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:glassfish-jaxb-api-0:2.2.12-8.module+el8.10.0+21035+a01f6469.src::pki-deps:10.6 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:glassfish-jaxb-core-0:2.2.11-12.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:glassfish-jaxb-runtime-0:2.2.11-12.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:glassfish-jaxb-txw2-0:2.2.11-12.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:jackson-annotations-0:2.21-1.module+el8.10.0+24523+f75fb079.noarch::pki-deps:10.6 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:jackson-annotations-0:2.21-1.module+el8.10.0+24523+f75fb079.src::pki-deps:10.6 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:jackson-core-0:2.21.4-1.module+el8.10.0+25128+a2644b4c.3.noarch::pki-deps:10.6 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:jackson-core-0:2.21.4-1.module+el8.10.0+25128+a2644b4c.3.src::pki-deps:10.6 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:jackson-databind-0:2.21.4-1.module+el8.10.0+25128+a2644b4c.1.noarch::pki-deps:10.6 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:jackson-databind-0:2.21.4-1.module+el8.10.0+25128+a2644b4c.1.src::pki-deps:10.6 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:jackson-jaxrs-json-provider-0:2.21.4-1.module+el8.10.0+24523+f75fb079.noarch::pki-deps:10.6 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:jackson-jaxrs-providers-0:2.21.4-1.module+el8.10.0+24523+f75fb079.noarch::pki-deps:10.6 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:jackson-jaxrs-providers-0:2.21.4-1.module+el8.10.0+24523+f75fb079.src::pki-deps:10.6 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:jackson-module-jaxb-annotations-0:2.21.4-2.module+el8.10.0+24523+f75fb079.noarch::pki-deps:10.6 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:jackson-modules-base-0:2.21.4-2.module+el8.10.0+24523+f75fb079.src::pki-deps:10.6 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:jakarta-commons-httpclient-1:3.1-28.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:jakarta-commons-httpclient-1:3.1-28.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:javassist-0:3.18.1-8.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:javassist-0:3.18.1-8.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:javassist-javadoc-0:3.18.1-8.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:pki-servlet-engine-1:9.0.62-1.module+el8.10.0+21257+2b5308b5.noarch::pki-deps:10.6 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:pki-servlet-engine-1:9.0.62-1.module+el8.10.0+21257+2b5308b5.src::pki-deps:10.6 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:relaxngDatatype-0:2011.1-7.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:relaxngDatatype-0:2011.1-7.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:slf4j-0:1.7.25-4.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:slf4j-0:1.7.25-4.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:slf4j-jdk14-0:1.7.25-4.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:stax-ex-0:1.7.7-8.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:stax-ex-0:1.7.7-8.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:velocity-0:1.7-24.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:velocity-0:1.7-24.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:xalan-j2-0:2.7.1-38.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:xalan-j2-0:2.7.1-38.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:xerces-j2-0:2.11.0-34.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:xerces-j2-0:2.11.0-34.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:xml-commons-apis-0:1.4.01-25.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:xml-commons-apis-0:1.4.01-25.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:xml-commons-resolver-0:1.2-26.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:xml-commons-resolver-0:1.2-26.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:xmlstreambuffer-0:1.5.4-8.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:xmlstreambuffer-0:1.5.4-8.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:xsom-0:0-19.20110809svn.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:xsom-0:0-19.20110809svn.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in FasterXML jackson-core. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by providing a specially crafted, malformed token to the JsonFactory.createParser(DataInput) method. The UTF8DataInputJsonParser component, responsible for handling DataInput sources, does not properly limit the size of the error message generated for invalid tokens. This unbounded growth of the StringBuilder can consume excessive memory, leading to an OutOfMemoryError and crashing the Java Virtual Machine (JVM).
7.5 (High)
Affected products
Fixed
55 products, the same list as for
CVE-2026-68498
Threats
Impact
Important
A flaw was found in FasterXML jackson-databind. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by providing specially crafted JSON input to an application that deserializes it into an identity-enabled collection or map. The flaw occurs due to inefficient processing of forward-references, where the system performs a quadratic amount of work for linearly growing input, leading to excessive CPU consumption.
7.5 (High)
Affected products
Fixed
55 products, the same list as for
CVE-2026-68498
Threats
Impact
Important
References
27 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for the pki-deps:10.6 module is now available for Red Hat Enterprise Linux 8.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The Public Key Infrastructure (PKI) Core contains fundamental packages required by Red Hat Certificate System.\n\nSecurity Fix(es):\n\n* com.fasterxml.jackson.core/jackson-core: Jackson-core: Denial of Service via unbounded StringBuilder growth during malformed token processing (CVE-2026-89425)\n\n* com.fasterxml.jackson.core/jackson-databind: tools.jackson.core:jackson-databind: Jackson-databind: Denial of Service via quadratic forward-reference completion (CVE-2026-91777)\n\n* com.fasterxml.jackson.core/jackson-core: tools.jackson.core/jackson-core: jackson-core: Denial of Service via excessively long JSON property names (CVE-2026-68498)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:90909",
"url": "https://access.redhat.com/errata/RHSA-2026:90909"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2539084",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2539084"
},
{
"category": "external",
"summary": "2539085",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2539085"
},
{
"category": "external",
"summary": "2554486",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2554486"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_90909.json"
}
],
"title": "Red Hat Security Advisory: pki-deps:10.6 security update",
"tracking": {
"current_release_date": "2026-10-29T22:09:29+00:00",
"generator": {
"date": "2026-10-29T22:09:29+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.4.3"
}
},
"id": "RHSA-2026:90909",
"initial_release_date": "2026-10-27T16:00:52+00:00",
"revision_history": [
{
"date": "2026-10-27T16:00:52+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-10-27T16:00:52+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-10-29T22:09:29+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream (v. 8)",
"product": {
"name": "Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:enterprise_linux:8::appstream"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "apache-commons-collections-0:3.2.2-10.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"product": {
"name": "apache-commons-collections-0:3.2.2-10.module+el8.10.0+20993+d0f024b0.noarch (pki-deps:10.6)",
"product_id": "apache-commons-collections-0:3.2.2-10.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/apache-commons-collections@3.2.2-10.module%2Bel8.10.0%2B20993%2Bd0f024b0?arch=noarch\u0026rpmmod=pki-deps:10.6:8100020261021095739:489197e6"
}
}
},
{
"category": "product_version",
"name": "apache-commons-lang-0:2.6-21.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"product": {
"name": "apache-commons-lang-0:2.6-21.module+el8.10.0+20993+d0f024b0.noarch (pki-deps:10.6)",
"product_id": "apache-commons-lang-0:2.6-21.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/apache-commons-lang@2.6-21.module%2Bel8.10.0%2B20993%2Bd0f024b0?arch=noarch\u0026rpmmod=pki-deps:10.6:8100020261021095739:489197e6"
}
}
},
{
"category": "product_version",
"name": "apache-commons-net-0:3.6-3.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"product": {
"name": "apache-commons-net-0:3.6-3.module+el8.10.0+20993+d0f024b0.noarch (pki-deps:10.6)",
"product_id": "apache-commons-net-0:3.6-3.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/apache-commons-net@3.6-3.module%2Bel8.10.0%2B20993%2Bd0f024b0?arch=noarch\u0026rpmmod=pki-deps:10.6:8100020261021095739:489197e6"
}
}
},
{
"category": "product_version",
"name": "bea-stax-api-0:1.2.0-16.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"product": {
"name": "bea-stax-api-0:1.2.0-16.module+el8.10.0+20993+d0f024b0.noarch (pki-deps:10.6)",
"product_id": "bea-stax-api-0:1.2.0-16.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bea-stax-api@1.2.0-16.module%2Bel8.10.0%2B20993%2Bd0f024b0?arch=noarch\u0026rpmmod=pki-deps:10.6:8100020261021095739:489197e6"
}
}
},
{
"category": "product_version",
"name": "glassfish-fastinfoset-0:1.2.13-9.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"product": {
"name": "glassfish-fastinfoset-0:1.2.13-9.module+el8.10.0+20993+d0f024b0.noarch (pki-deps:10.6)",
"product_id": "glassfish-fastinfoset-0:1.2.13-9.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/glassfish-fastinfoset@1.2.13-9.module%2Bel8.10.0%2B20993%2Bd0f024b0?arch=noarch\u0026rpmmod=pki-deps:10.6:8100020261021095739:489197e6"
}
}
},
{
"category": "product_version",
"name": "glassfish-jaxb-api-0:2.2.12-8.module+el8.10.0+21035+a01f6469.noarch::pki-deps:10.6",
"product": {
"name": "glassfish-jaxb-api-0:2.2.12-8.module+el8.10.0+21035+a01f6469.noarch (pki-deps:10.6)",
"product_id": "glassfish-jaxb-api-0:2.2.12-8.module+el8.10.0+21035+a01f6469.noarch::pki-deps:10.6",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/glassfish-jaxb-api@2.2.12-8.module%2Bel8.10.0%2B21035%2Ba01f6469?arch=noarch\u0026rpmmod=pki-deps:10.6:8100020261021095739:489197e6"
}
}
},
{
"category": "product_version",
"name": "glassfish-jaxb-core-0:2.2.11-12.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"product": {
"name": "glassfish-jaxb-core-0:2.2.11-12.module+el8.10.0+20993+d0f024b0.noarch (pki-deps:10.6)",
"product_id": "glassfish-jaxb-core-0:2.2.11-12.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/glassfish-jaxb-core@2.2.11-12.module%2Bel8.10.0%2B20993%2Bd0f024b0?arch=noarch\u0026rpmmod=pki-deps:10.6:8100020261021095739:489197e6"
}
}
},
{
"category": "product_version",
"name": "glassfish-jaxb-runtime-0:2.2.11-12.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"product": {
"name": "glassfish-jaxb-runtime-0:2.2.11-12.module+el8.10.0+20993+d0f024b0.noarch (pki-deps:10.6)",
"product_id": "glassfish-jaxb-runtime-0:2.2.11-12.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/glassfish-jaxb-runtime@2.2.11-12.module%2Bel8.10.0%2B20993%2Bd0f024b0?arch=noarch\u0026rpmmod=pki-deps:10.6:8100020261021095739:489197e6"
}
}
},
{
"category": "product_version",
"name": "glassfish-jaxb-txw2-0:2.2.11-12.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"product": {
"name": "glassfish-jaxb-txw2-0:2.2.11-12.module+el8.10.0+20993+d0f024b0.noarch (pki-deps:10.6)",
"product_id": "glassfish-jaxb-txw2-0:2.2.11-12.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/glassfish-jaxb-txw2@2.2.11-12.module%2Bel8.10.0%2B20993%2Bd0f024b0?arch=noarch\u0026rpmmod=pki-deps:10.6:8100020261021095739:489197e6"
}
}
},
{
"category": "product_version",
"name": "jackson-annotations-0:2.21-1.module+el8.10.0+24523+f75fb079.noarch::pki-deps:10.6",
"product": {
"name": "jackson-annotations-0:2.21-1.module+el8.10.0+24523+f75fb079.noarch (pki-deps:10.6)",
"product_id": "jackson-annotations-0:2.21-1.module+el8.10.0+24523+f75fb079.noarch::pki-deps:10.6",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jackson-annotations@2.21-1.module%2Bel8.10.0%2B24523%2Bf75fb079?arch=noarch\u0026rpmmod=pki-deps:10.6:8100020261021095739:489197e6"
}
}
},
{
"category": "product_version",
"name": "jackson-core-0:2.21.4-1.module+el8.10.0+25128+a2644b4c.3.noarch::pki-deps:10.6",
"product": {
"name": "jackson-core-0:2.21.4-1.module+el8.10.0+25128+a2644b4c.3.noarch (pki-deps:10.6)",
"product_id": "jackson-core-0:2.21.4-1.module+el8.10.0+25128+a2644b4c.3.noarch::pki-deps:10.6",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jackson-core@2.21.4-1.module%2Bel8.10.0%2B25128%2Ba2644b4c.3?arch=noarch\u0026rpmmod=pki-deps:10.6:8100020261021095739:489197e6"
}
}
},
{
"category": "product_version",
"name": "jackson-databind-0:2.21.4-1.module+el8.10.0+25128+a2644b4c.1.noarch::pki-deps:10.6",
"product": {
"name": "jackson-databind-0:2.21.4-1.module+el8.10.0+25128+a2644b4c.1.noarch (pki-deps:10.6)",
"product_id": "jackson-databind-0:2.21.4-1.module+el8.10.0+25128+a2644b4c.1.noarch::pki-deps:10.6",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jackson-databind@2.21.4-1.module%2Bel8.10.0%2B25128%2Ba2644b4c.1?arch=noarch\u0026rpmmod=pki-deps:10.6:8100020261021095739:489197e6"
}
}
},
{
"category": "product_version",
"name": "jackson-jaxrs-json-provider-0:2.21.4-1.module+el8.10.0+24523+f75fb079.noarch::pki-deps:10.6",
"product": {
"name": "jackson-jaxrs-json-provider-0:2.21.4-1.module+el8.10.0+24523+f75fb079.noarch (pki-deps:10.6)",
"product_id": "jackson-jaxrs-json-provider-0:2.21.4-1.module+el8.10.0+24523+f75fb079.noarch::pki-deps:10.6",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jackson-jaxrs-json-provider@2.21.4-1.module%2Bel8.10.0%2B24523%2Bf75fb079?arch=noarch\u0026rpmmod=pki-deps:10.6:8100020261021095739:489197e6"
}
}
},
{
"category": "product_version",
"name": "jackson-jaxrs-providers-0:2.21.4-1.module+el8.10.0+24523+f75fb079.noarch::pki-deps:10.6",
"product": {
"name": "jackson-jaxrs-providers-0:2.21.4-1.module+el8.10.0+24523+f75fb079.noarch (pki-deps:10.6)",
"product_id": "jackson-jaxrs-providers-0:2.21.4-1.module+el8.10.0+24523+f75fb079.noarch::pki-deps:10.6",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jackson-jaxrs-providers@2.21.4-1.module%2Bel8.10.0%2B24523%2Bf75fb079?arch=noarch\u0026rpmmod=pki-deps:10.6:8100020261021095739:489197e6"
}
}
},
{
"category": "product_version",
"name": "jackson-module-jaxb-annotations-0:2.21.4-2.module+el8.10.0+24523+f75fb079.noarch::pki-deps:10.6",
"product": {
"name": "jackson-module-jaxb-annotations-0:2.21.4-2.module+el8.10.0+24523+f75fb079.noarch (pki-deps:10.6)",
"product_id": "jackson-module-jaxb-annotations-0:2.21.4-2.module+el8.10.0+24523+f75fb079.noarch::pki-deps:10.6",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jackson-module-jaxb-annotations@2.21.4-2.module%2Bel8.10.0%2B24523%2Bf75fb079?arch=noarch\u0026rpmmod=pki-deps:10.6:8100020261021095739:489197e6"
}
}
},
{
"category": "product_version",
"name": "jakarta-commons-httpclient-1:3.1-28.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"product": {
"name": "jakarta-commons-httpclient-1:3.1-28.module+el8.10.0+20993+d0f024b0.noarch (pki-deps:10.6)",
"product_id": "jakarta-commons-httpclient-1:3.1-28.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jakarta-commons-httpclient@3.1-28.module%2Bel8.10.0%2B20993%2Bd0f024b0?arch=noarch\u0026epoch=1\u0026rpmmod=pki-deps:10.6:8100020261021095739:489197e6"
}
}
},
{
"category": "product_version",
"name": "javassist-0:3.18.1-8.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"product": {
"name": "javassist-0:3.18.1-8.module+el8.10.0+20993+d0f024b0.noarch (pki-deps:10.6)",
"product_id": "javassist-0:3.18.1-8.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/javassist@3.18.1-8.module%2Bel8.10.0%2B20993%2Bd0f024b0?arch=noarch\u0026rpmmod=pki-deps:10.6:8100020261021095739:489197e6"
}
}
},
{
"category": "product_version",
"name": "javassist-javadoc-0:3.18.1-8.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"product": {
"name": "javassist-javadoc-0:3.18.1-8.module+el8.10.0+20993+d0f024b0.noarch (pki-deps:10.6)",
"product_id": "javassist-javadoc-0:3.18.1-8.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/javassist-javadoc@3.18.1-8.module%2Bel8.10.0%2B20993%2Bd0f024b0?arch=noarch\u0026rpmmod=pki-deps:10.6:8100020261021095739:489197e6"
}
}
},
{
"category": "product_version",
"name": "pki-servlet-engine-1:9.0.62-1.module+el8.10.0+21257+2b5308b5.noarch::pki-deps:10.6",
"product": {
"name": "pki-servlet-engine-1:9.0.62-1.module+el8.10.0+21257+2b5308b5.noarch (pki-deps:10.6)",
"product_id": "pki-servlet-engine-1:9.0.62-1.module+el8.10.0+21257+2b5308b5.noarch::pki-deps:10.6",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pki-servlet-engine@9.0.62-1.module%2Bel8.10.0%2B21257%2B2b5308b5?arch=noarch\u0026epoch=1\u0026rpmmod=pki-deps:10.6:8100020261021095739:489197e6"
}
}
},
{
"category": "product_version",
"name": "relaxngDatatype-0:2011.1-7.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"product": {
"name": "relaxngDatatype-0:2011.1-7.module+el8.10.0+20993+d0f024b0.noarch (pki-deps:10.6)",
"product_id": "relaxngDatatype-0:2011.1-7.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/relaxngDatatype@2011.1-7.module%2Bel8.10.0%2B20993%2Bd0f024b0?arch=noarch\u0026rpmmod=pki-deps:10.6:8100020261021095739:489197e6"
}
}
},
{
"category": "product_version",
"name": "slf4j-0:1.7.25-4.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"product": {
"name": "slf4j-0:1.7.25-4.module+el8.10.0+20993+d0f024b0.noarch (pki-deps:10.6)",
"product_id": "slf4j-0:1.7.25-4.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/slf4j@1.7.25-4.module%2Bel8.10.0%2B20993%2Bd0f024b0?arch=noarch\u0026rpmmod=pki-deps:10.6:8100020261021095739:489197e6"
}
}
},
{
"category": "product_version",
"name": "slf4j-jdk14-0:1.7.25-4.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"product": {
"name": "slf4j-jdk14-0:1.7.25-4.module+el8.10.0+20993+d0f024b0.noarch (pki-deps:10.6)",
"product_id": "slf4j-jdk14-0:1.7.25-4.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/slf4j-jdk14@1.7.25-4.module%2Bel8.10.0%2B20993%2Bd0f024b0?arch=noarch\u0026rpmmod=pki-deps:10.6:8100020261021095739:489197e6"
}
}
},
{
"category": "product_version",
"name": "stax-ex-0:1.7.7-8.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"product": {
"name": "stax-ex-0:1.7.7-8.module+el8.10.0+20993+d0f024b0.noarch (pki-deps:10.6)",
"product_id": "stax-ex-0:1.7.7-8.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/stax-ex@1.7.7-8.module%2Bel8.10.0%2B20993%2Bd0f024b0?arch=noarch\u0026rpmmod=pki-deps:10.6:8100020261021095739:489197e6"
}
}
},
{
"category": "product_version",
"name": "velocity-0:1.7-24.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"product": {
"name": "velocity-0:1.7-24.module+el8.10.0+20993+d0f024b0.noarch (pki-deps:10.6)",
"product_id": "velocity-0:1.7-24.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/velocity@1.7-24.module%2Bel8.10.0%2B20993%2Bd0f024b0?arch=noarch\u0026rpmmod=pki-deps:10.6:8100020261021095739:489197e6"
}
}
},
{
"category": "product_version",
"name": "xalan-j2-0:2.7.1-38.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"product": {
"name": "xalan-j2-0:2.7.1-38.module+el8.10.0+20993+d0f024b0.noarch (pki-deps:10.6)",
"product_id": "xalan-j2-0:2.7.1-38.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xalan-j2@2.7.1-38.module%2Bel8.10.0%2B20993%2Bd0f024b0?arch=noarch\u0026rpmmod=pki-deps:10.6:8100020261021095739:489197e6"
}
}
},
{
"category": "product_version",
"name": "xerces-j2-0:2.11.0-34.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"product": {
"name": "xerces-j2-0:2.11.0-34.module+el8.10.0+20993+d0f024b0.noarch (pki-deps:10.6)",
"product_id": "xerces-j2-0:2.11.0-34.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xerces-j2@2.11.0-34.module%2Bel8.10.0%2B20993%2Bd0f024b0?arch=noarch\u0026rpmmod=pki-deps:10.6:8100020261021095739:489197e6"
}
}
},
{
"category": "product_version",
"name": "xml-commons-apis-0:1.4.01-25.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"product": {
"name": "xml-commons-apis-0:1.4.01-25.module+el8.10.0+20993+d0f024b0.noarch (pki-deps:10.6)",
"product_id": "xml-commons-apis-0:1.4.01-25.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xml-commons-apis@1.4.01-25.module%2Bel8.10.0%2B20993%2Bd0f024b0?arch=noarch\u0026rpmmod=pki-deps:10.6:8100020261021095739:489197e6"
}
}
},
{
"category": "product_version",
"name": "xml-commons-resolver-0:1.2-26.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"product": {
"name": "xml-commons-resolver-0:1.2-26.module+el8.10.0+20993+d0f024b0.noarch (pki-deps:10.6)",
"product_id": "xml-commons-resolver-0:1.2-26.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xml-commons-resolver@1.2-26.module%2Bel8.10.0%2B20993%2Bd0f024b0?arch=noarch\u0026rpmmod=pki-deps:10.6:8100020261021095739:489197e6"
}
}
},
{
"category": "product_version",
"name": "xmlstreambuffer-0:1.5.4-8.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"product": {
"name": "xmlstreambuffer-0:1.5.4-8.module+el8.10.0+20993+d0f024b0.noarch (pki-deps:10.6)",
"product_id": "xmlstreambuffer-0:1.5.4-8.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlstreambuffer@1.5.4-8.module%2Bel8.10.0%2B20993%2Bd0f024b0?arch=noarch\u0026rpmmod=pki-deps:10.6:8100020261021095739:489197e6"
}
}
},
{
"category": "product_version",
"name": "xsom-0:0-19.20110809svn.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"product": {
"name": "xsom-0:0-19.20110809svn.module+el8.10.0+20993+d0f024b0.noarch (pki-deps:10.6)",
"product_id": "xsom-0:0-19.20110809svn.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xsom@0-19.20110809svn.module%2Bel8.10.0%2B20993%2Bd0f024b0?arch=noarch\u0026rpmmod=pki-deps:10.6:8100020261021095739:489197e6"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "apache-commons-collections-0:3.2.2-10.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"product": {
"name": "apache-commons-collections-0:3.2.2-10.module+el8.10.0+20993+d0f024b0.src (pki-deps:10.6)",
"product_id": "apache-commons-collections-0:3.2.2-10.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/apache-commons-collections@3.2.2-10.module%2Bel8.10.0%2B20993%2Bd0f024b0?arch=src\u0026rpmmod=pki-deps:10.6:8100020261021095739:489197e6"
}
}
},
{
"category": "product_version",
"name": "apache-commons-lang-0:2.6-21.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"product": {
"name": "apache-commons-lang-0:2.6-21.module+el8.10.0+20993+d0f024b0.src (pki-deps:10.6)",
"product_id": "apache-commons-lang-0:2.6-21.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/apache-commons-lang@2.6-21.module%2Bel8.10.0%2B20993%2Bd0f024b0?arch=src\u0026rpmmod=pki-deps:10.6:8100020261021095739:489197e6"
}
}
},
{
"category": "product_version",
"name": "apache-commons-net-0:3.6-3.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"product": {
"name": "apache-commons-net-0:3.6-3.module+el8.10.0+20993+d0f024b0.src (pki-deps:10.6)",
"product_id": "apache-commons-net-0:3.6-3.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/apache-commons-net@3.6-3.module%2Bel8.10.0%2B20993%2Bd0f024b0?arch=src\u0026rpmmod=pki-deps:10.6:8100020261021095739:489197e6"
}
}
},
{
"category": "product_version",
"name": "bea-stax-0:1.2.0-16.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"product": {
"name": "bea-stax-0:1.2.0-16.module+el8.10.0+20993+d0f024b0.src (pki-deps:10.6)",
"product_id": "bea-stax-0:1.2.0-16.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bea-stax@1.2.0-16.module%2Bel8.10.0%2B20993%2Bd0f024b0?arch=src\u0026rpmmod=pki-deps:10.6:8100020261021095739:489197e6"
}
}
},
{
"category": "product_version",
"name": "glassfish-fastinfoset-0:1.2.13-9.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"product": {
"name": "glassfish-fastinfoset-0:1.2.13-9.module+el8.10.0+20993+d0f024b0.src (pki-deps:10.6)",
"product_id": "glassfish-fastinfoset-0:1.2.13-9.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/glassfish-fastinfoset@1.2.13-9.module%2Bel8.10.0%2B20993%2Bd0f024b0?arch=src\u0026rpmmod=pki-deps:10.6:8100020261021095739:489197e6"
}
}
},
{
"category": "product_version",
"name": "glassfish-jaxb-0:2.2.11-12.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"product": {
"name": "glassfish-jaxb-0:2.2.11-12.module+el8.10.0+20993+d0f024b0.src (pki-deps:10.6)",
"product_id": "glassfish-jaxb-0:2.2.11-12.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/glassfish-jaxb@2.2.11-12.module%2Bel8.10.0%2B20993%2Bd0f024b0?arch=src\u0026rpmmod=pki-deps:10.6:8100020261021095739:489197e6"
}
}
},
{
"category": "product_version",
"name": "glassfish-jaxb-api-0:2.2.12-8.module+el8.10.0+21035+a01f6469.src::pki-deps:10.6",
"product": {
"name": "glassfish-jaxb-api-0:2.2.12-8.module+el8.10.0+21035+a01f6469.src (pki-deps:10.6)",
"product_id": "glassfish-jaxb-api-0:2.2.12-8.module+el8.10.0+21035+a01f6469.src::pki-deps:10.6",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/glassfish-jaxb-api@2.2.12-8.module%2Bel8.10.0%2B21035%2Ba01f6469?arch=src\u0026rpmmod=pki-deps:10.6:8100020261021095739:489197e6"
}
}
},
{
"category": "product_version",
"name": "jackson-annotations-0:2.21-1.module+el8.10.0+24523+f75fb079.src::pki-deps:10.6",
"product": {
"name": "jackson-annotations-0:2.21-1.module+el8.10.0+24523+f75fb079.src (pki-deps:10.6)",
"product_id": "jackson-annotations-0:2.21-1.module+el8.10.0+24523+f75fb079.src::pki-deps:10.6",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jackson-annotations@2.21-1.module%2Bel8.10.0%2B24523%2Bf75fb079?arch=src\u0026rpmmod=pki-deps:10.6:8100020261021095739:489197e6"
}
}
},
{
"category": "product_version",
"name": "jackson-core-0:2.21.4-1.module+el8.10.0+25128+a2644b4c.3.src::pki-deps:10.6",
"product": {
"name": "jackson-core-0:2.21.4-1.module+el8.10.0+25128+a2644b4c.3.src (pki-deps:10.6)",
"product_id": "jackson-core-0:2.21.4-1.module+el8.10.0+25128+a2644b4c.3.src::pki-deps:10.6",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jackson-core@2.21.4-1.module%2Bel8.10.0%2B25128%2Ba2644b4c.3?arch=src\u0026rpmmod=pki-deps:10.6:8100020261021095739:489197e6"
}
}
},
{
"category": "product_version",
"name": "jackson-databind-0:2.21.4-1.module+el8.10.0+25128+a2644b4c.1.src::pki-deps:10.6",
"product": {
"name": "jackson-databind-0:2.21.4-1.module+el8.10.0+25128+a2644b4c.1.src (pki-deps:10.6)",
"product_id": "jackson-databind-0:2.21.4-1.module+el8.10.0+25128+a2644b4c.1.src::pki-deps:10.6",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jackson-databind@2.21.4-1.module%2Bel8.10.0%2B25128%2Ba2644b4c.1?arch=src\u0026rpmmod=pki-deps:10.6:8100020261021095739:489197e6"
}
}
},
{
"category": "product_version",
"name": "jackson-jaxrs-providers-0:2.21.4-1.module+el8.10.0+24523+f75fb079.src::pki-deps:10.6",
"product": {
"name": "jackson-jaxrs-providers-0:2.21.4-1.module+el8.10.0+24523+f75fb079.src (pki-deps:10.6)",
"product_id": "jackson-jaxrs-providers-0:2.21.4-1.module+el8.10.0+24523+f75fb079.src::pki-deps:10.6",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jackson-jaxrs-providers@2.21.4-1.module%2Bel8.10.0%2B24523%2Bf75fb079?arch=src\u0026rpmmod=pki-deps:10.6:8100020261021095739:489197e6"
}
}
},
{
"category": "product_version",
"name": "jackson-modules-base-0:2.21.4-2.module+el8.10.0+24523+f75fb079.src::pki-deps:10.6",
"product": {
"name": "jackson-modules-base-0:2.21.4-2.module+el8.10.0+24523+f75fb079.src (pki-deps:10.6)",
"product_id": "jackson-modules-base-0:2.21.4-2.module+el8.10.0+24523+f75fb079.src::pki-deps:10.6",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jackson-modules-base@2.21.4-2.module%2Bel8.10.0%2B24523%2Bf75fb079?arch=src\u0026rpmmod=pki-deps:10.6:8100020261021095739:489197e6"
}
}
},
{
"category": "product_version",
"name": "jakarta-commons-httpclient-1:3.1-28.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"product": {
"name": "jakarta-commons-httpclient-1:3.1-28.module+el8.10.0+20993+d0f024b0.src (pki-deps:10.6)",
"product_id": "jakarta-commons-httpclient-1:3.1-28.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jakarta-commons-httpclient@3.1-28.module%2Bel8.10.0%2B20993%2Bd0f024b0?arch=src\u0026epoch=1\u0026rpmmod=pki-deps:10.6:8100020261021095739:489197e6"
}
}
},
{
"category": "product_version",
"name": "javassist-0:3.18.1-8.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"product": {
"name": "javassist-0:3.18.1-8.module+el8.10.0+20993+d0f024b0.src (pki-deps:10.6)",
"product_id": "javassist-0:3.18.1-8.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/javassist@3.18.1-8.module%2Bel8.10.0%2B20993%2Bd0f024b0?arch=src\u0026rpmmod=pki-deps:10.6:8100020261021095739:489197e6"
}
}
},
{
"category": "product_version",
"name": "pki-servlet-engine-1:9.0.62-1.module+el8.10.0+21257+2b5308b5.src::pki-deps:10.6",
"product": {
"name": "pki-servlet-engine-1:9.0.62-1.module+el8.10.0+21257+2b5308b5.src (pki-deps:10.6)",
"product_id": "pki-servlet-engine-1:9.0.62-1.module+el8.10.0+21257+2b5308b5.src::pki-deps:10.6",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pki-servlet-engine@9.0.62-1.module%2Bel8.10.0%2B21257%2B2b5308b5?arch=src\u0026epoch=1\u0026rpmmod=pki-deps:10.6:8100020261021095739:489197e6"
}
}
},
{
"category": "product_version",
"name": "relaxngDatatype-0:2011.1-7.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"product": {
"name": "relaxngDatatype-0:2011.1-7.module+el8.10.0+20993+d0f024b0.src (pki-deps:10.6)",
"product_id": "relaxngDatatype-0:2011.1-7.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/relaxngDatatype@2011.1-7.module%2Bel8.10.0%2B20993%2Bd0f024b0?arch=src\u0026rpmmod=pki-deps:10.6:8100020261021095739:489197e6"
}
}
},
{
"category": "product_version",
"name": "slf4j-0:1.7.25-4.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"product": {
"name": "slf4j-0:1.7.25-4.module+el8.10.0+20993+d0f024b0.src (pki-deps:10.6)",
"product_id": "slf4j-0:1.7.25-4.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/slf4j@1.7.25-4.module%2Bel8.10.0%2B20993%2Bd0f024b0?arch=src\u0026rpmmod=pki-deps:10.6:8100020261021095739:489197e6"
}
}
},
{
"category": "product_version",
"name": "stax-ex-0:1.7.7-8.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"product": {
"name": "stax-ex-0:1.7.7-8.module+el8.10.0+20993+d0f024b0.src (pki-deps:10.6)",
"product_id": "stax-ex-0:1.7.7-8.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/stax-ex@1.7.7-8.module%2Bel8.10.0%2B20993%2Bd0f024b0?arch=src\u0026rpmmod=pki-deps:10.6:8100020261021095739:489197e6"
}
}
},
{
"category": "product_version",
"name": "velocity-0:1.7-24.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"product": {
"name": "velocity-0:1.7-24.module+el8.10.0+20993+d0f024b0.src (pki-deps:10.6)",
"product_id": "velocity-0:1.7-24.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/velocity@1.7-24.module%2Bel8.10.0%2B20993%2Bd0f024b0?arch=src\u0026rpmmod=pki-deps:10.6:8100020261021095739:489197e6"
}
}
},
{
"category": "product_version",
"name": "xalan-j2-0:2.7.1-38.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"product": {
"name": "xalan-j2-0:2.7.1-38.module+el8.10.0+20993+d0f024b0.src (pki-deps:10.6)",
"product_id": "xalan-j2-0:2.7.1-38.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xalan-j2@2.7.1-38.module%2Bel8.10.0%2B20993%2Bd0f024b0?arch=src\u0026rpmmod=pki-deps:10.6:8100020261021095739:489197e6"
}
}
},
{
"category": "product_version",
"name": "xerces-j2-0:2.11.0-34.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"product": {
"name": "xerces-j2-0:2.11.0-34.module+el8.10.0+20993+d0f024b0.src (pki-deps:10.6)",
"product_id": "xerces-j2-0:2.11.0-34.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xerces-j2@2.11.0-34.module%2Bel8.10.0%2B20993%2Bd0f024b0?arch=src\u0026rpmmod=pki-deps:10.6:8100020261021095739:489197e6"
}
}
},
{
"category": "product_version",
"name": "xml-commons-apis-0:1.4.01-25.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"product": {
"name": "xml-commons-apis-0:1.4.01-25.module+el8.10.0+20993+d0f024b0.src (pki-deps:10.6)",
"product_id": "xml-commons-apis-0:1.4.01-25.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xml-commons-apis@1.4.01-25.module%2Bel8.10.0%2B20993%2Bd0f024b0?arch=src\u0026rpmmod=pki-deps:10.6:8100020261021095739:489197e6"
}
}
},
{
"category": "product_version",
"name": "xml-commons-resolver-0:1.2-26.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"product": {
"name": "xml-commons-resolver-0:1.2-26.module+el8.10.0+20993+d0f024b0.src (pki-deps:10.6)",
"product_id": "xml-commons-resolver-0:1.2-26.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xml-commons-resolver@1.2-26.module%2Bel8.10.0%2B20993%2Bd0f024b0?arch=src\u0026rpmmod=pki-deps:10.6:8100020261021095739:489197e6"
}
}
},
{
"category": "product_version",
"name": "xmlstreambuffer-0:1.5.4-8.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"product": {
"name": "xmlstreambuffer-0:1.5.4-8.module+el8.10.0+20993+d0f024b0.src (pki-deps:10.6)",
"product_id": "xmlstreambuffer-0:1.5.4-8.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlstreambuffer@1.5.4-8.module%2Bel8.10.0%2B20993%2Bd0f024b0?arch=src\u0026rpmmod=pki-deps:10.6:8100020261021095739:489197e6"
}
}
},
{
"category": "product_version",
"name": "xsom-0:0-19.20110809svn.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"product": {
"name": "xsom-0:0-19.20110809svn.module+el8.10.0+20993+d0f024b0.src (pki-deps:10.6)",
"product_id": "xsom-0:0-19.20110809svn.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xsom@0-19.20110809svn.module%2Bel8.10.0%2B20993%2Bd0f024b0?arch=src\u0026rpmmod=pki-deps:10.6:8100020261021095739:489197e6"
}
}
}
],
"category": "architecture",
"name": "src"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "apache-commons-collections-0:3.2.2-10.module+el8.10.0+20993+d0f024b0.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:apache-commons-collections-0:3.2.2-10.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6"
},
"product_reference": "apache-commons-collections-0:3.2.2-10.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache-commons-collections-0:3.2.2-10.module+el8.10.0+20993+d0f024b0.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:apache-commons-collections-0:3.2.2-10.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6"
},
"product_reference": "apache-commons-collections-0:3.2.2-10.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache-commons-lang-0:2.6-21.module+el8.10.0+20993+d0f024b0.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:apache-commons-lang-0:2.6-21.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6"
},
"product_reference": "apache-commons-lang-0:2.6-21.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache-commons-lang-0:2.6-21.module+el8.10.0+20993+d0f024b0.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:apache-commons-lang-0:2.6-21.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6"
},
"product_reference": "apache-commons-lang-0:2.6-21.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache-commons-net-0:3.6-3.module+el8.10.0+20993+d0f024b0.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:apache-commons-net-0:3.6-3.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6"
},
"product_reference": "apache-commons-net-0:3.6-3.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache-commons-net-0:3.6-3.module+el8.10.0+20993+d0f024b0.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:apache-commons-net-0:3.6-3.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6"
},
"product_reference": "apache-commons-net-0:3.6-3.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bea-stax-0:1.2.0-16.module+el8.10.0+20993+d0f024b0.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:bea-stax-0:1.2.0-16.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6"
},
"product_reference": "bea-stax-0:1.2.0-16.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bea-stax-api-0:1.2.0-16.module+el8.10.0+20993+d0f024b0.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:bea-stax-api-0:1.2.0-16.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6"
},
"product_reference": "bea-stax-api-0:1.2.0-16.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "glassfish-fastinfoset-0:1.2.13-9.module+el8.10.0+20993+d0f024b0.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:glassfish-fastinfoset-0:1.2.13-9.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6"
},
"product_reference": "glassfish-fastinfoset-0:1.2.13-9.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "glassfish-fastinfoset-0:1.2.13-9.module+el8.10.0+20993+d0f024b0.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:glassfish-fastinfoset-0:1.2.13-9.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6"
},
"product_reference": "glassfish-fastinfoset-0:1.2.13-9.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "glassfish-jaxb-0:2.2.11-12.module+el8.10.0+20993+d0f024b0.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:glassfish-jaxb-0:2.2.11-12.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6"
},
"product_reference": "glassfish-jaxb-0:2.2.11-12.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "glassfish-jaxb-api-0:2.2.12-8.module+el8.10.0+21035+a01f6469.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:glassfish-jaxb-api-0:2.2.12-8.module+el8.10.0+21035+a01f6469.noarch::pki-deps:10.6"
},
"product_reference": "glassfish-jaxb-api-0:2.2.12-8.module+el8.10.0+21035+a01f6469.noarch::pki-deps:10.6",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "glassfish-jaxb-api-0:2.2.12-8.module+el8.10.0+21035+a01f6469.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:glassfish-jaxb-api-0:2.2.12-8.module+el8.10.0+21035+a01f6469.src::pki-deps:10.6"
},
"product_reference": "glassfish-jaxb-api-0:2.2.12-8.module+el8.10.0+21035+a01f6469.src::pki-deps:10.6",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "glassfish-jaxb-core-0:2.2.11-12.module+el8.10.0+20993+d0f024b0.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:glassfish-jaxb-core-0:2.2.11-12.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6"
},
"product_reference": "glassfish-jaxb-core-0:2.2.11-12.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "glassfish-jaxb-runtime-0:2.2.11-12.module+el8.10.0+20993+d0f024b0.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:glassfish-jaxb-runtime-0:2.2.11-12.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6"
},
"product_reference": "glassfish-jaxb-runtime-0:2.2.11-12.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "glassfish-jaxb-txw2-0:2.2.11-12.module+el8.10.0+20993+d0f024b0.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:glassfish-jaxb-txw2-0:2.2.11-12.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6"
},
"product_reference": "glassfish-jaxb-txw2-0:2.2.11-12.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jackson-annotations-0:2.21-1.module+el8.10.0+24523+f75fb079.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:jackson-annotations-0:2.21-1.module+el8.10.0+24523+f75fb079.noarch::pki-deps:10.6"
},
"product_reference": "jackson-annotations-0:2.21-1.module+el8.10.0+24523+f75fb079.noarch::pki-deps:10.6",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jackson-annotations-0:2.21-1.module+el8.10.0+24523+f75fb079.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:jackson-annotations-0:2.21-1.module+el8.10.0+24523+f75fb079.src::pki-deps:10.6"
},
"product_reference": "jackson-annotations-0:2.21-1.module+el8.10.0+24523+f75fb079.src::pki-deps:10.6",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jackson-core-0:2.21.4-1.module+el8.10.0+25128+a2644b4c.3.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:jackson-core-0:2.21.4-1.module+el8.10.0+25128+a2644b4c.3.noarch::pki-deps:10.6"
},
"product_reference": "jackson-core-0:2.21.4-1.module+el8.10.0+25128+a2644b4c.3.noarch::pki-deps:10.6",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jackson-core-0:2.21.4-1.module+el8.10.0+25128+a2644b4c.3.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:jackson-core-0:2.21.4-1.module+el8.10.0+25128+a2644b4c.3.src::pki-deps:10.6"
},
"product_reference": "jackson-core-0:2.21.4-1.module+el8.10.0+25128+a2644b4c.3.src::pki-deps:10.6",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jackson-databind-0:2.21.4-1.module+el8.10.0+25128+a2644b4c.1.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:jackson-databind-0:2.21.4-1.module+el8.10.0+25128+a2644b4c.1.noarch::pki-deps:10.6"
},
"product_reference": "jackson-databind-0:2.21.4-1.module+el8.10.0+25128+a2644b4c.1.noarch::pki-deps:10.6",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jackson-databind-0:2.21.4-1.module+el8.10.0+25128+a2644b4c.1.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:jackson-databind-0:2.21.4-1.module+el8.10.0+25128+a2644b4c.1.src::pki-deps:10.6"
},
"product_reference": "jackson-databind-0:2.21.4-1.module+el8.10.0+25128+a2644b4c.1.src::pki-deps:10.6",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jackson-jaxrs-json-provider-0:2.21.4-1.module+el8.10.0+24523+f75fb079.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:jackson-jaxrs-json-provider-0:2.21.4-1.module+el8.10.0+24523+f75fb079.noarch::pki-deps:10.6"
},
"product_reference": "jackson-jaxrs-json-provider-0:2.21.4-1.module+el8.10.0+24523+f75fb079.noarch::pki-deps:10.6",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jackson-jaxrs-providers-0:2.21.4-1.module+el8.10.0+24523+f75fb079.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:jackson-jaxrs-providers-0:2.21.4-1.module+el8.10.0+24523+f75fb079.noarch::pki-deps:10.6"
},
"product_reference": "jackson-jaxrs-providers-0:2.21.4-1.module+el8.10.0+24523+f75fb079.noarch::pki-deps:10.6",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jackson-jaxrs-providers-0:2.21.4-1.module+el8.10.0+24523+f75fb079.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:jackson-jaxrs-providers-0:2.21.4-1.module+el8.10.0+24523+f75fb079.src::pki-deps:10.6"
},
"product_reference": "jackson-jaxrs-providers-0:2.21.4-1.module+el8.10.0+24523+f75fb079.src::pki-deps:10.6",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jackson-module-jaxb-annotations-0:2.21.4-2.module+el8.10.0+24523+f75fb079.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:jackson-module-jaxb-annotations-0:2.21.4-2.module+el8.10.0+24523+f75fb079.noarch::pki-deps:10.6"
},
"product_reference": "jackson-module-jaxb-annotations-0:2.21.4-2.module+el8.10.0+24523+f75fb079.noarch::pki-deps:10.6",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jackson-modules-base-0:2.21.4-2.module+el8.10.0+24523+f75fb079.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:jackson-modules-base-0:2.21.4-2.module+el8.10.0+24523+f75fb079.src::pki-deps:10.6"
},
"product_reference": "jackson-modules-base-0:2.21.4-2.module+el8.10.0+24523+f75fb079.src::pki-deps:10.6",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-1:3.1-28.module+el8.10.0+20993+d0f024b0.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:jakarta-commons-httpclient-1:3.1-28.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6"
},
"product_reference": "jakarta-commons-httpclient-1:3.1-28.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-1:3.1-28.module+el8.10.0+20993+d0f024b0.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:jakarta-commons-httpclient-1:3.1-28.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6"
},
"product_reference": "jakarta-commons-httpclient-1:3.1-28.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "javassist-0:3.18.1-8.module+el8.10.0+20993+d0f024b0.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:javassist-0:3.18.1-8.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6"
},
"product_reference": "javassist-0:3.18.1-8.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "javassist-0:3.18.1-8.module+el8.10.0+20993+d0f024b0.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:javassist-0:3.18.1-8.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6"
},
"product_reference": "javassist-0:3.18.1-8.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "javassist-javadoc-0:3.18.1-8.module+el8.10.0+20993+d0f024b0.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:javassist-javadoc-0:3.18.1-8.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6"
},
"product_reference": "javassist-javadoc-0:3.18.1-8.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pki-servlet-engine-1:9.0.62-1.module+el8.10.0+21257+2b5308b5.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:pki-servlet-engine-1:9.0.62-1.module+el8.10.0+21257+2b5308b5.noarch::pki-deps:10.6"
},
"product_reference": "pki-servlet-engine-1:9.0.62-1.module+el8.10.0+21257+2b5308b5.noarch::pki-deps:10.6",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pki-servlet-engine-1:9.0.62-1.module+el8.10.0+21257+2b5308b5.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:pki-servlet-engine-1:9.0.62-1.module+el8.10.0+21257+2b5308b5.src::pki-deps:10.6"
},
"product_reference": "pki-servlet-engine-1:9.0.62-1.module+el8.10.0+21257+2b5308b5.src::pki-deps:10.6",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "relaxngDatatype-0:2011.1-7.module+el8.10.0+20993+d0f024b0.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:relaxngDatatype-0:2011.1-7.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6"
},
"product_reference": "relaxngDatatype-0:2011.1-7.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "relaxngDatatype-0:2011.1-7.module+el8.10.0+20993+d0f024b0.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:relaxngDatatype-0:2011.1-7.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6"
},
"product_reference": "relaxngDatatype-0:2011.1-7.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "slf4j-0:1.7.25-4.module+el8.10.0+20993+d0f024b0.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:slf4j-0:1.7.25-4.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6"
},
"product_reference": "slf4j-0:1.7.25-4.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "slf4j-0:1.7.25-4.module+el8.10.0+20993+d0f024b0.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:slf4j-0:1.7.25-4.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6"
},
"product_reference": "slf4j-0:1.7.25-4.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "slf4j-jdk14-0:1.7.25-4.module+el8.10.0+20993+d0f024b0.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:slf4j-jdk14-0:1.7.25-4.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6"
},
"product_reference": "slf4j-jdk14-0:1.7.25-4.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "stax-ex-0:1.7.7-8.module+el8.10.0+20993+d0f024b0.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:stax-ex-0:1.7.7-8.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6"
},
"product_reference": "stax-ex-0:1.7.7-8.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "stax-ex-0:1.7.7-8.module+el8.10.0+20993+d0f024b0.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:stax-ex-0:1.7.7-8.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6"
},
"product_reference": "stax-ex-0:1.7.7-8.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "velocity-0:1.7-24.module+el8.10.0+20993+d0f024b0.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:velocity-0:1.7-24.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6"
},
"product_reference": "velocity-0:1.7-24.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "velocity-0:1.7-24.module+el8.10.0+20993+d0f024b0.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:velocity-0:1.7-24.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6"
},
"product_reference": "velocity-0:1.7-24.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xalan-j2-0:2.7.1-38.module+el8.10.0+20993+d0f024b0.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:xalan-j2-0:2.7.1-38.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6"
},
"product_reference": "xalan-j2-0:2.7.1-38.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xalan-j2-0:2.7.1-38.module+el8.10.0+20993+d0f024b0.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:xalan-j2-0:2.7.1-38.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6"
},
"product_reference": "xalan-j2-0:2.7.1-38.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xerces-j2-0:2.11.0-34.module+el8.10.0+20993+d0f024b0.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:xerces-j2-0:2.11.0-34.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6"
},
"product_reference": "xerces-j2-0:2.11.0-34.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xerces-j2-0:2.11.0-34.module+el8.10.0+20993+d0f024b0.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:xerces-j2-0:2.11.0-34.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6"
},
"product_reference": "xerces-j2-0:2.11.0-34.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xml-commons-apis-0:1.4.01-25.module+el8.10.0+20993+d0f024b0.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:xml-commons-apis-0:1.4.01-25.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6"
},
"product_reference": "xml-commons-apis-0:1.4.01-25.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xml-commons-apis-0:1.4.01-25.module+el8.10.0+20993+d0f024b0.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:xml-commons-apis-0:1.4.01-25.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6"
},
"product_reference": "xml-commons-apis-0:1.4.01-25.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xml-commons-resolver-0:1.2-26.module+el8.10.0+20993+d0f024b0.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:xml-commons-resolver-0:1.2-26.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6"
},
"product_reference": "xml-commons-resolver-0:1.2-26.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xml-commons-resolver-0:1.2-26.module+el8.10.0+20993+d0f024b0.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:xml-commons-resolver-0:1.2-26.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6"
},
"product_reference": "xml-commons-resolver-0:1.2-26.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlstreambuffer-0:1.5.4-8.module+el8.10.0+20993+d0f024b0.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:xmlstreambuffer-0:1.5.4-8.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6"
},
"product_reference": "xmlstreambuffer-0:1.5.4-8.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlstreambuffer-0:1.5.4-8.module+el8.10.0+20993+d0f024b0.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:xmlstreambuffer-0:1.5.4-8.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6"
},
"product_reference": "xmlstreambuffer-0:1.5.4-8.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xsom-0:0-19.20110809svn.module+el8.10.0+20993+d0f024b0.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:xsom-0:0-19.20110809svn.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6"
},
"product_reference": "xsom-0:0-19.20110809svn.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xsom-0:0-19.20110809svn.module+el8.10.0+20993+d0f024b0.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:xsom-0:0-19.20110809svn.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6"
},
"product_reference": "xsom-0:0-19.20110809svn.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-68498",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-10-16T21:23:39.430928+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2554486"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in jackson-core. When parsing JSON data from character-based inputs, the parser does not enforce configured property name length limits while reading object keys into memory. A remote, unauthenticated attacker can exploit this flaw by submitting a crafted JSON payload containing an excessively long property name. Processing such input can exhaust system memory, causing the application to crash and resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "com.fasterxml.jackson.core/jackson-core: tools.jackson.core/jackson-core: jackson-core: Denial of Service via excessively long JSON property names",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in jackson-core. When parsing JSON from character-based inputs (such as Reader, String, or char[]), ReaderBasedJsonParser fails to enforce the configured StreamReadConstraints.maxNameLength limit during name accumulation, validating against the larger maxStringLength limit instead. A remote, unauthenticated attacker can exploit this flaw by sending a crafted JSON object containing an excessively long property name, forcing allocations up to 100 million characters. This can cause heap exhaustion and an Out-Of-Memory application crash, resulting in a denial of service within standard process and container boundaries.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.10.0.Z.MAIN.EUS:apache-commons-collections-0:3.2.2-10.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:apache-commons-collections-0:3.2.2-10.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:apache-commons-lang-0:2.6-21.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:apache-commons-lang-0:2.6-21.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:apache-commons-net-0:3.6-3.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:apache-commons-net-0:3.6-3.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:bea-stax-0:1.2.0-16.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:bea-stax-api-0:1.2.0-16.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:glassfish-fastinfoset-0:1.2.13-9.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:glassfish-fastinfoset-0:1.2.13-9.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:glassfish-jaxb-0:2.2.11-12.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:glassfish-jaxb-api-0:2.2.12-8.module+el8.10.0+21035+a01f6469.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:glassfish-jaxb-api-0:2.2.12-8.module+el8.10.0+21035+a01f6469.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:glassfish-jaxb-core-0:2.2.11-12.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:glassfish-jaxb-runtime-0:2.2.11-12.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:glassfish-jaxb-txw2-0:2.2.11-12.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jackson-annotations-0:2.21-1.module+el8.10.0+24523+f75fb079.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jackson-annotations-0:2.21-1.module+el8.10.0+24523+f75fb079.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jackson-core-0:2.21.4-1.module+el8.10.0+25128+a2644b4c.3.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jackson-core-0:2.21.4-1.module+el8.10.0+25128+a2644b4c.3.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jackson-databind-0:2.21.4-1.module+el8.10.0+25128+a2644b4c.1.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jackson-databind-0:2.21.4-1.module+el8.10.0+25128+a2644b4c.1.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jackson-jaxrs-json-provider-0:2.21.4-1.module+el8.10.0+24523+f75fb079.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jackson-jaxrs-providers-0:2.21.4-1.module+el8.10.0+24523+f75fb079.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jackson-jaxrs-providers-0:2.21.4-1.module+el8.10.0+24523+f75fb079.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jackson-module-jaxb-annotations-0:2.21.4-2.module+el8.10.0+24523+f75fb079.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jackson-modules-base-0:2.21.4-2.module+el8.10.0+24523+f75fb079.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jakarta-commons-httpclient-1:3.1-28.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jakarta-commons-httpclient-1:3.1-28.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:javassist-0:3.18.1-8.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:javassist-0:3.18.1-8.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:javassist-javadoc-0:3.18.1-8.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:pki-servlet-engine-1:9.0.62-1.module+el8.10.0+21257+2b5308b5.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:pki-servlet-engine-1:9.0.62-1.module+el8.10.0+21257+2b5308b5.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:relaxngDatatype-0:2011.1-7.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:relaxngDatatype-0:2011.1-7.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:slf4j-0:1.7.25-4.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:slf4j-0:1.7.25-4.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:slf4j-jdk14-0:1.7.25-4.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:stax-ex-0:1.7.7-8.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:stax-ex-0:1.7.7-8.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:velocity-0:1.7-24.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:velocity-0:1.7-24.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xalan-j2-0:2.7.1-38.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xalan-j2-0:2.7.1-38.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xerces-j2-0:2.11.0-34.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xerces-j2-0:2.11.0-34.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xml-commons-apis-0:1.4.01-25.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xml-commons-apis-0:1.4.01-25.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xml-commons-resolver-0:1.2-26.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xml-commons-resolver-0:1.2-26.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xmlstreambuffer-0:1.5.4-8.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xmlstreambuffer-0:1.5.4-8.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xsom-0:0-19.20110809svn.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xsom-0:0-19.20110809svn.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-68498"
},
{
"category": "external",
"summary": "RHBZ#2554486",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2554486"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-68498",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-68498"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-68498",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68498"
},
{
"category": "external",
"summary": "https://github.com/FasterXML/jackson-core/blob/2.x/release-notes/VERSION-2.x",
"url": "https://github.com/FasterXML/jackson-core/blob/2.x/release-notes/VERSION-2.x"
},
{
"category": "external",
"summary": "https://github.com/FasterXML/jackson-core/blob/3.x/release-notes/VERSION",
"url": "https://github.com/FasterXML/jackson-core/blob/3.x/release-notes/VERSION"
},
{
"category": "external",
"summary": "https://github.com/FasterXML/jackson-core/commit/2cd206de1163e3fcff7bdaca425274f00668b075",
"url": "https://github.com/FasterXML/jackson-core/commit/2cd206de1163e3fcff7bdaca425274f00668b075"
},
{
"category": "external",
"summary": "https://github.com/FasterXML/jackson-core/pull/1643",
"url": "https://github.com/FasterXML/jackson-core/pull/1643"
},
{
"category": "external",
"summary": "https://github.com/FasterXML/jackson-core/security/advisories/GHSA-649p-m576-vr99",
"url": "https://github.com/FasterXML/jackson-core/security/advisories/GHSA-649p-m576-vr99"
}
],
"release_date": "2026-10-16T21:11:03.551000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-27T16:00:52+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.10.0.Z.MAIN.EUS:apache-commons-collections-0:3.2.2-10.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:apache-commons-collections-0:3.2.2-10.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:apache-commons-lang-0:2.6-21.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:apache-commons-lang-0:2.6-21.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:apache-commons-net-0:3.6-3.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:apache-commons-net-0:3.6-3.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:bea-stax-0:1.2.0-16.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:bea-stax-api-0:1.2.0-16.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:glassfish-fastinfoset-0:1.2.13-9.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:glassfish-fastinfoset-0:1.2.13-9.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:glassfish-jaxb-0:2.2.11-12.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:glassfish-jaxb-api-0:2.2.12-8.module+el8.10.0+21035+a01f6469.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:glassfish-jaxb-api-0:2.2.12-8.module+el8.10.0+21035+a01f6469.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:glassfish-jaxb-core-0:2.2.11-12.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:glassfish-jaxb-runtime-0:2.2.11-12.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:glassfish-jaxb-txw2-0:2.2.11-12.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jackson-annotations-0:2.21-1.module+el8.10.0+24523+f75fb079.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jackson-annotations-0:2.21-1.module+el8.10.0+24523+f75fb079.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jackson-core-0:2.21.4-1.module+el8.10.0+25128+a2644b4c.3.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jackson-core-0:2.21.4-1.module+el8.10.0+25128+a2644b4c.3.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jackson-databind-0:2.21.4-1.module+el8.10.0+25128+a2644b4c.1.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jackson-databind-0:2.21.4-1.module+el8.10.0+25128+a2644b4c.1.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jackson-jaxrs-json-provider-0:2.21.4-1.module+el8.10.0+24523+f75fb079.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jackson-jaxrs-providers-0:2.21.4-1.module+el8.10.0+24523+f75fb079.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jackson-jaxrs-providers-0:2.21.4-1.module+el8.10.0+24523+f75fb079.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jackson-module-jaxb-annotations-0:2.21.4-2.module+el8.10.0+24523+f75fb079.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jackson-modules-base-0:2.21.4-2.module+el8.10.0+24523+f75fb079.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jakarta-commons-httpclient-1:3.1-28.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jakarta-commons-httpclient-1:3.1-28.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:javassist-0:3.18.1-8.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:javassist-0:3.18.1-8.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:javassist-javadoc-0:3.18.1-8.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:pki-servlet-engine-1:9.0.62-1.module+el8.10.0+21257+2b5308b5.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:pki-servlet-engine-1:9.0.62-1.module+el8.10.0+21257+2b5308b5.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:relaxngDatatype-0:2011.1-7.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:relaxngDatatype-0:2011.1-7.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:slf4j-0:1.7.25-4.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:slf4j-0:1.7.25-4.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:slf4j-jdk14-0:1.7.25-4.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:stax-ex-0:1.7.7-8.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:stax-ex-0:1.7.7-8.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:velocity-0:1.7-24.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:velocity-0:1.7-24.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xalan-j2-0:2.7.1-38.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xalan-j2-0:2.7.1-38.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xerces-j2-0:2.11.0-34.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xerces-j2-0:2.11.0-34.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xml-commons-apis-0:1.4.01-25.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xml-commons-apis-0:1.4.01-25.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xml-commons-resolver-0:1.2-26.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xml-commons-resolver-0:1.2-26.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xmlstreambuffer-0:1.5.4-8.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xmlstreambuffer-0:1.5.4-8.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xsom-0:0-19.20110809svn.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xsom-0:0-19.20110809svn.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:90909"
},
{
"category": "workaround",
"details": "Parse untrusted JSON payloads directly from UTF-8 byte streams (e.g., InputStream or raw bytes) rather than character-based sources like String or Reader. Alternatively, configure custom StreamReadConstraints to lower maxStringLength or enforce a strict maxDocumentLength limit on custom JsonFactory instances.\n\n--- CME Mitigation Guidance (2026-10-20) ---\nDisclaimer: The following mitigation solutions are provided as a courtesy, pending the application of an official patch. This content was generated utilizing AI tools in conjunction with data from https://cmetaxonomy.org. Customers are advised to independently evaluate and test these temporary mitigations within their own infrastructure.\n\nThe highest-value action is to enforce property name length limits during incremental segment accumulation in ReaderBasedJsonParser character-input parsing paths: upgrade to jackson-core 2.18.10, 2.21.6, 2.22.2, 3.1.6, or 3.2.2 (or the fixed Maven/Jackson Core/Pki Deps:10.6/Jackson Core/Rhaiis/Vllm Cuda Rhel/Rhaii/Vllm Gaudi Rhel/Ansible Automation Platform 25/De Minimal Rhel/Ansible Automation Platform 27/De Supported Rhel/Ansible Automation Platform 26/De Minimal Rhel/Ansible Automation Platform 27/De Minimal Rhel/Log4J/Exploit Intelligence/Agent Client Rhel/Jackson Bom/Jboss Webserver 7/Jws70 Openjdk17 Openshift Rhel/Ocp Tools 4/Jenkins Rhel/Jboss Webserver 7/Jws70 Openjdk21 Openshift Rhel/Offline Knowledge Portal/Rhokp Rhel/Rhoai/Odh Vllm Gaudi Rhel/Rhoai/Odh Trustyai Service Rhel/Rhoai/Odh Spark Operator Rhel/Rhoai/Odh Modelmesh Rhel/Rhoai/Odh Th06 Cpu Torch291 Py312 Rhel/Rhoai/Odh Th06 Cuda130 Torch210 Py312 Rhel/Rhoai/Odh Th06 Cuda130 Torch291 Py312 Rhel/Rhoai/Odh Th06 Cpu Torch210 Py312 Rhel/Rhoai/Odh Th06 Rocm64 Torch291 Py312 Rhel/Rhoai/Odh Th Torch Cuda Py312 Rhel/Rhoai/Odh Th Torch Cpu Py312 Rhel/Rhai Early Access/Docling Serve Cuda Rhel/Rhbk/Keycloak Rhel/Rhbk/Keycloak Rhel9 Operator/Rhelai3/Bootc Gaudi Rhel/Devspaces/Openvsx Rhel/Devspaces/Pluginregistry Rhel/Devspaces/Multicluster Redirector Rhel/Devspaces/Server Rhel/Openshift Serverless 1/Kn Eventing Integrations Aws S3 Sink Rhel/Openshift Serverless 1/Kn Eventing Integrations Aws Ddb Streams Source Rhel/Openshift Serverless 1/Kn Eventing Integrations Aws Sqs Sink Rhel/Openshift Serverless 1/Kn Eventing Integrations Aws Sns Sink Rhel/Openshift Serverless 1/Kn Eventing Integrations Log Sink Rhel/Openshift Serverless 1/Kn Eventing Integrations Aws S3 Source Rhel/Openshift Serverless 1/Kn Eventing Integrations Aws Sqs Source Rhel/Openshift Serverless 1/Kn Eventing Integrations Timer Source Rhel/Cloudservices/Insights Rbi Events/Cloudservices/Kafka Relations Sink/Cloudservices/Insights Rbi Rest/Cloudservices/Rhsm Auto Registration Listener/Cloudservices/Notifications Backend/Cloudservices/Notifications Gw/Cloudservices/Swatch Producer Azure/Cloudservices/Swatch Contracts/Cloudservices/Swatch Producer Aws/Cloudservices/Swatch Utilization/Cloudservices/Swatch Metrics builds), which track accumulated name length in _parseName2() and _handleOddName2() and invoke validateNameLength() when a buffer segment fills, closing all 2 injection vectors (crafted JSON payload with excessively long object property name, concurrent requests with oversized JSON keys targeting character-based parsers). Until patched, this is a concern on applications parsing untrusted JSON from character-based sources such as String, Reader, or char[], so parse untrusted JSON directly from UTF-8 byte streams such as InputStream rather than character sources, or configure custom StreamReadConstraints to lower maxStringLength and enforce maxDocumentLength. As a compensating measure, monitor cgroup memory pressure via memory.events and PSI thresholds to detect rapid memory spikes prior to process termination, set ulimit or prlimit process resource limits to constrain address space consumption caused by oversized property name buffering, apply cgroups v2 resource limits to contain the blast radius of JVM heap exhaustion to the affected container or process group, and throttle client request rates and connection volume to impede concurrent transmissions of oversized JSON keys. These controls limit blast radius and contain exploitation, but they do not fix the underlying unbounded memory buffering defect \u2014 apply the upstream patch to fully remediate.\n\nHighest-impact CME: CME-1010 cgroup Memory Pressure Monitoring (memory.events / PSI) (medium)",
"product_ids": [
"AppStream-8.10.0.Z.MAIN.EUS:apache-commons-collections-0:3.2.2-10.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:apache-commons-collections-0:3.2.2-10.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:apache-commons-lang-0:2.6-21.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:apache-commons-lang-0:2.6-21.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:apache-commons-net-0:3.6-3.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:apache-commons-net-0:3.6-3.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:bea-stax-0:1.2.0-16.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:bea-stax-api-0:1.2.0-16.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:glassfish-fastinfoset-0:1.2.13-9.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:glassfish-fastinfoset-0:1.2.13-9.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:glassfish-jaxb-0:2.2.11-12.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:glassfish-jaxb-api-0:2.2.12-8.module+el8.10.0+21035+a01f6469.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:glassfish-jaxb-api-0:2.2.12-8.module+el8.10.0+21035+a01f6469.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:glassfish-jaxb-core-0:2.2.11-12.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:glassfish-jaxb-runtime-0:2.2.11-12.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:glassfish-jaxb-txw2-0:2.2.11-12.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jackson-annotations-0:2.21-1.module+el8.10.0+24523+f75fb079.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jackson-annotations-0:2.21-1.module+el8.10.0+24523+f75fb079.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jackson-core-0:2.21.4-1.module+el8.10.0+25128+a2644b4c.3.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jackson-core-0:2.21.4-1.module+el8.10.0+25128+a2644b4c.3.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jackson-databind-0:2.21.4-1.module+el8.10.0+25128+a2644b4c.1.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jackson-databind-0:2.21.4-1.module+el8.10.0+25128+a2644b4c.1.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jackson-jaxrs-json-provider-0:2.21.4-1.module+el8.10.0+24523+f75fb079.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jackson-jaxrs-providers-0:2.21.4-1.module+el8.10.0+24523+f75fb079.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jackson-jaxrs-providers-0:2.21.4-1.module+el8.10.0+24523+f75fb079.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jackson-module-jaxb-annotations-0:2.21.4-2.module+el8.10.0+24523+f75fb079.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jackson-modules-base-0:2.21.4-2.module+el8.10.0+24523+f75fb079.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jakarta-commons-httpclient-1:3.1-28.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jakarta-commons-httpclient-1:3.1-28.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:javassist-0:3.18.1-8.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:javassist-0:3.18.1-8.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:javassist-javadoc-0:3.18.1-8.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:pki-servlet-engine-1:9.0.62-1.module+el8.10.0+21257+2b5308b5.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:pki-servlet-engine-1:9.0.62-1.module+el8.10.0+21257+2b5308b5.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:relaxngDatatype-0:2011.1-7.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:relaxngDatatype-0:2011.1-7.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:slf4j-0:1.7.25-4.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:slf4j-0:1.7.25-4.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:slf4j-jdk14-0:1.7.25-4.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:stax-ex-0:1.7.7-8.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:stax-ex-0:1.7.7-8.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:velocity-0:1.7-24.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:velocity-0:1.7-24.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xalan-j2-0:2.7.1-38.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xalan-j2-0:2.7.1-38.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xerces-j2-0:2.11.0-34.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xerces-j2-0:2.11.0-34.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xml-commons-apis-0:1.4.01-25.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xml-commons-apis-0:1.4.01-25.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xml-commons-resolver-0:1.2-26.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xml-commons-resolver-0:1.2-26.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xmlstreambuffer-0:1.5.4-8.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xmlstreambuffer-0:1.5.4-8.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xsom-0:0-19.20110809svn.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xsom-0:0-19.20110809svn.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-8.10.0.Z.MAIN.EUS:apache-commons-collections-0:3.2.2-10.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:apache-commons-collections-0:3.2.2-10.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:apache-commons-lang-0:2.6-21.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:apache-commons-lang-0:2.6-21.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:apache-commons-net-0:3.6-3.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:apache-commons-net-0:3.6-3.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:bea-stax-0:1.2.0-16.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:bea-stax-api-0:1.2.0-16.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:glassfish-fastinfoset-0:1.2.13-9.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:glassfish-fastinfoset-0:1.2.13-9.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:glassfish-jaxb-0:2.2.11-12.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:glassfish-jaxb-api-0:2.2.12-8.module+el8.10.0+21035+a01f6469.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:glassfish-jaxb-api-0:2.2.12-8.module+el8.10.0+21035+a01f6469.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:glassfish-jaxb-core-0:2.2.11-12.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:glassfish-jaxb-runtime-0:2.2.11-12.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:glassfish-jaxb-txw2-0:2.2.11-12.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jackson-annotations-0:2.21-1.module+el8.10.0+24523+f75fb079.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jackson-annotations-0:2.21-1.module+el8.10.0+24523+f75fb079.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jackson-core-0:2.21.4-1.module+el8.10.0+25128+a2644b4c.3.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jackson-core-0:2.21.4-1.module+el8.10.0+25128+a2644b4c.3.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jackson-databind-0:2.21.4-1.module+el8.10.0+25128+a2644b4c.1.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jackson-databind-0:2.21.4-1.module+el8.10.0+25128+a2644b4c.1.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jackson-jaxrs-json-provider-0:2.21.4-1.module+el8.10.0+24523+f75fb079.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jackson-jaxrs-providers-0:2.21.4-1.module+el8.10.0+24523+f75fb079.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jackson-jaxrs-providers-0:2.21.4-1.module+el8.10.0+24523+f75fb079.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jackson-module-jaxb-annotations-0:2.21.4-2.module+el8.10.0+24523+f75fb079.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jackson-modules-base-0:2.21.4-2.module+el8.10.0+24523+f75fb079.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jakarta-commons-httpclient-1:3.1-28.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jakarta-commons-httpclient-1:3.1-28.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:javassist-0:3.18.1-8.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:javassist-0:3.18.1-8.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:javassist-javadoc-0:3.18.1-8.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:pki-servlet-engine-1:9.0.62-1.module+el8.10.0+21257+2b5308b5.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:pki-servlet-engine-1:9.0.62-1.module+el8.10.0+21257+2b5308b5.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:relaxngDatatype-0:2011.1-7.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:relaxngDatatype-0:2011.1-7.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:slf4j-0:1.7.25-4.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:slf4j-0:1.7.25-4.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:slf4j-jdk14-0:1.7.25-4.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:stax-ex-0:1.7.7-8.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:stax-ex-0:1.7.7-8.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:velocity-0:1.7-24.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:velocity-0:1.7-24.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xalan-j2-0:2.7.1-38.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xalan-j2-0:2.7.1-38.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xerces-j2-0:2.11.0-34.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xerces-j2-0:2.11.0-34.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xml-commons-apis-0:1.4.01-25.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xml-commons-apis-0:1.4.01-25.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xml-commons-resolver-0:1.2-26.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xml-commons-resolver-0:1.2-26.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xmlstreambuffer-0:1.5.4-8.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xmlstreambuffer-0:1.5.4-8.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xsom-0:0-19.20110809svn.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xsom-0:0-19.20110809svn.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "com.fasterxml.jackson.core/jackson-core: tools.jackson.core/jackson-core: jackson-core: Denial of Service via excessively long JSON property names"
},
{
"cve": "CVE-2026-89425",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-09-23T02:30:57.997196+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2539084"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in FasterXML jackson-core. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by providing a specially crafted, malformed token to the JsonFactory.createParser(DataInput) method. The UTF8DataInputJsonParser component, responsible for handling DataInput sources, does not properly limit the size of the error message generated for invalid tokens. This unbounded growth of the StringBuilder can consume excessive memory, leading to an OutOfMemoryError and crashing the Java Virtual Machine (JVM).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "com.fasterxml.jackson.core/jackson-core: Jackson-core: Denial of Service via unbounded StringBuilder growth during malformed token processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A denial of service flaw exists in FasterXML jackson-core where processing malformed JSON tokens from a DataInput source can lead to unbounded memory allocation. This vulnerability can exhaust system resources, causing a Java Virtual Machine (JVM) crash and impacting the availability of services that utilize the affected JsonFactory.createParser(DataInput) method with untrusted input.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.10.0.Z.MAIN.EUS:apache-commons-collections-0:3.2.2-10.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:apache-commons-collections-0:3.2.2-10.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:apache-commons-lang-0:2.6-21.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:apache-commons-lang-0:2.6-21.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:apache-commons-net-0:3.6-3.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:apache-commons-net-0:3.6-3.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:bea-stax-0:1.2.0-16.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:bea-stax-api-0:1.2.0-16.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:glassfish-fastinfoset-0:1.2.13-9.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:glassfish-fastinfoset-0:1.2.13-9.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:glassfish-jaxb-0:2.2.11-12.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:glassfish-jaxb-api-0:2.2.12-8.module+el8.10.0+21035+a01f6469.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:glassfish-jaxb-api-0:2.2.12-8.module+el8.10.0+21035+a01f6469.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:glassfish-jaxb-core-0:2.2.11-12.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:glassfish-jaxb-runtime-0:2.2.11-12.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:glassfish-jaxb-txw2-0:2.2.11-12.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jackson-annotations-0:2.21-1.module+el8.10.0+24523+f75fb079.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jackson-annotations-0:2.21-1.module+el8.10.0+24523+f75fb079.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jackson-core-0:2.21.4-1.module+el8.10.0+25128+a2644b4c.3.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jackson-core-0:2.21.4-1.module+el8.10.0+25128+a2644b4c.3.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jackson-databind-0:2.21.4-1.module+el8.10.0+25128+a2644b4c.1.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jackson-databind-0:2.21.4-1.module+el8.10.0+25128+a2644b4c.1.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jackson-jaxrs-json-provider-0:2.21.4-1.module+el8.10.0+24523+f75fb079.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jackson-jaxrs-providers-0:2.21.4-1.module+el8.10.0+24523+f75fb079.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jackson-jaxrs-providers-0:2.21.4-1.module+el8.10.0+24523+f75fb079.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jackson-module-jaxb-annotations-0:2.21.4-2.module+el8.10.0+24523+f75fb079.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jackson-modules-base-0:2.21.4-2.module+el8.10.0+24523+f75fb079.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jakarta-commons-httpclient-1:3.1-28.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jakarta-commons-httpclient-1:3.1-28.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:javassist-0:3.18.1-8.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:javassist-0:3.18.1-8.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:javassist-javadoc-0:3.18.1-8.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:pki-servlet-engine-1:9.0.62-1.module+el8.10.0+21257+2b5308b5.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:pki-servlet-engine-1:9.0.62-1.module+el8.10.0+21257+2b5308b5.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:relaxngDatatype-0:2011.1-7.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:relaxngDatatype-0:2011.1-7.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:slf4j-0:1.7.25-4.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:slf4j-0:1.7.25-4.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:slf4j-jdk14-0:1.7.25-4.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:stax-ex-0:1.7.7-8.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:stax-ex-0:1.7.7-8.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:velocity-0:1.7-24.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:velocity-0:1.7-24.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xalan-j2-0:2.7.1-38.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xalan-j2-0:2.7.1-38.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xerces-j2-0:2.11.0-34.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xerces-j2-0:2.11.0-34.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xml-commons-apis-0:1.4.01-25.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xml-commons-apis-0:1.4.01-25.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xml-commons-resolver-0:1.2-26.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xml-commons-resolver-0:1.2-26.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xmlstreambuffer-0:1.5.4-8.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xmlstreambuffer-0:1.5.4-8.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xsom-0:0-19.20110809svn.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xsom-0:0-19.20110809svn.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-89425"
},
{
"category": "external",
"summary": "RHBZ#2539084",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2539084"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-89425",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-89425"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-89425",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89425"
},
{
"category": "external",
"summary": "https://github.com/FasterXML/jackson-core/pull/1698",
"url": "https://github.com/FasterXML/jackson-core/pull/1698"
},
{
"category": "external",
"summary": "https://github.com/FasterXML/jackson-core/security/advisories/GHSA-7hhh-6rmp-j9qf",
"url": "https://github.com/FasterXML/jackson-core/security/advisories/GHSA-7hhh-6rmp-j9qf"
}
],
"release_date": "2026-09-23T02:06:10.571000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-27T16:00:52+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.10.0.Z.MAIN.EUS:apache-commons-collections-0:3.2.2-10.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:apache-commons-collections-0:3.2.2-10.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:apache-commons-lang-0:2.6-21.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:apache-commons-lang-0:2.6-21.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:apache-commons-net-0:3.6-3.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:apache-commons-net-0:3.6-3.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:bea-stax-0:1.2.0-16.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:bea-stax-api-0:1.2.0-16.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:glassfish-fastinfoset-0:1.2.13-9.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:glassfish-fastinfoset-0:1.2.13-9.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:glassfish-jaxb-0:2.2.11-12.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:glassfish-jaxb-api-0:2.2.12-8.module+el8.10.0+21035+a01f6469.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:glassfish-jaxb-api-0:2.2.12-8.module+el8.10.0+21035+a01f6469.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:glassfish-jaxb-core-0:2.2.11-12.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:glassfish-jaxb-runtime-0:2.2.11-12.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:glassfish-jaxb-txw2-0:2.2.11-12.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jackson-annotations-0:2.21-1.module+el8.10.0+24523+f75fb079.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jackson-annotations-0:2.21-1.module+el8.10.0+24523+f75fb079.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jackson-core-0:2.21.4-1.module+el8.10.0+25128+a2644b4c.3.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jackson-core-0:2.21.4-1.module+el8.10.0+25128+a2644b4c.3.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jackson-databind-0:2.21.4-1.module+el8.10.0+25128+a2644b4c.1.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jackson-databind-0:2.21.4-1.module+el8.10.0+25128+a2644b4c.1.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jackson-jaxrs-json-provider-0:2.21.4-1.module+el8.10.0+24523+f75fb079.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jackson-jaxrs-providers-0:2.21.4-1.module+el8.10.0+24523+f75fb079.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jackson-jaxrs-providers-0:2.21.4-1.module+el8.10.0+24523+f75fb079.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jackson-module-jaxb-annotations-0:2.21.4-2.module+el8.10.0+24523+f75fb079.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jackson-modules-base-0:2.21.4-2.module+el8.10.0+24523+f75fb079.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jakarta-commons-httpclient-1:3.1-28.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jakarta-commons-httpclient-1:3.1-28.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:javassist-0:3.18.1-8.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:javassist-0:3.18.1-8.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:javassist-javadoc-0:3.18.1-8.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:pki-servlet-engine-1:9.0.62-1.module+el8.10.0+21257+2b5308b5.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:pki-servlet-engine-1:9.0.62-1.module+el8.10.0+21257+2b5308b5.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:relaxngDatatype-0:2011.1-7.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:relaxngDatatype-0:2011.1-7.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:slf4j-0:1.7.25-4.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:slf4j-0:1.7.25-4.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:slf4j-jdk14-0:1.7.25-4.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:stax-ex-0:1.7.7-8.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:stax-ex-0:1.7.7-8.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:velocity-0:1.7-24.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:velocity-0:1.7-24.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xalan-j2-0:2.7.1-38.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xalan-j2-0:2.7.1-38.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xerces-j2-0:2.11.0-34.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xerces-j2-0:2.11.0-34.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xml-commons-apis-0:1.4.01-25.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xml-commons-apis-0:1.4.01-25.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xml-commons-resolver-0:1.2-26.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xml-commons-resolver-0:1.2-26.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xmlstreambuffer-0:1.5.4-8.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xmlstreambuffer-0:1.5.4-8.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xsom-0:0-19.20110809svn.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xsom-0:0-19.20110809svn.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:90909"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"AppStream-8.10.0.Z.MAIN.EUS:apache-commons-collections-0:3.2.2-10.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:apache-commons-collections-0:3.2.2-10.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:apache-commons-lang-0:2.6-21.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:apache-commons-lang-0:2.6-21.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:apache-commons-net-0:3.6-3.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:apache-commons-net-0:3.6-3.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:bea-stax-0:1.2.0-16.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:bea-stax-api-0:1.2.0-16.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:glassfish-fastinfoset-0:1.2.13-9.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:glassfish-fastinfoset-0:1.2.13-9.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:glassfish-jaxb-0:2.2.11-12.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:glassfish-jaxb-api-0:2.2.12-8.module+el8.10.0+21035+a01f6469.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:glassfish-jaxb-api-0:2.2.12-8.module+el8.10.0+21035+a01f6469.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:glassfish-jaxb-core-0:2.2.11-12.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:glassfish-jaxb-runtime-0:2.2.11-12.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:glassfish-jaxb-txw2-0:2.2.11-12.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jackson-annotations-0:2.21-1.module+el8.10.0+24523+f75fb079.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jackson-annotations-0:2.21-1.module+el8.10.0+24523+f75fb079.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jackson-core-0:2.21.4-1.module+el8.10.0+25128+a2644b4c.3.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jackson-core-0:2.21.4-1.module+el8.10.0+25128+a2644b4c.3.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jackson-databind-0:2.21.4-1.module+el8.10.0+25128+a2644b4c.1.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jackson-databind-0:2.21.4-1.module+el8.10.0+25128+a2644b4c.1.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jackson-jaxrs-json-provider-0:2.21.4-1.module+el8.10.0+24523+f75fb079.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jackson-jaxrs-providers-0:2.21.4-1.module+el8.10.0+24523+f75fb079.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jackson-jaxrs-providers-0:2.21.4-1.module+el8.10.0+24523+f75fb079.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jackson-module-jaxb-annotations-0:2.21.4-2.module+el8.10.0+24523+f75fb079.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jackson-modules-base-0:2.21.4-2.module+el8.10.0+24523+f75fb079.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jakarta-commons-httpclient-1:3.1-28.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jakarta-commons-httpclient-1:3.1-28.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:javassist-0:3.18.1-8.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:javassist-0:3.18.1-8.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:javassist-javadoc-0:3.18.1-8.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:pki-servlet-engine-1:9.0.62-1.module+el8.10.0+21257+2b5308b5.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:pki-servlet-engine-1:9.0.62-1.module+el8.10.0+21257+2b5308b5.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:relaxngDatatype-0:2011.1-7.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:relaxngDatatype-0:2011.1-7.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:slf4j-0:1.7.25-4.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:slf4j-0:1.7.25-4.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:slf4j-jdk14-0:1.7.25-4.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:stax-ex-0:1.7.7-8.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:stax-ex-0:1.7.7-8.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:velocity-0:1.7-24.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:velocity-0:1.7-24.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xalan-j2-0:2.7.1-38.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xalan-j2-0:2.7.1-38.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xerces-j2-0:2.11.0-34.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xerces-j2-0:2.11.0-34.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xml-commons-apis-0:1.4.01-25.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xml-commons-apis-0:1.4.01-25.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xml-commons-resolver-0:1.2-26.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xml-commons-resolver-0:1.2-26.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xmlstreambuffer-0:1.5.4-8.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xmlstreambuffer-0:1.5.4-8.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xsom-0:0-19.20110809svn.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xsom-0:0-19.20110809svn.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-8.10.0.Z.MAIN.EUS:apache-commons-collections-0:3.2.2-10.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:apache-commons-collections-0:3.2.2-10.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:apache-commons-lang-0:2.6-21.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:apache-commons-lang-0:2.6-21.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:apache-commons-net-0:3.6-3.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:apache-commons-net-0:3.6-3.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:bea-stax-0:1.2.0-16.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:bea-stax-api-0:1.2.0-16.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:glassfish-fastinfoset-0:1.2.13-9.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:glassfish-fastinfoset-0:1.2.13-9.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:glassfish-jaxb-0:2.2.11-12.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:glassfish-jaxb-api-0:2.2.12-8.module+el8.10.0+21035+a01f6469.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:glassfish-jaxb-api-0:2.2.12-8.module+el8.10.0+21035+a01f6469.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:glassfish-jaxb-core-0:2.2.11-12.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:glassfish-jaxb-runtime-0:2.2.11-12.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:glassfish-jaxb-txw2-0:2.2.11-12.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jackson-annotations-0:2.21-1.module+el8.10.0+24523+f75fb079.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jackson-annotations-0:2.21-1.module+el8.10.0+24523+f75fb079.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jackson-core-0:2.21.4-1.module+el8.10.0+25128+a2644b4c.3.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jackson-core-0:2.21.4-1.module+el8.10.0+25128+a2644b4c.3.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jackson-databind-0:2.21.4-1.module+el8.10.0+25128+a2644b4c.1.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jackson-databind-0:2.21.4-1.module+el8.10.0+25128+a2644b4c.1.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jackson-jaxrs-json-provider-0:2.21.4-1.module+el8.10.0+24523+f75fb079.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jackson-jaxrs-providers-0:2.21.4-1.module+el8.10.0+24523+f75fb079.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jackson-jaxrs-providers-0:2.21.4-1.module+el8.10.0+24523+f75fb079.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jackson-module-jaxb-annotations-0:2.21.4-2.module+el8.10.0+24523+f75fb079.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jackson-modules-base-0:2.21.4-2.module+el8.10.0+24523+f75fb079.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jakarta-commons-httpclient-1:3.1-28.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jakarta-commons-httpclient-1:3.1-28.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:javassist-0:3.18.1-8.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:javassist-0:3.18.1-8.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:javassist-javadoc-0:3.18.1-8.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:pki-servlet-engine-1:9.0.62-1.module+el8.10.0+21257+2b5308b5.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:pki-servlet-engine-1:9.0.62-1.module+el8.10.0+21257+2b5308b5.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:relaxngDatatype-0:2011.1-7.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:relaxngDatatype-0:2011.1-7.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:slf4j-0:1.7.25-4.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:slf4j-0:1.7.25-4.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:slf4j-jdk14-0:1.7.25-4.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:stax-ex-0:1.7.7-8.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:stax-ex-0:1.7.7-8.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:velocity-0:1.7-24.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:velocity-0:1.7-24.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xalan-j2-0:2.7.1-38.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xalan-j2-0:2.7.1-38.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xerces-j2-0:2.11.0-34.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xerces-j2-0:2.11.0-34.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xml-commons-apis-0:1.4.01-25.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xml-commons-apis-0:1.4.01-25.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xml-commons-resolver-0:1.2-26.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xml-commons-resolver-0:1.2-26.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xmlstreambuffer-0:1.5.4-8.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xmlstreambuffer-0:1.5.4-8.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xsom-0:0-19.20110809svn.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xsom-0:0-19.20110809svn.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "com.fasterxml.jackson.core/jackson-core: Jackson-core: Denial of Service via unbounded StringBuilder growth during malformed token processing"
},
{
"cve": "CVE-2026-91777",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-09-23T02:31:01.024251+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2539085"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in FasterXML jackson-databind. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by providing specially crafted JSON input to an application that deserializes it into an identity-enabled collection or map. The flaw occurs due to inefficient processing of forward-references, where the system performs a quadratic amount of work for linearly growing input, leading to excessive CPU consumption.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "com.fasterxml.jackson.core/jackson-databind: tools.jackson.core:jackson-databind: Jackson-databind: Denial of Service via quadratic forward-reference completion",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in jackson-databind. Forward-reference completion for `@JsonIdentityInfo` object IDs in `CollectionDeserializer.CollectionReferringAccumulator.resolveForwardReference()` and the equivalent implementation in `MapDeserializer` performs a linear scan of the pending-reference accumulator for every resolved ID.\n\nWhen a document creates unresolved object-ID references in an identity-enabled collection or map and then defines those IDs in reverse order, completion performs quadratic CPU work, allowing an attacker to cause a Denial of Service by sending specially crafted JSON input.\n\nExploitation requires an application that deserializes attacker-influenced JSON into an `@JsonIdentityInfo`-annotated collection or map.\n\nThe fix replaces the repeated linear lookup with a keyed pending-reference structure.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.10.0.Z.MAIN.EUS:apache-commons-collections-0:3.2.2-10.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:apache-commons-collections-0:3.2.2-10.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:apache-commons-lang-0:2.6-21.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:apache-commons-lang-0:2.6-21.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:apache-commons-net-0:3.6-3.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:apache-commons-net-0:3.6-3.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:bea-stax-0:1.2.0-16.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:bea-stax-api-0:1.2.0-16.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:glassfish-fastinfoset-0:1.2.13-9.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:glassfish-fastinfoset-0:1.2.13-9.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:glassfish-jaxb-0:2.2.11-12.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:glassfish-jaxb-api-0:2.2.12-8.module+el8.10.0+21035+a01f6469.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:glassfish-jaxb-api-0:2.2.12-8.module+el8.10.0+21035+a01f6469.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:glassfish-jaxb-core-0:2.2.11-12.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:glassfish-jaxb-runtime-0:2.2.11-12.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:glassfish-jaxb-txw2-0:2.2.11-12.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jackson-annotations-0:2.21-1.module+el8.10.0+24523+f75fb079.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jackson-annotations-0:2.21-1.module+el8.10.0+24523+f75fb079.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jackson-core-0:2.21.4-1.module+el8.10.0+25128+a2644b4c.3.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jackson-core-0:2.21.4-1.module+el8.10.0+25128+a2644b4c.3.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jackson-databind-0:2.21.4-1.module+el8.10.0+25128+a2644b4c.1.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jackson-databind-0:2.21.4-1.module+el8.10.0+25128+a2644b4c.1.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jackson-jaxrs-json-provider-0:2.21.4-1.module+el8.10.0+24523+f75fb079.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jackson-jaxrs-providers-0:2.21.4-1.module+el8.10.0+24523+f75fb079.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jackson-jaxrs-providers-0:2.21.4-1.module+el8.10.0+24523+f75fb079.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jackson-module-jaxb-annotations-0:2.21.4-2.module+el8.10.0+24523+f75fb079.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jackson-modules-base-0:2.21.4-2.module+el8.10.0+24523+f75fb079.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jakarta-commons-httpclient-1:3.1-28.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jakarta-commons-httpclient-1:3.1-28.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:javassist-0:3.18.1-8.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:javassist-0:3.18.1-8.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:javassist-javadoc-0:3.18.1-8.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:pki-servlet-engine-1:9.0.62-1.module+el8.10.0+21257+2b5308b5.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:pki-servlet-engine-1:9.0.62-1.module+el8.10.0+21257+2b5308b5.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:relaxngDatatype-0:2011.1-7.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:relaxngDatatype-0:2011.1-7.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:slf4j-0:1.7.25-4.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:slf4j-0:1.7.25-4.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:slf4j-jdk14-0:1.7.25-4.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:stax-ex-0:1.7.7-8.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:stax-ex-0:1.7.7-8.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:velocity-0:1.7-24.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:velocity-0:1.7-24.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xalan-j2-0:2.7.1-38.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xalan-j2-0:2.7.1-38.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xerces-j2-0:2.11.0-34.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xerces-j2-0:2.11.0-34.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xml-commons-apis-0:1.4.01-25.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xml-commons-apis-0:1.4.01-25.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xml-commons-resolver-0:1.2-26.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xml-commons-resolver-0:1.2-26.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xmlstreambuffer-0:1.5.4-8.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xmlstreambuffer-0:1.5.4-8.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xsom-0:0-19.20110809svn.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xsom-0:0-19.20110809svn.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-91777"
},
{
"category": "external",
"summary": "RHBZ#2539085",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2539085"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-91777",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-91777"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-91777",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-91777"
},
{
"category": "external",
"summary": "https://github.com/FasterXML/jackson-databind/issues/6204",
"url": "https://github.com/FasterXML/jackson-databind/issues/6204"
},
{
"category": "external",
"summary": "https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-cxp5-3px4-pw24",
"url": "https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-cxp5-3px4-pw24"
}
],
"release_date": "2026-09-23T02:21:48.323000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-27T16:00:52+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.10.0.Z.MAIN.EUS:apache-commons-collections-0:3.2.2-10.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:apache-commons-collections-0:3.2.2-10.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:apache-commons-lang-0:2.6-21.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:apache-commons-lang-0:2.6-21.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:apache-commons-net-0:3.6-3.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:apache-commons-net-0:3.6-3.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:bea-stax-0:1.2.0-16.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:bea-stax-api-0:1.2.0-16.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:glassfish-fastinfoset-0:1.2.13-9.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:glassfish-fastinfoset-0:1.2.13-9.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:glassfish-jaxb-0:2.2.11-12.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:glassfish-jaxb-api-0:2.2.12-8.module+el8.10.0+21035+a01f6469.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:glassfish-jaxb-api-0:2.2.12-8.module+el8.10.0+21035+a01f6469.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:glassfish-jaxb-core-0:2.2.11-12.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:glassfish-jaxb-runtime-0:2.2.11-12.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:glassfish-jaxb-txw2-0:2.2.11-12.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jackson-annotations-0:2.21-1.module+el8.10.0+24523+f75fb079.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jackson-annotations-0:2.21-1.module+el8.10.0+24523+f75fb079.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jackson-core-0:2.21.4-1.module+el8.10.0+25128+a2644b4c.3.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jackson-core-0:2.21.4-1.module+el8.10.0+25128+a2644b4c.3.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jackson-databind-0:2.21.4-1.module+el8.10.0+25128+a2644b4c.1.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jackson-databind-0:2.21.4-1.module+el8.10.0+25128+a2644b4c.1.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jackson-jaxrs-json-provider-0:2.21.4-1.module+el8.10.0+24523+f75fb079.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jackson-jaxrs-providers-0:2.21.4-1.module+el8.10.0+24523+f75fb079.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jackson-jaxrs-providers-0:2.21.4-1.module+el8.10.0+24523+f75fb079.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jackson-module-jaxb-annotations-0:2.21.4-2.module+el8.10.0+24523+f75fb079.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jackson-modules-base-0:2.21.4-2.module+el8.10.0+24523+f75fb079.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jakarta-commons-httpclient-1:3.1-28.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jakarta-commons-httpclient-1:3.1-28.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:javassist-0:3.18.1-8.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:javassist-0:3.18.1-8.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:javassist-javadoc-0:3.18.1-8.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:pki-servlet-engine-1:9.0.62-1.module+el8.10.0+21257+2b5308b5.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:pki-servlet-engine-1:9.0.62-1.module+el8.10.0+21257+2b5308b5.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:relaxngDatatype-0:2011.1-7.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:relaxngDatatype-0:2011.1-7.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:slf4j-0:1.7.25-4.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:slf4j-0:1.7.25-4.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:slf4j-jdk14-0:1.7.25-4.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:stax-ex-0:1.7.7-8.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:stax-ex-0:1.7.7-8.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:velocity-0:1.7-24.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:velocity-0:1.7-24.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xalan-j2-0:2.7.1-38.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xalan-j2-0:2.7.1-38.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xerces-j2-0:2.11.0-34.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xerces-j2-0:2.11.0-34.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xml-commons-apis-0:1.4.01-25.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xml-commons-apis-0:1.4.01-25.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xml-commons-resolver-0:1.2-26.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xml-commons-resolver-0:1.2-26.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xmlstreambuffer-0:1.5.4-8.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xmlstreambuffer-0:1.5.4-8.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xsom-0:0-19.20110809svn.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xsom-0:0-19.20110809svn.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:90909"
},
{
"category": "workaround",
"details": "Upgrade to a patched version. Refer to the advisory for the patched versions: https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-cxp5-3px4-pw24.\n\nExample `pom.xml`:\n```\n\u003cdependency\u003e\n \u003cgroupId\u003ecom.fasterxml.jackson.core\u003c/groupId\u003e\n \u003cartifactId\u003ejackson-databind\u003c/artifactId\u003e\n \u003cversion\u003e2.18.11\u003c/version\u003e\n\u003c/dependency\u003e\n```\n\nVerify: `mvn dependency:tree -Dincludes=com.fasterxml.jackson.core:jackson-databind`\n\nIf you cannot upgrade directly, apply defense-in-depth mitigations:\n- Restrict JSON request size\n- Audit and remove unnecessary @JsonIdentityInfo",
"product_ids": [
"AppStream-8.10.0.Z.MAIN.EUS:apache-commons-collections-0:3.2.2-10.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:apache-commons-collections-0:3.2.2-10.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:apache-commons-lang-0:2.6-21.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:apache-commons-lang-0:2.6-21.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:apache-commons-net-0:3.6-3.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:apache-commons-net-0:3.6-3.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:bea-stax-0:1.2.0-16.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:bea-stax-api-0:1.2.0-16.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:glassfish-fastinfoset-0:1.2.13-9.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:glassfish-fastinfoset-0:1.2.13-9.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:glassfish-jaxb-0:2.2.11-12.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:glassfish-jaxb-api-0:2.2.12-8.module+el8.10.0+21035+a01f6469.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:glassfish-jaxb-api-0:2.2.12-8.module+el8.10.0+21035+a01f6469.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:glassfish-jaxb-core-0:2.2.11-12.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:glassfish-jaxb-runtime-0:2.2.11-12.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:glassfish-jaxb-txw2-0:2.2.11-12.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jackson-annotations-0:2.21-1.module+el8.10.0+24523+f75fb079.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jackson-annotations-0:2.21-1.module+el8.10.0+24523+f75fb079.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jackson-core-0:2.21.4-1.module+el8.10.0+25128+a2644b4c.3.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jackson-core-0:2.21.4-1.module+el8.10.0+25128+a2644b4c.3.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jackson-databind-0:2.21.4-1.module+el8.10.0+25128+a2644b4c.1.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jackson-databind-0:2.21.4-1.module+el8.10.0+25128+a2644b4c.1.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jackson-jaxrs-json-provider-0:2.21.4-1.module+el8.10.0+24523+f75fb079.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jackson-jaxrs-providers-0:2.21.4-1.module+el8.10.0+24523+f75fb079.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jackson-jaxrs-providers-0:2.21.4-1.module+el8.10.0+24523+f75fb079.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jackson-module-jaxb-annotations-0:2.21.4-2.module+el8.10.0+24523+f75fb079.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jackson-modules-base-0:2.21.4-2.module+el8.10.0+24523+f75fb079.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jakarta-commons-httpclient-1:3.1-28.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jakarta-commons-httpclient-1:3.1-28.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:javassist-0:3.18.1-8.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:javassist-0:3.18.1-8.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:javassist-javadoc-0:3.18.1-8.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:pki-servlet-engine-1:9.0.62-1.module+el8.10.0+21257+2b5308b5.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:pki-servlet-engine-1:9.0.62-1.module+el8.10.0+21257+2b5308b5.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:relaxngDatatype-0:2011.1-7.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:relaxngDatatype-0:2011.1-7.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:slf4j-0:1.7.25-4.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:slf4j-0:1.7.25-4.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:slf4j-jdk14-0:1.7.25-4.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:stax-ex-0:1.7.7-8.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:stax-ex-0:1.7.7-8.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:velocity-0:1.7-24.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:velocity-0:1.7-24.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xalan-j2-0:2.7.1-38.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xalan-j2-0:2.7.1-38.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xerces-j2-0:2.11.0-34.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xerces-j2-0:2.11.0-34.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xml-commons-apis-0:1.4.01-25.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xml-commons-apis-0:1.4.01-25.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xml-commons-resolver-0:1.2-26.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xml-commons-resolver-0:1.2-26.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xmlstreambuffer-0:1.5.4-8.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xmlstreambuffer-0:1.5.4-8.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xsom-0:0-19.20110809svn.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xsom-0:0-19.20110809svn.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-8.10.0.Z.MAIN.EUS:apache-commons-collections-0:3.2.2-10.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:apache-commons-collections-0:3.2.2-10.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:apache-commons-lang-0:2.6-21.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:apache-commons-lang-0:2.6-21.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:apache-commons-net-0:3.6-3.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:apache-commons-net-0:3.6-3.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:bea-stax-0:1.2.0-16.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:bea-stax-api-0:1.2.0-16.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:glassfish-fastinfoset-0:1.2.13-9.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:glassfish-fastinfoset-0:1.2.13-9.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:glassfish-jaxb-0:2.2.11-12.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:glassfish-jaxb-api-0:2.2.12-8.module+el8.10.0+21035+a01f6469.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:glassfish-jaxb-api-0:2.2.12-8.module+el8.10.0+21035+a01f6469.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:glassfish-jaxb-core-0:2.2.11-12.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:glassfish-jaxb-runtime-0:2.2.11-12.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:glassfish-jaxb-txw2-0:2.2.11-12.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jackson-annotations-0:2.21-1.module+el8.10.0+24523+f75fb079.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jackson-annotations-0:2.21-1.module+el8.10.0+24523+f75fb079.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jackson-core-0:2.21.4-1.module+el8.10.0+25128+a2644b4c.3.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jackson-core-0:2.21.4-1.module+el8.10.0+25128+a2644b4c.3.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jackson-databind-0:2.21.4-1.module+el8.10.0+25128+a2644b4c.1.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jackson-databind-0:2.21.4-1.module+el8.10.0+25128+a2644b4c.1.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jackson-jaxrs-json-provider-0:2.21.4-1.module+el8.10.0+24523+f75fb079.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jackson-jaxrs-providers-0:2.21.4-1.module+el8.10.0+24523+f75fb079.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jackson-jaxrs-providers-0:2.21.4-1.module+el8.10.0+24523+f75fb079.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jackson-module-jaxb-annotations-0:2.21.4-2.module+el8.10.0+24523+f75fb079.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jackson-modules-base-0:2.21.4-2.module+el8.10.0+24523+f75fb079.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jakarta-commons-httpclient-1:3.1-28.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:jakarta-commons-httpclient-1:3.1-28.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:javassist-0:3.18.1-8.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:javassist-0:3.18.1-8.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:javassist-javadoc-0:3.18.1-8.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:pki-servlet-engine-1:9.0.62-1.module+el8.10.0+21257+2b5308b5.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:pki-servlet-engine-1:9.0.62-1.module+el8.10.0+21257+2b5308b5.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:relaxngDatatype-0:2011.1-7.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:relaxngDatatype-0:2011.1-7.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:slf4j-0:1.7.25-4.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:slf4j-0:1.7.25-4.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:slf4j-jdk14-0:1.7.25-4.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:stax-ex-0:1.7.7-8.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:stax-ex-0:1.7.7-8.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:velocity-0:1.7-24.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:velocity-0:1.7-24.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xalan-j2-0:2.7.1-38.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xalan-j2-0:2.7.1-38.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xerces-j2-0:2.11.0-34.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xerces-j2-0:2.11.0-34.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xml-commons-apis-0:1.4.01-25.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xml-commons-apis-0:1.4.01-25.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xml-commons-resolver-0:1.2-26.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xml-commons-resolver-0:1.2-26.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xmlstreambuffer-0:1.5.4-8.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xmlstreambuffer-0:1.5.4-8.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xsom-0:0-19.20110809svn.module+el8.10.0+20993+d0f024b0.noarch::pki-deps:10.6",
"AppStream-8.10.0.Z.MAIN.EUS:xsom-0:0-19.20110809svn.module+el8.10.0+20993+d0f024b0.src::pki-deps:10.6"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "com.fasterxml.jackson.core/jackson-databind: tools.jackson.core:jackson-databind: Jackson-databind: Denial of Service via quadratic forward-reference completion"
}
]
}
Loading…
Loading…
Drag nodes to arrange them. Double-click a related vulnerability to open it, or a source to visit its link. The Physics button on the left tunes the layout and the simulation; the legend at the bottom left hides or shows nodes by kind and by sighting type.
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Vulnerability timeline
Sightings and recorded dates, grouped by day · UTC
Loading timeline…
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.