RHSA-2026:92056

Vulnerability from csaf_redhat - Published: 2026-10-28 17:56 - Updated: 2026-10-29 07:15
Summary
Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.1.9 security update
Severity
Important
Notes
Topic: A security update is now available for Red Hat JBoss Enterprise Application Platform 8.1 for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: Red Hat JBoss Enterprise Application Platform 8 is a platform for Java applications based on the WildFly application runtime. This release of Red Hat JBoss Enterprise Application Platform 8.1.9 serves as a replacement for Red Hat JBoss Enterprise Application Platform 8.1.8, and includes bug fixes and enhancements. See the Red Hat JBoss Enterprise Application Platform 8.1.9 Release Notes for information about the most significant bug fixes and enhancements included in this release. Security Fix(es): * netty-codec-http2: Netty: Information disclosure via CORS Vary header overwrite [eap-8.1.z] (CVE-2026-59903) * netty-buffer: Netty: Information disclosure via CORS Vary header overwrite [eap-8.1.z] (CVE-2026-59903) * cxf: Apache CXF: Denial of service via many attachment headers [eap-8.1.z] (CVE-2026-64958) * cxf: Apache CXF: Authentication Bypass via Crafted OIDC Self-Issued ID Tokens [eap-8.1.z] (CVE-2026-65583) * cxf-xjc-bug986: Apache CXF: Denial of Service via uncontrolled form parameters [eap-8.1.z] (CVE-2026-57819) * cxf-rt-ws-security: Apache CXF: Denial of Service via uncontrolled form parameters [eap-8.1.z] (CVE-2026-57819) * jbossws-cxf-server: Apache CXF: Denial of Service via uncontrolled form parameters [eap-8.1.z] (CVE-2026-57819) * cxf-xjc-runtime: Apache CXF: Denial of Service via uncontrolled form parameters [eap-8.1.z] (CVE-2026-57819) * jbossws-cxf-resources: Apache CXF: Denial of Service via uncontrolled form parameters [eap-8.1.z] (CVE-2026-57819) * cxf-rt-wsdl: Apache CXF: Denial of Service via uncontrolled form parameters [eap-8.1.z] (CVE-2026-57819) * cxf-services-sts-core: Apache CXF: Denial of Service via uncontrolled form parameters [eap-8.1.z] (CVE-2026-57819) * cxf-tools-java2ws: Apache CXF: Denial of Service via uncontrolled form parameters [eap-8.1.z] (CVE-2026-57819) * cxf-rt-ws-policy: Apache CXF: Denial of Service via uncontrolled form parameters [eap-8.1.z] (CVE-2026-57819) * jbossws-cxf-client: Apache CXF: Denial of Service via uncontrolled form parameters [eap-8.1.z] (CVE-2026-57819) * cxf-tools-wsdlto-frontend-jaxws: Apache CXF: Denial of Service via uncontrolled form parameters [eap-8.1.z] (CVE-2026-57819) * cxf-tools-common: Apache CXF: Denial of Service via uncontrolled form parameters [eap-8.1.z] (CVE-2026-57819) * cxf-xjc-dv: Apache CXF: Denial of Service via uncontrolled form parameters [eap-8.1.z] (CVE-2026-57819) * cxf-services-ws-discovery-api: Apache CXF: Denial of Service via uncontrolled form parameters [eap-8.1.z] (CVE-2026-57819) * cxf-tools-wsdlto-core: Apache CXF: Denial of Service via uncontrolled form parameters [eap-8.1.z] (CVE-2026-57819) * jbossws-cxf-transports-undertow: Apache CXF: Denial of Service via uncontrolled form parameters [eap-8.1.z] (CVE-2026-57819) * cxf-tools-wsdlto-databinding-jaxb: Apache CXF: Denial of Service via uncontrolled form parameters [eap-8.1.z] (CVE-2026-57819) * cxf-rt-ws-rm: Apache CXF: Denial of Service via uncontrolled form parameters [eap-8.1.z] (CVE-2026-57819) * cxf-xjc-boolean: Apache CXF: Denial of Service via uncontrolled form parameters [eap-8.1.z] (CVE-2026-57819) * cxf-tools-validator: Apache CXF: Denial of Service via uncontrolled form parameters [eap-8.1.z] (CVE-2026-57819) * jbossws-cxf-transports-udp: Apache CXF: Denial of Service via uncontrolled form parameters [eap-8.1.z] (CVE-2026-57819) * jbossws-cxf-factories: Apache CXF: Denial of Service via uncontrolled form parameters [eap-8.1.z] (CVE-2026-57819) * cxf-xjc-ts: Apache CXF: Denial of Service via uncontrolled form parameters [eap-8.1.z] (CVE-2026-57819) * cxf-rt-bindings-coloc: Apache CXF: Denial of Service via uncontrolled form parameters [eap-8.1.z] (CVE-2026-57819) * cxf-rt-features-clustering: Apache CXF: Denial of Service via uncontrolled form parameters [eap-8.1.z] (CVE-2026-57819) * cxf-rt-transports-local: Apache CXF: Denial of Service via uncontrolled form parameters [eap-8.1.z] (CVE-2026-57819) * cxf-rt-transports-http-hc: Apache CXF: Denial of Service via uncontrolled form parameters [eap-8.1.z] (CVE-2026-57819) * cxf-rt-security: Apache CXF: Denial of Service via uncontrolled form parameters [eap-8.1.z] (CVE-2026-57819) * cxf-rt-transports-jms: Apache CXF: Denial of Service via uncontrolled form parameters [eap-8.1.z] (CVE-2026-57819) * cxf-core: Apache CXF: Denial of Service via uncontrolled form parameters [eap-8.1.z] (CVE-2026-57819) * cxf-rt-databinding-aegis: Apache CXF: Denial of Service via uncontrolled form parameters [eap-8.1.z] (CVE-2026-57819) * cxf-rt-management: Apache CXF: Denial of Service via uncontrolled form parameters [eap-8.1.z] (CVE-2026-57819) * cxf-rt-features-throttling: Apache CXF: Denial of Service via uncontrolled form parameters [eap-8.1.z] (CVE-2026-57819) * cxf-rt-features-logging: Apache CXF: Denial of Service via uncontrolled form parameters [eap-8.1.z] (CVE-2026-57819) * cxf-rt-bindings-xml: Apache CXF: Denial of Service via uncontrolled form parameters [eap-8.1.z] (CVE-2026-57819) * cxf-rt-security-saml: Apache CXF: Denial of Service via uncontrolled form parameters [eap-8.1.z] (CVE-2026-57819) * cxf-services-sts-core: Apache CXF: XML External Entity (XXE) vulnerability via WSDL/XSD import parsing [eap-8.1.z] (CVE-2026-65432) * cxf-tools-wsdlto-frontend-jaxws: Apache CXF: XML External Entity (XXE) vulnerability via WSDL/XSD import parsing [eap-8.1.z] (CVE-2026-65432) * cxf-services-ws-discovery-api: Apache CXF: XML External Entity (XXE) vulnerability via WSDL/XSD import parsing [eap-8.1.z] (CVE-2026-65432) * cxf-tools-common: Apache CXF: XML External Entity (XXE) vulnerability via WSDL/XSD import parsing [eap-8.1.z] (CVE-2026-65432) * cxf-tools-wsdlto-databinding-jaxb: Apache CXF: XML External Entity (XXE) vulnerability via WSDL/XSD import parsing [eap-8.1.z] (CVE-2026-65432) * jbossws-cxf-factories: Apache CXF: XML External Entity (XXE) vulnerability via WSDL/XSD import parsing [eap-8.1.z] (CVE-2026-65432) * cxf-xjc-runtime: Apache CXF: XML External Entity (XXE) vulnerability via WSDL/XSD import parsing [eap-8.1.z] (CVE-2026-65432) * cxf-tools-validator: Apache CXF: XML External Entity (XXE) vulnerability via WSDL/XSD import parsing [eap-8.1.z] (CVE-2026-65432) * cxf-xjc-dv: Apache CXF: XML External Entity (XXE) vulnerability via WSDL/XSD import parsing [eap-8.1.z] (CVE-2026-65432) * cxf-xjc-boolean: Apache CXF: XML External Entity (XXE) vulnerability via WSDL/XSD import parsing [eap-8.1.z] (CVE-2026-65432) * cxf-xjc-ts: Apache CXF: XML External Entity (XXE) vulnerability via WSDL/XSD import parsing [eap-8.1.z] (CVE-2026-65432) * jbossws-cxf-resources: Apache CXF: XML External Entity (XXE) vulnerability via WSDL/XSD import parsing [eap-8.1.z] (CVE-2026-65432) * cxf-xjc-bug986: Apache CXF: XML External Entity (XXE) vulnerability via WSDL/XSD import parsing [eap-8.1.z] (CVE-2026-65432) * cxf-tools-java2ws: Apache CXF: XML External Entity (XXE) vulnerability via WSDL/XSD import parsing [eap-8.1.z] (CVE-2026-65432) * jbossws-cxf-transports-udp: Apache CXF: XML External Entity (XXE) vulnerability via WSDL/XSD import parsing [eap-8.1.z] (CVE-2026-65432) * jbossws-cxf-client: Apache CXF: XML External Entity (XXE) vulnerability via WSDL/XSD import parsing [eap-8.1.z] (CVE-2026-65432) * jbossws-cxf-transports-undertow: Apache CXF: XML External Entity (XXE) vulnerability via WSDL/XSD import parsing [eap-8.1.z] (CVE-2026-65432) * jbossws-cxf-server: Apache CXF: XML External Entity (XXE) vulnerability via WSDL/XSD import parsing [eap-8.1.z] (CVE-2026-65432) * cxf-tools-wsdlto-core: Apache CXF: XML External Entity (XXE) vulnerability via WSDL/XSD import parsing [eap-8.1.z] (CVE-2026-65432) * cxf-rt-bindings-coloc: Apache CXF: XML External Entity (XXE) vulnerability via WSDL/XSD import parsing [eap-8.1.z] (CVE-2026-65432) * cxf-rt-security: Apache CXF: XML External Entity (XXE) vulnerability via WSDL/XSD import parsing [eap-8.1.z] (CVE-2026-65432) * cxf-rt-databinding-aegis: Apache CXF: XML External Entity (XXE) vulnerability via WSDL/XSD import parsing [eap-8.1.z] (CVE-2026-65432) * cxf-rt-ws-policy: Apache CXF: XML External Entity (XXE) vulnerability via WSDL/XSD import parsing [eap-8.1.z] (CVE-2026-65432) * cxf-rt-features-logging: Apache CXF: XML External Entity (XXE) vulnerability via WSDL/XSD import parsing [eap-8.1.z] (CVE-2026-65432) * cxf-rt-frontend-simple: Apache CXF: XML External Entity (XXE) vulnerability via WSDL/XSD import parsing [eap-8.1.z] (CVE-2026-65432) * cxf-rt-ws-security: Apache CXF: XML External Entity (XXE) vulnerability via WSDL/XSD import parsing [eap-8.1.z] (CVE-2026-65432) * cxf-rt-transports-jms: Apache CXF: XML External Entity (XXE) vulnerability via WSDL/XSD import parsing [eap-8.1.z] (CVE-2026-65432) * cxf-rt-transports-http-hc: Apache CXF: XML External Entity (XXE) vulnerability via WSDL/XSD import parsing [eap-8.1.z] (CVE-2026-65432) * cxf-rt-transports-local: Apache CXF: XML External Entity (XXE) vulnerability via WSDL/XSD import parsing [eap-8.1.z] (CVE-2026-65432) * cxf-rt-bindings-xml: Apache CXF: XML External Entity (XXE) vulnerability via WSDL/XSD import parsing [eap-8.1.z] (CVE-2026-65432) * cxf-rt-transports-http: Apache CXF: XML External Entity (XXE) vulnerability via WSDL/XSD import parsing [eap-8.1.z] (CVE-2026-65432) * cxf-rt-ws-rm: Apache CXF: XML External Entity (XXE) vulnerability via WSDL/XSD import parsing [eap-8.1.z] (CVE-2026-65432) * cxf-rt-frontend-jaxws: Apache CXF: XML External Entity (XXE) vulnerability via WSDL/XSD import parsing [eap-8.1.z] (CVE-2026-65432) * cxf-rt-features-clustering: Apache CXF: XML External Entity (XXE) vulnerability via WSDL/XSD import parsing [eap-8.1.z] (CVE-2026-65432) * cxf-rt-ws-mex: Apache CXF: XML External Entity (XXE) vulnerability via WSDL/XSD import parsing [eap-8.1.z] (CVE-2026-65432) * cxf-rt-databinding-jaxb: Apache CXF: XML External Entity (XXE) vulnerability via WSDL/XSD import parsing [eap-8.1.z] (CVE-2026-65432) * cxf-rt-bindings-soap: Apache CXF: XML External Entity (XXE) vulnerability via WSDL/XSD import parsing [eap-8.1.z] (CVE-2026-65432) * cxf-rt-ws-addr: Apache CXF: XML External Entity (XXE) vulnerability via WSDL/XSD import parsing [eap-8.1.z] (CVE-2026-65432) * cxf-rt-management: Apache CXF: XML External Entity (XXE) vulnerability via WSDL/XSD import parsing [eap-8.1.z] (CVE-2026-65432) * cxf-rt-features-throttling: Apache CXF: XML External Entity (XXE) vulnerability via WSDL/XSD import parsing [eap-8.1.z] (CVE-2026-65432) * cxf-rt-security-saml: Apache CXF: XML External Entity (XXE) vulnerability via WSDL/XSD import parsing [eap-8.1.z] (CVE-2026-65432) * cxf-core: Apache CXF: XML External Entity (XXE) vulnerability via WSDL/XSD import parsing [eap-8.1.z] (CVE-2026-65432) * cxf-rt-wsdl: Apache CXF: XML External Entity (XXE) vulnerability via WSDL/XSD import parsing [eap-8.1.z] (CVE-2026-65432) * cxf-rt-frontend-simple: Apache CXF: Denial of Service via uncontrolled form parameters [eap-8.1.z] (CVE-2026-57819) * cxf-rt-ws-addr: Apache CXF: Denial of Service via uncontrolled form parameters [eap-8.1.z] (CVE-2026-57819) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
CVE-2026-57819

A flaw was found in Apache CXF. This vulnerability allows a remote attacker to initiate a Denial of Service (DoS) attack. The issue arises because the component does not enforce a default limit on the number of form parameters processed in a JAX-RS message, enabling an attacker to send requests with an excessive quantity of parameters, leading to resource exhaustion.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-770 - Allocation of Resources Without Limits or Throttling
Affected products
Product Identifier Version Remediation
Unresolved product id: 9Base-JBEAP-8.1:eap8-apache-cxf-0:4.1.8-1.redhat_00001.1.el9eap.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-apache-cxf-0:4.1.8-1.redhat_00001.1.el9eap.src —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-apache-cxf-rt-0:4.1.8-1.redhat_00001.1.el9eap.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-apache-cxf-services-0:4.1.8-1.redhat_00001.1.el9eap.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-apache-cxf-tools-0:4.1.8-1.redhat_00001.1.el9eap.noarch —
Vendor Fix fix
Workaround
Product Identifier Version Remediation
Unresolved product id: 9Base-JBEAP-8.1:eap8-apache-sshd-0:2.19.0-1.redhat_00001.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-apache-sshd-0:2.19.0-1.redhat_00001.1.el9eap.src —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-codemodel-0:4.0.8-2.redhat_00001.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.9.0-2.GA_redhat_00003.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.9.0-2.GA_redhat_00003.1.el9eap.src —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.9.0-2.GA_redhat_00003.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-hal-console-0:3.7.22-2.Final_redhat_00002.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-hal-console-0:3.7.22-2.Final_redhat_00002.1.el9eap.src —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-hibernate-0:6.6.56-2.Final_redhat_00001.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-hibernate-0:6.6.56-2.Final_redhat_00001.1.el9eap.src —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-hibernate-core-0:6.6.56-2.Final_redhat_00001.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-hibernate-envers-0:6.6.56-2.Final_redhat_00001.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-jackson-annotations-0:2.18.11-1.redhat_00001.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-jackson-annotations-0:2.18.11-1.redhat_00001.1.el9eap.src —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-jackson-core-0:2.18.11-1.redhat_00001.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-jackson-core-0:2.18.11-1.redhat_00001.1.el9eap.src —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-jackson-databind-0:2.18.11-1.redhat_00001.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-jackson-databind-0:2.18.11-1.redhat_00001.1.el9eap.src —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-jackson-dataformat-yaml-0:2.18.11-1.redhat_00001.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-jackson-dataformats-text-0:2.18.11-1.redhat_00001.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-jackson-dataformats-text-0:2.18.11-1.redhat_00001.1.el9eap.src —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-jackson-datatype-jdk8-0:2.18.10-2.redhat_00001.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-jackson-datatype-jsr310-0:2.18.10-2.redhat_00001.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-jackson-jaxrs-base-0:2.18.10-1.redhat_00001.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-jackson-jaxrs-json-provider-0:2.18.10-1.redhat_00001.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-jackson-jaxrs-providers-0:2.18.10-1.redhat_00001.1.el9eap.src —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-jackson-module-jakarta-xmlbind-annotations-0:2.18.10-1.redhat_00001.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-jackson-modules-base-0:2.18.10-1.redhat_00001.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-jackson-modules-base-0:2.18.10-1.redhat_00001.1.el9eap.src —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-jackson-modules-java8-0:2.18.10-2.redhat_00001.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-jackson-modules-java8-0:2.18.10-2.redhat_00001.1.el9eap.src —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-jaxb-0:4.0.8-2.redhat_00001.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-jaxb-0:4.0.8-2.redhat_00001.1.el9eap.src —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-jaxb-core-0:4.0.8-2.redhat_00001.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-jaxb-jxc-0:4.0.8-2.redhat_00001.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-jaxb-runtime-0:4.0.8-2.redhat_00001.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-jaxb-xjc-0:4.0.8-2.redhat_00001.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-jboss-openjdk-orb-0:10.2.0-1.Final_redhat_00001.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-jboss-openjdk-orb-0:10.2.0-1.Final_redhat_00001.1.el9eap.src —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-jbossws-cxf-0:7.4.1-1.Final_redhat_00001.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-jbossws-cxf-0:7.4.1-1.Final_redhat_00001.1.el9eap.src —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-jsf-impl-0:4.0.22-1.redhat_00001.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-jsf-impl-0:4.0.22-1.redhat_00001.1.el9eap.src —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-jsonb-spec-0:3.0.2-1.redhat_00003.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-jsonb-spec-0:3.0.2-1.redhat_00003.1.el9eap.src —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-log4j-0:2.25.5-1.redhat_00001.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-log4j-0:2.25.5-1.redhat_00001.1.el9eap.src —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-netty-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-netty-0:4.1.138-1.Final_redhat_00001.1.el9eap.src —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-netty-codec-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-netty-common-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-netty-handler-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-netty-transport-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.138-1.Final_redhat_00001.1.el9eap.src —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.138-1.Final_redhat_00001.1.el9eap.x86_64 —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.138-1.Final_redhat_00001.1.el9eap.x86_64 —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-relaxng-datatype-0:4.0.8-2.redhat_00001.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-resteasy-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-resteasy-0:6.2.19-1.Final_redhat_00002.1.el9eap.src —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-resteasy-atom-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-resteasy-cdi-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-resteasy-client-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-resteasy-client-api-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-resteasy-core-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-resteasy-core-spi-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-resteasy-crypto-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-resteasy-jackson2-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-resteasy-jaxb-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-resteasy-jsapi-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-resteasy-json-binding-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-resteasy-json-p-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-resteasy-multipart-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-resteasy-rxjava2-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-resteasy-validator-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-rngom-0:4.0.8-2.redhat_00001.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-txw2-0:4.0.8-2.redhat_00001.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-wildfly-0:8.1.9-3.GA_redhat_00005.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-wildfly-0:8.1.9-3.GA_redhat_00005.1.el9eap.src —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-wildfly-clustering-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-wildfly-clustering-0:5.0.14-1.Final_redhat_00001.1.el9eap.src —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-wildfly-clustering-cache-infinispan-common-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-wildfly-clustering-cache-infinispan-embedded-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-wildfly-clustering-cache-infinispan-remote-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-wildfly-clustering-cache-spi-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-wildfly-clustering-context-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-wildfly-clustering-marshalling-jboss-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-wildfly-clustering-marshalling-protostream-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-wildfly-clustering-marshalling-spi-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-wildfly-clustering-server-api-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-wildfly-clustering-server-infinispan-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-wildfly-clustering-server-jgroups-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-wildfly-clustering-server-local-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-wildfly-clustering-server-spi-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-wildfly-clustering-session-cache-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-wildfly-clustering-session-infinispan-embedded-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-wildfly-clustering-session-infinispan-remote-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-wildfly-clustering-session-spec-servlet-6.0-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-wildfly-clustering-session-spec-spi-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-wildfly-clustering-session-spi-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-wildfly-elytron-0:2.6.12-1.Final_redhat_00002.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-wildfly-elytron-0:2.6.12-1.Final_redhat_00002.1.el9eap.src —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-wildfly-elytron-tool-0:2.6.12-1.Final_redhat_00002.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-wildfly-java-jdk17-0:8.1.9-3.GA_redhat_00005.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.9-3.GA_redhat_00005.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-wildfly-javadocs-0:8.1.1-14.GA_redhat_00051.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-wildfly-javadocs-0:8.1.1-14.GA_redhat_00051.1.el9eap.src —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.9-3.GA_redhat_00005.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-xsom-0:4.0.8-2.redhat_00001.1.el9eap.noarch —
Workaround
Threats
Impact Important
CVE-2026-59903

A flaw was found in Netty, an asynchronous, event-driven network application framework. The `CorsHandler` component incorrectly replaces application `Vary` headers, such as `Authorization` or `Cookie`, with `Origin`. This allows a caching proxy or Content Delivery Network (CDN) to reuse authenticated responses across different users, leading to the disclosure of sensitive information.

6.5 (Medium)
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N
CWE-444 - Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')
Affected products
Product Identifier Version Remediation
Unresolved product id: 9Base-JBEAP-8.1:eap8-netty-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-netty-0:4.1.138-1.Final_redhat_00001.1.el9eap.src —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-netty-codec-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-netty-common-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-netty-handler-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-netty-transport-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.138-1.Final_redhat_00001.1.el9eap.src —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.138-1.Final_redhat_00001.1.el9eap.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.138-1.Final_redhat_00001.1.el9eap.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-resteasy-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-resteasy-0:6.2.19-1.Final_redhat_00002.1.el9eap.src —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-resteasy-atom-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-resteasy-cdi-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-resteasy-client-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-resteasy-client-api-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-resteasy-core-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-resteasy-core-spi-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-resteasy-crypto-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-resteasy-jackson2-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-resteasy-jaxb-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-resteasy-jsapi-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-resteasy-json-binding-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-resteasy-json-p-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-resteasy-multipart-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-resteasy-rxjava2-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-resteasy-validator-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch —
Vendor Fix fix
Workaround
Product Identifier Version Remediation
Unresolved product id: 9Base-JBEAP-8.1:eap8-apache-cxf-0:4.1.8-1.redhat_00001.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-apache-cxf-0:4.1.8-1.redhat_00001.1.el9eap.src —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-apache-cxf-rt-0:4.1.8-1.redhat_00001.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-apache-cxf-services-0:4.1.8-1.redhat_00001.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-apache-cxf-tools-0:4.1.8-1.redhat_00001.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-apache-sshd-0:2.19.0-1.redhat_00001.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-apache-sshd-0:2.19.0-1.redhat_00001.1.el9eap.src —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-codemodel-0:4.0.8-2.redhat_00001.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.9.0-2.GA_redhat_00003.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.9.0-2.GA_redhat_00003.1.el9eap.src —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.9.0-2.GA_redhat_00003.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-hal-console-0:3.7.22-2.Final_redhat_00002.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-hal-console-0:3.7.22-2.Final_redhat_00002.1.el9eap.src —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-hibernate-0:6.6.56-2.Final_redhat_00001.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-hibernate-0:6.6.56-2.Final_redhat_00001.1.el9eap.src —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-hibernate-core-0:6.6.56-2.Final_redhat_00001.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-hibernate-envers-0:6.6.56-2.Final_redhat_00001.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-jackson-annotations-0:2.18.11-1.redhat_00001.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-jackson-annotations-0:2.18.11-1.redhat_00001.1.el9eap.src —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-jackson-core-0:2.18.11-1.redhat_00001.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-jackson-core-0:2.18.11-1.redhat_00001.1.el9eap.src —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-jackson-databind-0:2.18.11-1.redhat_00001.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-jackson-databind-0:2.18.11-1.redhat_00001.1.el9eap.src —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-jackson-dataformat-yaml-0:2.18.11-1.redhat_00001.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-jackson-dataformats-text-0:2.18.11-1.redhat_00001.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-jackson-dataformats-text-0:2.18.11-1.redhat_00001.1.el9eap.src —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-jackson-datatype-jdk8-0:2.18.10-2.redhat_00001.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-jackson-datatype-jsr310-0:2.18.10-2.redhat_00001.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-jackson-jaxrs-base-0:2.18.10-1.redhat_00001.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-jackson-jaxrs-json-provider-0:2.18.10-1.redhat_00001.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-jackson-jaxrs-providers-0:2.18.10-1.redhat_00001.1.el9eap.src —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-jackson-module-jakarta-xmlbind-annotations-0:2.18.10-1.redhat_00001.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-jackson-modules-base-0:2.18.10-1.redhat_00001.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-jackson-modules-base-0:2.18.10-1.redhat_00001.1.el9eap.src —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-jackson-modules-java8-0:2.18.10-2.redhat_00001.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-jackson-modules-java8-0:2.18.10-2.redhat_00001.1.el9eap.src —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-jaxb-0:4.0.8-2.redhat_00001.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-jaxb-0:4.0.8-2.redhat_00001.1.el9eap.src —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-jaxb-core-0:4.0.8-2.redhat_00001.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-jaxb-jxc-0:4.0.8-2.redhat_00001.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-jaxb-runtime-0:4.0.8-2.redhat_00001.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-jaxb-xjc-0:4.0.8-2.redhat_00001.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-jboss-openjdk-orb-0:10.2.0-1.Final_redhat_00001.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-jboss-openjdk-orb-0:10.2.0-1.Final_redhat_00001.1.el9eap.src —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-jbossws-cxf-0:7.4.1-1.Final_redhat_00001.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-jbossws-cxf-0:7.4.1-1.Final_redhat_00001.1.el9eap.src —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-jsf-impl-0:4.0.22-1.redhat_00001.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-jsf-impl-0:4.0.22-1.redhat_00001.1.el9eap.src —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-jsonb-spec-0:3.0.2-1.redhat_00003.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-jsonb-spec-0:3.0.2-1.redhat_00003.1.el9eap.src —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-log4j-0:2.25.5-1.redhat_00001.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-log4j-0:2.25.5-1.redhat_00001.1.el9eap.src —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-relaxng-datatype-0:4.0.8-2.redhat_00001.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-rngom-0:4.0.8-2.redhat_00001.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-txw2-0:4.0.8-2.redhat_00001.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-wildfly-0:8.1.9-3.GA_redhat_00005.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-wildfly-0:8.1.9-3.GA_redhat_00005.1.el9eap.src —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-wildfly-clustering-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-wildfly-clustering-0:5.0.14-1.Final_redhat_00001.1.el9eap.src —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-wildfly-clustering-cache-infinispan-common-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-wildfly-clustering-cache-infinispan-embedded-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-wildfly-clustering-cache-infinispan-remote-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-wildfly-clustering-cache-spi-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-wildfly-clustering-context-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-wildfly-clustering-marshalling-jboss-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-wildfly-clustering-marshalling-protostream-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-wildfly-clustering-marshalling-spi-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-wildfly-clustering-server-api-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-wildfly-clustering-server-infinispan-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-wildfly-clustering-server-jgroups-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-wildfly-clustering-server-local-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-wildfly-clustering-server-spi-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-wildfly-clustering-session-cache-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-wildfly-clustering-session-infinispan-embedded-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-wildfly-clustering-session-infinispan-remote-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-wildfly-clustering-session-spec-servlet-6.0-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-wildfly-clustering-session-spec-spi-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-wildfly-clustering-session-spi-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-wildfly-elytron-0:2.6.12-1.Final_redhat_00002.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-wildfly-elytron-0:2.6.12-1.Final_redhat_00002.1.el9eap.src —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-wildfly-elytron-tool-0:2.6.12-1.Final_redhat_00002.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-wildfly-java-jdk17-0:8.1.9-3.GA_redhat_00005.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.9-3.GA_redhat_00005.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-wildfly-javadocs-0:8.1.1-14.GA_redhat_00051.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-wildfly-javadocs-0:8.1.1-14.GA_redhat_00051.1.el9eap.src —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.9-3.GA_redhat_00005.1.el9eap.noarch —
Workaround
Unresolved product id: 9Base-JBEAP-8.1:eap8-xsom-0:4.0.8-2.redhat_00001.1.el9eap.noarch —
Workaround
Threats
Impact Moderate
CVE-2026-64958

A flaw was found in Apache CXF. This vulnerability allows a remote attacker to perform a denial of service (DoS) attack by sending a message with an excessive number of attachment headers. This can lead to the affected system becoming unresponsive or unavailable.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-770 - Allocation of Resources Without Limits or Throttling
Affected products
Fixed 5 products, the same list as for CVE-2026-57819
Known not affected 117 products, the same list as for CVE-2026-57819
Threats
Impact Important
CVE-2026-65432

A flaw was found in Apache CXF. The framework's initial processing of a Web Services Description Language (WSDL) document disables XML DTDs (Document Type Definitions) and external entities. However, any WSDL or XML Schema Definition (XSD) documents imported by the top-level WSDL are processed by a different component, WSDL4J, which does not apply these same security protections. This oversight allows an attacker to exploit XML External Entity (XXE) vulnerabilities through imported WSDL/XSD content, potentially leading to information disclosure or denial of service.

8.6 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L
CWE-611 - Improper Restriction of XML External Entity Reference
Affected products
Fixed 5 products, the same list as for CVE-2026-57819
Known not affected 117 products, the same list as for CVE-2026-57819
Threats
Impact Important
CVE-2026-65583

A flaw was found in Apache CXF. The OpenID Connect (OIDC) relying-party token validation in Apache CXF could accept specially crafted self-issued ID tokens. This bypasses necessary claim checks, such as issuer, subject, audience, and time, leading to an authentication bypass. This vulnerability allows an attacker to gain unauthorized access by presenting a malicious token.

7.4 (High)
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
CWE-303 - Incorrect Implementation of Authentication Algorithm
Affected products
Fixed 5 products, the same list as for CVE-2026-57819
Known not affected 117 products, the same list as for CVE-2026-57819
Threats
Impact Important
References
URL Category
https://access.redhat.com/errata/RHSA-2026:92056 self
https://access.redhat.com/security/updates/classi… external
https://docs.redhat.com/en/documentation/red_hat_… external
https://docs.redhat.com/en/documentation/red_hat_… external
https://access.redhat.com/articles/7137769 external
https://bugzilla.redhat.com/show_bug.cgi?id=2511978 external
https://bugzilla.redhat.com/show_bug.cgi?id=2511979 external
https://bugzilla.redhat.com/show_bug.cgi?id=2511981 external
https://bugzilla.redhat.com/show_bug.cgi?id=2511995 external
https://bugzilla.redhat.com/show_bug.cgi?id=2517538 external
https://issues.redhat.com/browse/JBEAP-34960 external
https://issues.redhat.com/browse/JBEAP-35632 external
https://issues.redhat.com/browse/JBEAP-35651 external
https://issues.redhat.com/browse/JBEAP-35658 external
https://issues.redhat.com/browse/JBEAP-35795 external
https://security.access.redhat.com/data/csaf/v2/a… self
https://access.redhat.com/security/cve/CVE-2026-57819 self
https://bugzilla.redhat.com/show_bug.cgi?id=2511979 external
https://www.cve.org/CVERecord?id=CVE-2026-57819 external
https://nvd.nist.gov/vuln/detail/CVE-2026-57819 external
https://lists.apache.org/thread/2n14mk01bjc3lrsyh… external
https://access.redhat.com/security/cve/CVE-2026-59903 self
https://bugzilla.redhat.com/show_bug.cgi?id=2517538 external
https://www.cve.org/CVERecord?id=CVE-2026-59903 external
https://nvd.nist.gov/vuln/detail/CVE-2026-59903 external
https://github.com/netty/netty/pull/17213 external
https://github.com/netty/netty/pull/17217 external
https://github.com/netty/netty/releases/tag/netty… external
https://github.com/netty/netty/releases/tag/netty… external
https://github.com/netty/netty/security/advisorie… external
https://access.redhat.com/security/cve/CVE-2026-64958 self
https://bugzilla.redhat.com/show_bug.cgi?id=2511978 external
https://www.cve.org/CVERecord?id=CVE-2026-64958 external
https://nvd.nist.gov/vuln/detail/CVE-2026-64958 external
https://lists.apache.org/thread/trsnkxc2f21585zlt… external
https://access.redhat.com/security/cve/CVE-2026-65432 self
https://bugzilla.redhat.com/show_bug.cgi?id=2511981 external
https://www.cve.org/CVERecord?id=CVE-2026-65432 external
https://nvd.nist.gov/vuln/detail/CVE-2026-65432 external
https://lists.apache.org/thread/5qs207krzg51jl3zs… external
https://access.redhat.com/security/cve/CVE-2026-65583 self
https://bugzilla.redhat.com/show_bug.cgi?id=2511995 external
https://www.cve.org/CVERecord?id=CVE-2026-65583 external
https://nvd.nist.gov/vuln/detail/CVE-2026-65583 external
https://lists.apache.org/thread/fzj8yzgfl53gclxrc… external
To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "A security update is now available for Red Hat JBoss Enterprise Application Platform 8.1 for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Red Hat JBoss Enterprise Application Platform 8 is a platform for Java applications based on the WildFly application runtime. This release of Red Hat JBoss  Enterprise Application Platform 8.1.9 serves as a replacement for Red Hat JBoss Enterprise Application Platform 8.1.8, and includes bug fixes and enhancements. See the Red Hat JBoss Enterprise Application Platform 8.1.9 Release Notes for information about the most significant bug fixes and enhancements included in this release.\n\nSecurity Fix(es):\n\n* netty-codec-http2: Netty: Information disclosure via CORS Vary header overwrite [eap-8.1.z] (CVE-2026-59903)\n\n* netty-buffer: Netty: Information disclosure via CORS Vary header overwrite [eap-8.1.z] (CVE-2026-59903)\n\n* cxf: Apache CXF: Denial of service via many attachment headers [eap-8.1.z] (CVE-2026-64958)\n\n* cxf: Apache CXF: Authentication Bypass via Crafted OIDC Self-Issued ID Tokens [eap-8.1.z] (CVE-2026-65583)\n\n* cxf-xjc-bug986: Apache CXF: Denial of Service via uncontrolled form parameters [eap-8.1.z] (CVE-2026-57819)\n\n* cxf-rt-ws-security: Apache CXF: Denial of Service via uncontrolled form parameters [eap-8.1.z] (CVE-2026-57819)\n\n* jbossws-cxf-server: Apache CXF: Denial of Service via uncontrolled form parameters [eap-8.1.z] (CVE-2026-57819)\n\n* cxf-xjc-runtime: Apache CXF: Denial of Service via uncontrolled form parameters [eap-8.1.z] (CVE-2026-57819)\n\n* jbossws-cxf-resources: Apache CXF: Denial of Service via uncontrolled form parameters [eap-8.1.z] (CVE-2026-57819)\n\n* cxf-rt-wsdl: Apache CXF: Denial of Service via uncontrolled form parameters [eap-8.1.z] (CVE-2026-57819)\n\n* cxf-services-sts-core: Apache CXF: Denial of Service via uncontrolled form parameters [eap-8.1.z] (CVE-2026-57819)\n\n* cxf-tools-java2ws: Apache CXF: Denial of Service via uncontrolled form parameters [eap-8.1.z] (CVE-2026-57819)\n\n* cxf-rt-ws-policy: Apache CXF: Denial of Service via uncontrolled form parameters [eap-8.1.z] (CVE-2026-57819)\n\n* jbossws-cxf-client: Apache CXF: Denial of Service via uncontrolled form parameters [eap-8.1.z] (CVE-2026-57819)\n\n* cxf-tools-wsdlto-frontend-jaxws: Apache CXF: Denial of Service via uncontrolled form parameters [eap-8.1.z] (CVE-2026-57819)\n\n* cxf-tools-common: Apache CXF: Denial of Service via uncontrolled form parameters [eap-8.1.z] (CVE-2026-57819)\n\n* cxf-xjc-dv: Apache CXF: Denial of Service via uncontrolled form parameters [eap-8.1.z] (CVE-2026-57819)\n\n* cxf-services-ws-discovery-api: Apache CXF: Denial of Service via uncontrolled form parameters [eap-8.1.z] (CVE-2026-57819)\n\n* cxf-tools-wsdlto-core: Apache CXF: Denial of Service via uncontrolled form parameters [eap-8.1.z] (CVE-2026-57819)\n\n* jbossws-cxf-transports-undertow: Apache CXF: Denial of Service via uncontrolled form parameters [eap-8.1.z] (CVE-2026-57819)\n\n* cxf-tools-wsdlto-databinding-jaxb: Apache CXF: Denial of Service via uncontrolled form parameters [eap-8.1.z] (CVE-2026-57819)\n\n* cxf-rt-ws-rm: Apache CXF: Denial of Service via uncontrolled form parameters [eap-8.1.z] (CVE-2026-57819)\n\n* cxf-xjc-boolean: Apache CXF: Denial of Service via uncontrolled form parameters [eap-8.1.z] (CVE-2026-57819)\n\n* cxf-tools-validator: Apache CXF: Denial of Service via uncontrolled form parameters [eap-8.1.z] (CVE-2026-57819)\n\n* jbossws-cxf-transports-udp: Apache CXF: Denial of Service via uncontrolled form parameters [eap-8.1.z] (CVE-2026-57819)\n\n* jbossws-cxf-factories: Apache CXF: Denial of Service via uncontrolled form parameters [eap-8.1.z] (CVE-2026-57819)\n\n* cxf-xjc-ts: Apache CXF: Denial of Service via uncontrolled form parameters [eap-8.1.z] (CVE-2026-57819)\n\n* cxf-rt-bindings-coloc: Apache CXF: Denial of Service via uncontrolled form parameters [eap-8.1.z] (CVE-2026-57819)\n\n* cxf-rt-features-clustering: Apache CXF: Denial of Service via uncontrolled form parameters [eap-8.1.z] (CVE-2026-57819)\n\n* cxf-rt-transports-local: Apache CXF: Denial of Service via uncontrolled form parameters [eap-8.1.z] (CVE-2026-57819)\n\n* cxf-rt-transports-http-hc: Apache CXF: Denial of Service via uncontrolled form parameters [eap-8.1.z] (CVE-2026-57819)\n\n* cxf-rt-security: Apache CXF: Denial of Service via uncontrolled form parameters [eap-8.1.z] (CVE-2026-57819)\n\n* cxf-rt-transports-jms: Apache CXF: Denial of Service via uncontrolled form parameters [eap-8.1.z] (CVE-2026-57819)\n\n* cxf-core: Apache CXF: Denial of Service via uncontrolled form parameters [eap-8.1.z] (CVE-2026-57819)\n\n* cxf-rt-databinding-aegis: Apache CXF: Denial of Service via uncontrolled form parameters [eap-8.1.z] (CVE-2026-57819)\n\n* cxf-rt-management: Apache CXF: Denial of Service via uncontrolled form parameters [eap-8.1.z] (CVE-2026-57819)\n\n* cxf-rt-features-throttling: Apache CXF: Denial of Service via uncontrolled form parameters [eap-8.1.z] (CVE-2026-57819)\n\n* cxf-rt-features-logging: Apache CXF: Denial of Service via uncontrolled form parameters [eap-8.1.z] (CVE-2026-57819)\n\n* cxf-rt-bindings-xml: Apache CXF: Denial of Service via uncontrolled form parameters [eap-8.1.z] (CVE-2026-57819)\n\n* cxf-rt-security-saml: Apache CXF: Denial of Service via uncontrolled form parameters [eap-8.1.z] (CVE-2026-57819)\n\n* cxf-services-sts-core: Apache CXF: XML External Entity (XXE) vulnerability via WSDL/XSD import parsing [eap-8.1.z] (CVE-2026-65432)\n\n* cxf-tools-wsdlto-frontend-jaxws: Apache CXF: XML External Entity (XXE) vulnerability via WSDL/XSD import parsing [eap-8.1.z] (CVE-2026-65432)\n\n* cxf-services-ws-discovery-api: Apache CXF: XML External Entity (XXE) vulnerability via WSDL/XSD import parsing [eap-8.1.z] (CVE-2026-65432)\n\n* cxf-tools-common: Apache CXF: XML External Entity (XXE) vulnerability via WSDL/XSD import parsing [eap-8.1.z] (CVE-2026-65432)\n\n* cxf-tools-wsdlto-databinding-jaxb: Apache CXF: XML External Entity (XXE) vulnerability via WSDL/XSD import parsing [eap-8.1.z] (CVE-2026-65432)\n\n* jbossws-cxf-factories: Apache CXF: XML External Entity (XXE) vulnerability via WSDL/XSD import parsing [eap-8.1.z] (CVE-2026-65432)\n\n* cxf-xjc-runtime: Apache CXF: XML External Entity (XXE) vulnerability via WSDL/XSD import parsing [eap-8.1.z] (CVE-2026-65432)\n\n* cxf-tools-validator: Apache CXF: XML External Entity (XXE) vulnerability via WSDL/XSD import parsing [eap-8.1.z] (CVE-2026-65432)\n\n* cxf-xjc-dv: Apache CXF: XML External Entity (XXE) vulnerability via WSDL/XSD import parsing [eap-8.1.z] (CVE-2026-65432)\n\n* cxf-xjc-boolean: Apache CXF: XML External Entity (XXE) vulnerability via WSDL/XSD import parsing [eap-8.1.z] (CVE-2026-65432)\n\n* cxf-xjc-ts: Apache CXF: XML External Entity (XXE) vulnerability via WSDL/XSD import parsing [eap-8.1.z] (CVE-2026-65432)\n\n* jbossws-cxf-resources: Apache CXF: XML External Entity (XXE) vulnerability via WSDL/XSD import parsing [eap-8.1.z] (CVE-2026-65432)\n\n* cxf-xjc-bug986: Apache CXF: XML External Entity (XXE) vulnerability via WSDL/XSD import parsing [eap-8.1.z] (CVE-2026-65432)\n\n* cxf-tools-java2ws: Apache CXF: XML External Entity (XXE) vulnerability via WSDL/XSD import parsing [eap-8.1.z] (CVE-2026-65432)\n\n* jbossws-cxf-transports-udp: Apache CXF: XML External Entity (XXE) vulnerability via WSDL/XSD import parsing [eap-8.1.z] (CVE-2026-65432)\n\n* jbossws-cxf-client: Apache CXF: XML External Entity (XXE) vulnerability via WSDL/XSD import parsing [eap-8.1.z] (CVE-2026-65432)\n\n* jbossws-cxf-transports-undertow: Apache CXF: XML External Entity (XXE) vulnerability via WSDL/XSD import parsing [eap-8.1.z] (CVE-2026-65432)\n\n* jbossws-cxf-server: Apache CXF: XML External Entity (XXE) vulnerability via WSDL/XSD import parsing [eap-8.1.z] (CVE-2026-65432)\n\n* cxf-tools-wsdlto-core: Apache CXF: XML External Entity (XXE) vulnerability via WSDL/XSD import parsing [eap-8.1.z] (CVE-2026-65432)\n\n* cxf-rt-bindings-coloc: Apache CXF: XML External Entity (XXE) vulnerability via WSDL/XSD import parsing [eap-8.1.z] (CVE-2026-65432)\n\n* cxf-rt-security: Apache CXF: XML External Entity (XXE) vulnerability via WSDL/XSD import parsing [eap-8.1.z] (CVE-2026-65432)\n\n* cxf-rt-databinding-aegis: Apache CXF: XML External Entity (XXE) vulnerability via WSDL/XSD import parsing [eap-8.1.z] (CVE-2026-65432)\n\n* cxf-rt-ws-policy: Apache CXF: XML External Entity (XXE) vulnerability via WSDL/XSD import parsing [eap-8.1.z] (CVE-2026-65432)\n\n* cxf-rt-features-logging: Apache CXF: XML External Entity (XXE) vulnerability via WSDL/XSD import parsing [eap-8.1.z] (CVE-2026-65432)\n\n* cxf-rt-frontend-simple: Apache CXF: XML External Entity (XXE) vulnerability via WSDL/XSD import parsing [eap-8.1.z] (CVE-2026-65432)\n\n* cxf-rt-ws-security: Apache CXF: XML External Entity (XXE) vulnerability via WSDL/XSD import parsing [eap-8.1.z] (CVE-2026-65432)\n\n* cxf-rt-transports-jms: Apache CXF: XML External Entity (XXE) vulnerability via WSDL/XSD import parsing [eap-8.1.z] (CVE-2026-65432)\n\n* cxf-rt-transports-http-hc: Apache CXF: XML External Entity (XXE) vulnerability via WSDL/XSD import parsing [eap-8.1.z] (CVE-2026-65432)\n\n* cxf-rt-transports-local: Apache CXF: XML External Entity (XXE) vulnerability via WSDL/XSD import parsing [eap-8.1.z] (CVE-2026-65432)\n\n* cxf-rt-bindings-xml: Apache CXF: XML External Entity (XXE) vulnerability via WSDL/XSD import parsing [eap-8.1.z] (CVE-2026-65432)\n\n* cxf-rt-transports-http: Apache CXF: XML External Entity (XXE) vulnerability via WSDL/XSD import parsing [eap-8.1.z] (CVE-2026-65432)\n\n* cxf-rt-ws-rm: Apache CXF: XML External Entity (XXE) vulnerability via WSDL/XSD import parsing [eap-8.1.z] (CVE-2026-65432)\n\n* cxf-rt-frontend-jaxws: Apache CXF: XML External Entity (XXE) vulnerability via WSDL/XSD import parsing [eap-8.1.z] (CVE-2026-65432)\n\n* cxf-rt-features-clustering: Apache CXF: XML External Entity (XXE) vulnerability via WSDL/XSD import parsing [eap-8.1.z] (CVE-2026-65432)\n\n* cxf-rt-ws-mex: Apache CXF: XML External Entity (XXE) vulnerability via WSDL/XSD import parsing [eap-8.1.z] (CVE-2026-65432)\n\n* cxf-rt-databinding-jaxb: Apache CXF: XML External Entity (XXE) vulnerability via WSDL/XSD import parsing [eap-8.1.z] (CVE-2026-65432)\n\n* cxf-rt-bindings-soap: Apache CXF: XML External Entity (XXE) vulnerability via WSDL/XSD import parsing [eap-8.1.z] (CVE-2026-65432)\n\n* cxf-rt-ws-addr: Apache CXF: XML External Entity (XXE) vulnerability via WSDL/XSD import parsing [eap-8.1.z] (CVE-2026-65432)\n\n* cxf-rt-management: Apache CXF: XML External Entity (XXE) vulnerability via WSDL/XSD import parsing [eap-8.1.z] (CVE-2026-65432)\n\n* cxf-rt-features-throttling: Apache CXF: XML External Entity (XXE) vulnerability via WSDL/XSD import parsing [eap-8.1.z] (CVE-2026-65432)\n\n* cxf-rt-security-saml: Apache CXF: XML External Entity (XXE) vulnerability via WSDL/XSD import parsing [eap-8.1.z] (CVE-2026-65432)\n\n* cxf-core: Apache CXF: XML External Entity (XXE) vulnerability via WSDL/XSD import parsing [eap-8.1.z] (CVE-2026-65432)\n\n* cxf-rt-wsdl: Apache CXF: XML External Entity (XXE) vulnerability via WSDL/XSD import parsing [eap-8.1.z] (CVE-2026-65432)\n\n* cxf-rt-frontend-simple: Apache CXF: Denial of Service via uncontrolled form parameters [eap-8.1.z] (CVE-2026-57819)\n\n* cxf-rt-ws-addr: Apache CXF: Denial of Service via uncontrolled form parameters [eap-8.1.z] (CVE-2026-57819)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:92056",
        "url": "https://access.redhat.com/errata/RHSA-2026:92056"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/8.1",
        "url": "https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/8.1"
      },
      {
        "category": "external",
        "summary": "https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/8.1/html/release_notes_for_red_hat_jboss_enterprise_application_platform_8.1/index",
        "url": "https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/8.1/html/release_notes_for_red_hat_jboss_enterprise_application_platform_8.1/index"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/articles/7137769",
        "url": "https://access.redhat.com/articles/7137769"
      },
      {
        "category": "external",
        "summary": "2511978",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2511978"
      },
      {
        "category": "external",
        "summary": "2511979",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2511979"
      },
      {
        "category": "external",
        "summary": "2511981",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2511981"
      },
      {
        "category": "external",
        "summary": "2511995",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2511995"
      },
      {
        "category": "external",
        "summary": "2517538",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2517538"
      },
      {
        "category": "external",
        "summary": "JBEAP-34960",
        "url": "https://issues.redhat.com/browse/JBEAP-34960"
      },
      {
        "category": "external",
        "summary": "JBEAP-35632",
        "url": "https://issues.redhat.com/browse/JBEAP-35632"
      },
      {
        "category": "external",
        "summary": "JBEAP-35651",
        "url": "https://issues.redhat.com/browse/JBEAP-35651"
      },
      {
        "category": "external",
        "summary": "JBEAP-35658",
        "url": "https://issues.redhat.com/browse/JBEAP-35658"
      },
      {
        "category": "external",
        "summary": "JBEAP-35795",
        "url": "https://issues.redhat.com/browse/JBEAP-35795"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_92056.json"
      }
    ],
    "title": "Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.1.9 security update",
    "tracking": {
      "current_release_date": "2026-10-29T07:15:01+00:00",
      "generator": {
        "date": "2026-10-29T07:15:01+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.4.3"
        }
      },
      "id": "RHSA-2026:92056",
      "initial_release_date": "2026-10-28T17:56:23+00:00",
      "revision_history": [
        {
          "date": "2026-10-28T17:56:23+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-10-28T17:56:23+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-10-29T07:15:01+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat JBoss EAP 8.1 for RHEL 9",
                "product": {
                  "name": "Red Hat JBoss EAP 8.1 for RHEL 9",
                  "product_id": "9Base-JBEAP-8.1",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:jboss_enterprise_application_platform:8.1::el9"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat JBoss Enterprise Application Platform"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "eap8-jbossws-cxf-0:7.4.1-1.Final_redhat_00001.1.el9eap.src",
                "product": {
                  "name": "eap8-jbossws-cxf-0:7.4.1-1.Final_redhat_00001.1.el9eap.src",
                  "product_id": "eap8-jbossws-cxf-0:7.4.1-1.Final_redhat_00001.1.el9eap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-jbossws-cxf@7.4.1-1.Final_redhat_00001.1.el9eap?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-log4j-0:2.25.5-1.redhat_00001.1.el9eap.src",
                "product": {
                  "name": "eap8-log4j-0:2.25.5-1.redhat_00001.1.el9eap.src",
                  "product_id": "eap8-log4j-0:2.25.5-1.redhat_00001.1.el9eap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-log4j@2.25.5-1.redhat_00001.1.el9eap?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-apache-cxf-0:4.1.8-1.redhat_00001.1.el9eap.src",
                "product": {
                  "name": "eap8-apache-cxf-0:4.1.8-1.redhat_00001.1.el9eap.src",
                  "product_id": "eap8-apache-cxf-0:4.1.8-1.redhat_00001.1.el9eap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-apache-cxf@4.1.8-1.redhat_00001.1.el9eap?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-jaxb-0:4.0.8-2.redhat_00001.1.el9eap.src",
                "product": {
                  "name": "eap8-jaxb-0:4.0.8-2.redhat_00001.1.el9eap.src",
                  "product_id": "eap8-jaxb-0:4.0.8-2.redhat_00001.1.el9eap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-jaxb@4.0.8-2.redhat_00001.1.el9eap?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-jsf-impl-0:4.0.22-1.redhat_00001.1.el9eap.src",
                "product": {
                  "name": "eap8-jsf-impl-0:4.0.22-1.redhat_00001.1.el9eap.src",
                  "product_id": "eap8-jsf-impl-0:4.0.22-1.redhat_00001.1.el9eap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-jsf-impl@4.0.22-1.redhat_00001.1.el9eap?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-jackson-dataformats-text-0:2.18.11-1.redhat_00001.1.el9eap.src",
                "product": {
                  "name": "eap8-jackson-dataformats-text-0:2.18.11-1.redhat_00001.1.el9eap.src",
                  "product_id": "eap8-jackson-dataformats-text-0:2.18.11-1.redhat_00001.1.el9eap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-jackson-dataformats-text@2.18.11-1.redhat_00001.1.el9eap?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-netty-transport-native-epoll-0:4.1.138-1.Final_redhat_00001.1.el9eap.src",
                "product": {
                  "name": "eap8-netty-transport-native-epoll-0:4.1.138-1.Final_redhat_00001.1.el9eap.src",
                  "product_id": "eap8-netty-transport-native-epoll-0:4.1.138-1.Final_redhat_00001.1.el9eap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-netty-transport-native-epoll@4.1.138-1.Final_redhat_00001.1.el9eap?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-netty-0:4.1.138-1.Final_redhat_00001.1.el9eap.src",
                "product": {
                  "name": "eap8-netty-0:4.1.138-1.Final_redhat_00001.1.el9eap.src",
                  "product_id": "eap8-netty-0:4.1.138-1.Final_redhat_00001.1.el9eap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-netty@4.1.138-1.Final_redhat_00001.1.el9eap?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-jackson-modules-base-0:2.18.10-1.redhat_00001.1.el9eap.src",
                "product": {
                  "name": "eap8-jackson-modules-base-0:2.18.10-1.redhat_00001.1.el9eap.src",
                  "product_id": "eap8-jackson-modules-base-0:2.18.10-1.redhat_00001.1.el9eap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-jackson-modules-base@2.18.10-1.redhat_00001.1.el9eap?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-jackson-databind-0:2.18.11-1.redhat_00001.1.el9eap.src",
                "product": {
                  "name": "eap8-jackson-databind-0:2.18.11-1.redhat_00001.1.el9eap.src",
                  "product_id": "eap8-jackson-databind-0:2.18.11-1.redhat_00001.1.el9eap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-jackson-databind@2.18.11-1.redhat_00001.1.el9eap?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-jackson-jaxrs-providers-0:2.18.10-1.redhat_00001.1.el9eap.src",
                "product": {
                  "name": "eap8-jackson-jaxrs-providers-0:2.18.10-1.redhat_00001.1.el9eap.src",
                  "product_id": "eap8-jackson-jaxrs-providers-0:2.18.10-1.redhat_00001.1.el9eap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-jackson-jaxrs-providers@2.18.10-1.redhat_00001.1.el9eap?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-jackson-core-0:2.18.11-1.redhat_00001.1.el9eap.src",
                "product": {
                  "name": "eap8-jackson-core-0:2.18.11-1.redhat_00001.1.el9eap.src",
                  "product_id": "eap8-jackson-core-0:2.18.11-1.redhat_00001.1.el9eap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-jackson-core@2.18.11-1.redhat_00001.1.el9eap?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-wildfly-elytron-0:2.6.12-1.Final_redhat_00002.1.el9eap.src",
                "product": {
                  "name": "eap8-wildfly-elytron-0:2.6.12-1.Final_redhat_00002.1.el9eap.src",
                  "product_id": "eap8-wildfly-elytron-0:2.6.12-1.Final_redhat_00002.1.el9eap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-wildfly-elytron@2.6.12-1.Final_redhat_00002.1.el9eap?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-jackson-annotations-0:2.18.11-1.redhat_00001.1.el9eap.src",
                "product": {
                  "name": "eap8-jackson-annotations-0:2.18.11-1.redhat_00001.1.el9eap.src",
                  "product_id": "eap8-jackson-annotations-0:2.18.11-1.redhat_00001.1.el9eap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-jackson-annotations@2.18.11-1.redhat_00001.1.el9eap?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-hal-console-0:3.7.22-2.Final_redhat_00002.1.el9eap.src",
                "product": {
                  "name": "eap8-hal-console-0:3.7.22-2.Final_redhat_00002.1.el9eap.src",
                  "product_id": "eap8-hal-console-0:3.7.22-2.Final_redhat_00002.1.el9eap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-hal-console@3.7.22-2.Final_redhat_00002.1.el9eap?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-jackson-modules-java8-0:2.18.10-2.redhat_00001.1.el9eap.src",
                "product": {
                  "name": "eap8-jackson-modules-java8-0:2.18.10-2.redhat_00001.1.el9eap.src",
                  "product_id": "eap8-jackson-modules-java8-0:2.18.10-2.redhat_00001.1.el9eap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-jackson-modules-java8@2.18.10-2.redhat_00001.1.el9eap?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-hibernate-0:6.6.56-2.Final_redhat_00001.1.el9eap.src",
                "product": {
                  "name": "eap8-hibernate-0:6.6.56-2.Final_redhat_00001.1.el9eap.src",
                  "product_id": "eap8-hibernate-0:6.6.56-2.Final_redhat_00001.1.el9eap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-hibernate@6.6.56-2.Final_redhat_00001.1.el9eap?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-eap-product-conf-parent-0:801.9.0-2.GA_redhat_00003.1.el9eap.src",
                "product": {
                  "name": "eap8-eap-product-conf-parent-0:801.9.0-2.GA_redhat_00003.1.el9eap.src",
                  "product_id": "eap8-eap-product-conf-parent-0:801.9.0-2.GA_redhat_00003.1.el9eap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-eap-product-conf-parent@801.9.0-2.GA_redhat_00003.1.el9eap?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-wildfly-javadocs-0:8.1.1-14.GA_redhat_00051.1.el9eap.src",
                "product": {
                  "name": "eap8-wildfly-javadocs-0:8.1.1-14.GA_redhat_00051.1.el9eap.src",
                  "product_id": "eap8-wildfly-javadocs-0:8.1.1-14.GA_redhat_00051.1.el9eap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-wildfly-javadocs@8.1.1-14.GA_redhat_00051.1.el9eap?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-resteasy-0:6.2.19-1.Final_redhat_00002.1.el9eap.src",
                "product": {
                  "name": "eap8-resteasy-0:6.2.19-1.Final_redhat_00002.1.el9eap.src",
                  "product_id": "eap8-resteasy-0:6.2.19-1.Final_redhat_00002.1.el9eap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-resteasy@6.2.19-1.Final_redhat_00002.1.el9eap?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-apache-sshd-0:2.19.0-1.redhat_00001.1.el9eap.src",
                "product": {
                  "name": "eap8-apache-sshd-0:2.19.0-1.redhat_00001.1.el9eap.src",
                  "product_id": "eap8-apache-sshd-0:2.19.0-1.redhat_00001.1.el9eap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-apache-sshd@2.19.0-1.redhat_00001.1.el9eap?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-jsonb-spec-0:3.0.2-1.redhat_00003.1.el9eap.src",
                "product": {
                  "name": "eap8-jsonb-spec-0:3.0.2-1.redhat_00003.1.el9eap.src",
                  "product_id": "eap8-jsonb-spec-0:3.0.2-1.redhat_00003.1.el9eap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-jsonb-spec@3.0.2-1.redhat_00003.1.el9eap?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-jboss-openjdk-orb-0:10.2.0-1.Final_redhat_00001.1.el9eap.src",
                "product": {
                  "name": "eap8-jboss-openjdk-orb-0:10.2.0-1.Final_redhat_00001.1.el9eap.src",
                  "product_id": "eap8-jboss-openjdk-orb-0:10.2.0-1.Final_redhat_00001.1.el9eap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-jboss-openjdk-orb@10.2.0-1.Final_redhat_00001.1.el9eap?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-wildfly-clustering-0:5.0.14-1.Final_redhat_00001.1.el9eap.src",
                "product": {
                  "name": "eap8-wildfly-clustering-0:5.0.14-1.Final_redhat_00001.1.el9eap.src",
                  "product_id": "eap8-wildfly-clustering-0:5.0.14-1.Final_redhat_00001.1.el9eap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-wildfly-clustering@5.0.14-1.Final_redhat_00001.1.el9eap?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-wildfly-0:8.1.9-3.GA_redhat_00005.1.el9eap.src",
                "product": {
                  "name": "eap8-wildfly-0:8.1.9-3.GA_redhat_00005.1.el9eap.src",
                  "product_id": "eap8-wildfly-0:8.1.9-3.GA_redhat_00005.1.el9eap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-wildfly@8.1.9-3.GA_redhat_00005.1.el9eap?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "eap8-jbossws-cxf-0:7.4.1-1.Final_redhat_00001.1.el9eap.noarch",
                "product": {
                  "name": "eap8-jbossws-cxf-0:7.4.1-1.Final_redhat_00001.1.el9eap.noarch",
                  "product_id": "eap8-jbossws-cxf-0:7.4.1-1.Final_redhat_00001.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-jbossws-cxf@7.4.1-1.Final_redhat_00001.1.el9eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-log4j-0:2.25.5-1.redhat_00001.1.el9eap.noarch",
                "product": {
                  "name": "eap8-log4j-0:2.25.5-1.redhat_00001.1.el9eap.noarch",
                  "product_id": "eap8-log4j-0:2.25.5-1.redhat_00001.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-log4j@2.25.5-1.redhat_00001.1.el9eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-apache-cxf-0:4.1.8-1.redhat_00001.1.el9eap.noarch",
                "product": {
                  "name": "eap8-apache-cxf-0:4.1.8-1.redhat_00001.1.el9eap.noarch",
                  "product_id": "eap8-apache-cxf-0:4.1.8-1.redhat_00001.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-apache-cxf@4.1.8-1.redhat_00001.1.el9eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-apache-cxf-rt-0:4.1.8-1.redhat_00001.1.el9eap.noarch",
                "product": {
                  "name": "eap8-apache-cxf-rt-0:4.1.8-1.redhat_00001.1.el9eap.noarch",
                  "product_id": "eap8-apache-cxf-rt-0:4.1.8-1.redhat_00001.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-apache-cxf-rt@4.1.8-1.redhat_00001.1.el9eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-apache-cxf-services-0:4.1.8-1.redhat_00001.1.el9eap.noarch",
                "product": {
                  "name": "eap8-apache-cxf-services-0:4.1.8-1.redhat_00001.1.el9eap.noarch",
                  "product_id": "eap8-apache-cxf-services-0:4.1.8-1.redhat_00001.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-apache-cxf-services@4.1.8-1.redhat_00001.1.el9eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-apache-cxf-tools-0:4.1.8-1.redhat_00001.1.el9eap.noarch",
                "product": {
                  "name": "eap8-apache-cxf-tools-0:4.1.8-1.redhat_00001.1.el9eap.noarch",
                  "product_id": "eap8-apache-cxf-tools-0:4.1.8-1.redhat_00001.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-apache-cxf-tools@4.1.8-1.redhat_00001.1.el9eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-codemodel-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
                "product": {
                  "name": "eap8-codemodel-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
                  "product_id": "eap8-codemodel-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-codemodel@4.0.8-2.redhat_00001.1.el9eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-jaxb-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
                "product": {
                  "name": "eap8-jaxb-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
                  "product_id": "eap8-jaxb-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-jaxb@4.0.8-2.redhat_00001.1.el9eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-jaxb-core-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
                "product": {
                  "name": "eap8-jaxb-core-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
                  "product_id": "eap8-jaxb-core-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-jaxb-core@4.0.8-2.redhat_00001.1.el9eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-jaxb-jxc-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
                "product": {
                  "name": "eap8-jaxb-jxc-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
                  "product_id": "eap8-jaxb-jxc-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-jaxb-jxc@4.0.8-2.redhat_00001.1.el9eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-jaxb-runtime-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
                "product": {
                  "name": "eap8-jaxb-runtime-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
                  "product_id": "eap8-jaxb-runtime-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-jaxb-runtime@4.0.8-2.redhat_00001.1.el9eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-jaxb-xjc-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
                "product": {
                  "name": "eap8-jaxb-xjc-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
                  "product_id": "eap8-jaxb-xjc-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-jaxb-xjc@4.0.8-2.redhat_00001.1.el9eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-relaxng-datatype-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
                "product": {
                  "name": "eap8-relaxng-datatype-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
                  "product_id": "eap8-relaxng-datatype-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-relaxng-datatype@4.0.8-2.redhat_00001.1.el9eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-rngom-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
                "product": {
                  "name": "eap8-rngom-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
                  "product_id": "eap8-rngom-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-rngom@4.0.8-2.redhat_00001.1.el9eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-txw2-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
                "product": {
                  "name": "eap8-txw2-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
                  "product_id": "eap8-txw2-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-txw2@4.0.8-2.redhat_00001.1.el9eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-xsom-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
                "product": {
                  "name": "eap8-xsom-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
                  "product_id": "eap8-xsom-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-xsom@4.0.8-2.redhat_00001.1.el9eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-jsf-impl-0:4.0.22-1.redhat_00001.1.el9eap.noarch",
                "product": {
                  "name": "eap8-jsf-impl-0:4.0.22-1.redhat_00001.1.el9eap.noarch",
                  "product_id": "eap8-jsf-impl-0:4.0.22-1.redhat_00001.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-jsf-impl@4.0.22-1.redhat_00001.1.el9eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-jackson-dataformat-yaml-0:2.18.11-1.redhat_00001.1.el9eap.noarch",
                "product": {
                  "name": "eap8-jackson-dataformat-yaml-0:2.18.11-1.redhat_00001.1.el9eap.noarch",
                  "product_id": "eap8-jackson-dataformat-yaml-0:2.18.11-1.redhat_00001.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-jackson-dataformat-yaml@2.18.11-1.redhat_00001.1.el9eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-jackson-dataformats-text-0:2.18.11-1.redhat_00001.1.el9eap.noarch",
                "product": {
                  "name": "eap8-jackson-dataformats-text-0:2.18.11-1.redhat_00001.1.el9eap.noarch",
                  "product_id": "eap8-jackson-dataformats-text-0:2.18.11-1.redhat_00001.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-jackson-dataformats-text@2.18.11-1.redhat_00001.1.el9eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-netty-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
                "product": {
                  "name": "eap8-netty-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
                  "product_id": "eap8-netty-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-netty@4.1.138-1.Final_redhat_00001.1.el9eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-netty-buffer-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
                "product": {
                  "name": "eap8-netty-buffer-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
                  "product_id": "eap8-netty-buffer-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-netty-buffer@4.1.138-1.Final_redhat_00001.1.el9eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-netty-codec-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
                "product": {
                  "name": "eap8-netty-codec-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
                  "product_id": "eap8-netty-codec-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-netty-codec@4.1.138-1.Final_redhat_00001.1.el9eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-netty-codec-dns-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
                "product": {
                  "name": "eap8-netty-codec-dns-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
                  "product_id": "eap8-netty-codec-dns-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-netty-codec-dns@4.1.138-1.Final_redhat_00001.1.el9eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-netty-codec-http-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
                "product": {
                  "name": "eap8-netty-codec-http-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
                  "product_id": "eap8-netty-codec-http-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-netty-codec-http@4.1.138-1.Final_redhat_00001.1.el9eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-netty-codec-socks-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
                "product": {
                  "name": "eap8-netty-codec-socks-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
                  "product_id": "eap8-netty-codec-socks-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-netty-codec-socks@4.1.138-1.Final_redhat_00001.1.el9eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-netty-common-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
                "product": {
                  "name": "eap8-netty-common-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
                  "product_id": "eap8-netty-common-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-netty-common@4.1.138-1.Final_redhat_00001.1.el9eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-netty-handler-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
                "product": {
                  "name": "eap8-netty-handler-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
                  "product_id": "eap8-netty-handler-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-netty-handler@4.1.138-1.Final_redhat_00001.1.el9eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-netty-handler-proxy-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
                "product": {
                  "name": "eap8-netty-handler-proxy-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
                  "product_id": "eap8-netty-handler-proxy-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-netty-handler-proxy@4.1.138-1.Final_redhat_00001.1.el9eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-netty-resolver-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
                "product": {
                  "name": "eap8-netty-resolver-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
                  "product_id": "eap8-netty-resolver-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-netty-resolver@4.1.138-1.Final_redhat_00001.1.el9eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-netty-resolver-dns-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
                "product": {
                  "name": "eap8-netty-resolver-dns-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
                  "product_id": "eap8-netty-resolver-dns-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-netty-resolver-dns@4.1.138-1.Final_redhat_00001.1.el9eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-netty-transport-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
                "product": {
                  "name": "eap8-netty-transport-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
                  "product_id": "eap8-netty-transport-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-netty-transport@4.1.138-1.Final_redhat_00001.1.el9eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-netty-transport-classes-epoll-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
                "product": {
                  "name": "eap8-netty-transport-classes-epoll-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
                  "product_id": "eap8-netty-transport-classes-epoll-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-netty-transport-classes-epoll@4.1.138-1.Final_redhat_00001.1.el9eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-netty-transport-native-unix-common-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
                "product": {
                  "name": "eap8-netty-transport-native-unix-common-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
                  "product_id": "eap8-netty-transport-native-unix-common-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-netty-transport-native-unix-common@4.1.138-1.Final_redhat_00001.1.el9eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-jackson-module-jakarta-xmlbind-annotations-0:2.18.10-1.redhat_00001.1.el9eap.noarch",
                "product": {
                  "name": "eap8-jackson-module-jakarta-xmlbind-annotations-0:2.18.10-1.redhat_00001.1.el9eap.noarch",
                  "product_id": "eap8-jackson-module-jakarta-xmlbind-annotations-0:2.18.10-1.redhat_00001.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-jackson-module-jakarta-xmlbind-annotations@2.18.10-1.redhat_00001.1.el9eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-jackson-modules-base-0:2.18.10-1.redhat_00001.1.el9eap.noarch",
                "product": {
                  "name": "eap8-jackson-modules-base-0:2.18.10-1.redhat_00001.1.el9eap.noarch",
                  "product_id": "eap8-jackson-modules-base-0:2.18.10-1.redhat_00001.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-jackson-modules-base@2.18.10-1.redhat_00001.1.el9eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-jackson-databind-0:2.18.11-1.redhat_00001.1.el9eap.noarch",
                "product": {
                  "name": "eap8-jackson-databind-0:2.18.11-1.redhat_00001.1.el9eap.noarch",
                  "product_id": "eap8-jackson-databind-0:2.18.11-1.redhat_00001.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-jackson-databind@2.18.11-1.redhat_00001.1.el9eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-jackson-jaxrs-base-0:2.18.10-1.redhat_00001.1.el9eap.noarch",
                "product": {
                  "name": "eap8-jackson-jaxrs-base-0:2.18.10-1.redhat_00001.1.el9eap.noarch",
                  "product_id": "eap8-jackson-jaxrs-base-0:2.18.10-1.redhat_00001.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-jackson-jaxrs-base@2.18.10-1.redhat_00001.1.el9eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-jackson-jaxrs-json-provider-0:2.18.10-1.redhat_00001.1.el9eap.noarch",
                "product": {
                  "name": "eap8-jackson-jaxrs-json-provider-0:2.18.10-1.redhat_00001.1.el9eap.noarch",
                  "product_id": "eap8-jackson-jaxrs-json-provider-0:2.18.10-1.redhat_00001.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-jackson-jaxrs-json-provider@2.18.10-1.redhat_00001.1.el9eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-jackson-core-0:2.18.11-1.redhat_00001.1.el9eap.noarch",
                "product": {
                  "name": "eap8-jackson-core-0:2.18.11-1.redhat_00001.1.el9eap.noarch",
                  "product_id": "eap8-jackson-core-0:2.18.11-1.redhat_00001.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-jackson-core@2.18.11-1.redhat_00001.1.el9eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-wildfly-elytron-0:2.6.12-1.Final_redhat_00002.1.el9eap.noarch",
                "product": {
                  "name": "eap8-wildfly-elytron-0:2.6.12-1.Final_redhat_00002.1.el9eap.noarch",
                  "product_id": "eap8-wildfly-elytron-0:2.6.12-1.Final_redhat_00002.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-wildfly-elytron@2.6.12-1.Final_redhat_00002.1.el9eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-wildfly-elytron-tool-0:2.6.12-1.Final_redhat_00002.1.el9eap.noarch",
                "product": {
                  "name": "eap8-wildfly-elytron-tool-0:2.6.12-1.Final_redhat_00002.1.el9eap.noarch",
                  "product_id": "eap8-wildfly-elytron-tool-0:2.6.12-1.Final_redhat_00002.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-wildfly-elytron-tool@2.6.12-1.Final_redhat_00002.1.el9eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-jackson-annotations-0:2.18.11-1.redhat_00001.1.el9eap.noarch",
                "product": {
                  "name": "eap8-jackson-annotations-0:2.18.11-1.redhat_00001.1.el9eap.noarch",
                  "product_id": "eap8-jackson-annotations-0:2.18.11-1.redhat_00001.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-jackson-annotations@2.18.11-1.redhat_00001.1.el9eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-hal-console-0:3.7.22-2.Final_redhat_00002.1.el9eap.noarch",
                "product": {
                  "name": "eap8-hal-console-0:3.7.22-2.Final_redhat_00002.1.el9eap.noarch",
                  "product_id": "eap8-hal-console-0:3.7.22-2.Final_redhat_00002.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-hal-console@3.7.22-2.Final_redhat_00002.1.el9eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-jackson-datatype-jdk8-0:2.18.10-2.redhat_00001.1.el9eap.noarch",
                "product": {
                  "name": "eap8-jackson-datatype-jdk8-0:2.18.10-2.redhat_00001.1.el9eap.noarch",
                  "product_id": "eap8-jackson-datatype-jdk8-0:2.18.10-2.redhat_00001.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-jackson-datatype-jdk8@2.18.10-2.redhat_00001.1.el9eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-jackson-datatype-jsr310-0:2.18.10-2.redhat_00001.1.el9eap.noarch",
                "product": {
                  "name": "eap8-jackson-datatype-jsr310-0:2.18.10-2.redhat_00001.1.el9eap.noarch",
                  "product_id": "eap8-jackson-datatype-jsr310-0:2.18.10-2.redhat_00001.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-jackson-datatype-jsr310@2.18.10-2.redhat_00001.1.el9eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-jackson-modules-java8-0:2.18.10-2.redhat_00001.1.el9eap.noarch",
                "product": {
                  "name": "eap8-jackson-modules-java8-0:2.18.10-2.redhat_00001.1.el9eap.noarch",
                  "product_id": "eap8-jackson-modules-java8-0:2.18.10-2.redhat_00001.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-jackson-modules-java8@2.18.10-2.redhat_00001.1.el9eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-hibernate-0:6.6.56-2.Final_redhat_00001.1.el9eap.noarch",
                "product": {
                  "name": "eap8-hibernate-0:6.6.56-2.Final_redhat_00001.1.el9eap.noarch",
                  "product_id": "eap8-hibernate-0:6.6.56-2.Final_redhat_00001.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-hibernate@6.6.56-2.Final_redhat_00001.1.el9eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-hibernate-core-0:6.6.56-2.Final_redhat_00001.1.el9eap.noarch",
                "product": {
                  "name": "eap8-hibernate-core-0:6.6.56-2.Final_redhat_00001.1.el9eap.noarch",
                  "product_id": "eap8-hibernate-core-0:6.6.56-2.Final_redhat_00001.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-hibernate-core@6.6.56-2.Final_redhat_00001.1.el9eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-hibernate-envers-0:6.6.56-2.Final_redhat_00001.1.el9eap.noarch",
                "product": {
                  "name": "eap8-hibernate-envers-0:6.6.56-2.Final_redhat_00001.1.el9eap.noarch",
                  "product_id": "eap8-hibernate-envers-0:6.6.56-2.Final_redhat_00001.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-hibernate-envers@6.6.56-2.Final_redhat_00001.1.el9eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-eap-product-conf-parent-0:801.9.0-2.GA_redhat_00003.1.el9eap.noarch",
                "product": {
                  "name": "eap8-eap-product-conf-parent-0:801.9.0-2.GA_redhat_00003.1.el9eap.noarch",
                  "product_id": "eap8-eap-product-conf-parent-0:801.9.0-2.GA_redhat_00003.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-eap-product-conf-parent@801.9.0-2.GA_redhat_00003.1.el9eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.9.0-2.GA_redhat_00003.1.el9eap.noarch",
                "product": {
                  "name": "eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.9.0-2.GA_redhat_00003.1.el9eap.noarch",
                  "product_id": "eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.9.0-2.GA_redhat_00003.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-eap-product-conf-wildfly-ee-feature-pack@801.9.0-2.GA_redhat_00003.1.el9eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-wildfly-javadocs-0:8.1.1-14.GA_redhat_00051.1.el9eap.noarch",
                "product": {
                  "name": "eap8-wildfly-javadocs-0:8.1.1-14.GA_redhat_00051.1.el9eap.noarch",
                  "product_id": "eap8-wildfly-javadocs-0:8.1.1-14.GA_redhat_00051.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-wildfly-javadocs@8.1.1-14.GA_redhat_00051.1.el9eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-resteasy-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
                "product": {
                  "name": "eap8-resteasy-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
                  "product_id": "eap8-resteasy-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-resteasy@6.2.19-1.Final_redhat_00002.1.el9eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-resteasy-atom-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
                "product": {
                  "name": "eap8-resteasy-atom-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
                  "product_id": "eap8-resteasy-atom-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-resteasy-atom-provider@6.2.19-1.Final_redhat_00002.1.el9eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-resteasy-cdi-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
                "product": {
                  "name": "eap8-resteasy-cdi-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
                  "product_id": "eap8-resteasy-cdi-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-resteasy-cdi@6.2.19-1.Final_redhat_00002.1.el9eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-resteasy-client-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
                "product": {
                  "name": "eap8-resteasy-client-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
                  "product_id": "eap8-resteasy-client-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-resteasy-client@6.2.19-1.Final_redhat_00002.1.el9eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-resteasy-client-api-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
                "product": {
                  "name": "eap8-resteasy-client-api-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
                  "product_id": "eap8-resteasy-client-api-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-resteasy-client-api@6.2.19-1.Final_redhat_00002.1.el9eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-resteasy-core-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
                "product": {
                  "name": "eap8-resteasy-core-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
                  "product_id": "eap8-resteasy-core-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-resteasy-core@6.2.19-1.Final_redhat_00002.1.el9eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-resteasy-core-spi-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
                "product": {
                  "name": "eap8-resteasy-core-spi-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
                  "product_id": "eap8-resteasy-core-spi-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-resteasy-core-spi@6.2.19-1.Final_redhat_00002.1.el9eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-resteasy-crypto-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
                "product": {
                  "name": "eap8-resteasy-crypto-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
                  "product_id": "eap8-resteasy-crypto-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-resteasy-crypto@6.2.19-1.Final_redhat_00002.1.el9eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-resteasy-jackson2-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
                "product": {
                  "name": "eap8-resteasy-jackson2-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
                  "product_id": "eap8-resteasy-jackson2-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-resteasy-jackson2-provider@6.2.19-1.Final_redhat_00002.1.el9eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-resteasy-jaxb-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
                "product": {
                  "name": "eap8-resteasy-jaxb-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
                  "product_id": "eap8-resteasy-jaxb-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-resteasy-jaxb-provider@6.2.19-1.Final_redhat_00002.1.el9eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-resteasy-jsapi-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
                "product": {
                  "name": "eap8-resteasy-jsapi-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
                  "product_id": "eap8-resteasy-jsapi-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-resteasy-jsapi@6.2.19-1.Final_redhat_00002.1.el9eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-resteasy-json-binding-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
                "product": {
                  "name": "eap8-resteasy-json-binding-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
                  "product_id": "eap8-resteasy-json-binding-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-resteasy-json-binding-provider@6.2.19-1.Final_redhat_00002.1.el9eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-resteasy-json-p-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
                "product": {
                  "name": "eap8-resteasy-json-p-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
                  "product_id": "eap8-resteasy-json-p-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-resteasy-json-p-provider@6.2.19-1.Final_redhat_00002.1.el9eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-resteasy-multipart-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
                "product": {
                  "name": "eap8-resteasy-multipart-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
                  "product_id": "eap8-resteasy-multipart-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-resteasy-multipart-provider@6.2.19-1.Final_redhat_00002.1.el9eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-resteasy-rxjava2-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
                "product": {
                  "name": "eap8-resteasy-rxjava2-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
                  "product_id": "eap8-resteasy-rxjava2-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-resteasy-rxjava2@6.2.19-1.Final_redhat_00002.1.el9eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-resteasy-validator-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
                "product": {
                  "name": "eap8-resteasy-validator-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
                  "product_id": "eap8-resteasy-validator-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-resteasy-validator-provider@6.2.19-1.Final_redhat_00002.1.el9eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-apache-sshd-0:2.19.0-1.redhat_00001.1.el9eap.noarch",
                "product": {
                  "name": "eap8-apache-sshd-0:2.19.0-1.redhat_00001.1.el9eap.noarch",
                  "product_id": "eap8-apache-sshd-0:2.19.0-1.redhat_00001.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-apache-sshd@2.19.0-1.redhat_00001.1.el9eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-jsonb-spec-0:3.0.2-1.redhat_00003.1.el9eap.noarch",
                "product": {
                  "name": "eap8-jsonb-spec-0:3.0.2-1.redhat_00003.1.el9eap.noarch",
                  "product_id": "eap8-jsonb-spec-0:3.0.2-1.redhat_00003.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-jsonb-spec@3.0.2-1.redhat_00003.1.el9eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-jboss-openjdk-orb-0:10.2.0-1.Final_redhat_00001.1.el9eap.noarch",
                "product": {
                  "name": "eap8-jboss-openjdk-orb-0:10.2.0-1.Final_redhat_00001.1.el9eap.noarch",
                  "product_id": "eap8-jboss-openjdk-orb-0:10.2.0-1.Final_redhat_00001.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-jboss-openjdk-orb@10.2.0-1.Final_redhat_00001.1.el9eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-wildfly-clustering-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
                "product": {
                  "name": "eap8-wildfly-clustering-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
                  "product_id": "eap8-wildfly-clustering-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-wildfly-clustering@5.0.14-1.Final_redhat_00001.1.el9eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-wildfly-clustering-cache-infinispan-common-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
                "product": {
                  "name": "eap8-wildfly-clustering-cache-infinispan-common-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
                  "product_id": "eap8-wildfly-clustering-cache-infinispan-common-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-wildfly-clustering-cache-infinispan-common@5.0.14-1.Final_redhat_00001.1.el9eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-wildfly-clustering-cache-infinispan-embedded-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
                "product": {
                  "name": "eap8-wildfly-clustering-cache-infinispan-embedded-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
                  "product_id": "eap8-wildfly-clustering-cache-infinispan-embedded-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-wildfly-clustering-cache-infinispan-embedded@5.0.14-1.Final_redhat_00001.1.el9eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-wildfly-clustering-cache-infinispan-remote-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
                "product": {
                  "name": "eap8-wildfly-clustering-cache-infinispan-remote-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
                  "product_id": "eap8-wildfly-clustering-cache-infinispan-remote-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-wildfly-clustering-cache-infinispan-remote@5.0.14-1.Final_redhat_00001.1.el9eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-wildfly-clustering-cache-spi-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
                "product": {
                  "name": "eap8-wildfly-clustering-cache-spi-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
                  "product_id": "eap8-wildfly-clustering-cache-spi-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-wildfly-clustering-cache-spi@5.0.14-1.Final_redhat_00001.1.el9eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-wildfly-clustering-context-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
                "product": {
                  "name": "eap8-wildfly-clustering-context-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
                  "product_id": "eap8-wildfly-clustering-context-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-wildfly-clustering-context@5.0.14-1.Final_redhat_00001.1.el9eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-wildfly-clustering-marshalling-jboss-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
                "product": {
                  "name": "eap8-wildfly-clustering-marshalling-jboss-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
                  "product_id": "eap8-wildfly-clustering-marshalling-jboss-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-wildfly-clustering-marshalling-jboss@5.0.14-1.Final_redhat_00001.1.el9eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-wildfly-clustering-marshalling-protostream-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
                "product": {
                  "name": "eap8-wildfly-clustering-marshalling-protostream-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
                  "product_id": "eap8-wildfly-clustering-marshalling-protostream-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-wildfly-clustering-marshalling-protostream@5.0.14-1.Final_redhat_00001.1.el9eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-wildfly-clustering-marshalling-spi-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
                "product": {
                  "name": "eap8-wildfly-clustering-marshalling-spi-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
                  "product_id": "eap8-wildfly-clustering-marshalling-spi-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-wildfly-clustering-marshalling-spi@5.0.14-1.Final_redhat_00001.1.el9eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-wildfly-clustering-server-api-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
                "product": {
                  "name": "eap8-wildfly-clustering-server-api-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
                  "product_id": "eap8-wildfly-clustering-server-api-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-wildfly-clustering-server-api@5.0.14-1.Final_redhat_00001.1.el9eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-wildfly-clustering-server-infinispan-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
                "product": {
                  "name": "eap8-wildfly-clustering-server-infinispan-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
                  "product_id": "eap8-wildfly-clustering-server-infinispan-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-wildfly-clustering-server-infinispan@5.0.14-1.Final_redhat_00001.1.el9eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-wildfly-clustering-server-jgroups-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
                "product": {
                  "name": "eap8-wildfly-clustering-server-jgroups-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
                  "product_id": "eap8-wildfly-clustering-server-jgroups-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-wildfly-clustering-server-jgroups@5.0.14-1.Final_redhat_00001.1.el9eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-wildfly-clustering-server-local-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
                "product": {
                  "name": "eap8-wildfly-clustering-server-local-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
                  "product_id": "eap8-wildfly-clustering-server-local-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-wildfly-clustering-server-local@5.0.14-1.Final_redhat_00001.1.el9eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-wildfly-clustering-server-spi-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
                "product": {
                  "name": "eap8-wildfly-clustering-server-spi-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
                  "product_id": "eap8-wildfly-clustering-server-spi-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-wildfly-clustering-server-spi@5.0.14-1.Final_redhat_00001.1.el9eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-wildfly-clustering-session-cache-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
                "product": {
                  "name": "eap8-wildfly-clustering-session-cache-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
                  "product_id": "eap8-wildfly-clustering-session-cache-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-wildfly-clustering-session-cache@5.0.14-1.Final_redhat_00001.1.el9eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-wildfly-clustering-session-infinispan-embedded-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
                "product": {
                  "name": "eap8-wildfly-clustering-session-infinispan-embedded-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
                  "product_id": "eap8-wildfly-clustering-session-infinispan-embedded-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-wildfly-clustering-session-infinispan-embedded@5.0.14-1.Final_redhat_00001.1.el9eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-wildfly-clustering-session-infinispan-remote-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
                "product": {
                  "name": "eap8-wildfly-clustering-session-infinispan-remote-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
                  "product_id": "eap8-wildfly-clustering-session-infinispan-remote-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-wildfly-clustering-session-infinispan-remote@5.0.14-1.Final_redhat_00001.1.el9eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-wildfly-clustering-session-spec-servlet-6.0-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
                "product": {
                  "name": "eap8-wildfly-clustering-session-spec-servlet-6.0-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
                  "product_id": "eap8-wildfly-clustering-session-spec-servlet-6.0-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-wildfly-clustering-session-spec-servlet-6.0@5.0.14-1.Final_redhat_00001.1.el9eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-wildfly-clustering-session-spec-spi-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
                "product": {
                  "name": "eap8-wildfly-clustering-session-spec-spi-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
                  "product_id": "eap8-wildfly-clustering-session-spec-spi-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-wildfly-clustering-session-spec-spi@5.0.14-1.Final_redhat_00001.1.el9eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-wildfly-clustering-session-spi-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
                "product": {
                  "name": "eap8-wildfly-clustering-session-spi-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
                  "product_id": "eap8-wildfly-clustering-session-spi-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-wildfly-clustering-session-spi@5.0.14-1.Final_redhat_00001.1.el9eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-wildfly-0:8.1.9-3.GA_redhat_00005.1.el9eap.noarch",
                "product": {
                  "name": "eap8-wildfly-0:8.1.9-3.GA_redhat_00005.1.el9eap.noarch",
                  "product_id": "eap8-wildfly-0:8.1.9-3.GA_redhat_00005.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-wildfly@8.1.9-3.GA_redhat_00005.1.el9eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-wildfly-java-jdk17-0:8.1.9-3.GA_redhat_00005.1.el9eap.noarch",
                "product": {
                  "name": "eap8-wildfly-java-jdk17-0:8.1.9-3.GA_redhat_00005.1.el9eap.noarch",
                  "product_id": "eap8-wildfly-java-jdk17-0:8.1.9-3.GA_redhat_00005.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-wildfly-java-jdk17@8.1.9-3.GA_redhat_00005.1.el9eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-wildfly-java-jdk21-0:8.1.9-3.GA_redhat_00005.1.el9eap.noarch",
                "product": {
                  "name": "eap8-wildfly-java-jdk21-0:8.1.9-3.GA_redhat_00005.1.el9eap.noarch",
                  "product_id": "eap8-wildfly-java-jdk21-0:8.1.9-3.GA_redhat_00005.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-wildfly-java-jdk21@8.1.9-3.GA_redhat_00005.1.el9eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-wildfly-modules-0:8.1.9-3.GA_redhat_00005.1.el9eap.noarch",
                "product": {
                  "name": "eap8-wildfly-modules-0:8.1.9-3.GA_redhat_00005.1.el9eap.noarch",
                  "product_id": "eap8-wildfly-modules-0:8.1.9-3.GA_redhat_00005.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-wildfly-modules@8.1.9-3.GA_redhat_00005.1.el9eap?arch=noarch"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "eap8-netty-transport-native-epoll-0:4.1.138-1.Final_redhat_00001.1.el9eap.x86_64",
                "product": {
                  "name": "eap8-netty-transport-native-epoll-0:4.1.138-1.Final_redhat_00001.1.el9eap.x86_64",
                  "product_id": "eap8-netty-transport-native-epoll-0:4.1.138-1.Final_redhat_00001.1.el9eap.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-netty-transport-native-epoll@4.1.138-1.Final_redhat_00001.1.el9eap?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-netty-transport-native-epoll-debuginfo-0:4.1.138-1.Final_redhat_00001.1.el9eap.x86_64",
                "product": {
                  "name": "eap8-netty-transport-native-epoll-debuginfo-0:4.1.138-1.Final_redhat_00001.1.el9eap.x86_64",
                  "product_id": "eap8-netty-transport-native-epoll-debuginfo-0:4.1.138-1.Final_redhat_00001.1.el9eap.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-netty-transport-native-epoll-debuginfo@4.1.138-1.Final_redhat_00001.1.el9eap?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-apache-cxf-0:4.1.8-1.redhat_00001.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-apache-cxf-0:4.1.8-1.redhat_00001.1.el9eap.noarch"
        },
        "product_reference": "eap8-apache-cxf-0:4.1.8-1.redhat_00001.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-apache-cxf-0:4.1.8-1.redhat_00001.1.el9eap.src as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-apache-cxf-0:4.1.8-1.redhat_00001.1.el9eap.src"
        },
        "product_reference": "eap8-apache-cxf-0:4.1.8-1.redhat_00001.1.el9eap.src",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-apache-cxf-rt-0:4.1.8-1.redhat_00001.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-apache-cxf-rt-0:4.1.8-1.redhat_00001.1.el9eap.noarch"
        },
        "product_reference": "eap8-apache-cxf-rt-0:4.1.8-1.redhat_00001.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-apache-cxf-services-0:4.1.8-1.redhat_00001.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-apache-cxf-services-0:4.1.8-1.redhat_00001.1.el9eap.noarch"
        },
        "product_reference": "eap8-apache-cxf-services-0:4.1.8-1.redhat_00001.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-apache-cxf-tools-0:4.1.8-1.redhat_00001.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-apache-cxf-tools-0:4.1.8-1.redhat_00001.1.el9eap.noarch"
        },
        "product_reference": "eap8-apache-cxf-tools-0:4.1.8-1.redhat_00001.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-apache-sshd-0:2.19.0-1.redhat_00001.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-apache-sshd-0:2.19.0-1.redhat_00001.1.el9eap.noarch"
        },
        "product_reference": "eap8-apache-sshd-0:2.19.0-1.redhat_00001.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-apache-sshd-0:2.19.0-1.redhat_00001.1.el9eap.src as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-apache-sshd-0:2.19.0-1.redhat_00001.1.el9eap.src"
        },
        "product_reference": "eap8-apache-sshd-0:2.19.0-1.redhat_00001.1.el9eap.src",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-codemodel-0:4.0.8-2.redhat_00001.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-codemodel-0:4.0.8-2.redhat_00001.1.el9eap.noarch"
        },
        "product_reference": "eap8-codemodel-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-eap-product-conf-parent-0:801.9.0-2.GA_redhat_00003.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.9.0-2.GA_redhat_00003.1.el9eap.noarch"
        },
        "product_reference": "eap8-eap-product-conf-parent-0:801.9.0-2.GA_redhat_00003.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-eap-product-conf-parent-0:801.9.0-2.GA_redhat_00003.1.el9eap.src as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.9.0-2.GA_redhat_00003.1.el9eap.src"
        },
        "product_reference": "eap8-eap-product-conf-parent-0:801.9.0-2.GA_redhat_00003.1.el9eap.src",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.9.0-2.GA_redhat_00003.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.9.0-2.GA_redhat_00003.1.el9eap.noarch"
        },
        "product_reference": "eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.9.0-2.GA_redhat_00003.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-hal-console-0:3.7.22-2.Final_redhat_00002.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-hal-console-0:3.7.22-2.Final_redhat_00002.1.el9eap.noarch"
        },
        "product_reference": "eap8-hal-console-0:3.7.22-2.Final_redhat_00002.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-hal-console-0:3.7.22-2.Final_redhat_00002.1.el9eap.src as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-hal-console-0:3.7.22-2.Final_redhat_00002.1.el9eap.src"
        },
        "product_reference": "eap8-hal-console-0:3.7.22-2.Final_redhat_00002.1.el9eap.src",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-hibernate-0:6.6.56-2.Final_redhat_00001.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-hibernate-0:6.6.56-2.Final_redhat_00001.1.el9eap.noarch"
        },
        "product_reference": "eap8-hibernate-0:6.6.56-2.Final_redhat_00001.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-hibernate-0:6.6.56-2.Final_redhat_00001.1.el9eap.src as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-hibernate-0:6.6.56-2.Final_redhat_00001.1.el9eap.src"
        },
        "product_reference": "eap8-hibernate-0:6.6.56-2.Final_redhat_00001.1.el9eap.src",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-hibernate-core-0:6.6.56-2.Final_redhat_00001.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-hibernate-core-0:6.6.56-2.Final_redhat_00001.1.el9eap.noarch"
        },
        "product_reference": "eap8-hibernate-core-0:6.6.56-2.Final_redhat_00001.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-hibernate-envers-0:6.6.56-2.Final_redhat_00001.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-hibernate-envers-0:6.6.56-2.Final_redhat_00001.1.el9eap.noarch"
        },
        "product_reference": "eap8-hibernate-envers-0:6.6.56-2.Final_redhat_00001.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-jackson-annotations-0:2.18.11-1.redhat_00001.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-jackson-annotations-0:2.18.11-1.redhat_00001.1.el9eap.noarch"
        },
        "product_reference": "eap8-jackson-annotations-0:2.18.11-1.redhat_00001.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-jackson-annotations-0:2.18.11-1.redhat_00001.1.el9eap.src as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-jackson-annotations-0:2.18.11-1.redhat_00001.1.el9eap.src"
        },
        "product_reference": "eap8-jackson-annotations-0:2.18.11-1.redhat_00001.1.el9eap.src",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-jackson-core-0:2.18.11-1.redhat_00001.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-jackson-core-0:2.18.11-1.redhat_00001.1.el9eap.noarch"
        },
        "product_reference": "eap8-jackson-core-0:2.18.11-1.redhat_00001.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-jackson-core-0:2.18.11-1.redhat_00001.1.el9eap.src as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-jackson-core-0:2.18.11-1.redhat_00001.1.el9eap.src"
        },
        "product_reference": "eap8-jackson-core-0:2.18.11-1.redhat_00001.1.el9eap.src",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-jackson-databind-0:2.18.11-1.redhat_00001.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-jackson-databind-0:2.18.11-1.redhat_00001.1.el9eap.noarch"
        },
        "product_reference": "eap8-jackson-databind-0:2.18.11-1.redhat_00001.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-jackson-databind-0:2.18.11-1.redhat_00001.1.el9eap.src as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-jackson-databind-0:2.18.11-1.redhat_00001.1.el9eap.src"
        },
        "product_reference": "eap8-jackson-databind-0:2.18.11-1.redhat_00001.1.el9eap.src",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-jackson-dataformat-yaml-0:2.18.11-1.redhat_00001.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-jackson-dataformat-yaml-0:2.18.11-1.redhat_00001.1.el9eap.noarch"
        },
        "product_reference": "eap8-jackson-dataformat-yaml-0:2.18.11-1.redhat_00001.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-jackson-dataformats-text-0:2.18.11-1.redhat_00001.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-jackson-dataformats-text-0:2.18.11-1.redhat_00001.1.el9eap.noarch"
        },
        "product_reference": "eap8-jackson-dataformats-text-0:2.18.11-1.redhat_00001.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-jackson-dataformats-text-0:2.18.11-1.redhat_00001.1.el9eap.src as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-jackson-dataformats-text-0:2.18.11-1.redhat_00001.1.el9eap.src"
        },
        "product_reference": "eap8-jackson-dataformats-text-0:2.18.11-1.redhat_00001.1.el9eap.src",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-jackson-datatype-jdk8-0:2.18.10-2.redhat_00001.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-jackson-datatype-jdk8-0:2.18.10-2.redhat_00001.1.el9eap.noarch"
        },
        "product_reference": "eap8-jackson-datatype-jdk8-0:2.18.10-2.redhat_00001.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-jackson-datatype-jsr310-0:2.18.10-2.redhat_00001.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-jackson-datatype-jsr310-0:2.18.10-2.redhat_00001.1.el9eap.noarch"
        },
        "product_reference": "eap8-jackson-datatype-jsr310-0:2.18.10-2.redhat_00001.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-jackson-jaxrs-base-0:2.18.10-1.redhat_00001.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-jackson-jaxrs-base-0:2.18.10-1.redhat_00001.1.el9eap.noarch"
        },
        "product_reference": "eap8-jackson-jaxrs-base-0:2.18.10-1.redhat_00001.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-jackson-jaxrs-json-provider-0:2.18.10-1.redhat_00001.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-jackson-jaxrs-json-provider-0:2.18.10-1.redhat_00001.1.el9eap.noarch"
        },
        "product_reference": "eap8-jackson-jaxrs-json-provider-0:2.18.10-1.redhat_00001.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-jackson-jaxrs-providers-0:2.18.10-1.redhat_00001.1.el9eap.src as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-jackson-jaxrs-providers-0:2.18.10-1.redhat_00001.1.el9eap.src"
        },
        "product_reference": "eap8-jackson-jaxrs-providers-0:2.18.10-1.redhat_00001.1.el9eap.src",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-jackson-module-jakarta-xmlbind-annotations-0:2.18.10-1.redhat_00001.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-jackson-module-jakarta-xmlbind-annotations-0:2.18.10-1.redhat_00001.1.el9eap.noarch"
        },
        "product_reference": "eap8-jackson-module-jakarta-xmlbind-annotations-0:2.18.10-1.redhat_00001.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-jackson-modules-base-0:2.18.10-1.redhat_00001.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-jackson-modules-base-0:2.18.10-1.redhat_00001.1.el9eap.noarch"
        },
        "product_reference": "eap8-jackson-modules-base-0:2.18.10-1.redhat_00001.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-jackson-modules-base-0:2.18.10-1.redhat_00001.1.el9eap.src as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-jackson-modules-base-0:2.18.10-1.redhat_00001.1.el9eap.src"
        },
        "product_reference": "eap8-jackson-modules-base-0:2.18.10-1.redhat_00001.1.el9eap.src",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-jackson-modules-java8-0:2.18.10-2.redhat_00001.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-jackson-modules-java8-0:2.18.10-2.redhat_00001.1.el9eap.noarch"
        },
        "product_reference": "eap8-jackson-modules-java8-0:2.18.10-2.redhat_00001.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-jackson-modules-java8-0:2.18.10-2.redhat_00001.1.el9eap.src as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-jackson-modules-java8-0:2.18.10-2.redhat_00001.1.el9eap.src"
        },
        "product_reference": "eap8-jackson-modules-java8-0:2.18.10-2.redhat_00001.1.el9eap.src",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-jaxb-0:4.0.8-2.redhat_00001.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-jaxb-0:4.0.8-2.redhat_00001.1.el9eap.noarch"
        },
        "product_reference": "eap8-jaxb-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-jaxb-0:4.0.8-2.redhat_00001.1.el9eap.src as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-jaxb-0:4.0.8-2.redhat_00001.1.el9eap.src"
        },
        "product_reference": "eap8-jaxb-0:4.0.8-2.redhat_00001.1.el9eap.src",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-jaxb-core-0:4.0.8-2.redhat_00001.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-jaxb-core-0:4.0.8-2.redhat_00001.1.el9eap.noarch"
        },
        "product_reference": "eap8-jaxb-core-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-jaxb-jxc-0:4.0.8-2.redhat_00001.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-jaxb-jxc-0:4.0.8-2.redhat_00001.1.el9eap.noarch"
        },
        "product_reference": "eap8-jaxb-jxc-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-jaxb-runtime-0:4.0.8-2.redhat_00001.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-jaxb-runtime-0:4.0.8-2.redhat_00001.1.el9eap.noarch"
        },
        "product_reference": "eap8-jaxb-runtime-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-jaxb-xjc-0:4.0.8-2.redhat_00001.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-jaxb-xjc-0:4.0.8-2.redhat_00001.1.el9eap.noarch"
        },
        "product_reference": "eap8-jaxb-xjc-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-jboss-openjdk-orb-0:10.2.0-1.Final_redhat_00001.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-jboss-openjdk-orb-0:10.2.0-1.Final_redhat_00001.1.el9eap.noarch"
        },
        "product_reference": "eap8-jboss-openjdk-orb-0:10.2.0-1.Final_redhat_00001.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-jboss-openjdk-orb-0:10.2.0-1.Final_redhat_00001.1.el9eap.src as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-jboss-openjdk-orb-0:10.2.0-1.Final_redhat_00001.1.el9eap.src"
        },
        "product_reference": "eap8-jboss-openjdk-orb-0:10.2.0-1.Final_redhat_00001.1.el9eap.src",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-jbossws-cxf-0:7.4.1-1.Final_redhat_00001.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-jbossws-cxf-0:7.4.1-1.Final_redhat_00001.1.el9eap.noarch"
        },
        "product_reference": "eap8-jbossws-cxf-0:7.4.1-1.Final_redhat_00001.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-jbossws-cxf-0:7.4.1-1.Final_redhat_00001.1.el9eap.src as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-jbossws-cxf-0:7.4.1-1.Final_redhat_00001.1.el9eap.src"
        },
        "product_reference": "eap8-jbossws-cxf-0:7.4.1-1.Final_redhat_00001.1.el9eap.src",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-jsf-impl-0:4.0.22-1.redhat_00001.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-jsf-impl-0:4.0.22-1.redhat_00001.1.el9eap.noarch"
        },
        "product_reference": "eap8-jsf-impl-0:4.0.22-1.redhat_00001.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-jsf-impl-0:4.0.22-1.redhat_00001.1.el9eap.src as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-jsf-impl-0:4.0.22-1.redhat_00001.1.el9eap.src"
        },
        "product_reference": "eap8-jsf-impl-0:4.0.22-1.redhat_00001.1.el9eap.src",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-jsonb-spec-0:3.0.2-1.redhat_00003.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-jsonb-spec-0:3.0.2-1.redhat_00003.1.el9eap.noarch"
        },
        "product_reference": "eap8-jsonb-spec-0:3.0.2-1.redhat_00003.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-jsonb-spec-0:3.0.2-1.redhat_00003.1.el9eap.src as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-jsonb-spec-0:3.0.2-1.redhat_00003.1.el9eap.src"
        },
        "product_reference": "eap8-jsonb-spec-0:3.0.2-1.redhat_00003.1.el9eap.src",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-log4j-0:2.25.5-1.redhat_00001.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-log4j-0:2.25.5-1.redhat_00001.1.el9eap.noarch"
        },
        "product_reference": "eap8-log4j-0:2.25.5-1.redhat_00001.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-log4j-0:2.25.5-1.redhat_00001.1.el9eap.src as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-log4j-0:2.25.5-1.redhat_00001.1.el9eap.src"
        },
        "product_reference": "eap8-log4j-0:2.25.5-1.redhat_00001.1.el9eap.src",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-netty-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-netty-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch"
        },
        "product_reference": "eap8-netty-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-netty-0:4.1.138-1.Final_redhat_00001.1.el9eap.src as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-netty-0:4.1.138-1.Final_redhat_00001.1.el9eap.src"
        },
        "product_reference": "eap8-netty-0:4.1.138-1.Final_redhat_00001.1.el9eap.src",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-netty-buffer-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch"
        },
        "product_reference": "eap8-netty-buffer-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-netty-codec-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-netty-codec-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch"
        },
        "product_reference": "eap8-netty-codec-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-netty-codec-dns-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch"
        },
        "product_reference": "eap8-netty-codec-dns-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-netty-codec-http-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch"
        },
        "product_reference": "eap8-netty-codec-http-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-netty-codec-socks-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch"
        },
        "product_reference": "eap8-netty-codec-socks-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-netty-common-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-netty-common-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch"
        },
        "product_reference": "eap8-netty-common-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-netty-handler-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-netty-handler-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch"
        },
        "product_reference": "eap8-netty-handler-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-netty-handler-proxy-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch"
        },
        "product_reference": "eap8-netty-handler-proxy-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-netty-resolver-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch"
        },
        "product_reference": "eap8-netty-resolver-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-netty-resolver-dns-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch"
        },
        "product_reference": "eap8-netty-resolver-dns-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-netty-transport-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-netty-transport-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch"
        },
        "product_reference": "eap8-netty-transport-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-netty-transport-classes-epoll-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch"
        },
        "product_reference": "eap8-netty-transport-classes-epoll-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-netty-transport-native-epoll-0:4.1.138-1.Final_redhat_00001.1.el9eap.src as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.138-1.Final_redhat_00001.1.el9eap.src"
        },
        "product_reference": "eap8-netty-transport-native-epoll-0:4.1.138-1.Final_redhat_00001.1.el9eap.src",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-netty-transport-native-epoll-0:4.1.138-1.Final_redhat_00001.1.el9eap.x86_64 as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.138-1.Final_redhat_00001.1.el9eap.x86_64"
        },
        "product_reference": "eap8-netty-transport-native-epoll-0:4.1.138-1.Final_redhat_00001.1.el9eap.x86_64",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-netty-transport-native-epoll-debuginfo-0:4.1.138-1.Final_redhat_00001.1.el9eap.x86_64 as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.138-1.Final_redhat_00001.1.el9eap.x86_64"
        },
        "product_reference": "eap8-netty-transport-native-epoll-debuginfo-0:4.1.138-1.Final_redhat_00001.1.el9eap.x86_64",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-netty-transport-native-unix-common-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch"
        },
        "product_reference": "eap8-netty-transport-native-unix-common-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-relaxng-datatype-0:4.0.8-2.redhat_00001.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-relaxng-datatype-0:4.0.8-2.redhat_00001.1.el9eap.noarch"
        },
        "product_reference": "eap8-relaxng-datatype-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-resteasy-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-resteasy-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch"
        },
        "product_reference": "eap8-resteasy-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-resteasy-0:6.2.19-1.Final_redhat_00002.1.el9eap.src as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-resteasy-0:6.2.19-1.Final_redhat_00002.1.el9eap.src"
        },
        "product_reference": "eap8-resteasy-0:6.2.19-1.Final_redhat_00002.1.el9eap.src",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-resteasy-atom-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-resteasy-atom-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch"
        },
        "product_reference": "eap8-resteasy-atom-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-resteasy-cdi-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-resteasy-cdi-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch"
        },
        "product_reference": "eap8-resteasy-cdi-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-resteasy-client-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-resteasy-client-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch"
        },
        "product_reference": "eap8-resteasy-client-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-resteasy-client-api-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-resteasy-client-api-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch"
        },
        "product_reference": "eap8-resteasy-client-api-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-resteasy-core-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-resteasy-core-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch"
        },
        "product_reference": "eap8-resteasy-core-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-resteasy-core-spi-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-resteasy-core-spi-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch"
        },
        "product_reference": "eap8-resteasy-core-spi-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-resteasy-crypto-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-resteasy-crypto-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch"
        },
        "product_reference": "eap8-resteasy-crypto-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-resteasy-jackson2-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-resteasy-jackson2-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch"
        },
        "product_reference": "eap8-resteasy-jackson2-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-resteasy-jaxb-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-resteasy-jaxb-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch"
        },
        "product_reference": "eap8-resteasy-jaxb-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-resteasy-jsapi-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-resteasy-jsapi-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch"
        },
        "product_reference": "eap8-resteasy-jsapi-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-resteasy-json-binding-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-resteasy-json-binding-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch"
        },
        "product_reference": "eap8-resteasy-json-binding-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-resteasy-json-p-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-resteasy-json-p-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch"
        },
        "product_reference": "eap8-resteasy-json-p-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-resteasy-multipart-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-resteasy-multipart-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch"
        },
        "product_reference": "eap8-resteasy-multipart-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-resteasy-rxjava2-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-resteasy-rxjava2-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch"
        },
        "product_reference": "eap8-resteasy-rxjava2-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-resteasy-validator-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-resteasy-validator-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch"
        },
        "product_reference": "eap8-resteasy-validator-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-rngom-0:4.0.8-2.redhat_00001.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-rngom-0:4.0.8-2.redhat_00001.1.el9eap.noarch"
        },
        "product_reference": "eap8-rngom-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-txw2-0:4.0.8-2.redhat_00001.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-txw2-0:4.0.8-2.redhat_00001.1.el9eap.noarch"
        },
        "product_reference": "eap8-txw2-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-wildfly-0:8.1.9-3.GA_redhat_00005.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-wildfly-0:8.1.9-3.GA_redhat_00005.1.el9eap.noarch"
        },
        "product_reference": "eap8-wildfly-0:8.1.9-3.GA_redhat_00005.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-wildfly-0:8.1.9-3.GA_redhat_00005.1.el9eap.src as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-wildfly-0:8.1.9-3.GA_redhat_00005.1.el9eap.src"
        },
        "product_reference": "eap8-wildfly-0:8.1.9-3.GA_redhat_00005.1.el9eap.src",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-wildfly-clustering-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-wildfly-clustering-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch"
        },
        "product_reference": "eap8-wildfly-clustering-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-wildfly-clustering-0:5.0.14-1.Final_redhat_00001.1.el9eap.src as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-wildfly-clustering-0:5.0.14-1.Final_redhat_00001.1.el9eap.src"
        },
        "product_reference": "eap8-wildfly-clustering-0:5.0.14-1.Final_redhat_00001.1.el9eap.src",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-wildfly-clustering-cache-infinispan-common-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-wildfly-clustering-cache-infinispan-common-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch"
        },
        "product_reference": "eap8-wildfly-clustering-cache-infinispan-common-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-wildfly-clustering-cache-infinispan-embedded-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-wildfly-clustering-cache-infinispan-embedded-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch"
        },
        "product_reference": "eap8-wildfly-clustering-cache-infinispan-embedded-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-wildfly-clustering-cache-infinispan-remote-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-wildfly-clustering-cache-infinispan-remote-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch"
        },
        "product_reference": "eap8-wildfly-clustering-cache-infinispan-remote-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-wildfly-clustering-cache-spi-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-wildfly-clustering-cache-spi-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch"
        },
        "product_reference": "eap8-wildfly-clustering-cache-spi-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-wildfly-clustering-context-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-wildfly-clustering-context-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch"
        },
        "product_reference": "eap8-wildfly-clustering-context-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-wildfly-clustering-marshalling-jboss-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-wildfly-clustering-marshalling-jboss-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch"
        },
        "product_reference": "eap8-wildfly-clustering-marshalling-jboss-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-wildfly-clustering-marshalling-protostream-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-wildfly-clustering-marshalling-protostream-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch"
        },
        "product_reference": "eap8-wildfly-clustering-marshalling-protostream-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-wildfly-clustering-marshalling-spi-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-wildfly-clustering-marshalling-spi-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch"
        },
        "product_reference": "eap8-wildfly-clustering-marshalling-spi-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-wildfly-clustering-server-api-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-wildfly-clustering-server-api-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch"
        },
        "product_reference": "eap8-wildfly-clustering-server-api-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-wildfly-clustering-server-infinispan-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-wildfly-clustering-server-infinispan-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch"
        },
        "product_reference": "eap8-wildfly-clustering-server-infinispan-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-wildfly-clustering-server-jgroups-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-wildfly-clustering-server-jgroups-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch"
        },
        "product_reference": "eap8-wildfly-clustering-server-jgroups-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-wildfly-clustering-server-local-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-wildfly-clustering-server-local-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch"
        },
        "product_reference": "eap8-wildfly-clustering-server-local-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-wildfly-clustering-server-spi-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-wildfly-clustering-server-spi-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch"
        },
        "product_reference": "eap8-wildfly-clustering-server-spi-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-wildfly-clustering-session-cache-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-wildfly-clustering-session-cache-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch"
        },
        "product_reference": "eap8-wildfly-clustering-session-cache-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-wildfly-clustering-session-infinispan-embedded-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-wildfly-clustering-session-infinispan-embedded-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch"
        },
        "product_reference": "eap8-wildfly-clustering-session-infinispan-embedded-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-wildfly-clustering-session-infinispan-remote-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-wildfly-clustering-session-infinispan-remote-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch"
        },
        "product_reference": "eap8-wildfly-clustering-session-infinispan-remote-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-wildfly-clustering-session-spec-servlet-6.0-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-wildfly-clustering-session-spec-servlet-6.0-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch"
        },
        "product_reference": "eap8-wildfly-clustering-session-spec-servlet-6.0-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-wildfly-clustering-session-spec-spi-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-wildfly-clustering-session-spec-spi-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch"
        },
        "product_reference": "eap8-wildfly-clustering-session-spec-spi-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-wildfly-clustering-session-spi-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-wildfly-clustering-session-spi-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch"
        },
        "product_reference": "eap8-wildfly-clustering-session-spi-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-wildfly-elytron-0:2.6.12-1.Final_redhat_00002.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-wildfly-elytron-0:2.6.12-1.Final_redhat_00002.1.el9eap.noarch"
        },
        "product_reference": "eap8-wildfly-elytron-0:2.6.12-1.Final_redhat_00002.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-wildfly-elytron-0:2.6.12-1.Final_redhat_00002.1.el9eap.src as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-wildfly-elytron-0:2.6.12-1.Final_redhat_00002.1.el9eap.src"
        },
        "product_reference": "eap8-wildfly-elytron-0:2.6.12-1.Final_redhat_00002.1.el9eap.src",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-wildfly-elytron-tool-0:2.6.12-1.Final_redhat_00002.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-wildfly-elytron-tool-0:2.6.12-1.Final_redhat_00002.1.el9eap.noarch"
        },
        "product_reference": "eap8-wildfly-elytron-tool-0:2.6.12-1.Final_redhat_00002.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-wildfly-java-jdk17-0:8.1.9-3.GA_redhat_00005.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-wildfly-java-jdk17-0:8.1.9-3.GA_redhat_00005.1.el9eap.noarch"
        },
        "product_reference": "eap8-wildfly-java-jdk17-0:8.1.9-3.GA_redhat_00005.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-wildfly-java-jdk21-0:8.1.9-3.GA_redhat_00005.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.9-3.GA_redhat_00005.1.el9eap.noarch"
        },
        "product_reference": "eap8-wildfly-java-jdk21-0:8.1.9-3.GA_redhat_00005.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-wildfly-javadocs-0:8.1.1-14.GA_redhat_00051.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-wildfly-javadocs-0:8.1.1-14.GA_redhat_00051.1.el9eap.noarch"
        },
        "product_reference": "eap8-wildfly-javadocs-0:8.1.1-14.GA_redhat_00051.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-wildfly-javadocs-0:8.1.1-14.GA_redhat_00051.1.el9eap.src as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-wildfly-javadocs-0:8.1.1-14.GA_redhat_00051.1.el9eap.src"
        },
        "product_reference": "eap8-wildfly-javadocs-0:8.1.1-14.GA_redhat_00051.1.el9eap.src",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-wildfly-modules-0:8.1.9-3.GA_redhat_00005.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.9-3.GA_redhat_00005.1.el9eap.noarch"
        },
        "product_reference": "eap8-wildfly-modules-0:8.1.9-3.GA_redhat_00005.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-xsom-0:4.0.8-2.redhat_00001.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-xsom-0:4.0.8-2.redhat_00001.1.el9eap.noarch"
        },
        "product_reference": "eap8-xsom-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-57819",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-08-06T11:10:55.526852+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "9Base-JBEAP-8.1:eap8-apache-sshd-0:2.19.0-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-apache-sshd-0:2.19.0-1.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-codemodel-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.9.0-2.GA_redhat_00003.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.9.0-2.GA_redhat_00003.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.9.0-2.GA_redhat_00003.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-hal-console-0:3.7.22-2.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-hal-console-0:3.7.22-2.Final_redhat_00002.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-hibernate-0:6.6.56-2.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-hibernate-0:6.6.56-2.Final_redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-hibernate-core-0:6.6.56-2.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-hibernate-envers-0:6.6.56-2.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-annotations-0:2.18.11-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-annotations-0:2.18.11-1.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jackson-core-0:2.18.11-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-core-0:2.18.11-1.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jackson-databind-0:2.18.11-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-databind-0:2.18.11-1.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jackson-dataformat-yaml-0:2.18.11-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-dataformats-text-0:2.18.11-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-dataformats-text-0:2.18.11-1.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jackson-datatype-jdk8-0:2.18.10-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-datatype-jsr310-0:2.18.10-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-jaxrs-base-0:2.18.10-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-jaxrs-json-provider-0:2.18.10-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-jaxrs-providers-0:2.18.10-1.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jackson-module-jakarta-xmlbind-annotations-0:2.18.10-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-modules-base-0:2.18.10-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-modules-base-0:2.18.10-1.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jackson-modules-java8-0:2.18.10-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-modules-java8-0:2.18.10-2.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jaxb-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jaxb-0:4.0.8-2.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jaxb-core-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jaxb-jxc-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jaxb-runtime-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jaxb-xjc-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jboss-openjdk-orb-0:10.2.0-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jboss-openjdk-orb-0:10.2.0-1.Final_redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jbossws-cxf-0:7.4.1-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jbossws-cxf-0:7.4.1-1.Final_redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jsf-impl-0:4.0.22-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jsf-impl-0:4.0.22-1.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jsonb-spec-0:3.0.2-1.redhat_00003.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jsonb-spec-0:3.0.2-1.redhat_00003.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-log4j-0:2.25.5-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-log4j-0:2.25.5-1.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-netty-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-0:4.1.138-1.Final_redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-codec-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-common-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-handler-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-transport-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.138-1.Final_redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.138-1.Final_redhat_00001.1.el9eap.x86_64",
            "9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.138-1.Final_redhat_00001.1.el9eap.x86_64",
            "9Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-relaxng-datatype-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-0:6.2.19-1.Final_redhat_00002.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-resteasy-atom-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-cdi-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-client-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-client-api-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-core-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-core-spi-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-crypto-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-jackson2-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-jaxb-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-jsapi-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-json-binding-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-json-p-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-multipart-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-rxjava2-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-validator-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-rngom-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-txw2-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-0:8.1.9-3.GA_redhat_00005.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-0:8.1.9-3.GA_redhat_00005.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-0:5.0.14-1.Final_redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-cache-infinispan-common-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-cache-infinispan-embedded-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-cache-infinispan-remote-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-cache-spi-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-context-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-marshalling-jboss-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-marshalling-protostream-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-marshalling-spi-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-server-api-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-server-infinispan-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-server-jgroups-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-server-local-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-server-spi-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-session-cache-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-session-infinispan-embedded-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-session-infinispan-remote-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-session-spec-servlet-6.0-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-session-spec-spi-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-session-spi-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-elytron-0:2.6.12-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-elytron-0:2.6.12-1.Final_redhat_00002.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-wildfly-elytron-tool-0:2.6.12-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-java-jdk17-0:8.1.9-3.GA_redhat_00005.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.9-3.GA_redhat_00005.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-javadocs-0:8.1.1-14.GA_redhat_00051.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-javadocs-0:8.1.1-14.GA_redhat_00051.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.9-3.GA_redhat_00005.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-xsom-0:4.0.8-2.redhat_00001.1.el9eap.noarch"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2511979"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Apache CXF. This vulnerability allows a remote attacker to initiate a Denial of Service (DoS) attack. The issue arises because the component does not enforce a default limit on the number of form parameters processed in a JAX-RS message, enabling an attacker to send requests with an excessive quantity of parameters, leading to resource exhaustion.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Apache CXF: Apache CXF: Denial of Service via uncontrolled form parameters",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Apache CXF is affected by a denial of service vulnerability due to the lack of default limits on form parameters in JAX-RS message processing. An unauthenticated remote attacker can cause resource exhaustion by sending requests with excessive form parameters.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-JBEAP-8.1:eap8-apache-cxf-0:4.1.8-1.redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-apache-cxf-0:4.1.8-1.redhat_00001.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-apache-cxf-rt-0:4.1.8-1.redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-apache-cxf-services-0:4.1.8-1.redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-apache-cxf-tools-0:4.1.8-1.redhat_00001.1.el9eap.noarch"
        ],
        "known_not_affected": [
          "9Base-JBEAP-8.1:eap8-apache-sshd-0:2.19.0-1.redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-apache-sshd-0:2.19.0-1.redhat_00001.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-codemodel-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.9.0-2.GA_redhat_00003.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.9.0-2.GA_redhat_00003.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.9.0-2.GA_redhat_00003.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-hal-console-0:3.7.22-2.Final_redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-hal-console-0:3.7.22-2.Final_redhat_00002.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-hibernate-0:6.6.56-2.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-hibernate-0:6.6.56-2.Final_redhat_00001.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-hibernate-core-0:6.6.56-2.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-hibernate-envers-0:6.6.56-2.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-jackson-annotations-0:2.18.11-1.redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-jackson-annotations-0:2.18.11-1.redhat_00001.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-jackson-core-0:2.18.11-1.redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-jackson-core-0:2.18.11-1.redhat_00001.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-jackson-databind-0:2.18.11-1.redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-jackson-databind-0:2.18.11-1.redhat_00001.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-jackson-dataformat-yaml-0:2.18.11-1.redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-jackson-dataformats-text-0:2.18.11-1.redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-jackson-dataformats-text-0:2.18.11-1.redhat_00001.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-jackson-datatype-jdk8-0:2.18.10-2.redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-jackson-datatype-jsr310-0:2.18.10-2.redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-jackson-jaxrs-base-0:2.18.10-1.redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-jackson-jaxrs-json-provider-0:2.18.10-1.redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-jackson-jaxrs-providers-0:2.18.10-1.redhat_00001.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-jackson-module-jakarta-xmlbind-annotations-0:2.18.10-1.redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-jackson-modules-base-0:2.18.10-1.redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-jackson-modules-base-0:2.18.10-1.redhat_00001.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-jackson-modules-java8-0:2.18.10-2.redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-jackson-modules-java8-0:2.18.10-2.redhat_00001.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-jaxb-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-jaxb-0:4.0.8-2.redhat_00001.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-jaxb-core-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-jaxb-jxc-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-jaxb-runtime-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-jaxb-xjc-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-jboss-openjdk-orb-0:10.2.0-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-jboss-openjdk-orb-0:10.2.0-1.Final_redhat_00001.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-jbossws-cxf-0:7.4.1-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-jbossws-cxf-0:7.4.1-1.Final_redhat_00001.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-jsf-impl-0:4.0.22-1.redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-jsf-impl-0:4.0.22-1.redhat_00001.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-jsonb-spec-0:3.0.2-1.redhat_00003.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-jsonb-spec-0:3.0.2-1.redhat_00003.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-log4j-0:2.25.5-1.redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-log4j-0:2.25.5-1.redhat_00001.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-netty-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-netty-0:4.1.138-1.Final_redhat_00001.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-netty-codec-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-netty-common-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-netty-handler-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-netty-transport-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.138-1.Final_redhat_00001.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.138-1.Final_redhat_00001.1.el9eap.x86_64",
          "9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.138-1.Final_redhat_00001.1.el9eap.x86_64",
          "9Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-relaxng-datatype-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-resteasy-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-resteasy-0:6.2.19-1.Final_redhat_00002.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-resteasy-atom-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-resteasy-cdi-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-resteasy-client-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-resteasy-client-api-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-resteasy-core-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-resteasy-core-spi-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-resteasy-crypto-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-resteasy-jackson2-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-resteasy-jaxb-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-resteasy-jsapi-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-resteasy-json-binding-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-resteasy-json-p-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-resteasy-multipart-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-resteasy-rxjava2-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-resteasy-validator-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-rngom-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-txw2-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-0:8.1.9-3.GA_redhat_00005.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-0:8.1.9-3.GA_redhat_00005.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-wildfly-clustering-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-clustering-0:5.0.14-1.Final_redhat_00001.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-wildfly-clustering-cache-infinispan-common-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-clustering-cache-infinispan-embedded-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-clustering-cache-infinispan-remote-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-clustering-cache-spi-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-clustering-context-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-clustering-marshalling-jboss-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-clustering-marshalling-protostream-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-clustering-marshalling-spi-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-clustering-server-api-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-clustering-server-infinispan-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-clustering-server-jgroups-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-clustering-server-local-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-clustering-server-spi-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-clustering-session-cache-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-clustering-session-infinispan-embedded-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-clustering-session-infinispan-remote-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-clustering-session-spec-servlet-6.0-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-clustering-session-spec-spi-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-clustering-session-spi-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-elytron-0:2.6.12-1.Final_redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-elytron-0:2.6.12-1.Final_redhat_00002.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-wildfly-elytron-tool-0:2.6.12-1.Final_redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-java-jdk17-0:8.1.9-3.GA_redhat_00005.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.9-3.GA_redhat_00005.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-javadocs-0:8.1.1-14.GA_redhat_00051.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-javadocs-0:8.1.1-14.GA_redhat_00051.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.9-3.GA_redhat_00005.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-xsom-0:4.0.8-2.redhat_00001.1.el9eap.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-57819"
        },
        {
          "category": "external",
          "summary": "RHBZ#2511979",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2511979"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-57819",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-57819"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-57819",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-57819"
        },
        {
          "category": "external",
          "summary": "https://lists.apache.org/thread/2n14mk01bjc3lrsyhzrkwy8h86289mov",
          "url": "https://lists.apache.org/thread/2n14mk01bjc3lrsyhzrkwy8h86289mov"
        }
      ],
      "release_date": "2026-08-06T10:12:26.243000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-28T17:56:23+00:00",
          "details": "Before applying the update, make sure all previously released errata relevant to your system have been applied. Also, back up your existing installation, including all applications, configuration files, databases and database settings. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
          "product_ids": [
            "9Base-JBEAP-8.1:eap8-apache-cxf-0:4.1.8-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-apache-cxf-0:4.1.8-1.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-apache-cxf-rt-0:4.1.8-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-apache-cxf-services-0:4.1.8-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-apache-cxf-tools-0:4.1.8-1.redhat_00001.1.el9eap.noarch"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:92056"
        },
        {
          "category": "workaround",
          "details": "Update Apache CXF to the latest version that includes the fix. Configure form parameter limits in application settings to prevent resource exhaustion attacks.",
          "product_ids": [
            "9Base-JBEAP-8.1:eap8-apache-cxf-0:4.1.8-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-apache-cxf-0:4.1.8-1.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-apache-cxf-rt-0:4.1.8-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-apache-cxf-services-0:4.1.8-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-apache-cxf-tools-0:4.1.8-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-apache-sshd-0:2.19.0-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-apache-sshd-0:2.19.0-1.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-codemodel-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.9.0-2.GA_redhat_00003.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.9.0-2.GA_redhat_00003.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.9.0-2.GA_redhat_00003.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-hal-console-0:3.7.22-2.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-hal-console-0:3.7.22-2.Final_redhat_00002.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-hibernate-0:6.6.56-2.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-hibernate-0:6.6.56-2.Final_redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-hibernate-core-0:6.6.56-2.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-hibernate-envers-0:6.6.56-2.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-annotations-0:2.18.11-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-annotations-0:2.18.11-1.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jackson-core-0:2.18.11-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-core-0:2.18.11-1.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jackson-databind-0:2.18.11-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-databind-0:2.18.11-1.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jackson-dataformat-yaml-0:2.18.11-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-dataformats-text-0:2.18.11-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-dataformats-text-0:2.18.11-1.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jackson-datatype-jdk8-0:2.18.10-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-datatype-jsr310-0:2.18.10-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-jaxrs-base-0:2.18.10-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-jaxrs-json-provider-0:2.18.10-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-jaxrs-providers-0:2.18.10-1.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jackson-module-jakarta-xmlbind-annotations-0:2.18.10-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-modules-base-0:2.18.10-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-modules-base-0:2.18.10-1.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jackson-modules-java8-0:2.18.10-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-modules-java8-0:2.18.10-2.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jaxb-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jaxb-0:4.0.8-2.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jaxb-core-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jaxb-jxc-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jaxb-runtime-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jaxb-xjc-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jboss-openjdk-orb-0:10.2.0-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jboss-openjdk-orb-0:10.2.0-1.Final_redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jbossws-cxf-0:7.4.1-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jbossws-cxf-0:7.4.1-1.Final_redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jsf-impl-0:4.0.22-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jsf-impl-0:4.0.22-1.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jsonb-spec-0:3.0.2-1.redhat_00003.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jsonb-spec-0:3.0.2-1.redhat_00003.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-log4j-0:2.25.5-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-log4j-0:2.25.5-1.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-netty-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-0:4.1.138-1.Final_redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-codec-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-common-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-handler-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-transport-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.138-1.Final_redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.138-1.Final_redhat_00001.1.el9eap.x86_64",
            "9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.138-1.Final_redhat_00001.1.el9eap.x86_64",
            "9Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-relaxng-datatype-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-0:6.2.19-1.Final_redhat_00002.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-resteasy-atom-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-cdi-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-client-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-client-api-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-core-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-core-spi-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-crypto-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-jackson2-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-jaxb-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-jsapi-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-json-binding-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-json-p-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-multipart-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-rxjava2-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-validator-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-rngom-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-txw2-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-0:8.1.9-3.GA_redhat_00005.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-0:8.1.9-3.GA_redhat_00005.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-0:5.0.14-1.Final_redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-cache-infinispan-common-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-cache-infinispan-embedded-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-cache-infinispan-remote-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-cache-spi-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-context-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-marshalling-jboss-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-marshalling-protostream-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-marshalling-spi-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-server-api-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-server-infinispan-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-server-jgroups-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-server-local-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-server-spi-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-session-cache-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-session-infinispan-embedded-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-session-infinispan-remote-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-session-spec-servlet-6.0-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-session-spec-spi-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-session-spi-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-elytron-0:2.6.12-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-elytron-0:2.6.12-1.Final_redhat_00002.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-wildfly-elytron-tool-0:2.6.12-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-java-jdk17-0:8.1.9-3.GA_redhat_00005.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.9-3.GA_redhat_00005.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-javadocs-0:8.1.1-14.GA_redhat_00051.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-javadocs-0:8.1.1-14.GA_redhat_00051.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.9-3.GA_redhat_00005.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-xsom-0:4.0.8-2.redhat_00001.1.el9eap.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "9Base-JBEAP-8.1:eap8-apache-cxf-0:4.1.8-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-apache-cxf-0:4.1.8-1.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-apache-cxf-rt-0:4.1.8-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-apache-cxf-services-0:4.1.8-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-apache-cxf-tools-0:4.1.8-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-apache-sshd-0:2.19.0-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-apache-sshd-0:2.19.0-1.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-codemodel-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.9.0-2.GA_redhat_00003.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.9.0-2.GA_redhat_00003.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.9.0-2.GA_redhat_00003.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-hal-console-0:3.7.22-2.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-hal-console-0:3.7.22-2.Final_redhat_00002.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-hibernate-0:6.6.56-2.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-hibernate-0:6.6.56-2.Final_redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-hibernate-core-0:6.6.56-2.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-hibernate-envers-0:6.6.56-2.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-annotations-0:2.18.11-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-annotations-0:2.18.11-1.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jackson-core-0:2.18.11-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-core-0:2.18.11-1.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jackson-databind-0:2.18.11-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-databind-0:2.18.11-1.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jackson-dataformat-yaml-0:2.18.11-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-dataformats-text-0:2.18.11-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-dataformats-text-0:2.18.11-1.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jackson-datatype-jdk8-0:2.18.10-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-datatype-jsr310-0:2.18.10-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-jaxrs-base-0:2.18.10-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-jaxrs-json-provider-0:2.18.10-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-jaxrs-providers-0:2.18.10-1.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jackson-module-jakarta-xmlbind-annotations-0:2.18.10-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-modules-base-0:2.18.10-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-modules-base-0:2.18.10-1.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jackson-modules-java8-0:2.18.10-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-modules-java8-0:2.18.10-2.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jaxb-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jaxb-0:4.0.8-2.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jaxb-core-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jaxb-jxc-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jaxb-runtime-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jaxb-xjc-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jboss-openjdk-orb-0:10.2.0-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jboss-openjdk-orb-0:10.2.0-1.Final_redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jbossws-cxf-0:7.4.1-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jbossws-cxf-0:7.4.1-1.Final_redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jsf-impl-0:4.0.22-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jsf-impl-0:4.0.22-1.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jsonb-spec-0:3.0.2-1.redhat_00003.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jsonb-spec-0:3.0.2-1.redhat_00003.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-log4j-0:2.25.5-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-log4j-0:2.25.5-1.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-netty-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-0:4.1.138-1.Final_redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-codec-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-common-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-handler-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-transport-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.138-1.Final_redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.138-1.Final_redhat_00001.1.el9eap.x86_64",
            "9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.138-1.Final_redhat_00001.1.el9eap.x86_64",
            "9Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-relaxng-datatype-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-0:6.2.19-1.Final_redhat_00002.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-resteasy-atom-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-cdi-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-client-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-client-api-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-core-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-core-spi-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-crypto-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-jackson2-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-jaxb-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-jsapi-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-json-binding-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-json-p-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-multipart-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-rxjava2-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-validator-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-rngom-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-txw2-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-0:8.1.9-3.GA_redhat_00005.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-0:8.1.9-3.GA_redhat_00005.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-0:5.0.14-1.Final_redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-cache-infinispan-common-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-cache-infinispan-embedded-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-cache-infinispan-remote-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-cache-spi-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-context-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-marshalling-jboss-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-marshalling-protostream-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-marshalling-spi-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-server-api-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-server-infinispan-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-server-jgroups-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-server-local-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-server-spi-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-session-cache-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-session-infinispan-embedded-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-session-infinispan-remote-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-session-spec-servlet-6.0-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-session-spec-spi-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-session-spi-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-elytron-0:2.6.12-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-elytron-0:2.6.12-1.Final_redhat_00002.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-wildfly-elytron-tool-0:2.6.12-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-java-jdk17-0:8.1.9-3.GA_redhat_00005.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.9-3.GA_redhat_00005.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-javadocs-0:8.1.1-14.GA_redhat_00051.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-javadocs-0:8.1.1-14.GA_redhat_00051.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.9-3.GA_redhat_00005.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-xsom-0:4.0.8-2.redhat_00001.1.el9eap.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "Apache CXF: Apache CXF: Denial of Service via uncontrolled form parameters"
    },
    {
      "cve": "CVE-2026-59903",
      "cwe": {
        "id": "CWE-444",
        "name": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)"
      },
      "discovery_date": "2026-08-17T18:11:22.687313+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "9Base-JBEAP-8.1:eap8-apache-cxf-0:4.1.8-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-apache-cxf-0:4.1.8-1.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-apache-cxf-rt-0:4.1.8-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-apache-cxf-services-0:4.1.8-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-apache-cxf-tools-0:4.1.8-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-apache-sshd-0:2.19.0-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-apache-sshd-0:2.19.0-1.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-codemodel-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.9.0-2.GA_redhat_00003.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.9.0-2.GA_redhat_00003.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.9.0-2.GA_redhat_00003.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-hal-console-0:3.7.22-2.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-hal-console-0:3.7.22-2.Final_redhat_00002.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-hibernate-0:6.6.56-2.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-hibernate-0:6.6.56-2.Final_redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-hibernate-core-0:6.6.56-2.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-hibernate-envers-0:6.6.56-2.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-annotations-0:2.18.11-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-annotations-0:2.18.11-1.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jackson-core-0:2.18.11-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-core-0:2.18.11-1.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jackson-databind-0:2.18.11-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-databind-0:2.18.11-1.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jackson-dataformat-yaml-0:2.18.11-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-dataformats-text-0:2.18.11-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-dataformats-text-0:2.18.11-1.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jackson-datatype-jdk8-0:2.18.10-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-datatype-jsr310-0:2.18.10-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-jaxrs-base-0:2.18.10-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-jaxrs-json-provider-0:2.18.10-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-jaxrs-providers-0:2.18.10-1.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jackson-module-jakarta-xmlbind-annotations-0:2.18.10-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-modules-base-0:2.18.10-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-modules-base-0:2.18.10-1.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jackson-modules-java8-0:2.18.10-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-modules-java8-0:2.18.10-2.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jaxb-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jaxb-0:4.0.8-2.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jaxb-core-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jaxb-jxc-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jaxb-runtime-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jaxb-xjc-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jboss-openjdk-orb-0:10.2.0-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jboss-openjdk-orb-0:10.2.0-1.Final_redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jbossws-cxf-0:7.4.1-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jbossws-cxf-0:7.4.1-1.Final_redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jsf-impl-0:4.0.22-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jsf-impl-0:4.0.22-1.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jsonb-spec-0:3.0.2-1.redhat_00003.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jsonb-spec-0:3.0.2-1.redhat_00003.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-log4j-0:2.25.5-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-log4j-0:2.25.5-1.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-relaxng-datatype-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-rngom-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-txw2-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-0:8.1.9-3.GA_redhat_00005.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-0:8.1.9-3.GA_redhat_00005.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-0:5.0.14-1.Final_redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-cache-infinispan-common-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-cache-infinispan-embedded-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-cache-infinispan-remote-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-cache-spi-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-context-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-marshalling-jboss-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-marshalling-protostream-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-marshalling-spi-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-server-api-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-server-infinispan-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-server-jgroups-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-server-local-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-server-spi-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-session-cache-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-session-infinispan-embedded-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-session-infinispan-remote-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-session-spec-servlet-6.0-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-session-spec-spi-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-session-spi-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-elytron-0:2.6.12-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-elytron-0:2.6.12-1.Final_redhat_00002.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-wildfly-elytron-tool-0:2.6.12-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-java-jdk17-0:8.1.9-3.GA_redhat_00005.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.9-3.GA_redhat_00005.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-javadocs-0:8.1.1-14.GA_redhat_00051.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-javadocs-0:8.1.1-14.GA_redhat_00051.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.9-3.GA_redhat_00005.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-xsom-0:4.0.8-2.redhat_00001.1.el9eap.noarch"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2517538"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Netty, an asynchronous, event-driven network application framework. The `CorsHandler` component incorrectly replaces application `Vary` headers, such as `Authorization` or `Cookie`, with `Origin`. This allows a caching proxy or Content Delivery Network (CDN) to reuse authenticated responses across different users, leading to the disclosure of sensitive information.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "io.netty/netty: Netty: Information disclosure via CORS Vary header overwrite",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This Moderate impact information disclosure flaw in Netty arises from the `CorsHandler` incorrectly overwriting application `Vary` headers with `Origin`. This could allow caching proxies or CDNs to reuse authenticated responses across different users, potentially exposing sensitive data. Exploitation requires the presence of a caching proxy or CDN in front of the affected Netty application.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-JBEAP-8.1:eap8-netty-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-netty-0:4.1.138-1.Final_redhat_00001.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-netty-codec-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-netty-common-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-netty-handler-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-netty-transport-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.138-1.Final_redhat_00001.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.138-1.Final_redhat_00001.1.el9eap.x86_64",
          "9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.138-1.Final_redhat_00001.1.el9eap.x86_64",
          "9Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-resteasy-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-resteasy-0:6.2.19-1.Final_redhat_00002.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-resteasy-atom-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-resteasy-cdi-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-resteasy-client-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-resteasy-client-api-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-resteasy-core-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-resteasy-core-spi-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-resteasy-crypto-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-resteasy-jackson2-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-resteasy-jaxb-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-resteasy-jsapi-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-resteasy-json-binding-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-resteasy-json-p-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-resteasy-multipart-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-resteasy-rxjava2-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-resteasy-validator-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch"
        ],
        "known_not_affected": [
          "9Base-JBEAP-8.1:eap8-apache-cxf-0:4.1.8-1.redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-apache-cxf-0:4.1.8-1.redhat_00001.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-apache-cxf-rt-0:4.1.8-1.redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-apache-cxf-services-0:4.1.8-1.redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-apache-cxf-tools-0:4.1.8-1.redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-apache-sshd-0:2.19.0-1.redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-apache-sshd-0:2.19.0-1.redhat_00001.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-codemodel-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.9.0-2.GA_redhat_00003.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.9.0-2.GA_redhat_00003.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.9.0-2.GA_redhat_00003.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-hal-console-0:3.7.22-2.Final_redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-hal-console-0:3.7.22-2.Final_redhat_00002.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-hibernate-0:6.6.56-2.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-hibernate-0:6.6.56-2.Final_redhat_00001.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-hibernate-core-0:6.6.56-2.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-hibernate-envers-0:6.6.56-2.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-jackson-annotations-0:2.18.11-1.redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-jackson-annotations-0:2.18.11-1.redhat_00001.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-jackson-core-0:2.18.11-1.redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-jackson-core-0:2.18.11-1.redhat_00001.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-jackson-databind-0:2.18.11-1.redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-jackson-databind-0:2.18.11-1.redhat_00001.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-jackson-dataformat-yaml-0:2.18.11-1.redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-jackson-dataformats-text-0:2.18.11-1.redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-jackson-dataformats-text-0:2.18.11-1.redhat_00001.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-jackson-datatype-jdk8-0:2.18.10-2.redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-jackson-datatype-jsr310-0:2.18.10-2.redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-jackson-jaxrs-base-0:2.18.10-1.redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-jackson-jaxrs-json-provider-0:2.18.10-1.redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-jackson-jaxrs-providers-0:2.18.10-1.redhat_00001.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-jackson-module-jakarta-xmlbind-annotations-0:2.18.10-1.redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-jackson-modules-base-0:2.18.10-1.redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-jackson-modules-base-0:2.18.10-1.redhat_00001.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-jackson-modules-java8-0:2.18.10-2.redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-jackson-modules-java8-0:2.18.10-2.redhat_00001.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-jaxb-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-jaxb-0:4.0.8-2.redhat_00001.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-jaxb-core-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-jaxb-jxc-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-jaxb-runtime-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-jaxb-xjc-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-jboss-openjdk-orb-0:10.2.0-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-jboss-openjdk-orb-0:10.2.0-1.Final_redhat_00001.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-jbossws-cxf-0:7.4.1-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-jbossws-cxf-0:7.4.1-1.Final_redhat_00001.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-jsf-impl-0:4.0.22-1.redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-jsf-impl-0:4.0.22-1.redhat_00001.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-jsonb-spec-0:3.0.2-1.redhat_00003.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-jsonb-spec-0:3.0.2-1.redhat_00003.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-log4j-0:2.25.5-1.redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-log4j-0:2.25.5-1.redhat_00001.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-relaxng-datatype-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-rngom-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-txw2-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-0:8.1.9-3.GA_redhat_00005.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-0:8.1.9-3.GA_redhat_00005.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-wildfly-clustering-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-clustering-0:5.0.14-1.Final_redhat_00001.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-wildfly-clustering-cache-infinispan-common-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-clustering-cache-infinispan-embedded-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-clustering-cache-infinispan-remote-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-clustering-cache-spi-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-clustering-context-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-clustering-marshalling-jboss-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-clustering-marshalling-protostream-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-clustering-marshalling-spi-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-clustering-server-api-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-clustering-server-infinispan-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-clustering-server-jgroups-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-clustering-server-local-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-clustering-server-spi-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-clustering-session-cache-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-clustering-session-infinispan-embedded-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-clustering-session-infinispan-remote-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-clustering-session-spec-servlet-6.0-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-clustering-session-spec-spi-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-clustering-session-spi-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-elytron-0:2.6.12-1.Final_redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-elytron-0:2.6.12-1.Final_redhat_00002.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-wildfly-elytron-tool-0:2.6.12-1.Final_redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-java-jdk17-0:8.1.9-3.GA_redhat_00005.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.9-3.GA_redhat_00005.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-javadocs-0:8.1.1-14.GA_redhat_00051.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-javadocs-0:8.1.1-14.GA_redhat_00051.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.9-3.GA_redhat_00005.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-xsom-0:4.0.8-2.redhat_00001.1.el9eap.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-59903"
        },
        {
          "category": "external",
          "summary": "RHBZ#2517538",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2517538"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-59903",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-59903"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-59903",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59903"
        },
        {
          "category": "external",
          "summary": "https://github.com/netty/netty/pull/17213",
          "url": "https://github.com/netty/netty/pull/17213"
        },
        {
          "category": "external",
          "summary": "https://github.com/netty/netty/pull/17217",
          "url": "https://github.com/netty/netty/pull/17217"
        },
        {
          "category": "external",
          "summary": "https://github.com/netty/netty/releases/tag/netty-4.1.137.Final",
          "url": "https://github.com/netty/netty/releases/tag/netty-4.1.137.Final"
        },
        {
          "category": "external",
          "summary": "https://github.com/netty/netty/releases/tag/netty-4.2.17.Final",
          "url": "https://github.com/netty/netty/releases/tag/netty-4.2.17.Final"
        },
        {
          "category": "external",
          "summary": "https://github.com/netty/netty/security/advisories/GHSA-8c42-7qj2-3j46",
          "url": "https://github.com/netty/netty/security/advisories/GHSA-8c42-7qj2-3j46"
        }
      ],
      "release_date": "2026-08-17T17:56:28.726000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-28T17:56:23+00:00",
          "details": "Before applying the update, make sure all previously released errata relevant to your system have been applied. Also, back up your existing installation, including all applications, configuration files, databases and database settings. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
          "product_ids": [
            "9Base-JBEAP-8.1:eap8-netty-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-0:4.1.138-1.Final_redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-codec-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-common-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-handler-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-transport-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.138-1.Final_redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.138-1.Final_redhat_00001.1.el9eap.x86_64",
            "9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.138-1.Final_redhat_00001.1.el9eap.x86_64",
            "9Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-0:6.2.19-1.Final_redhat_00002.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-resteasy-atom-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-cdi-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-client-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-client-api-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-core-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-core-spi-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-crypto-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-jackson2-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-jaxb-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-jsapi-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-json-binding-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-json-p-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-multipart-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-rxjava2-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-validator-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:92056"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "9Base-JBEAP-8.1:eap8-apache-cxf-0:4.1.8-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-apache-cxf-0:4.1.8-1.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-apache-cxf-rt-0:4.1.8-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-apache-cxf-services-0:4.1.8-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-apache-cxf-tools-0:4.1.8-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-apache-sshd-0:2.19.0-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-apache-sshd-0:2.19.0-1.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-codemodel-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.9.0-2.GA_redhat_00003.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.9.0-2.GA_redhat_00003.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.9.0-2.GA_redhat_00003.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-hal-console-0:3.7.22-2.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-hal-console-0:3.7.22-2.Final_redhat_00002.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-hibernate-0:6.6.56-2.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-hibernate-0:6.6.56-2.Final_redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-hibernate-core-0:6.6.56-2.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-hibernate-envers-0:6.6.56-2.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-annotations-0:2.18.11-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-annotations-0:2.18.11-1.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jackson-core-0:2.18.11-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-core-0:2.18.11-1.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jackson-databind-0:2.18.11-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-databind-0:2.18.11-1.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jackson-dataformat-yaml-0:2.18.11-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-dataformats-text-0:2.18.11-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-dataformats-text-0:2.18.11-1.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jackson-datatype-jdk8-0:2.18.10-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-datatype-jsr310-0:2.18.10-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-jaxrs-base-0:2.18.10-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-jaxrs-json-provider-0:2.18.10-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-jaxrs-providers-0:2.18.10-1.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jackson-module-jakarta-xmlbind-annotations-0:2.18.10-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-modules-base-0:2.18.10-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-modules-base-0:2.18.10-1.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jackson-modules-java8-0:2.18.10-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-modules-java8-0:2.18.10-2.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jaxb-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jaxb-0:4.0.8-2.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jaxb-core-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jaxb-jxc-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jaxb-runtime-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jaxb-xjc-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jboss-openjdk-orb-0:10.2.0-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jboss-openjdk-orb-0:10.2.0-1.Final_redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jbossws-cxf-0:7.4.1-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jbossws-cxf-0:7.4.1-1.Final_redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jsf-impl-0:4.0.22-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jsf-impl-0:4.0.22-1.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jsonb-spec-0:3.0.2-1.redhat_00003.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jsonb-spec-0:3.0.2-1.redhat_00003.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-log4j-0:2.25.5-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-log4j-0:2.25.5-1.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-netty-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-0:4.1.138-1.Final_redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-codec-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-common-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-handler-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-transport-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.138-1.Final_redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.138-1.Final_redhat_00001.1.el9eap.x86_64",
            "9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.138-1.Final_redhat_00001.1.el9eap.x86_64",
            "9Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-relaxng-datatype-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-0:6.2.19-1.Final_redhat_00002.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-resteasy-atom-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-cdi-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-client-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-client-api-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-core-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-core-spi-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-crypto-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-jackson2-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-jaxb-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-jsapi-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-json-binding-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-json-p-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-multipart-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-rxjava2-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-validator-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-rngom-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-txw2-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-0:8.1.9-3.GA_redhat_00005.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-0:8.1.9-3.GA_redhat_00005.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-0:5.0.14-1.Final_redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-cache-infinispan-common-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-cache-infinispan-embedded-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-cache-infinispan-remote-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-cache-spi-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-context-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-marshalling-jboss-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-marshalling-protostream-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-marshalling-spi-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-server-api-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-server-infinispan-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-server-jgroups-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-server-local-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-server-spi-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-session-cache-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-session-infinispan-embedded-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-session-infinispan-remote-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-session-spec-servlet-6.0-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-session-spec-spi-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-session-spi-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-elytron-0:2.6.12-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-elytron-0:2.6.12-1.Final_redhat_00002.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-wildfly-elytron-tool-0:2.6.12-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-java-jdk17-0:8.1.9-3.GA_redhat_00005.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.9-3.GA_redhat_00005.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-javadocs-0:8.1.1-14.GA_redhat_00051.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-javadocs-0:8.1.1-14.GA_redhat_00051.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.9-3.GA_redhat_00005.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-xsom-0:4.0.8-2.redhat_00001.1.el9eap.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "9Base-JBEAP-8.1:eap8-apache-cxf-0:4.1.8-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-apache-cxf-0:4.1.8-1.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-apache-cxf-rt-0:4.1.8-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-apache-cxf-services-0:4.1.8-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-apache-cxf-tools-0:4.1.8-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-apache-sshd-0:2.19.0-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-apache-sshd-0:2.19.0-1.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-codemodel-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.9.0-2.GA_redhat_00003.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.9.0-2.GA_redhat_00003.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.9.0-2.GA_redhat_00003.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-hal-console-0:3.7.22-2.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-hal-console-0:3.7.22-2.Final_redhat_00002.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-hibernate-0:6.6.56-2.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-hibernate-0:6.6.56-2.Final_redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-hibernate-core-0:6.6.56-2.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-hibernate-envers-0:6.6.56-2.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-annotations-0:2.18.11-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-annotations-0:2.18.11-1.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jackson-core-0:2.18.11-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-core-0:2.18.11-1.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jackson-databind-0:2.18.11-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-databind-0:2.18.11-1.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jackson-dataformat-yaml-0:2.18.11-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-dataformats-text-0:2.18.11-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-dataformats-text-0:2.18.11-1.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jackson-datatype-jdk8-0:2.18.10-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-datatype-jsr310-0:2.18.10-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-jaxrs-base-0:2.18.10-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-jaxrs-json-provider-0:2.18.10-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-jaxrs-providers-0:2.18.10-1.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jackson-module-jakarta-xmlbind-annotations-0:2.18.10-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-modules-base-0:2.18.10-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-modules-base-0:2.18.10-1.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jackson-modules-java8-0:2.18.10-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-modules-java8-0:2.18.10-2.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jaxb-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jaxb-0:4.0.8-2.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jaxb-core-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jaxb-jxc-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jaxb-runtime-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jaxb-xjc-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jboss-openjdk-orb-0:10.2.0-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jboss-openjdk-orb-0:10.2.0-1.Final_redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jbossws-cxf-0:7.4.1-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jbossws-cxf-0:7.4.1-1.Final_redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jsf-impl-0:4.0.22-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jsf-impl-0:4.0.22-1.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jsonb-spec-0:3.0.2-1.redhat_00003.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jsonb-spec-0:3.0.2-1.redhat_00003.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-log4j-0:2.25.5-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-log4j-0:2.25.5-1.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-netty-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-0:4.1.138-1.Final_redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-codec-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-common-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-handler-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-transport-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.138-1.Final_redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.138-1.Final_redhat_00001.1.el9eap.x86_64",
            "9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.138-1.Final_redhat_00001.1.el9eap.x86_64",
            "9Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-relaxng-datatype-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-0:6.2.19-1.Final_redhat_00002.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-resteasy-atom-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-cdi-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-client-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-client-api-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-core-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-core-spi-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-crypto-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-jackson2-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-jaxb-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-jsapi-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-json-binding-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-json-p-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-multipart-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-rxjava2-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-validator-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-rngom-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-txw2-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-0:8.1.9-3.GA_redhat_00005.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-0:8.1.9-3.GA_redhat_00005.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-0:5.0.14-1.Final_redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-cache-infinispan-common-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-cache-infinispan-embedded-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-cache-infinispan-remote-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-cache-spi-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-context-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-marshalling-jboss-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-marshalling-protostream-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-marshalling-spi-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-server-api-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-server-infinispan-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-server-jgroups-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-server-local-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-server-spi-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-session-cache-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-session-infinispan-embedded-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-session-infinispan-remote-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-session-spec-servlet-6.0-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-session-spec-spi-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-session-spi-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-elytron-0:2.6.12-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-elytron-0:2.6.12-1.Final_redhat_00002.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-wildfly-elytron-tool-0:2.6.12-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-java-jdk17-0:8.1.9-3.GA_redhat_00005.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.9-3.GA_redhat_00005.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-javadocs-0:8.1.1-14.GA_redhat_00051.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-javadocs-0:8.1.1-14.GA_redhat_00051.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.9-3.GA_redhat_00005.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-xsom-0:4.0.8-2.redhat_00001.1.el9eap.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "io.netty/netty: Netty: Information disclosure via CORS Vary header overwrite"
    },
    {
      "cve": "CVE-2026-64958",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-08-06T11:10:52.818986+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "9Base-JBEAP-8.1:eap8-apache-sshd-0:2.19.0-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-apache-sshd-0:2.19.0-1.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-codemodel-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.9.0-2.GA_redhat_00003.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.9.0-2.GA_redhat_00003.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.9.0-2.GA_redhat_00003.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-hal-console-0:3.7.22-2.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-hal-console-0:3.7.22-2.Final_redhat_00002.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-hibernate-0:6.6.56-2.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-hibernate-0:6.6.56-2.Final_redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-hibernate-core-0:6.6.56-2.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-hibernate-envers-0:6.6.56-2.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-annotations-0:2.18.11-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-annotations-0:2.18.11-1.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jackson-core-0:2.18.11-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-core-0:2.18.11-1.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jackson-databind-0:2.18.11-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-databind-0:2.18.11-1.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jackson-dataformat-yaml-0:2.18.11-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-dataformats-text-0:2.18.11-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-dataformats-text-0:2.18.11-1.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jackson-datatype-jdk8-0:2.18.10-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-datatype-jsr310-0:2.18.10-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-jaxrs-base-0:2.18.10-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-jaxrs-json-provider-0:2.18.10-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-jaxrs-providers-0:2.18.10-1.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jackson-module-jakarta-xmlbind-annotations-0:2.18.10-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-modules-base-0:2.18.10-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-modules-base-0:2.18.10-1.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jackson-modules-java8-0:2.18.10-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-modules-java8-0:2.18.10-2.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jaxb-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jaxb-0:4.0.8-2.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jaxb-core-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jaxb-jxc-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jaxb-runtime-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jaxb-xjc-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jboss-openjdk-orb-0:10.2.0-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jboss-openjdk-orb-0:10.2.0-1.Final_redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jbossws-cxf-0:7.4.1-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jbossws-cxf-0:7.4.1-1.Final_redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jsf-impl-0:4.0.22-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jsf-impl-0:4.0.22-1.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jsonb-spec-0:3.0.2-1.redhat_00003.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jsonb-spec-0:3.0.2-1.redhat_00003.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-log4j-0:2.25.5-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-log4j-0:2.25.5-1.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-netty-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-0:4.1.138-1.Final_redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-codec-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-common-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-handler-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-transport-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.138-1.Final_redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.138-1.Final_redhat_00001.1.el9eap.x86_64",
            "9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.138-1.Final_redhat_00001.1.el9eap.x86_64",
            "9Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-relaxng-datatype-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-0:6.2.19-1.Final_redhat_00002.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-resteasy-atom-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-cdi-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-client-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-client-api-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-core-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-core-spi-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-crypto-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-jackson2-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-jaxb-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-jsapi-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-json-binding-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-json-p-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-multipart-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-rxjava2-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-validator-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-rngom-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-txw2-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-0:8.1.9-3.GA_redhat_00005.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-0:8.1.9-3.GA_redhat_00005.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-0:5.0.14-1.Final_redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-cache-infinispan-common-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-cache-infinispan-embedded-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-cache-infinispan-remote-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-cache-spi-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-context-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-marshalling-jboss-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-marshalling-protostream-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-marshalling-spi-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-server-api-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-server-infinispan-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-server-jgroups-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-server-local-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-server-spi-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-session-cache-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-session-infinispan-embedded-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-session-infinispan-remote-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-session-spec-servlet-6.0-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-session-spec-spi-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-session-spi-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-elytron-0:2.6.12-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-elytron-0:2.6.12-1.Final_redhat_00002.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-wildfly-elytron-tool-0:2.6.12-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-java-jdk17-0:8.1.9-3.GA_redhat_00005.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.9-3.GA_redhat_00005.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-javadocs-0:8.1.1-14.GA_redhat_00051.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-javadocs-0:8.1.1-14.GA_redhat_00051.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.9-3.GA_redhat_00005.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-xsom-0:4.0.8-2.redhat_00001.1.el9eap.noarch"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2511978"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Apache CXF. This vulnerability allows a remote attacker to perform a denial of service (DoS) attack by sending a message with an excessive number of attachment headers. This can lead to the affected system becoming unresponsive or unavailable.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "org.apache.cxf/cxf: Apache CXF: Denial of service via many attachment headers",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-JBEAP-8.1:eap8-apache-cxf-0:4.1.8-1.redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-apache-cxf-0:4.1.8-1.redhat_00001.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-apache-cxf-rt-0:4.1.8-1.redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-apache-cxf-services-0:4.1.8-1.redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-apache-cxf-tools-0:4.1.8-1.redhat_00001.1.el9eap.noarch"
        ],
        "known_not_affected": [
          "9Base-JBEAP-8.1:eap8-apache-sshd-0:2.19.0-1.redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-apache-sshd-0:2.19.0-1.redhat_00001.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-codemodel-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.9.0-2.GA_redhat_00003.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.9.0-2.GA_redhat_00003.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.9.0-2.GA_redhat_00003.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-hal-console-0:3.7.22-2.Final_redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-hal-console-0:3.7.22-2.Final_redhat_00002.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-hibernate-0:6.6.56-2.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-hibernate-0:6.6.56-2.Final_redhat_00001.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-hibernate-core-0:6.6.56-2.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-hibernate-envers-0:6.6.56-2.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-jackson-annotations-0:2.18.11-1.redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-jackson-annotations-0:2.18.11-1.redhat_00001.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-jackson-core-0:2.18.11-1.redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-jackson-core-0:2.18.11-1.redhat_00001.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-jackson-databind-0:2.18.11-1.redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-jackson-databind-0:2.18.11-1.redhat_00001.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-jackson-dataformat-yaml-0:2.18.11-1.redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-jackson-dataformats-text-0:2.18.11-1.redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-jackson-dataformats-text-0:2.18.11-1.redhat_00001.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-jackson-datatype-jdk8-0:2.18.10-2.redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-jackson-datatype-jsr310-0:2.18.10-2.redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-jackson-jaxrs-base-0:2.18.10-1.redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-jackson-jaxrs-json-provider-0:2.18.10-1.redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-jackson-jaxrs-providers-0:2.18.10-1.redhat_00001.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-jackson-module-jakarta-xmlbind-annotations-0:2.18.10-1.redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-jackson-modules-base-0:2.18.10-1.redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-jackson-modules-base-0:2.18.10-1.redhat_00001.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-jackson-modules-java8-0:2.18.10-2.redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-jackson-modules-java8-0:2.18.10-2.redhat_00001.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-jaxb-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-jaxb-0:4.0.8-2.redhat_00001.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-jaxb-core-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-jaxb-jxc-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-jaxb-runtime-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-jaxb-xjc-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-jboss-openjdk-orb-0:10.2.0-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-jboss-openjdk-orb-0:10.2.0-1.Final_redhat_00001.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-jbossws-cxf-0:7.4.1-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-jbossws-cxf-0:7.4.1-1.Final_redhat_00001.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-jsf-impl-0:4.0.22-1.redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-jsf-impl-0:4.0.22-1.redhat_00001.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-jsonb-spec-0:3.0.2-1.redhat_00003.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-jsonb-spec-0:3.0.2-1.redhat_00003.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-log4j-0:2.25.5-1.redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-log4j-0:2.25.5-1.redhat_00001.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-netty-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-netty-0:4.1.138-1.Final_redhat_00001.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-netty-codec-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-netty-common-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-netty-handler-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-netty-transport-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.138-1.Final_redhat_00001.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.138-1.Final_redhat_00001.1.el9eap.x86_64",
          "9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.138-1.Final_redhat_00001.1.el9eap.x86_64",
          "9Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-relaxng-datatype-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-resteasy-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-resteasy-0:6.2.19-1.Final_redhat_00002.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-resteasy-atom-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-resteasy-cdi-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-resteasy-client-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-resteasy-client-api-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-resteasy-core-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-resteasy-core-spi-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-resteasy-crypto-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-resteasy-jackson2-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-resteasy-jaxb-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-resteasy-jsapi-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-resteasy-json-binding-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-resteasy-json-p-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-resteasy-multipart-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-resteasy-rxjava2-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-resteasy-validator-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-rngom-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-txw2-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-0:8.1.9-3.GA_redhat_00005.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-0:8.1.9-3.GA_redhat_00005.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-wildfly-clustering-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-clustering-0:5.0.14-1.Final_redhat_00001.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-wildfly-clustering-cache-infinispan-common-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-clustering-cache-infinispan-embedded-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-clustering-cache-infinispan-remote-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-clustering-cache-spi-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-clustering-context-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-clustering-marshalling-jboss-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-clustering-marshalling-protostream-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-clustering-marshalling-spi-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-clustering-server-api-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-clustering-server-infinispan-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-clustering-server-jgroups-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-clustering-server-local-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-clustering-server-spi-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-clustering-session-cache-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-clustering-session-infinispan-embedded-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-clustering-session-infinispan-remote-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-clustering-session-spec-servlet-6.0-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-clustering-session-spec-spi-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-clustering-session-spi-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-elytron-0:2.6.12-1.Final_redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-elytron-0:2.6.12-1.Final_redhat_00002.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-wildfly-elytron-tool-0:2.6.12-1.Final_redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-java-jdk17-0:8.1.9-3.GA_redhat_00005.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.9-3.GA_redhat_00005.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-javadocs-0:8.1.1-14.GA_redhat_00051.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-javadocs-0:8.1.1-14.GA_redhat_00051.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.9-3.GA_redhat_00005.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-xsom-0:4.0.8-2.redhat_00001.1.el9eap.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-64958"
        },
        {
          "category": "external",
          "summary": "RHBZ#2511978",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2511978"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-64958",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-64958"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-64958",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64958"
        },
        {
          "category": "external",
          "summary": "https://lists.apache.org/thread/trsnkxc2f21585zlt819blvchgl6oykb",
          "url": "https://lists.apache.org/thread/trsnkxc2f21585zlt819blvchgl6oykb"
        }
      ],
      "release_date": "2026-08-06T10:13:04.069000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-28T17:56:23+00:00",
          "details": "Before applying the update, make sure all previously released errata relevant to your system have been applied. Also, back up your existing installation, including all applications, configuration files, databases and database settings. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
          "product_ids": [
            "9Base-JBEAP-8.1:eap8-apache-cxf-0:4.1.8-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-apache-cxf-0:4.1.8-1.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-apache-cxf-rt-0:4.1.8-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-apache-cxf-services-0:4.1.8-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-apache-cxf-tools-0:4.1.8-1.redhat_00001.1.el9eap.noarch"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:92056"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "9Base-JBEAP-8.1:eap8-apache-cxf-0:4.1.8-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-apache-cxf-0:4.1.8-1.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-apache-cxf-rt-0:4.1.8-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-apache-cxf-services-0:4.1.8-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-apache-cxf-tools-0:4.1.8-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-apache-sshd-0:2.19.0-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-apache-sshd-0:2.19.0-1.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-codemodel-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.9.0-2.GA_redhat_00003.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.9.0-2.GA_redhat_00003.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.9.0-2.GA_redhat_00003.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-hal-console-0:3.7.22-2.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-hal-console-0:3.7.22-2.Final_redhat_00002.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-hibernate-0:6.6.56-2.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-hibernate-0:6.6.56-2.Final_redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-hibernate-core-0:6.6.56-2.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-hibernate-envers-0:6.6.56-2.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-annotations-0:2.18.11-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-annotations-0:2.18.11-1.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jackson-core-0:2.18.11-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-core-0:2.18.11-1.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jackson-databind-0:2.18.11-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-databind-0:2.18.11-1.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jackson-dataformat-yaml-0:2.18.11-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-dataformats-text-0:2.18.11-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-dataformats-text-0:2.18.11-1.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jackson-datatype-jdk8-0:2.18.10-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-datatype-jsr310-0:2.18.10-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-jaxrs-base-0:2.18.10-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-jaxrs-json-provider-0:2.18.10-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-jaxrs-providers-0:2.18.10-1.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jackson-module-jakarta-xmlbind-annotations-0:2.18.10-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-modules-base-0:2.18.10-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-modules-base-0:2.18.10-1.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jackson-modules-java8-0:2.18.10-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-modules-java8-0:2.18.10-2.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jaxb-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jaxb-0:4.0.8-2.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jaxb-core-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jaxb-jxc-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jaxb-runtime-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jaxb-xjc-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jboss-openjdk-orb-0:10.2.0-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jboss-openjdk-orb-0:10.2.0-1.Final_redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jbossws-cxf-0:7.4.1-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jbossws-cxf-0:7.4.1-1.Final_redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jsf-impl-0:4.0.22-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jsf-impl-0:4.0.22-1.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jsonb-spec-0:3.0.2-1.redhat_00003.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jsonb-spec-0:3.0.2-1.redhat_00003.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-log4j-0:2.25.5-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-log4j-0:2.25.5-1.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-netty-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-0:4.1.138-1.Final_redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-codec-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-common-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-handler-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-transport-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.138-1.Final_redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.138-1.Final_redhat_00001.1.el9eap.x86_64",
            "9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.138-1.Final_redhat_00001.1.el9eap.x86_64",
            "9Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-relaxng-datatype-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-0:6.2.19-1.Final_redhat_00002.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-resteasy-atom-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-cdi-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-client-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-client-api-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-core-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-core-spi-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-crypto-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-jackson2-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-jaxb-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-jsapi-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-json-binding-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-json-p-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-multipart-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-rxjava2-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-validator-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-rngom-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-txw2-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-0:8.1.9-3.GA_redhat_00005.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-0:8.1.9-3.GA_redhat_00005.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-0:5.0.14-1.Final_redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-cache-infinispan-common-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-cache-infinispan-embedded-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-cache-infinispan-remote-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-cache-spi-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-context-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-marshalling-jboss-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-marshalling-protostream-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-marshalling-spi-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-server-api-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-server-infinispan-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-server-jgroups-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-server-local-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-server-spi-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-session-cache-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-session-infinispan-embedded-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-session-infinispan-remote-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-session-spec-servlet-6.0-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-session-spec-spi-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-session-spi-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-elytron-0:2.6.12-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-elytron-0:2.6.12-1.Final_redhat_00002.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-wildfly-elytron-tool-0:2.6.12-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-java-jdk17-0:8.1.9-3.GA_redhat_00005.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.9-3.GA_redhat_00005.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-javadocs-0:8.1.1-14.GA_redhat_00051.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-javadocs-0:8.1.1-14.GA_redhat_00051.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.9-3.GA_redhat_00005.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-xsom-0:4.0.8-2.redhat_00001.1.el9eap.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "org.apache.cxf/cxf: Apache CXF: Denial of service via many attachment headers"
    },
    {
      "cve": "CVE-2026-65432",
      "cwe": {
        "id": "CWE-611",
        "name": "Improper Restriction of XML External Entity Reference"
      },
      "discovery_date": "2026-08-06T11:11:01.246333+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "9Base-JBEAP-8.1:eap8-apache-sshd-0:2.19.0-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-apache-sshd-0:2.19.0-1.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-codemodel-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.9.0-2.GA_redhat_00003.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.9.0-2.GA_redhat_00003.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.9.0-2.GA_redhat_00003.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-hal-console-0:3.7.22-2.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-hal-console-0:3.7.22-2.Final_redhat_00002.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-hibernate-0:6.6.56-2.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-hibernate-0:6.6.56-2.Final_redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-hibernate-core-0:6.6.56-2.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-hibernate-envers-0:6.6.56-2.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-annotations-0:2.18.11-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-annotations-0:2.18.11-1.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jackson-core-0:2.18.11-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-core-0:2.18.11-1.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jackson-databind-0:2.18.11-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-databind-0:2.18.11-1.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jackson-dataformat-yaml-0:2.18.11-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-dataformats-text-0:2.18.11-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-dataformats-text-0:2.18.11-1.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jackson-datatype-jdk8-0:2.18.10-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-datatype-jsr310-0:2.18.10-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-jaxrs-base-0:2.18.10-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-jaxrs-json-provider-0:2.18.10-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-jaxrs-providers-0:2.18.10-1.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jackson-module-jakarta-xmlbind-annotations-0:2.18.10-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-modules-base-0:2.18.10-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-modules-base-0:2.18.10-1.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jackson-modules-java8-0:2.18.10-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-modules-java8-0:2.18.10-2.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jaxb-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jaxb-0:4.0.8-2.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jaxb-core-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jaxb-jxc-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jaxb-runtime-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jaxb-xjc-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jboss-openjdk-orb-0:10.2.0-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jboss-openjdk-orb-0:10.2.0-1.Final_redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jbossws-cxf-0:7.4.1-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jbossws-cxf-0:7.4.1-1.Final_redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jsf-impl-0:4.0.22-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jsf-impl-0:4.0.22-1.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jsonb-spec-0:3.0.2-1.redhat_00003.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jsonb-spec-0:3.0.2-1.redhat_00003.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-log4j-0:2.25.5-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-log4j-0:2.25.5-1.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-netty-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-0:4.1.138-1.Final_redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-codec-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-common-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-handler-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-transport-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.138-1.Final_redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.138-1.Final_redhat_00001.1.el9eap.x86_64",
            "9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.138-1.Final_redhat_00001.1.el9eap.x86_64",
            "9Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-relaxng-datatype-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-0:6.2.19-1.Final_redhat_00002.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-resteasy-atom-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-cdi-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-client-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-client-api-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-core-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-core-spi-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-crypto-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-jackson2-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-jaxb-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-jsapi-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-json-binding-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-json-p-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-multipart-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-rxjava2-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-validator-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-rngom-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-txw2-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-0:8.1.9-3.GA_redhat_00005.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-0:8.1.9-3.GA_redhat_00005.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-0:5.0.14-1.Final_redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-cache-infinispan-common-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-cache-infinispan-embedded-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-cache-infinispan-remote-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-cache-spi-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-context-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-marshalling-jboss-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-marshalling-protostream-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-marshalling-spi-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-server-api-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-server-infinispan-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-server-jgroups-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-server-local-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-server-spi-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-session-cache-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-session-infinispan-embedded-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-session-infinispan-remote-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-session-spec-servlet-6.0-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-session-spec-spi-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-session-spi-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-elytron-0:2.6.12-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-elytron-0:2.6.12-1.Final_redhat_00002.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-wildfly-elytron-tool-0:2.6.12-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-java-jdk17-0:8.1.9-3.GA_redhat_00005.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.9-3.GA_redhat_00005.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-javadocs-0:8.1.1-14.GA_redhat_00051.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-javadocs-0:8.1.1-14.GA_redhat_00051.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.9-3.GA_redhat_00005.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-xsom-0:4.0.8-2.redhat_00001.1.el9eap.noarch"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2511981"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Apache CXF. The framework\u0027s initial processing of a Web Services Description Language (WSDL) document disables XML DTDs (Document Type Definitions) and external entities. However, any WSDL or XML Schema Definition (XSD) documents imported by the top-level WSDL are processed by a different component, WSDL4J, which does not apply these same security protections. This oversight allows an attacker to exploit XML External Entity (XXE) vulnerabilities through imported WSDL/XSD content, potentially leading to information disclosure or denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Apache CXF: Apache CXF: XML External Entity (XXE) vulnerability via WSDL/XSD import parsing",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Apache CXF is affected by an XML External Entity (XXE) vulnerability when processing imported WSDL/XSD content. The vulnerability exists because WSDL4J, which Apache CXF uses to parse WSDL imports, lacks restrictions on DTD declarations and external entity references. An attacker can exploit this to read arbitrary files or conduct denial of service attacks. Note that this requires the application to process untrusted WSDL/XSD imports and have the WSDL4J library on the classpath.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-JBEAP-8.1:eap8-apache-cxf-0:4.1.8-1.redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-apache-cxf-0:4.1.8-1.redhat_00001.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-apache-cxf-rt-0:4.1.8-1.redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-apache-cxf-services-0:4.1.8-1.redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-apache-cxf-tools-0:4.1.8-1.redhat_00001.1.el9eap.noarch"
        ],
        "known_not_affected": [
          "9Base-JBEAP-8.1:eap8-apache-sshd-0:2.19.0-1.redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-apache-sshd-0:2.19.0-1.redhat_00001.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-codemodel-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.9.0-2.GA_redhat_00003.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.9.0-2.GA_redhat_00003.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.9.0-2.GA_redhat_00003.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-hal-console-0:3.7.22-2.Final_redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-hal-console-0:3.7.22-2.Final_redhat_00002.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-hibernate-0:6.6.56-2.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-hibernate-0:6.6.56-2.Final_redhat_00001.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-hibernate-core-0:6.6.56-2.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-hibernate-envers-0:6.6.56-2.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-jackson-annotations-0:2.18.11-1.redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-jackson-annotations-0:2.18.11-1.redhat_00001.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-jackson-core-0:2.18.11-1.redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-jackson-core-0:2.18.11-1.redhat_00001.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-jackson-databind-0:2.18.11-1.redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-jackson-databind-0:2.18.11-1.redhat_00001.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-jackson-dataformat-yaml-0:2.18.11-1.redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-jackson-dataformats-text-0:2.18.11-1.redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-jackson-dataformats-text-0:2.18.11-1.redhat_00001.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-jackson-datatype-jdk8-0:2.18.10-2.redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-jackson-datatype-jsr310-0:2.18.10-2.redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-jackson-jaxrs-base-0:2.18.10-1.redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-jackson-jaxrs-json-provider-0:2.18.10-1.redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-jackson-jaxrs-providers-0:2.18.10-1.redhat_00001.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-jackson-module-jakarta-xmlbind-annotations-0:2.18.10-1.redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-jackson-modules-base-0:2.18.10-1.redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-jackson-modules-base-0:2.18.10-1.redhat_00001.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-jackson-modules-java8-0:2.18.10-2.redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-jackson-modules-java8-0:2.18.10-2.redhat_00001.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-jaxb-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-jaxb-0:4.0.8-2.redhat_00001.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-jaxb-core-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-jaxb-jxc-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-jaxb-runtime-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-jaxb-xjc-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-jboss-openjdk-orb-0:10.2.0-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-jboss-openjdk-orb-0:10.2.0-1.Final_redhat_00001.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-jbossws-cxf-0:7.4.1-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-jbossws-cxf-0:7.4.1-1.Final_redhat_00001.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-jsf-impl-0:4.0.22-1.redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-jsf-impl-0:4.0.22-1.redhat_00001.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-jsonb-spec-0:3.0.2-1.redhat_00003.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-jsonb-spec-0:3.0.2-1.redhat_00003.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-log4j-0:2.25.5-1.redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-log4j-0:2.25.5-1.redhat_00001.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-netty-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-netty-0:4.1.138-1.Final_redhat_00001.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-netty-codec-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-netty-common-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-netty-handler-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-netty-transport-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.138-1.Final_redhat_00001.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.138-1.Final_redhat_00001.1.el9eap.x86_64",
          "9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.138-1.Final_redhat_00001.1.el9eap.x86_64",
          "9Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-relaxng-datatype-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-resteasy-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-resteasy-0:6.2.19-1.Final_redhat_00002.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-resteasy-atom-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-resteasy-cdi-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-resteasy-client-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-resteasy-client-api-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-resteasy-core-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-resteasy-core-spi-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-resteasy-crypto-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-resteasy-jackson2-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-resteasy-jaxb-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-resteasy-jsapi-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-resteasy-json-binding-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-resteasy-json-p-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-resteasy-multipart-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-resteasy-rxjava2-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-resteasy-validator-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-rngom-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-txw2-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-0:8.1.9-3.GA_redhat_00005.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-0:8.1.9-3.GA_redhat_00005.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-wildfly-clustering-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-clustering-0:5.0.14-1.Final_redhat_00001.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-wildfly-clustering-cache-infinispan-common-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-clustering-cache-infinispan-embedded-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-clustering-cache-infinispan-remote-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-clustering-cache-spi-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-clustering-context-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-clustering-marshalling-jboss-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-clustering-marshalling-protostream-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-clustering-marshalling-spi-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-clustering-server-api-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-clustering-server-infinispan-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-clustering-server-jgroups-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-clustering-server-local-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-clustering-server-spi-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-clustering-session-cache-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-clustering-session-infinispan-embedded-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-clustering-session-infinispan-remote-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-clustering-session-spec-servlet-6.0-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-clustering-session-spec-spi-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-clustering-session-spi-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-elytron-0:2.6.12-1.Final_redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-elytron-0:2.6.12-1.Final_redhat_00002.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-wildfly-elytron-tool-0:2.6.12-1.Final_redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-java-jdk17-0:8.1.9-3.GA_redhat_00005.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.9-3.GA_redhat_00005.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-javadocs-0:8.1.1-14.GA_redhat_00051.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-javadocs-0:8.1.1-14.GA_redhat_00051.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.9-3.GA_redhat_00005.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-xsom-0:4.0.8-2.redhat_00001.1.el9eap.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-65432"
        },
        {
          "category": "external",
          "summary": "RHBZ#2511981",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2511981"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-65432",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-65432"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-65432",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-65432"
        },
        {
          "category": "external",
          "summary": "https://lists.apache.org/thread/5qs207krzg51jl3zs3cvnl5lt9njp8c3",
          "url": "https://lists.apache.org/thread/5qs207krzg51jl3zs3cvnl5lt9njp8c3"
        }
      ],
      "release_date": "2026-08-06T10:26:12.142000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-28T17:56:23+00:00",
          "details": "Before applying the update, make sure all previously released errata relevant to your system have been applied. Also, back up your existing installation, including all applications, configuration files, databases and database settings. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
          "product_ids": [
            "9Base-JBEAP-8.1:eap8-apache-cxf-0:4.1.8-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-apache-cxf-0:4.1.8-1.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-apache-cxf-rt-0:4.1.8-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-apache-cxf-services-0:4.1.8-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-apache-cxf-tools-0:4.1.8-1.redhat_00001.1.el9eap.noarch"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:92056"
        },
        {
          "category": "workaround",
          "details": "Update Apache CXF to a version that includes the fix. Disable DTD processing and external entity resolution in XML parsers. Avoid processing untrusted WSDL/XSD imports.",
          "product_ids": [
            "9Base-JBEAP-8.1:eap8-apache-cxf-0:4.1.8-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-apache-cxf-0:4.1.8-1.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-apache-cxf-rt-0:4.1.8-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-apache-cxf-services-0:4.1.8-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-apache-cxf-tools-0:4.1.8-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-apache-sshd-0:2.19.0-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-apache-sshd-0:2.19.0-1.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-codemodel-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.9.0-2.GA_redhat_00003.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.9.0-2.GA_redhat_00003.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.9.0-2.GA_redhat_00003.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-hal-console-0:3.7.22-2.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-hal-console-0:3.7.22-2.Final_redhat_00002.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-hibernate-0:6.6.56-2.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-hibernate-0:6.6.56-2.Final_redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-hibernate-core-0:6.6.56-2.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-hibernate-envers-0:6.6.56-2.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-annotations-0:2.18.11-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-annotations-0:2.18.11-1.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jackson-core-0:2.18.11-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-core-0:2.18.11-1.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jackson-databind-0:2.18.11-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-databind-0:2.18.11-1.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jackson-dataformat-yaml-0:2.18.11-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-dataformats-text-0:2.18.11-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-dataformats-text-0:2.18.11-1.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jackson-datatype-jdk8-0:2.18.10-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-datatype-jsr310-0:2.18.10-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-jaxrs-base-0:2.18.10-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-jaxrs-json-provider-0:2.18.10-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-jaxrs-providers-0:2.18.10-1.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jackson-module-jakarta-xmlbind-annotations-0:2.18.10-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-modules-base-0:2.18.10-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-modules-base-0:2.18.10-1.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jackson-modules-java8-0:2.18.10-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-modules-java8-0:2.18.10-2.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jaxb-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jaxb-0:4.0.8-2.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jaxb-core-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jaxb-jxc-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jaxb-runtime-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jaxb-xjc-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jboss-openjdk-orb-0:10.2.0-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jboss-openjdk-orb-0:10.2.0-1.Final_redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jbossws-cxf-0:7.4.1-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jbossws-cxf-0:7.4.1-1.Final_redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jsf-impl-0:4.0.22-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jsf-impl-0:4.0.22-1.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jsonb-spec-0:3.0.2-1.redhat_00003.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jsonb-spec-0:3.0.2-1.redhat_00003.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-log4j-0:2.25.5-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-log4j-0:2.25.5-1.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-netty-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-0:4.1.138-1.Final_redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-codec-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-common-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-handler-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-transport-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.138-1.Final_redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.138-1.Final_redhat_00001.1.el9eap.x86_64",
            "9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.138-1.Final_redhat_00001.1.el9eap.x86_64",
            "9Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-relaxng-datatype-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-0:6.2.19-1.Final_redhat_00002.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-resteasy-atom-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-cdi-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-client-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-client-api-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-core-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-core-spi-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-crypto-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-jackson2-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-jaxb-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-jsapi-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-json-binding-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-json-p-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-multipart-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-rxjava2-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-validator-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-rngom-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-txw2-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-0:8.1.9-3.GA_redhat_00005.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-0:8.1.9-3.GA_redhat_00005.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-0:5.0.14-1.Final_redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-cache-infinispan-common-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-cache-infinispan-embedded-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-cache-infinispan-remote-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-cache-spi-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-context-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-marshalling-jboss-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-marshalling-protostream-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-marshalling-spi-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-server-api-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-server-infinispan-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-server-jgroups-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-server-local-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-server-spi-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-session-cache-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-session-infinispan-embedded-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-session-infinispan-remote-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-session-spec-servlet-6.0-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-session-spec-spi-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-session-spi-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-elytron-0:2.6.12-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-elytron-0:2.6.12-1.Final_redhat_00002.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-wildfly-elytron-tool-0:2.6.12-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-java-jdk17-0:8.1.9-3.GA_redhat_00005.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.9-3.GA_redhat_00005.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-javadocs-0:8.1.1-14.GA_redhat_00051.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-javadocs-0:8.1.1-14.GA_redhat_00051.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.9-3.GA_redhat_00005.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-xsom-0:4.0.8-2.redhat_00001.1.el9eap.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 8.6,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "9Base-JBEAP-8.1:eap8-apache-cxf-0:4.1.8-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-apache-cxf-0:4.1.8-1.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-apache-cxf-rt-0:4.1.8-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-apache-cxf-services-0:4.1.8-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-apache-cxf-tools-0:4.1.8-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-apache-sshd-0:2.19.0-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-apache-sshd-0:2.19.0-1.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-codemodel-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.9.0-2.GA_redhat_00003.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.9.0-2.GA_redhat_00003.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.9.0-2.GA_redhat_00003.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-hal-console-0:3.7.22-2.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-hal-console-0:3.7.22-2.Final_redhat_00002.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-hibernate-0:6.6.56-2.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-hibernate-0:6.6.56-2.Final_redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-hibernate-core-0:6.6.56-2.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-hibernate-envers-0:6.6.56-2.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-annotations-0:2.18.11-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-annotations-0:2.18.11-1.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jackson-core-0:2.18.11-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-core-0:2.18.11-1.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jackson-databind-0:2.18.11-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-databind-0:2.18.11-1.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jackson-dataformat-yaml-0:2.18.11-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-dataformats-text-0:2.18.11-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-dataformats-text-0:2.18.11-1.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jackson-datatype-jdk8-0:2.18.10-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-datatype-jsr310-0:2.18.10-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-jaxrs-base-0:2.18.10-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-jaxrs-json-provider-0:2.18.10-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-jaxrs-providers-0:2.18.10-1.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jackson-module-jakarta-xmlbind-annotations-0:2.18.10-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-modules-base-0:2.18.10-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-modules-base-0:2.18.10-1.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jackson-modules-java8-0:2.18.10-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-modules-java8-0:2.18.10-2.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jaxb-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jaxb-0:4.0.8-2.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jaxb-core-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jaxb-jxc-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jaxb-runtime-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jaxb-xjc-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jboss-openjdk-orb-0:10.2.0-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jboss-openjdk-orb-0:10.2.0-1.Final_redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jbossws-cxf-0:7.4.1-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jbossws-cxf-0:7.4.1-1.Final_redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jsf-impl-0:4.0.22-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jsf-impl-0:4.0.22-1.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jsonb-spec-0:3.0.2-1.redhat_00003.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jsonb-spec-0:3.0.2-1.redhat_00003.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-log4j-0:2.25.5-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-log4j-0:2.25.5-1.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-netty-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-0:4.1.138-1.Final_redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-codec-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-common-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-handler-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-transport-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.138-1.Final_redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.138-1.Final_redhat_00001.1.el9eap.x86_64",
            "9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.138-1.Final_redhat_00001.1.el9eap.x86_64",
            "9Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-relaxng-datatype-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-0:6.2.19-1.Final_redhat_00002.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-resteasy-atom-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-cdi-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-client-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-client-api-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-core-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-core-spi-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-crypto-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-jackson2-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-jaxb-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-jsapi-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-json-binding-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-json-p-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-multipart-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-rxjava2-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-validator-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-rngom-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-txw2-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-0:8.1.9-3.GA_redhat_00005.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-0:8.1.9-3.GA_redhat_00005.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-0:5.0.14-1.Final_redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-cache-infinispan-common-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-cache-infinispan-embedded-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-cache-infinispan-remote-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-cache-spi-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-context-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-marshalling-jboss-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-marshalling-protostream-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-marshalling-spi-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-server-api-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-server-infinispan-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-server-jgroups-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-server-local-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-server-spi-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-session-cache-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-session-infinispan-embedded-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-session-infinispan-remote-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-session-spec-servlet-6.0-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-session-spec-spi-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-session-spi-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-elytron-0:2.6.12-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-elytron-0:2.6.12-1.Final_redhat_00002.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-wildfly-elytron-tool-0:2.6.12-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-java-jdk17-0:8.1.9-3.GA_redhat_00005.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.9-3.GA_redhat_00005.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-javadocs-0:8.1.1-14.GA_redhat_00051.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-javadocs-0:8.1.1-14.GA_redhat_00051.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.9-3.GA_redhat_00005.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-xsom-0:4.0.8-2.redhat_00001.1.el9eap.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "Apache CXF: Apache CXF: XML External Entity (XXE) vulnerability via WSDL/XSD import parsing"
    },
    {
      "cve": "CVE-2026-65583",
      "cwe": {
        "id": "CWE-303",
        "name": "Incorrect Implementation of Authentication Algorithm"
      },
      "discovery_date": "2026-08-06T11:51:55.926721+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "9Base-JBEAP-8.1:eap8-apache-sshd-0:2.19.0-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-apache-sshd-0:2.19.0-1.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-codemodel-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.9.0-2.GA_redhat_00003.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.9.0-2.GA_redhat_00003.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.9.0-2.GA_redhat_00003.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-hal-console-0:3.7.22-2.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-hal-console-0:3.7.22-2.Final_redhat_00002.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-hibernate-0:6.6.56-2.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-hibernate-0:6.6.56-2.Final_redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-hibernate-core-0:6.6.56-2.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-hibernate-envers-0:6.6.56-2.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-annotations-0:2.18.11-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-annotations-0:2.18.11-1.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jackson-core-0:2.18.11-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-core-0:2.18.11-1.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jackson-databind-0:2.18.11-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-databind-0:2.18.11-1.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jackson-dataformat-yaml-0:2.18.11-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-dataformats-text-0:2.18.11-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-dataformats-text-0:2.18.11-1.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jackson-datatype-jdk8-0:2.18.10-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-datatype-jsr310-0:2.18.10-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-jaxrs-base-0:2.18.10-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-jaxrs-json-provider-0:2.18.10-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-jaxrs-providers-0:2.18.10-1.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jackson-module-jakarta-xmlbind-annotations-0:2.18.10-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-modules-base-0:2.18.10-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-modules-base-0:2.18.10-1.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jackson-modules-java8-0:2.18.10-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-modules-java8-0:2.18.10-2.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jaxb-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jaxb-0:4.0.8-2.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jaxb-core-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jaxb-jxc-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jaxb-runtime-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jaxb-xjc-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jboss-openjdk-orb-0:10.2.0-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jboss-openjdk-orb-0:10.2.0-1.Final_redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jbossws-cxf-0:7.4.1-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jbossws-cxf-0:7.4.1-1.Final_redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jsf-impl-0:4.0.22-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jsf-impl-0:4.0.22-1.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jsonb-spec-0:3.0.2-1.redhat_00003.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jsonb-spec-0:3.0.2-1.redhat_00003.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-log4j-0:2.25.5-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-log4j-0:2.25.5-1.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-netty-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-0:4.1.138-1.Final_redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-codec-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-common-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-handler-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-transport-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.138-1.Final_redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.138-1.Final_redhat_00001.1.el9eap.x86_64",
            "9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.138-1.Final_redhat_00001.1.el9eap.x86_64",
            "9Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-relaxng-datatype-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-0:6.2.19-1.Final_redhat_00002.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-resteasy-atom-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-cdi-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-client-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-client-api-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-core-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-core-spi-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-crypto-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-jackson2-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-jaxb-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-jsapi-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-json-binding-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-json-p-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-multipart-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-rxjava2-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-validator-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-rngom-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-txw2-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-0:8.1.9-3.GA_redhat_00005.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-0:8.1.9-3.GA_redhat_00005.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-0:5.0.14-1.Final_redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-cache-infinispan-common-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-cache-infinispan-embedded-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-cache-infinispan-remote-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-cache-spi-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-context-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-marshalling-jboss-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-marshalling-protostream-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-marshalling-spi-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-server-api-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-server-infinispan-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-server-jgroups-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-server-local-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-server-spi-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-session-cache-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-session-infinispan-embedded-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-session-infinispan-remote-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-session-spec-servlet-6.0-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-session-spec-spi-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-session-spi-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-elytron-0:2.6.12-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-elytron-0:2.6.12-1.Final_redhat_00002.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-wildfly-elytron-tool-0:2.6.12-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-java-jdk17-0:8.1.9-3.GA_redhat_00005.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.9-3.GA_redhat_00005.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-javadocs-0:8.1.1-14.GA_redhat_00051.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-javadocs-0:8.1.1-14.GA_redhat_00051.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.9-3.GA_redhat_00005.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-xsom-0:4.0.8-2.redhat_00001.1.el9eap.noarch"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2511995"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Apache CXF. The OpenID Connect (OIDC) relying-party token validation in Apache CXF could accept specially crafted self-issued ID tokens. This bypasses necessary claim checks, such as issuer, subject, audience, and time, leading to an authentication bypass. This vulnerability allows an attacker to gain unauthorized access by presenting a malicious token.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "org.apache.cxf/cxf: Apache CXF: Authentication Bypass via Crafted OIDC Self-Issued ID Tokens",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Impact: IMPORTANT. A flaw was found in Apache CXF\u0027s OpenID Connect (OIDC) relying-party token validation. When the validator is configured to accept self-issued ID tokens, which is not the default behavior, required claim checks \u2014 issuer, subject, audience, and time, as well as the sub_jwk binding \u2014 are not enforced. A remote, unauthenticated attacker able to reach an affected OIDC relying party could present a specially crafted self-issued ID token to bypass authentication and gain unauthorized access, with high impact to confidentiality and integrity. Red Hat products that bundle affected versions of Apache CXF are tracked with delegated resolution: a fix is being pursued for the affected Red Hat JBoss Web Server and Red Hat build of Apache Camel streams, while the JBoss Enterprise Application Platform XP stream was determined not affected (component not present in the shipped configuration) and no fix is planned for the EAP 7.4 stream. The Red Hat severity of IMPORTANT (CVSS 7.4, AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N) is lower than the CISA score of 9.1 because exploitation requires a non-default configuration in which the relying-party validator accepts self-issued ID tokens.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-JBEAP-8.1:eap8-apache-cxf-0:4.1.8-1.redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-apache-cxf-0:4.1.8-1.redhat_00001.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-apache-cxf-rt-0:4.1.8-1.redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-apache-cxf-services-0:4.1.8-1.redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-apache-cxf-tools-0:4.1.8-1.redhat_00001.1.el9eap.noarch"
        ],
        "known_not_affected": [
          "9Base-JBEAP-8.1:eap8-apache-sshd-0:2.19.0-1.redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-apache-sshd-0:2.19.0-1.redhat_00001.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-codemodel-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.9.0-2.GA_redhat_00003.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.9.0-2.GA_redhat_00003.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.9.0-2.GA_redhat_00003.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-hal-console-0:3.7.22-2.Final_redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-hal-console-0:3.7.22-2.Final_redhat_00002.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-hibernate-0:6.6.56-2.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-hibernate-0:6.6.56-2.Final_redhat_00001.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-hibernate-core-0:6.6.56-2.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-hibernate-envers-0:6.6.56-2.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-jackson-annotations-0:2.18.11-1.redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-jackson-annotations-0:2.18.11-1.redhat_00001.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-jackson-core-0:2.18.11-1.redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-jackson-core-0:2.18.11-1.redhat_00001.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-jackson-databind-0:2.18.11-1.redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-jackson-databind-0:2.18.11-1.redhat_00001.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-jackson-dataformat-yaml-0:2.18.11-1.redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-jackson-dataformats-text-0:2.18.11-1.redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-jackson-dataformats-text-0:2.18.11-1.redhat_00001.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-jackson-datatype-jdk8-0:2.18.10-2.redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-jackson-datatype-jsr310-0:2.18.10-2.redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-jackson-jaxrs-base-0:2.18.10-1.redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-jackson-jaxrs-json-provider-0:2.18.10-1.redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-jackson-jaxrs-providers-0:2.18.10-1.redhat_00001.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-jackson-module-jakarta-xmlbind-annotations-0:2.18.10-1.redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-jackson-modules-base-0:2.18.10-1.redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-jackson-modules-base-0:2.18.10-1.redhat_00001.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-jackson-modules-java8-0:2.18.10-2.redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-jackson-modules-java8-0:2.18.10-2.redhat_00001.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-jaxb-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-jaxb-0:4.0.8-2.redhat_00001.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-jaxb-core-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-jaxb-jxc-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-jaxb-runtime-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-jaxb-xjc-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-jboss-openjdk-orb-0:10.2.0-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-jboss-openjdk-orb-0:10.2.0-1.Final_redhat_00001.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-jbossws-cxf-0:7.4.1-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-jbossws-cxf-0:7.4.1-1.Final_redhat_00001.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-jsf-impl-0:4.0.22-1.redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-jsf-impl-0:4.0.22-1.redhat_00001.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-jsonb-spec-0:3.0.2-1.redhat_00003.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-jsonb-spec-0:3.0.2-1.redhat_00003.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-log4j-0:2.25.5-1.redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-log4j-0:2.25.5-1.redhat_00001.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-netty-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-netty-0:4.1.138-1.Final_redhat_00001.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-netty-codec-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-netty-common-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-netty-handler-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-netty-transport-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.138-1.Final_redhat_00001.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.138-1.Final_redhat_00001.1.el9eap.x86_64",
          "9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.138-1.Final_redhat_00001.1.el9eap.x86_64",
          "9Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-relaxng-datatype-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-resteasy-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-resteasy-0:6.2.19-1.Final_redhat_00002.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-resteasy-atom-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-resteasy-cdi-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-resteasy-client-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-resteasy-client-api-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-resteasy-core-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-resteasy-core-spi-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-resteasy-crypto-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-resteasy-jackson2-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-resteasy-jaxb-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-resteasy-jsapi-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-resteasy-json-binding-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-resteasy-json-p-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-resteasy-multipart-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-resteasy-rxjava2-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-resteasy-validator-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-rngom-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-txw2-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-0:8.1.9-3.GA_redhat_00005.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-0:8.1.9-3.GA_redhat_00005.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-wildfly-clustering-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-clustering-0:5.0.14-1.Final_redhat_00001.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-wildfly-clustering-cache-infinispan-common-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-clustering-cache-infinispan-embedded-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-clustering-cache-infinispan-remote-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-clustering-cache-spi-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-clustering-context-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-clustering-marshalling-jboss-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-clustering-marshalling-protostream-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-clustering-marshalling-spi-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-clustering-server-api-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-clustering-server-infinispan-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-clustering-server-jgroups-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-clustering-server-local-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-clustering-server-spi-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-clustering-session-cache-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-clustering-session-infinispan-embedded-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-clustering-session-infinispan-remote-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-clustering-session-spec-servlet-6.0-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-clustering-session-spec-spi-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-clustering-session-spi-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-elytron-0:2.6.12-1.Final_redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-elytron-0:2.6.12-1.Final_redhat_00002.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-wildfly-elytron-tool-0:2.6.12-1.Final_redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-java-jdk17-0:8.1.9-3.GA_redhat_00005.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.9-3.GA_redhat_00005.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-javadocs-0:8.1.1-14.GA_redhat_00051.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-javadocs-0:8.1.1-14.GA_redhat_00051.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.9-3.GA_redhat_00005.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-xsom-0:4.0.8-2.redhat_00001.1.el9eap.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-65583"
        },
        {
          "category": "external",
          "summary": "RHBZ#2511995",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2511995"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-65583",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-65583"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-65583",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-65583"
        },
        {
          "category": "external",
          "summary": "https://lists.apache.org/thread/fzj8yzgfl53gclxrcdrnrx3grcpkq51j",
          "url": "https://lists.apache.org/thread/fzj8yzgfl53gclxrcdrnrx3grcpkq51j"
        }
      ],
      "release_date": "2026-08-06T11:23:17.421000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-28T17:56:23+00:00",
          "details": "Before applying the update, make sure all previously released errata relevant to your system have been applied. Also, back up your existing installation, including all applications, configuration files, databases and database settings. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
          "product_ids": [
            "9Base-JBEAP-8.1:eap8-apache-cxf-0:4.1.8-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-apache-cxf-0:4.1.8-1.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-apache-cxf-rt-0:4.1.8-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-apache-cxf-services-0:4.1.8-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-apache-cxf-tools-0:4.1.8-1.redhat_00001.1.el9eap.noarch"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:92056"
        },
        {
          "category": "workaround",
          "details": "Keep the default behavior of the Apache CXF OIDC relying-party token validator: self-issued ID tokens are not accepted by default, so deployments that have not enabled their acceptance are not exposed to this authentication bypass. Deployments that have enabled acceptance of self-issued ID tokens can mitigate the issue by disabling that configuration. As a longer-term resolution, upgrading to an upstream Apache CXF version containing the fix (4.2.3, 4.1.8, or 3.6.12, as recommended in the Apache advisory) is advised.",
          "product_ids": [
            "9Base-JBEAP-8.1:eap8-apache-cxf-0:4.1.8-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-apache-cxf-0:4.1.8-1.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-apache-cxf-rt-0:4.1.8-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-apache-cxf-services-0:4.1.8-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-apache-cxf-tools-0:4.1.8-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-apache-sshd-0:2.19.0-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-apache-sshd-0:2.19.0-1.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-codemodel-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.9.0-2.GA_redhat_00003.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.9.0-2.GA_redhat_00003.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.9.0-2.GA_redhat_00003.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-hal-console-0:3.7.22-2.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-hal-console-0:3.7.22-2.Final_redhat_00002.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-hibernate-0:6.6.56-2.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-hibernate-0:6.6.56-2.Final_redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-hibernate-core-0:6.6.56-2.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-hibernate-envers-0:6.6.56-2.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-annotations-0:2.18.11-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-annotations-0:2.18.11-1.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jackson-core-0:2.18.11-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-core-0:2.18.11-1.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jackson-databind-0:2.18.11-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-databind-0:2.18.11-1.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jackson-dataformat-yaml-0:2.18.11-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-dataformats-text-0:2.18.11-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-dataformats-text-0:2.18.11-1.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jackson-datatype-jdk8-0:2.18.10-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-datatype-jsr310-0:2.18.10-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-jaxrs-base-0:2.18.10-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-jaxrs-json-provider-0:2.18.10-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-jaxrs-providers-0:2.18.10-1.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jackson-module-jakarta-xmlbind-annotations-0:2.18.10-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-modules-base-0:2.18.10-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-modules-base-0:2.18.10-1.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jackson-modules-java8-0:2.18.10-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-modules-java8-0:2.18.10-2.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jaxb-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jaxb-0:4.0.8-2.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jaxb-core-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jaxb-jxc-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jaxb-runtime-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jaxb-xjc-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jboss-openjdk-orb-0:10.2.0-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jboss-openjdk-orb-0:10.2.0-1.Final_redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jbossws-cxf-0:7.4.1-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jbossws-cxf-0:7.4.1-1.Final_redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jsf-impl-0:4.0.22-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jsf-impl-0:4.0.22-1.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jsonb-spec-0:3.0.2-1.redhat_00003.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jsonb-spec-0:3.0.2-1.redhat_00003.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-log4j-0:2.25.5-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-log4j-0:2.25.5-1.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-netty-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-0:4.1.138-1.Final_redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-codec-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-common-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-handler-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-transport-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.138-1.Final_redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.138-1.Final_redhat_00001.1.el9eap.x86_64",
            "9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.138-1.Final_redhat_00001.1.el9eap.x86_64",
            "9Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-relaxng-datatype-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-0:6.2.19-1.Final_redhat_00002.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-resteasy-atom-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-cdi-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-client-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-client-api-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-core-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-core-spi-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-crypto-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-jackson2-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-jaxb-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-jsapi-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-json-binding-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-json-p-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-multipart-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-rxjava2-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-validator-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-rngom-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-txw2-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-0:8.1.9-3.GA_redhat_00005.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-0:8.1.9-3.GA_redhat_00005.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-0:5.0.14-1.Final_redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-cache-infinispan-common-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-cache-infinispan-embedded-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-cache-infinispan-remote-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-cache-spi-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-context-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-marshalling-jboss-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-marshalling-protostream-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-marshalling-spi-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-server-api-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-server-infinispan-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-server-jgroups-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-server-local-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-server-spi-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-session-cache-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-session-infinispan-embedded-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-session-infinispan-remote-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-session-spec-servlet-6.0-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-session-spec-spi-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-session-spi-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-elytron-0:2.6.12-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-elytron-0:2.6.12-1.Final_redhat_00002.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-wildfly-elytron-tool-0:2.6.12-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-java-jdk17-0:8.1.9-3.GA_redhat_00005.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.9-3.GA_redhat_00005.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-javadocs-0:8.1.1-14.GA_redhat_00051.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-javadocs-0:8.1.1-14.GA_redhat_00051.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.9-3.GA_redhat_00005.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-xsom-0:4.0.8-2.redhat_00001.1.el9eap.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "9Base-JBEAP-8.1:eap8-apache-cxf-0:4.1.8-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-apache-cxf-0:4.1.8-1.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-apache-cxf-rt-0:4.1.8-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-apache-cxf-services-0:4.1.8-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-apache-cxf-tools-0:4.1.8-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-apache-sshd-0:2.19.0-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-apache-sshd-0:2.19.0-1.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-codemodel-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.9.0-2.GA_redhat_00003.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.9.0-2.GA_redhat_00003.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.9.0-2.GA_redhat_00003.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-hal-console-0:3.7.22-2.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-hal-console-0:3.7.22-2.Final_redhat_00002.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-hibernate-0:6.6.56-2.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-hibernate-0:6.6.56-2.Final_redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-hibernate-core-0:6.6.56-2.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-hibernate-envers-0:6.6.56-2.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-annotations-0:2.18.11-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-annotations-0:2.18.11-1.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jackson-core-0:2.18.11-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-core-0:2.18.11-1.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jackson-databind-0:2.18.11-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-databind-0:2.18.11-1.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jackson-dataformat-yaml-0:2.18.11-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-dataformats-text-0:2.18.11-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-dataformats-text-0:2.18.11-1.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jackson-datatype-jdk8-0:2.18.10-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-datatype-jsr310-0:2.18.10-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-jaxrs-base-0:2.18.10-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-jaxrs-json-provider-0:2.18.10-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-jaxrs-providers-0:2.18.10-1.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jackson-module-jakarta-xmlbind-annotations-0:2.18.10-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-modules-base-0:2.18.10-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-modules-base-0:2.18.10-1.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jackson-modules-java8-0:2.18.10-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jackson-modules-java8-0:2.18.10-2.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jaxb-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jaxb-0:4.0.8-2.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jaxb-core-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jaxb-jxc-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jaxb-runtime-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jaxb-xjc-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jboss-openjdk-orb-0:10.2.0-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jboss-openjdk-orb-0:10.2.0-1.Final_redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jbossws-cxf-0:7.4.1-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jbossws-cxf-0:7.4.1-1.Final_redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jsf-impl-0:4.0.22-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jsf-impl-0:4.0.22-1.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-jsonb-spec-0:3.0.2-1.redhat_00003.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jsonb-spec-0:3.0.2-1.redhat_00003.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-log4j-0:2.25.5-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-log4j-0:2.25.5-1.redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-netty-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-0:4.1.138-1.Final_redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-codec-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-common-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-handler-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-transport-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.138-1.Final_redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.138-1.Final_redhat_00001.1.el9eap.x86_64",
            "9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.138-1.Final_redhat_00001.1.el9eap.x86_64",
            "9Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.138-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-relaxng-datatype-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-0:6.2.19-1.Final_redhat_00002.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-resteasy-atom-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-cdi-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-client-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-client-api-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-core-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-core-spi-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-crypto-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-jackson2-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-jaxb-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-jsapi-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-json-binding-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-json-p-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-multipart-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-rxjava2-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-resteasy-validator-provider-0:6.2.19-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-rngom-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-txw2-0:4.0.8-2.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-0:8.1.9-3.GA_redhat_00005.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-0:8.1.9-3.GA_redhat_00005.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-0:5.0.14-1.Final_redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-cache-infinispan-common-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-cache-infinispan-embedded-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-cache-infinispan-remote-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-cache-spi-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-context-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-marshalling-jboss-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-marshalling-protostream-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-marshalling-spi-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-server-api-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-server-infinispan-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-server-jgroups-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-server-local-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-server-spi-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-session-cache-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-session-infinispan-embedded-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-session-infinispan-remote-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-session-spec-servlet-6.0-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-session-spec-spi-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-clustering-session-spi-0:5.0.14-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-elytron-0:2.6.12-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-elytron-0:2.6.12-1.Final_redhat_00002.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-wildfly-elytron-tool-0:2.6.12-1.Final_redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-java-jdk17-0:8.1.9-3.GA_redhat_00005.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.9-3.GA_redhat_00005.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-javadocs-0:8.1.1-14.GA_redhat_00051.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-javadocs-0:8.1.1-14.GA_redhat_00051.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.9-3.GA_redhat_00005.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-xsom-0:4.0.8-2.redhat_00001.1.el9eap.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "org.apache.cxf/cxf: Apache CXF: Authentication Bypass via Crafted OIDC Self-Issued ID Tokens"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Drag nodes to arrange them. Double-click a related vulnerability to open it, or a source to visit its link. The Physics button on the left tunes the layout and the simulation; the legend at the bottom left hides or shows nodes by kind and by sighting type.

Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

JSON

Loading timeline…




    Related by attack behaviour

    Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.