> Enter [BeforeAll] scenario "from-scratch" - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:38 @ 08/14/26 13:12:08.29 Image repository for component component-from-scratch in namespace build-e2e-from-scratch do not have right state ('' != 'ready') yet but it has status { { } {<nil> } []}. Created component for scenario: from-scratch RUNNING SCENARIO: from-scratch < Exit [BeforeAll] scenario "from-scratch" - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:38 @ 08/14/26 13:12:19.947 (11.657s) > Enter [It] triggers a PipelineRun - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:89 @ 08/14/26 13:12:19.947 PipelineRun has not been created yet for the component build-e2e-from-scratch/component-from-scratch < Exit [It] triggers a PipelineRun - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:89 @ 08/14/26 13:12:40.146 (20.199s) > Enter [It] the PipelineRun should eventually finish - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:103 @ 08/14/26 13:12:40.147 PipelineRun component-from-scratch-on-pull-request-4hznm found for Component build-e2e-from-scratch/component-from-scratch PipelineRun component-from-scratch-on-pull-request-4hznm reason: ResolvingTaskRef PipelineRun component-from-scratch-on-pull-request-4hznm reason: Running PipelineRun component-from-scratch-on-pull-request-4hznm reason: Running PipelineRun component-from-scratch-on-pull-request-4hznm reason: Running PipelineRun component-from-scratch-on-pull-request-4hznm reason: Running PipelineRun component-from-scratch-on-pull-request-4hznm reason: Running PipelineRun component-from-scratch-on-pull-request-4hznm reason: Running PipelineRun component-from-scratch-on-pull-request-4hznm reason: Running PipelineRun component-from-scratch-on-pull-request-4hznm reason: Running PipelineRun component-from-scratch-on-pull-request-4hznm reason: Running PipelineRun component-from-scratch-on-pull-request-4hznm reason: Running PipelineRun component-from-scratch-on-pull-request-4hznm reason: Running PipelineRun component-from-scratch-on-pull-request-4hznm reason: Running PipelineRun component-from-scratch-on-pull-request-4hznm reason: Running PipelineRun component-from-scratch-on-pull-request-4hznm reason: Running PipelineRun component-from-scratch-on-pull-request-4hznm reason: Running PipelineRun component-from-scratch-on-pull-request-4hznm reason: Running PipelineRun component-from-scratch-on-pull-request-4hznm reason: Running PipelineRun component-from-scratch-on-pull-request-4hznm reason: Running PipelineRun component-from-scratch-on-pull-request-4hznm reason: Running PipelineRun component-from-scratch-on-pull-request-4hznm reason: Running PipelineRun component-from-scratch-on-pull-request-4hznm reason: Running PipelineRun component-from-scratch-on-pull-request-4hznm reason: Running PipelineRun component-from-scratch-on-pull-request-4hznm reason: Running PipelineRun component-from-scratch-on-pull-request-4hznm reason: Completed < Exit [It] the PipelineRun should eventually finish - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:103 @ 08/14/26 13:20:40.341 (8m0.194s) > Enter [It] should push Dockerfile to registry - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:123 @ 08/14/26 13:20:40.342 < Exit [It] should push Dockerfile to registry - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:123 @ 08/14/26 13:20:41.536 (1.193s) > Enter [It] should validate tekton taskrun test results - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:130 @ 08/14/26 13:20:41.537 < Exit [It] should validate tekton taskrun test results - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:130 @ 08/14/26 13:20:41.965 (428ms) > Enter [It] floating tags are created successfully - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:137 @ 08/14/26 13:20:41.966 [SKIPPED] floating tag validation is not needed for: from-scratch In [It] at: /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:139 @ 08/14/26 13:20:41.966 < Exit [It] floating tags are created successfully - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:137 @ 08/14/26 13:20:41.966 (0s) > Enter [It] image manifest mediaType is correct - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:153 @ 08/14/26 13:20:41.966 < Exit [It] image manifest mediaType is correct - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:153 @ 08/14/26 13:20:42.283 (317ms) > Enter [It] should have Hermeto content in the SBOM in case the build was hermetic - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:180 @ 08/14/26 13:20:42.284 [SKIPPED] Hermetic build is not enabled, skipping the test In [It] at: /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:182 @ 08/14/26 13:20:42.284 < Exit [It] should have Hermeto content in the SBOM in case the build was hermetic - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:180 @ 08/14/26 13:20:42.284 (0s) > Enter [It] check for source images if enabled in pipeline - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:214 @ 08/14/26 13:20:42.285 Source build is enabled: false [SKIPPED] Skipping source image check since it is not enabled in the pipeline In [It] at: /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:223 @ 08/14/26 13:20:42.285 < Exit [It] check for source images if enabled in pipeline - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:214 @ 08/14/26 13:20:42.285 (0s) > Enter [AfterAll] scenario "from-scratch" - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:55 @ 08/14/26 13:20:42.286 < Exit [AfterAll] scenario "from-scratch" - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:55 @ 08/14/26 13:20:43.306 (1.021s) > Enter [BeforeAll] scenario "prefetch-cargo" - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:38 @ 08/14/26 13:20:43.307 Image repository for component component-prefetch-cargo in namespace build-e2e-prefetch-cargo do not have right state ('' != 'ready') yet but it has status { { } {<nil> } []}. Created component for scenario: prefetch-cargo RUNNING SCENARIO: prefetch-cargo < Exit [BeforeAll] scenario "prefetch-cargo" - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:38 @ 08/14/26 13:20:56.209 (12.902s) > Enter [It] triggers a PipelineRun - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:89 @ 08/14/26 13:20:56.209 PipelineRun has not been created yet for the component build-e2e-prefetch-cargo/component-prefetch-cargo < Exit [It] triggers a PipelineRun - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:89 @ 08/14/26 13:21:16.41 (20.201s) > Enter [It] the PipelineRun should eventually finish - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:103 @ 08/14/26 13:21:16.411 PipelineRun component-prefetch-cargo-on-pull-request-llxxz found for Component build-e2e-prefetch-cargo/component-prefetch-cargo PipelineRun component-prefetch-cargo-on-pull-request-llxxz reason: Running PipelineRun component-prefetch-cargo-on-pull-request-llxxz reason: Running PipelineRun component-prefetch-cargo-on-pull-request-llxxz reason: Running PipelineRun component-prefetch-cargo-on-pull-request-llxxz reason: Running PipelineRun component-prefetch-cargo-on-pull-request-llxxz reason: Running PipelineRun component-prefetch-cargo-on-pull-request-llxxz reason: Running PipelineRun component-prefetch-cargo-on-pull-request-llxxz reason: Running PipelineRun component-prefetch-cargo-on-pull-request-llxxz reason: Running PipelineRun component-prefetch-cargo-on-pull-request-llxxz reason: Running PipelineRun component-prefetch-cargo-on-pull-request-llxxz reason: Running PipelineRun component-prefetch-cargo-on-pull-request-llxxz reason: Running PipelineRun component-prefetch-cargo-on-pull-request-llxxz reason: Running PipelineRun component-prefetch-cargo-on-pull-request-llxxz reason: Running PipelineRun component-prefetch-cargo-on-pull-request-llxxz reason: Running PipelineRun component-prefetch-cargo-on-pull-request-llxxz reason: Running PipelineRun component-prefetch-cargo-on-pull-request-llxxz reason: Running PipelineRun component-prefetch-cargo-on-pull-request-llxxz reason: Running PipelineRun component-prefetch-cargo-on-pull-request-llxxz reason: Running PipelineRun component-prefetch-cargo-on-pull-request-llxxz reason: Completed < Exit [It] the PipelineRun should eventually finish - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:103 @ 08/14/26 13:27:16.604 (6m0.193s) > Enter [It] should push Dockerfile to registry - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:123 @ 08/14/26 13:27:16.605 < Exit [It] should push Dockerfile to registry - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:123 @ 08/14/26 13:27:17.795 (1.19s) > Enter [It] should validate tekton taskrun test results - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:130 @ 08/14/26 13:27:17.795 < Exit [It] should validate tekton taskrun test results - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:130 @ 08/14/26 13:27:18.335 (539ms) > Enter [It] floating tags are created successfully - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:137 @ 08/14/26 13:27:18.335 [SKIPPED] floating tag validation is not needed for: prefetch-cargo In [It] at: /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:139 @ 08/14/26 13:27:18.335 < Exit [It] floating tags are created successfully - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:137 @ 08/14/26 13:27:18.335 (0s) > Enter [It] image manifest mediaType is correct - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:153 @ 08/14/26 13:27:18.336 < Exit [It] image manifest mediaType is correct - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:153 @ 08/14/26 13:27:18.62 (284ms) > Enter [It] should have Hermeto content in the SBOM in case the build was hermetic - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:180 @ 08/14/26 13:27:18.621 < Exit [It] should have Hermeto content in the SBOM in case the build was hermetic - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:180 @ 08/14/26 13:27:19.008 (387ms) > Enter [It] check for source images if enabled in pipeline - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:214 @ 08/14/26 13:27:19.008 Source build is enabled: false [SKIPPED] Skipping source image check since it is not enabled in the pipeline In [It] at: /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:223 @ 08/14/26 13:27:19.008 < Exit [It] check for source images if enabled in pipeline - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:214 @ 08/14/26 13:27:19.008 (0s) > Enter [AfterAll] scenario "prefetch-cargo" - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:55 @ 08/14/26 13:27:19.009 < Exit [AfterAll] scenario "prefetch-cargo" - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:55 @ 08/14/26 13:27:21.447 (2.439s) > Enter [BeforeAll] scenario "prefetch-gomod" - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:38 @ 08/14/26 13:27:21.448 Image repository for component component-prefetch-gomod in namespace build-e2e-prefetch-gomod do not have right state ('' != 'ready') yet but it has status { { } {<nil> } []}. Created component for scenario: prefetch-gomod RUNNING SCENARIO: prefetch-gomod < Exit [BeforeAll] scenario "prefetch-gomod" - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:38 @ 08/14/26 13:27:34.55 (13.102s) > Enter [It] triggers a PipelineRun - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:89 @ 08/14/26 13:27:34.55 PipelineRun has not been created yet for the component build-e2e-prefetch-gomod/component-prefetch-gomod < Exit [It] triggers a PipelineRun - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:89 @ 08/14/26 13:27:54.786 (20.235s) > Enter [It] the PipelineRun should eventually finish - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:103 @ 08/14/26 13:27:54.786 PipelineRun component-prefetch-gomod-on-pull-request-k4wcf found for Component build-e2e-prefetch-gomod/component-prefetch-gomod PipelineRun component-prefetch-gomod-on-pull-request-k4wcf reason: Running PipelineRun component-prefetch-gomod-on-pull-request-k4wcf reason: Running PipelineRun component-prefetch-gomod-on-pull-request-k4wcf reason: Running PipelineRun component-prefetch-gomod-on-pull-request-k4wcf reason: Running PipelineRun component-prefetch-gomod-on-pull-request-k4wcf reason: Running PipelineRun component-prefetch-gomod-on-pull-request-k4wcf reason: Running PipelineRun component-prefetch-gomod-on-pull-request-k4wcf reason: Running PipelineRun component-prefetch-gomod-on-pull-request-k4wcf reason: Running PipelineRun component-prefetch-gomod-on-pull-request-k4wcf reason: Running PipelineRun component-prefetch-gomod-on-pull-request-k4wcf reason: Running PipelineRun component-prefetch-gomod-on-pull-request-k4wcf reason: Running PipelineRun component-prefetch-gomod-on-pull-request-k4wcf reason: Running PipelineRun component-prefetch-gomod-on-pull-request-k4wcf reason: Completed < Exit [It] the PipelineRun should eventually finish - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:103 @ 08/14/26 13:31:54.979 (4m0.193s) > Enter [It] should push Dockerfile to registry - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:123 @ 08/14/26 13:31:54.98 < Exit [It] should push Dockerfile to registry - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:123 @ 08/14/26 13:31:56.181 (1.201s) > Enter [It] should validate tekton taskrun test results - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:130 @ 08/14/26 13:31:56.181 < Exit [It] should validate tekton taskrun test results - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:130 @ 08/14/26 13:31:56.756 (575ms) > Enter [It] floating tags are created successfully - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:137 @ 08/14/26 13:31:56.757 [SKIPPED] floating tag validation is not needed for: prefetch-gomod In [It] at: /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:139 @ 08/14/26 13:31:56.757 < Exit [It] floating tags are created successfully - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:137 @ 08/14/26 13:31:56.757 (0s) > Enter [It] image manifest mediaType is correct - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:153 @ 08/14/26 13:31:56.757 < Exit [It] image manifest mediaType is correct - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:153 @ 08/14/26 13:31:57.056 (299ms) > Enter [It] should have Hermeto content in the SBOM in case the build was hermetic - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:180 @ 08/14/26 13:31:57.057 < Exit [It] should have Hermeto content in the SBOM in case the build was hermetic - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:180 @ 08/14/26 13:31:57.295 (238ms) > Enter [It] check for source images if enabled in pipeline - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:214 @ 08/14/26 13:31:57.296 Source build is enabled: false [SKIPPED] Skipping source image check since it is not enabled in the pipeline In [It] at: /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:223 @ 08/14/26 13:31:57.296 < Exit [It] check for source images if enabled in pipeline - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:214 @ 08/14/26 13:31:57.296 (0s) > Enter [AfterAll] scenario "prefetch-gomod" - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:55 @ 08/14/26 13:31:57.296 < Exit [AfterAll] scenario "prefetch-gomod" - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:55 @ 08/14/26 13:31:58.829 (1.533s) > Enter [BeforeAll] scenario "prefetch-rpm" - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:38 @ 08/14/26 13:31:58.83 Image repository for component component-prefetch-rpm in namespace build-e2e-prefetch-rpm do not have right state ('' != 'ready') yet but it has status { { } {<nil> } []}. Created component for scenario: prefetch-rpm RUNNING SCENARIO: prefetch-rpm < Exit [BeforeAll] scenario "prefetch-rpm" - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:38 @ 08/14/26 13:32:12.478 (13.648s) > Enter [It] triggers a PipelineRun - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:89 @ 08/14/26 13:32:12.478 PipelineRun has not been created yet for the component build-e2e-prefetch-rpm/component-prefetch-rpm < Exit [It] triggers a PipelineRun - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:89 @ 08/14/26 13:32:32.676 (20.197s) > Enter [It] the PipelineRun should eventually finish - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:103 @ 08/14/26 13:32:32.676 PipelineRun component-prefetch-rpm-on-pull-request-9gtpr found for Component build-e2e-prefetch-rpm/component-prefetch-rpm PipelineRun component-prefetch-rpm-on-pull-request-9gtpr reason: Running PipelineRun component-prefetch-rpm-on-pull-request-9gtpr reason: Running PipelineRun component-prefetch-rpm-on-pull-request-9gtpr reason: Running PipelineRun component-prefetch-rpm-on-pull-request-9gtpr reason: Running PipelineRun component-prefetch-rpm-on-pull-request-9gtpr reason: Running PipelineRun component-prefetch-rpm-on-pull-request-9gtpr reason: Running PipelineRun component-prefetch-rpm-on-pull-request-9gtpr reason: Running PipelineRun component-prefetch-rpm-on-pull-request-9gtpr reason: Running PipelineRun component-prefetch-rpm-on-pull-request-9gtpr reason: Running PipelineRun component-prefetch-rpm-on-pull-request-9gtpr reason: Running PipelineRun component-prefetch-rpm-on-pull-request-9gtpr reason: Running PipelineRun component-prefetch-rpm-on-pull-request-9gtpr reason: Running PipelineRun component-prefetch-rpm-on-pull-request-9gtpr reason: Completed < Exit [It] the PipelineRun should eventually finish - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:103 @ 08/14/26 13:36:32.999 (4m0.323s) > Enter [It] should push Dockerfile to registry - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:123 @ 08/14/26 13:36:33 < Exit [It] should push Dockerfile to registry - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:123 @ 08/14/26 13:36:34.363 (1.363s) > Enter [It] should validate tekton taskrun test results - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:130 @ 08/14/26 13:36:34.364 < Exit [It] should validate tekton taskrun test results - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:130 @ 08/14/26 13:36:34.975 (612ms) > Enter [It] floating tags are created successfully - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:137 @ 08/14/26 13:36:34.976 [SKIPPED] floating tag validation is not needed for: prefetch-rpm In [It] at: /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:139 @ 08/14/26 13:36:34.976 < Exit [It] floating tags are created successfully - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:137 @ 08/14/26 13:36:34.976 (0s) > Enter [It] image manifest mediaType is correct - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:153 @ 08/14/26 13:36:34.977 < Exit [It] image manifest mediaType is correct - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:153 @ 08/14/26 13:36:35.421 (445ms) > Enter [It] should have Hermeto content in the SBOM in case the build was hermetic - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:180 @ 08/14/26 13:36:35.422 < Exit [It] should have Hermeto content in the SBOM in case the build was hermetic - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:180 @ 08/14/26 13:36:35.639 (217ms) > Enter [It] check for source images if enabled in pipeline - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:214 @ 08/14/26 13:36:35.639 Source build is enabled: false [SKIPPED] Skipping source image check since it is not enabled in the pipeline In [It] at: /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:223 @ 08/14/26 13:36:35.64 < Exit [It] check for source images if enabled in pipeline - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:214 @ 08/14/26 13:36:35.64 (0s) > Enter [AfterAll] scenario "prefetch-rpm" - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:55 @ 08/14/26 13:36:35.64 < Exit [AfterAll] scenario "prefetch-rpm" - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:55 @ 08/14/26 13:36:38.588 (2.948s) > Enter [BeforeAll] scenario "sample-gitlab-basic-auth" - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:38 @ 08/14/26 13:36:38.589 Image repository for component component-sample-gitlab-basic-auth in namespace build-e2e-sample-gitlab-basic-auth do not have right state ('' != 'ready') yet but it has status { { } {<nil> } []}. Created component for scenario: sample-gitlab-basic-auth RUNNING SCENARIO: sample-gitlab-basic-auth < Exit [BeforeAll] scenario "sample-gitlab-basic-auth" - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:38 @ 08/14/26 13:36:50.279 (11.69s) > Enter [It] triggers a PipelineRun - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:89 @ 08/14/26 13:36:50.279 PipelineRun has not been created yet for the component build-e2e-sample-gitlab-basic-auth/component-sample-gitlab-basic-auth < Exit [It] triggers a PipelineRun - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:89 @ 08/14/26 13:37:10.522 (20.243s) > Enter [It] the PipelineRun should eventually finish - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:103 @ 08/14/26 13:37:10.523 PipelineRun component-sample-gitlab-basic-auth-on-pull-request-hbtx2 found for Component build-e2e-sample-gitlab-basic-auth/component-sample-gitlab-basic-auth PipelineRun component-sample-gitlab-basic-auth-on-pull-request-hbtx2 reason: Cancelled attempt 1/3: PipelineRun "component-sample-gitlab-basic-auth-on-pull-request-hbtx2" failed: Cancelled: PipelineRun "component-sample-gitlab-basic-auth-on-pull-request-hbtx2" was cancelledNew PipelineRun component-sample-gitlab-basic-auth-on-pull-request-5pwth found after retrigger for component build-e2e-sample-gitlab-basic-auth/component-sample-gitlab-basic-auth PipelineRun component-sample-gitlab-basic-auth-on-pull-request-5pwth found for Component build-e2e-sample-gitlab-basic-auth/component-sample-gitlab-basic-auth PipelineRun component-sample-gitlab-basic-auth-on-pull-request-5pwth reason: Running PipelineRun component-sample-gitlab-basic-auth-on-pull-request-5pwth reason: Running PipelineRun component-sample-gitlab-basic-auth-on-pull-request-5pwth reason: Running PipelineRun component-sample-gitlab-basic-auth-on-pull-request-5pwth reason: Running PipelineRun component-sample-gitlab-basic-auth-on-pull-request-5pwth reason: Running PipelineRun component-sample-gitlab-basic-auth-on-pull-request-5pwth reason: Running PipelineRun component-sample-gitlab-basic-auth-on-pull-request-5pwth reason: Running PipelineRun component-sample-gitlab-basic-auth-on-pull-request-5pwth reason: Running PipelineRun component-sample-gitlab-basic-auth-on-pull-request-5pwth reason: Running PipelineRun component-sample-gitlab-basic-auth-on-pull-request-5pwth reason: Running PipelineRun component-sample-gitlab-basic-auth-on-pull-request-5pwth reason: Running PipelineRun component-sample-gitlab-basic-auth-on-pull-request-5pwth reason: Running PipelineRun component-sample-gitlab-basic-auth-on-pull-request-5pwth reason: Running PipelineRun component-sample-gitlab-basic-auth-on-pull-request-5pwth reason: Running PipelineRun component-sample-gitlab-basic-auth-on-pull-request-5pwth reason: Running PipelineRun component-sample-gitlab-basic-auth-on-pull-request-5pwth reason: Running PipelineRun component-sample-gitlab-basic-auth-on-pull-request-5pwth reason: Succeeded < Exit [It] the PipelineRun should eventually finish - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:103 @ 08/14/26 13:42:42.187 (5m31.665s) > Enter [It] should push Dockerfile to registry - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:123 @ 08/14/26 13:42:42.188 [SKIPPED] Skipping push Dockerfile to registry validation, it is not applicable here In [It] at: /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:125 @ 08/14/26 13:42:42.188 < Exit [It] should push Dockerfile to registry - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:123 @ 08/14/26 13:42:42.188 (0s) > Enter [It] should validate tekton taskrun test results - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:130 @ 08/14/26 13:42:42.189 < Exit [It] should validate tekton taskrun test results - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:130 @ 08/14/26 13:42:42.313 (124ms) > Enter [It] floating tags are created successfully - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:137 @ 08/14/26 13:42:42.313 [SKIPPED] floating tag validation is not needed for: sample-gitlab-basic-auth In [It] at: /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:139 @ 08/14/26 13:42:42.313 < Exit [It] floating tags are created successfully - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:137 @ 08/14/26 13:42:42.313 (0s) > Enter [It] image manifest mediaType is correct - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:153 @ 08/14/26 13:42:42.314 < Exit [It] image manifest mediaType is correct - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:153 @ 08/14/26 13:42:42.618 (304ms) > Enter [It] should have Hermeto content in the SBOM in case the build was hermetic - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:180 @ 08/14/26 13:42:42.619 [SKIPPED] Hermetic build is not enabled, skipping the test In [It] at: /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:182 @ 08/14/26 13:42:42.619 < Exit [It] should have Hermeto content in the SBOM in case the build was hermetic - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:180 @ 08/14/26 13:42:42.619 (0s) > Enter [It] check for source images if enabled in pipeline - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:214 @ 08/14/26 13:42:42.619 [SKIPPED] Not applicable, skiping source image validation for the scenario sample-gitlab-basic-auth In [It] at: /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:216 @ 08/14/26 13:42:42.62 < Exit [It] check for source images if enabled in pipeline - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:214 @ 08/14/26 13:42:42.62 (0s) > Enter [AfterAll] scenario "sample-gitlab-basic-auth" - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:55 @ 08/14/26 13:42:42.62 < Exit [AfterAll] scenario "sample-gitlab-basic-auth" - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:55 @ 08/14/26 13:42:45.599 (2.979s) > Enter [BeforeAll] scenario "sample-python-basic-oci-docker-build-oci-ta" - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:38 @ 08/14/26 13:42:45.6 Image repository for component component-sample-python-basic-oci-docker-build-oci-ta in namespace build-e2e-sample-python-basic-oci-docker-build-oci-ta do not have right state ('' != 'ready') yet but it has status { { } {<nil> } []}. Created component for scenario: sample-python-basic-oci-docker-build-oci-ta RUNNING SCENARIO: sample-python-basic-oci-docker-build-oci-ta < Exit [BeforeAll] scenario "sample-python-basic-oci-docker-build-oci-ta" - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:38 @ 08/14/26 13:42:58.791 (13.191s) > Enter [It] triggers a PipelineRun - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:89 @ 08/14/26 13:42:58.791 PipelineRun has not been created yet for the component build-e2e-sample-python-basic-oci-docker-build-oci-ta/component-sample-python-basic-oci-docker-build-oci-ta < Exit [It] triggers a PipelineRun - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:89 @ 08/14/26 13:43:19.031 (20.24s) > Enter [It] the PipelineRun should eventually finish - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:103 @ 08/14/26 13:43:19.032 PipelineRun component-sample-python-basic-oci-docker-build-oci-ta-on-pz8ds8 found for Component build-e2e-sample-python-basic-oci-docker-build-oci-ta/component-sample-python-basic-oci-docker-build-oci-ta PipelineRun component-sample-python-basic-oci-docker-build-oci-ta-on-pz8ds8 reason: Running PipelineRun component-sample-python-basic-oci-docker-build-oci-ta-on-pz8ds8 reason: Running PipelineRun component-sample-python-basic-oci-docker-build-oci-ta-on-pz8ds8 reason: Running PipelineRun component-sample-python-basic-oci-docker-build-oci-ta-on-pz8ds8 reason: Running PipelineRun component-sample-python-basic-oci-docker-build-oci-ta-on-pz8ds8 reason: Running PipelineRun component-sample-python-basic-oci-docker-build-oci-ta-on-pz8ds8 reason: Running PipelineRun component-sample-python-basic-oci-docker-build-oci-ta-on-pz8ds8 reason: Running PipelineRun component-sample-python-basic-oci-docker-build-oci-ta-on-pz8ds8 reason: Running PipelineRun component-sample-python-basic-oci-docker-build-oci-ta-on-pz8ds8 reason: Running PipelineRun component-sample-python-basic-oci-docker-build-oci-ta-on-pz8ds8 reason: Completed < Exit [It] the PipelineRun should eventually finish - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:103 @ 08/14/26 13:46:19.218 (3m0.186s) > Enter [It] should push Dockerfile to registry - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:123 @ 08/14/26 13:46:19.218 < Exit [It] should push Dockerfile to registry - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:123 @ 08/14/26 13:46:20.308 (1.09s) > Enter [It] should validate tekton taskrun test results - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:130 @ 08/14/26 13:46:20.309 < Exit [It] should validate tekton taskrun test results - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:130 @ 08/14/26 13:46:20.716 (408ms) > Enter [It] floating tags are created successfully - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:137 @ 08/14/26 13:46:20.717 [SKIPPED] floating tag validation is not needed for: sample-python-basic-oci-docker-build-oci-ta In [It] at: /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:139 @ 08/14/26 13:46:20.717 < Exit [It] floating tags are created successfully - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:137 @ 08/14/26 13:46:20.717 (0s) > Enter [It] image manifest mediaType is correct - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:153 @ 08/14/26 13:46:20.717 < Exit [It] image manifest mediaType is correct - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:153 @ 08/14/26 13:46:21.005 (287ms) > Enter [It] should have Hermeto content in the SBOM in case the build was hermetic - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:180 @ 08/14/26 13:46:21.005 [SKIPPED] Hermetic build is not enabled, skipping the test In [It] at: /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:182 @ 08/14/26 13:46:21.006 < Exit [It] should have Hermeto content in the SBOM in case the build was hermetic - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:180 @ 08/14/26 13:46:21.006 (0s) > Enter [It] check for source images if enabled in pipeline - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:214 @ 08/14/26 13:46:21.006 Source build is enabled: false [SKIPPED] Skipping source image check since it is not enabled in the pipeline In [It] at: /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:223 @ 08/14/26 13:46:21.006 < Exit [It] check for source images if enabled in pipeline - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:214 @ 08/14/26 13:46:21.006 (0s) > Enter [AfterAll] scenario "sample-python-basic-oci-docker-build-oci-ta" - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:55 @ 08/14/26 13:46:21.006 < Exit [AfterAll] scenario "sample-python-basic-oci-docker-build-oci-ta" - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:55 @ 08/14/26 13:46:23.774 (2.767s) > Enter [BeforeAll] scenario "oci-archive" - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:38 @ 08/14/26 13:12:08.29 Image repository for component component-oci-archive in namespace build-e2e-oci-archive do not have right state ('' != 'ready') yet but it has status { { } {<nil> } []}. Image repository for component component-oci-archive in namespace build-e2e-oci-archive do not have right state ('' != 'ready') yet but it has status { { } {<nil> } []}. Created component for scenario: oci-archive RUNNING SCENARIO: oci-archive < Exit [BeforeAll] scenario "oci-archive" - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:38 @ 08/14/26 13:12:34.056 (25.765s) > Enter [It] triggers a PipelineRun - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:89 @ 08/14/26 13:12:34.056 PipelineRun has not been created yet for the component build-e2e-oci-archive/component-oci-archive < Exit [It] triggers a PipelineRun - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:89 @ 08/14/26 13:12:54.288 (20.232s) > Enter [It] the PipelineRun should eventually finish - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:103 @ 08/14/26 13:12:54.289 PipelineRun component-oci-archive-on-pull-request-hkhsd found for Component build-e2e-oci-archive/component-oci-archive PipelineRun component-oci-archive-on-pull-request-hkhsd reason: ResolvingTaskRef PipelineRun component-oci-archive-on-pull-request-hkhsd reason: Running PipelineRun component-oci-archive-on-pull-request-hkhsd reason: Running PipelineRun component-oci-archive-on-pull-request-hkhsd reason: Running PipelineRun component-oci-archive-on-pull-request-hkhsd reason: Running PipelineRun component-oci-archive-on-pull-request-hkhsd reason: Running PipelineRun component-oci-archive-on-pull-request-hkhsd reason: Running PipelineRun component-oci-archive-on-pull-request-hkhsd reason: Running PipelineRun component-oci-archive-on-pull-request-hkhsd reason: Running PipelineRun component-oci-archive-on-pull-request-hkhsd reason: Running PipelineRun component-oci-archive-on-pull-request-hkhsd reason: Running PipelineRun component-oci-archive-on-pull-request-hkhsd reason: Running PipelineRun component-oci-archive-on-pull-request-hkhsd reason: Running PipelineRun component-oci-archive-on-pull-request-hkhsd reason: Running PipelineRun component-oci-archive-on-pull-request-hkhsd reason: Running PipelineRun component-oci-archive-on-pull-request-hkhsd reason: Running PipelineRun component-oci-archive-on-pull-request-hkhsd reason: Running PipelineRun component-oci-archive-on-pull-request-hkhsd reason: Running PipelineRun component-oci-archive-on-pull-request-hkhsd reason: Running PipelineRun component-oci-archive-on-pull-request-hkhsd reason: Running PipelineRun component-oci-archive-on-pull-request-hkhsd reason: Running PipelineRun component-oci-archive-on-pull-request-hkhsd reason: Running PipelineRun component-oci-archive-on-pull-request-hkhsd reason: Running PipelineRun component-oci-archive-on-pull-request-hkhsd reason: Running PipelineRun component-oci-archive-on-pull-request-hkhsd reason: Completed < Exit [It] the PipelineRun should eventually finish - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:103 @ 08/14/26 13:20:54.474 (8m0.185s) > Enter [It] should push Dockerfile to registry - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:123 @ 08/14/26 13:20:54.475 < Exit [It] should push Dockerfile to registry - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:123 @ 08/14/26 13:20:55.563 (1.088s) > Enter [It] should validate tekton taskrun test results - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:130 @ 08/14/26 13:20:55.564 < Exit [It] should validate tekton taskrun test results - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:130 @ 08/14/26 13:20:55.976 (412ms) > Enter [It] floating tags are created successfully - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:137 @ 08/14/26 13:20:55.976 [SKIPPED] floating tag validation is not needed for: oci-archive In [It] at: /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:139 @ 08/14/26 13:20:55.977 < Exit [It] floating tags are created successfully - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:137 @ 08/14/26 13:20:55.977 (0s) > Enter [It] image manifest mediaType is correct - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:153 @ 08/14/26 13:20:55.977 < Exit [It] image manifest mediaType is correct - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:153 @ 08/14/26 13:20:56.259 (282ms) > Enter [It] should have Hermeto content in the SBOM in case the build was hermetic - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:180 @ 08/14/26 13:20:56.26 [SKIPPED] Hermetic build is not enabled, skipping the test In [It] at: /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:182 @ 08/14/26 13:20:56.26 < Exit [It] should have Hermeto content in the SBOM in case the build was hermetic - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:180 @ 08/14/26 13:20:56.26 (0s) > Enter [It] check for source images if enabled in pipeline - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:214 @ 08/14/26 13:20:56.26 Source build is enabled: false [SKIPPED] Skipping source image check since it is not enabled in the pipeline In [It] at: /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:223 @ 08/14/26 13:20:56.26 < Exit [It] check for source images if enabled in pipeline - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:214 @ 08/14/26 13:20:56.26 (0s) > Enter [AfterAll] scenario "oci-archive" - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:55 @ 08/14/26 13:20:56.26 < Exit [AfterAll] scenario "oci-archive" - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:55 @ 08/14/26 13:20:58.462 (2.202s) > Enter [BeforeAll] scenario "prefetch-generic" - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:38 @ 08/14/26 13:20:58.463 Image repository for component component-prefetch-generic in namespace build-e2e-prefetch-generic do not have right state ('' != 'ready') yet but it has status { { } {<nil> } []}. Created component for scenario: prefetch-generic RUNNING SCENARIO: prefetch-generic < Exit [BeforeAll] scenario "prefetch-generic" - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:38 @ 08/14/26 13:21:11.407 (12.944s) > Enter [It] triggers a PipelineRun - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:89 @ 08/14/26 13:21:11.408 PipelineRun has not been created yet for the component build-e2e-prefetch-generic/component-prefetch-generic < Exit [It] triggers a PipelineRun - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:89 @ 08/14/26 13:21:31.601 (20.193s) > Enter [It] the PipelineRun should eventually finish - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:103 @ 08/14/26 13:21:31.601 PipelineRun component-prefetch-generic-on-pull-request-rpwd5 found for Component build-e2e-prefetch-generic/component-prefetch-generic PipelineRun component-prefetch-generic-on-pull-request-rpwd5 reason: Running PipelineRun component-prefetch-generic-on-pull-request-rpwd5 reason: Running PipelineRun component-prefetch-generic-on-pull-request-rpwd5 reason: Running PipelineRun component-prefetch-generic-on-pull-request-rpwd5 reason: Running PipelineRun component-prefetch-generic-on-pull-request-rpwd5 reason: Running PipelineRun component-prefetch-generic-on-pull-request-rpwd5 reason: Running PipelineRun component-prefetch-generic-on-pull-request-rpwd5 reason: Running PipelineRun component-prefetch-generic-on-pull-request-rpwd5 reason: Running PipelineRun component-prefetch-generic-on-pull-request-rpwd5 reason: Running PipelineRun component-prefetch-generic-on-pull-request-rpwd5 reason: Running PipelineRun component-prefetch-generic-on-pull-request-rpwd5 reason: Running PipelineRun component-prefetch-generic-on-pull-request-rpwd5 reason: Running PipelineRun component-prefetch-generic-on-pull-request-rpwd5 reason: Running PipelineRun component-prefetch-generic-on-pull-request-rpwd5 reason: Running PipelineRun component-prefetch-generic-on-pull-request-rpwd5 reason: Running PipelineRun component-prefetch-generic-on-pull-request-rpwd5 reason: Running PipelineRun component-prefetch-generic-on-pull-request-rpwd5 reason: Running PipelineRun component-prefetch-generic-on-pull-request-rpwd5 reason: Running PipelineRun component-prefetch-generic-on-pull-request-rpwd5 reason: Running PipelineRun component-prefetch-generic-on-pull-request-rpwd5 reason: Running PipelineRun component-prefetch-generic-on-pull-request-rpwd5 reason: Running PipelineRun component-prefetch-generic-on-pull-request-rpwd5 reason: Completed < Exit [It] the PipelineRun should eventually finish - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:103 @ 08/14/26 13:28:31.789 (7m0.187s) > Enter [It] should push Dockerfile to registry - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:123 @ 08/14/26 13:28:31.79 < Exit [It] should push Dockerfile to registry - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:123 @ 08/14/26 13:28:33.075 (1.286s) > Enter [It] should validate tekton taskrun test results - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:130 @ 08/14/26 13:28:33.076 < Exit [It] should validate tekton taskrun test results - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:130 @ 08/14/26 13:28:33.76 (684ms) > Enter [It] floating tags are created successfully - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:137 @ 08/14/26 13:28:33.761 [SKIPPED] floating tag validation is not needed for: prefetch-generic In [It] at: /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:139 @ 08/14/26 13:28:33.761 < Exit [It] floating tags are created successfully - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:137 @ 08/14/26 13:28:33.761 (0s) > Enter [It] image manifest mediaType is correct - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:153 @ 08/14/26 13:28:33.761 < Exit [It] image manifest mediaType is correct - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:153 @ 08/14/26 13:28:34.058 (296ms) > Enter [It] should have Hermeto content in the SBOM in case the build was hermetic - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:180 @ 08/14/26 13:28:34.058 < Exit [It] should have Hermeto content in the SBOM in case the build was hermetic - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:180 @ 08/14/26 13:28:34.394 (335ms) > Enter [It] check for source images if enabled in pipeline - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:214 @ 08/14/26 13:28:34.394 Source build is enabled: false [SKIPPED] Skipping source image check since it is not enabled in the pipeline In [It] at: /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:223 @ 08/14/26 13:28:34.394 < Exit [It] check for source images if enabled in pipeline - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:214 @ 08/14/26 13:28:34.394 (0s) > Enter [AfterAll] scenario "prefetch-generic" - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:55 @ 08/14/26 13:28:34.394 < Exit [AfterAll] scenario "prefetch-generic" - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:55 @ 08/14/26 13:28:35.988 (1.594s) > Enter [BeforeAll] scenario "prefetch-pip" - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:38 @ 08/14/26 13:28:35.989 Image repository for component component-prefetch-pip in namespace build-e2e-prefetch-pip do not have right state ('' != 'ready') yet but it has status { { } {<nil> } []}. Created component for scenario: prefetch-pip RUNNING SCENARIO: prefetch-pip < Exit [BeforeAll] scenario "prefetch-pip" - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:38 @ 08/14/26 13:28:50.541 (14.551s) > Enter [It] triggers a PipelineRun - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:89 @ 08/14/26 13:28:50.541 PipelineRun has not been created yet for the component build-e2e-prefetch-pip/component-prefetch-pip < Exit [It] triggers a PipelineRun - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:89 @ 08/14/26 13:29:10.731 (20.189s) > Enter [It] the PipelineRun should eventually finish - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:103 @ 08/14/26 13:29:10.731 PipelineRun component-prefetch-pip-on-pull-request-xnhl4 found for Component build-e2e-prefetch-pip/component-prefetch-pip PipelineRun component-prefetch-pip-on-pull-request-xnhl4 reason: Running PipelineRun component-prefetch-pip-on-pull-request-xnhl4 reason: Running PipelineRun component-prefetch-pip-on-pull-request-xnhl4 reason: Running PipelineRun component-prefetch-pip-on-pull-request-xnhl4 reason: Running PipelineRun component-prefetch-pip-on-pull-request-xnhl4 reason: Running PipelineRun component-prefetch-pip-on-pull-request-xnhl4 reason: Running PipelineRun component-prefetch-pip-on-pull-request-xnhl4 reason: Running PipelineRun component-prefetch-pip-on-pull-request-xnhl4 reason: Running PipelineRun component-prefetch-pip-on-pull-request-xnhl4 reason: Running PipelineRun component-prefetch-pip-on-pull-request-xnhl4 reason: Running PipelineRun component-prefetch-pip-on-pull-request-xnhl4 reason: Running PipelineRun component-prefetch-pip-on-pull-request-xnhl4 reason: Running PipelineRun component-prefetch-pip-on-pull-request-xnhl4 reason: Running PipelineRun component-prefetch-pip-on-pull-request-xnhl4 reason: Running PipelineRun component-prefetch-pip-on-pull-request-xnhl4 reason: Running PipelineRun component-prefetch-pip-on-pull-request-xnhl4 reason: Running PipelineRun component-prefetch-pip-on-pull-request-xnhl4 reason: Running PipelineRun component-prefetch-pip-on-pull-request-xnhl4 reason: Running PipelineRun component-prefetch-pip-on-pull-request-xnhl4 reason: Running PipelineRun component-prefetch-pip-on-pull-request-xnhl4 reason: Completed < Exit [It] the PipelineRun should eventually finish - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:103 @ 08/14/26 13:35:30.937 (6m20.205s) > Enter [It] should push Dockerfile to registry - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:123 @ 08/14/26 13:35:30.938 < Exit [It] should push Dockerfile to registry - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:123 @ 08/14/26 13:35:32.12 (1.183s) > Enter [It] should validate tekton taskrun test results - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:130 @ 08/14/26 13:35:32.121 < Exit [It] should validate tekton taskrun test results - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:130 @ 08/14/26 13:35:32.743 (622ms) > Enter [It] floating tags are created successfully - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:137 @ 08/14/26 13:35:32.744 < Exit [It] floating tags are created successfully - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:137 @ 08/14/26 13:35:33.423 (679ms) > Enter [It] image manifest mediaType is correct - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:153 @ 08/14/26 13:35:33.424 < Exit [It] image manifest mediaType is correct - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:153 @ 08/14/26 13:35:33.825 (401ms) > Enter [It] should have Hermeto content in the SBOM in case the build was hermetic - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:180 @ 08/14/26 13:35:33.825 < Exit [It] should have Hermeto content in the SBOM in case the build was hermetic - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:180 @ 08/14/26 13:35:34.211 (386ms) > Enter [It] check for source images if enabled in pipeline - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:214 @ 08/14/26 13:35:34.212 Source build is enabled: false [SKIPPED] Skipping source image check since it is not enabled in the pipeline In [It] at: /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:223 @ 08/14/26 13:35:34.212 < Exit [It] check for source images if enabled in pipeline - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:214 @ 08/14/26 13:35:34.212 (0s) > Enter [AfterAll] scenario "prefetch-pip" - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:55 @ 08/14/26 13:35:34.212 < Exit [AfterAll] scenario "prefetch-pip" - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:55 @ 08/14/26 13:35:36.091 (1.879s) > Enter [BeforeAll] scenario "prefetch-yarn-modern" - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:38 @ 08/14/26 13:35:36.092 Image repository for component component-prefetch-yarn-modern in namespace build-e2e-prefetch-yarn-modern do not have right state ('' != 'ready') yet but it has status { { } {<nil> } []}. Created component for scenario: prefetch-yarn-modern RUNNING SCENARIO: prefetch-yarn-modern < Exit [BeforeAll] scenario "prefetch-yarn-modern" - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:38 @ 08/14/26 13:35:49.571 (13.479s) > Enter [It] triggers a PipelineRun - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:89 @ 08/14/26 13:35:49.572 PipelineRun has not been created yet for the component build-e2e-prefetch-yarn-modern/component-prefetch-yarn-modern < Exit [It] triggers a PipelineRun - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:89 @ 08/14/26 13:36:09.778 (20.207s) > Enter [It] the PipelineRun should eventually finish - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:103 @ 08/14/26 13:36:09.779 PipelineRun component-prefetch-yarn-modern-on-pull-request-8nprt found for Component build-e2e-prefetch-yarn-modern/component-prefetch-yarn-modern PipelineRun component-prefetch-yarn-modern-on-pull-request-8nprt reason: Running PipelineRun component-prefetch-yarn-modern-on-pull-request-8nprt reason: Running PipelineRun component-prefetch-yarn-modern-on-pull-request-8nprt reason: Running PipelineRun component-prefetch-yarn-modern-on-pull-request-8nprt reason: Running PipelineRun component-prefetch-yarn-modern-on-pull-request-8nprt reason: Running PipelineRun component-prefetch-yarn-modern-on-pull-request-8nprt reason: Running PipelineRun component-prefetch-yarn-modern-on-pull-request-8nprt reason: Running PipelineRun component-prefetch-yarn-modern-on-pull-request-8nprt reason: Running PipelineRun component-prefetch-yarn-modern-on-pull-request-8nprt reason: Running PipelineRun component-prefetch-yarn-modern-on-pull-request-8nprt reason: Running PipelineRun component-prefetch-yarn-modern-on-pull-request-8nprt reason: Completed < Exit [It] the PipelineRun should eventually finish - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:103 @ 08/14/26 13:39:29.984 (3m20.205s) > Enter [It] should push Dockerfile to registry - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:123 @ 08/14/26 13:39:29.984 < Exit [It] should push Dockerfile to registry - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:123 @ 08/14/26 13:39:31.036 (1.052s) > Enter [It] should validate tekton taskrun test results - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:130 @ 08/14/26 13:39:31.041 < Exit [It] should validate tekton taskrun test results - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:130 @ 08/14/26 13:39:31.609 (569ms) > Enter [It] floating tags are created successfully - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:137 @ 08/14/26 13:39:31.61 [SKIPPED] floating tag validation is not needed for: prefetch-yarn-modern In [It] at: /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:139 @ 08/14/26 13:39:31.61 < Exit [It] floating tags are created successfully - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:137 @ 08/14/26 13:39:31.61 (0s) > Enter [It] image manifest mediaType is correct - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:153 @ 08/14/26 13:39:31.611 < Exit [It] image manifest mediaType is correct - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:153 @ 08/14/26 13:39:31.953 (342ms) > Enter [It] should have Hermeto content in the SBOM in case the build was hermetic - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:180 @ 08/14/26 13:39:31.954 < Exit [It] should have Hermeto content in the SBOM in case the build was hermetic - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:180 @ 08/14/26 13:39:32.155 (201ms) > Enter [It] check for source images if enabled in pipeline - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:214 @ 08/14/26 13:39:32.156 Source build is enabled: false [SKIPPED] Skipping source image check since it is not enabled in the pipeline In [It] at: /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:223 @ 08/14/26 13:39:32.156 < Exit [It] check for source images if enabled in pipeline - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:214 @ 08/14/26 13:39:32.156 (0s) > Enter [AfterAll] scenario "prefetch-yarn-modern" - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:55 @ 08/14/26 13:39:32.156 < Exit [AfterAll] scenario "prefetch-yarn-modern" - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:55 @ 08/14/26 13:39:33.907 (1.751s) > Enter [BeforeAll] scenario "sample-python-basic-docker" - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:38 @ 08/14/26 13:39:33.908 Image repository for component component-sample-python-basic-docker in namespace build-e2e-sample-python-basic-docker do not have right state ('' != 'ready') yet but it has status { { } {<nil> } []}. Created component for scenario: sample-python-basic-docker RUNNING SCENARIO: sample-python-basic-docker < Exit [BeforeAll] scenario "sample-python-basic-docker" - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:38 @ 08/14/26 13:39:45.433 (11.525s) > Enter [It] triggers a PipelineRun - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:89 @ 08/14/26 13:39:45.433 PipelineRun has not been created yet for the component build-e2e-sample-python-basic-docker/component-sample-python-basic-docker < Exit [It] triggers a PipelineRun - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:89 @ 08/14/26 13:40:05.639 (20.206s) > Enter [It] the PipelineRun should eventually finish - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:103 @ 08/14/26 13:40:05.64 PipelineRun component-sample-python-basic-docker-on-pull-request-vp77h found for Component build-e2e-sample-python-basic-docker/component-sample-python-basic-docker PipelineRun component-sample-python-basic-docker-on-pull-request-vp77h reason: ResolvingTaskRef PipelineRun component-sample-python-basic-docker-on-pull-request-vp77h reason: Running PipelineRun component-sample-python-basic-docker-on-pull-request-vp77h reason: Running PipelineRun component-sample-python-basic-docker-on-pull-request-vp77h reason: Running PipelineRun component-sample-python-basic-docker-on-pull-request-vp77h reason: Running PipelineRun component-sample-python-basic-docker-on-pull-request-vp77h reason: Running PipelineRun component-sample-python-basic-docker-on-pull-request-vp77h reason: Running PipelineRun component-sample-python-basic-docker-on-pull-request-vp77h reason: Running PipelineRun component-sample-python-basic-docker-on-pull-request-vp77h reason: Running PipelineRun component-sample-python-basic-docker-on-pull-request-vp77h reason: Running PipelineRun component-sample-python-basic-docker-on-pull-request-vp77h reason: Completed < Exit [It] the PipelineRun should eventually finish - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:103 @ 08/14/26 13:43:25.845 (3m20.206s) > Enter [It] should push Dockerfile to registry - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:123 @ 08/14/26 13:43:25.846 < Exit [It] should push Dockerfile to registry - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:123 @ 08/14/26 13:43:27.051 (1.205s) > Enter [It] should validate tekton taskrun test results - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:130 @ 08/14/26 13:43:27.052 < Exit [It] should validate tekton taskrun test results - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:130 @ 08/14/26 13:43:27.596 (545ms) > Enter [It] floating tags are created successfully - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:137 @ 08/14/26 13:43:27.597 [SKIPPED] floating tag validation is not needed for: sample-python-basic-docker In [It] at: /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:139 @ 08/14/26 13:43:27.597 < Exit [It] floating tags are created successfully - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:137 @ 08/14/26 13:43:27.597 (0s) > Enter [It] image manifest mediaType is correct - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:153 @ 08/14/26 13:43:27.598 < Exit [It] image manifest mediaType is correct - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:153 @ 08/14/26 13:43:27.923 (325ms) > Enter [It] should have Hermeto content in the SBOM in case the build was hermetic - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:180 @ 08/14/26 13:43:27.923 [SKIPPED] Hermetic build is not enabled, skipping the test In [It] at: /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:182 @ 08/14/26 13:43:27.923 < Exit [It] should have Hermeto content in the SBOM in case the build was hermetic - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:180 @ 08/14/26 13:43:27.923 (0s) > Enter [It] check for source images if enabled in pipeline - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:214 @ 08/14/26 13:43:27.924 Source build is enabled: false [SKIPPED] Skipping source image check since it is not enabled in the pipeline In [It] at: /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:223 @ 08/14/26 13:43:27.924 < Exit [It] check for source images if enabled in pipeline - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:214 @ 08/14/26 13:43:27.924 (0s) > Enter [AfterAll] scenario "sample-python-basic-docker" - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:55 @ 08/14/26 13:43:27.924 < Exit [AfterAll] scenario "sample-python-basic-docker" - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:55 @ 08/14/26 13:43:30.267 (2.343s) > Enter [BeforeAll] scenario "sample-python-basic-symlink" - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:38 @ 08/14/26 13:43:30.268 Image repository for component component-sample-python-basic-symlink in namespace build-e2e-sample-python-basic-symlink do not have right state ('' != 'ready') yet but it has status { { } {<nil> } []}. Created component for scenario: sample-python-basic-symlink RUNNING SCENARIO: sample-python-basic-symlink < Exit [BeforeAll] scenario "sample-python-basic-symlink" - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:38 @ 08/14/26 13:43:41.81 (11.542s) > Enter [It] triggers a PipelineRun - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:89 @ 08/14/26 13:43:41.81 PipelineRun has not been created yet for the component build-e2e-sample-python-basic-symlink/component-sample-python-basic-symlink < Exit [It] triggers a PipelineRun - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:89 @ 08/14/26 13:44:02.016 (20.206s) > Enter [It] the PipelineRun should eventually finish - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:103 @ 08/14/26 13:44:02.017 current pipelinerun reason: Running current pipelinerun reason: Running < Exit [It] the PipelineRun should eventually finish - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:103 @ 08/14/26 13:44:42.428 (40.411s) > Enter [It] should push Dockerfile to registry - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:123 @ 08/14/26 13:44:42.429 [SKIPPED] Skipping push Dockerfile to registry validation, it is not applicable here In [It] at: /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:125 @ 08/14/26 13:44:42.429 < Exit [It] should push Dockerfile to registry - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:123 @ 08/14/26 13:44:42.429 (0s) > Enter [It] should validate tekton taskrun test results - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:130 @ 08/14/26 13:44:42.43 [SKIPPED] Skipping tekton task results validation, not applicable In [It] at: /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:132 @ 08/14/26 13:44:42.43 < Exit [It] should validate tekton taskrun test results - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:130 @ 08/14/26 13:44:42.43 (0s) > Enter [It] floating tags are created successfully - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:137 @ 08/14/26 13:44:42.43 [SKIPPED] floating tag validation is not needed for: sample-python-basic-symlink In [It] at: /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:139 @ 08/14/26 13:44:42.43 < Exit [It] floating tags are created successfully - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:137 @ 08/14/26 13:44:42.43 (0s) > Enter [It] image manifest mediaType is correct - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:153 @ 08/14/26 13:44:42.431 [SKIPPED] mediaType validation is not required for scenario: sample-python-basic-symlink In [It] at: /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:155 @ 08/14/26 13:44:42.431 < Exit [It] image manifest mediaType is correct - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:153 @ 08/14/26 13:44:42.431 (0s) > Enter [It] should have Hermeto content in the SBOM in case the build was hermetic - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:180 @ 08/14/26 13:44:42.431 [SKIPPED] Hermetic build is not enabled, skipping the test In [It] at: /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:182 @ 08/14/26 13:44:42.431 < Exit [It] should have Hermeto content in the SBOM in case the build was hermetic - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:180 @ 08/14/26 13:44:42.431 (0s) > Enter [It] check for source images if enabled in pipeline - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:214 @ 08/14/26 13:44:42.432 Source build is enabled: false [SKIPPED] Skipping source image check since it is not enabled in the pipeline In [It] at: /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:223 @ 08/14/26 13:44:42.432 < Exit [It] check for source images if enabled in pipeline - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:214 @ 08/14/26 13:44:42.432 (0s) > Enter [AfterAll] scenario "sample-python-basic-symlink" - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:55 @ 08/14/26 13:44:42.432 < Exit [AfterAll] scenario "sample-python-basic-symlink" - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:55 @ 08/14/26 13:44:44.849 (2.417s) > Enter [BeforeAll] scenario "prefetch-bundler" - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:38 @ 08/14/26 13:12:08.297 Image repository for component component-prefetch-bundler in namespace build-e2e-prefetch-bundler do not have right state ('' != 'ready') yet but it has status { { } {<nil> } []}. Created component for scenario: prefetch-bundler RUNNING SCENARIO: prefetch-bundler < Exit [BeforeAll] scenario "prefetch-bundler" - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:38 @ 08/14/26 13:12:21.561 (13.264s) > Enter [It] triggers a PipelineRun - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:89 @ 08/14/26 13:12:21.561 PipelineRun has not been created yet for the component build-e2e-prefetch-bundler/component-prefetch-bundler PipelineRun has not been created yet for the component build-e2e-prefetch-bundler/component-prefetch-bundler < Exit [It] triggers a PipelineRun - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:89 @ 08/14/26 13:13:01.867 (40.305s) > Enter [It] the PipelineRun should eventually finish - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:103 @ 08/14/26 13:13:01.867 PipelineRun component-prefetch-bundler-on-pull-request-ncd7p found for Component build-e2e-prefetch-bundler/component-prefetch-bundler PipelineRun component-prefetch-bundler-on-pull-request-ncd7p reason: Running PipelineRun component-prefetch-bundler-on-pull-request-ncd7p reason: Running PipelineRun component-prefetch-bundler-on-pull-request-ncd7p reason: Running PipelineRun component-prefetch-bundler-on-pull-request-ncd7p reason: Running PipelineRun component-prefetch-bundler-on-pull-request-ncd7p reason: Running PipelineRun component-prefetch-bundler-on-pull-request-ncd7p reason: Running PipelineRun component-prefetch-bundler-on-pull-request-ncd7p reason: Running PipelineRun component-prefetch-bundler-on-pull-request-ncd7p reason: Running PipelineRun component-prefetch-bundler-on-pull-request-ncd7p reason: Running PipelineRun component-prefetch-bundler-on-pull-request-ncd7p reason: Running PipelineRun component-prefetch-bundler-on-pull-request-ncd7p reason: Running PipelineRun component-prefetch-bundler-on-pull-request-ncd7p reason: Running PipelineRun component-prefetch-bundler-on-pull-request-ncd7p reason: Running PipelineRun component-prefetch-bundler-on-pull-request-ncd7p reason: Running PipelineRun component-prefetch-bundler-on-pull-request-ncd7p reason: Running PipelineRun component-prefetch-bundler-on-pull-request-ncd7p reason: Running PipelineRun component-prefetch-bundler-on-pull-request-ncd7p reason: Running PipelineRun component-prefetch-bundler-on-pull-request-ncd7p reason: Running PipelineRun component-prefetch-bundler-on-pull-request-ncd7p reason: Running PipelineRun component-prefetch-bundler-on-pull-request-ncd7p reason: Running PipelineRun component-prefetch-bundler-on-pull-request-ncd7p reason: Running PipelineRun component-prefetch-bundler-on-pull-request-ncd7p reason: Running PipelineRun component-prefetch-bundler-on-pull-request-ncd7p reason: PipelineRunStopping PipelineRun component-prefetch-bundler-on-pull-request-ncd7p reason: PipelineRunStopping PipelineRun component-prefetch-bundler-on-pull-request-ncd7p reason: PipelineRunStopping PipelineRun component-prefetch-bundler-on-pull-request-ncd7p reason: PipelineRunStopping PipelineRun component-prefetch-bundler-on-pull-request-ncd7p reason: PipelineRunStopping PipelineRun component-prefetch-bundler-on-pull-request-ncd7p reason: PipelineRunStopping PipelineRun component-prefetch-bundler-on-pull-request-ncd7p reason: Failed attempt 1/3: PipelineRun "component-prefetch-bundler-on-pull-request-ncd7p" failed: pod: component-prefetch-bundler-3cbad5cedc1d47511a48f3c5ad3737bd-pod | init container: prepare 2026/08/14 13:18:18 Entrypoint initialization pod: component-prefetch-bundler-3cbad5cedc1d47511a48f3c5ad3737bd-pod | init container: place-scripts 2026/08/14 13:18:26 Decoded script /tekton/scripts/script-0-zb22m 2026/08/14 13:18:26 Decoded script /tekton/scripts/script-1-qncnh 2026/08/14 13:18:26 Decoded script /tekton/scripts/script-2-g6f89 2026/08/14 13:18:26 Decoded script /tekton/scripts/script-3-jw898 2026/08/14 13:18:26 Decoded script /tekton/scripts/script-4-cwk7r 2026/08/14 13:18:26 Decoded script /tekton/scripts/script-5-rvt8d pod: component-prefetch-bundler-3cbad5cedc1d47511a48f3c5ad3737bd-pod | container step-introspect: Artifact type will be determined by introspection. Checking the media type of the OCI artifact... [retry] executing: skopeo inspect --raw --retry-times 3 docker://quay.io/redhat-appstudio-qe/build-e2e-prefetch-bundler/component-prefetch-bundler:on-pr-cd88ba9cbcd358acc1785329ed6ce0c60587e84c The media type of the OCI artifact is application/vnd.docker.distribution.manifest.v2+json. Looking for image labels that indicate this might be an operator bundle... [retry] executing: skopeo inspect --retry-times 3 docker://quay.io/redhat-appstudio-qe/build-e2e-prefetch-bundler/component-prefetch-bundler:on-pr-cd88ba9cbcd358acc1785329ed6ce0c60587e84c Found 0 matching labels. Expecting 3 or more to identify this image as an operator bundle. Introspection concludes that this artifact is of type "application". pod: component-prefetch-bundler-3cbad5cedc1d47511a48f3c5ad3737bd-pod | container step-generate-container-auth: Selecting auth for quay.io/redhat-appstudio-qe/build-e2e-prefetch-bundler/component-prefetch-bundler:on-pr-cd88ba9cbcd358acc1785329ed6ce0c60587e84c Using token for quay.io/redhat-appstudio-qe/build-e2e-prefetch-bundler/component-prefetch-bundler Auth json written to "/auth/auth.json". pod: component-prefetch-bundler-3cbad5cedc1d47511a48f3c5ad3737bd-pod | container step-set-skip-for-bundles: 2026/08/14 13:19:52 INFO Step was skipped due to when expressions were evaluated to false. pod: component-prefetch-bundler-3cbad5cedc1d47511a48f3c5ad3737bd-pod | container step-app-check: time="2026-08-14T13:19:52Z" level=info msg="certification library version" version="1.19.2 <commit: ffbc84882f216fca874feeaa44ce3df95ee5f07a>" time="2026-08-14T13:19:53Z" level=info msg="running checks for quay.io/redhat-appstudio-qe/build-e2e-prefetch-bundler/component-prefetch-bundler:on-pr-cd88ba9cbcd358acc1785329ed6ce0c60587e84c for platform amd64" time="2026-08-14T13:19:53Z" level=info msg="target image" image="quay.io/redhat-appstudio-qe/build-e2e-prefetch-bundler/component-prefetch-bundler:on-pr-cd88ba9cbcd358acc1785329ed6ce0c60587e84c" Error: failed to extract tarball: failed to drain io reader: unexpected EOF 2026/08/14 13:20:00 failed to extract tarball: failed to drain io reader: unexpected EOF pod: component-prefetch-bundler-3cbad5cedc1d47511a48f3c5ad3737bd-pod | container step-app-set-outcome: 2026/08/14 13:20:01 Skipping step because a previous step failed pod: component-prefetch-bundler-3cbad5cedc1d47511a48f3c5ad3737bd-pod | container step-final-outcome: 2026/08/14 13:20:01 Skipping step because a previous step failed pod: component-prefetch-bundler-cde8149fb34562fffbab5b6dbd1243e3-pod | init container: prepare 2026/08/14 13:19:21 Entrypoint initialization pod: component-prefetch-bundler-cde8149fb34562fffbab5b6dbd1243e3-pod | init container: place-scripts 2026/08/14 13:19:29 Decoded script /tekton/scripts/script-0-4tpf7 2026/08/14 13:19:29 Decoded script /tekton/scripts/script-1-hsccx pod: component-prefetch-bundler-cde8149fb34562fffbab5b6dbd1243e3-pod | container step-extract-and-scan-image: Starting clamd ... clamd is ready! Detecting artifact type for quay.io/redhat-appstudio-qe/build-e2e-prefetch-bundler/component-prefetch-bundler@sha256:1806486990f86738e26ea4751f25cd961b841d64af0fffe4c91affa4f2d116f9. Detected container image. Processing image manifests. Running "oc image extract" on image of arch amd64 Scanning image for arch amd64. This operation may take a while. ----------- SCAN SUMMARY ----------- Infected files: 0 Time: 25.596 sec (0 m 25 s) Start Date: 2026:08:14 13:20:04 End Date: 2026:08:14 13:20:30 Executed-on: Scan was executed on clamsdcan version - ClamAV 1.4.6/28092/Fri Aug 14 06:27:02 2026 Database version: 28092 [ { "filename": "/work/logs/clamscan-result-log-amd64.json", "namespace": "required_checks", "successes": 2 } ] {"timestamp":"1786713630","namespace":"required_checks","successes":2,"failures":0,"warnings":0,"result":"SUCCESS","note":"All checks passed successfully"} {"timestamp":"1786713630","namespace":"required_checks","successes":2,"failures":0,"warnings":0,"result":"SUCCESS","note":"All checks passed successfully"} {"timestamp":"1786713630","namespace":"required_checks","successes":2,"failures":0,"warnings":0,"result":"SUCCESS","note":"All checks passed successfully"} {"image": {"pullspec": "quay.io/redhat-appstudio-qe/build-e2e-prefetch-bundler/component-prefetch-bundler:on-pr-cd88ba9cbcd358acc1785329ed6ce0c60587e84c", "digests": ["sha256:1806486990f86738e26ea4751f25cd961b841d64af0fffe4c91affa4f2d116f9"]}} pod: component-prefetch-bundler-cde8149fb34562fffbab5b6dbd1243e3-pod | container step-upload: Selecting auth Using token for quay.io/redhat-appstudio-qe/build-e2e-prefetch-bundler/component-prefetch-bundler Attaching to quay.io/redhat-appstudio-qe/build-e2e-prefetch-bundler/component-prefetch-bundler:on-pr-cd88ba9cbcd358acc1785329ed6ce0c60587e84c [retry] executing: oras attach --no-tty --registry-config /home/taskuser/auth.json --artifact-type application/vnd.clamav quay.io/redhat-appstudio-qe/build-e2e-prefetch-bundler/component-prefetch-bundler:on-pr-cd88ba9cbcd358acc1785329ed6ce0c60587e84c@sha256:1806486990f86738e26ea4751f25cd961b841d64af0fffe4c91affa4f2d116f9 clamscan-result-amd64.log:text/vnd.clamav clamscan-ec-test-amd64.json:application/vnd.konflux.test_output+json Preparing clamscan-result-amd64.log Preparing clamscan-ec-test-amd64.json Exists 44136fa355b3 application/vnd.oci.empty.v1+json Uploading b5dd9eb661cf clamscan-ec-test-amd64.json Uploading ac99e6fb81d5 clamscan-result-amd64.log Uploaded b5dd9eb661cf clamscan-ec-test-amd64.json Uploaded ac99e6fb81d5 clamscan-result-amd64.log Uploading ae6b3afcd5a2 application/vnd.oci.image.manifest.v1+json Uploaded ae6b3afcd5a2 application/vnd.oci.image.manifest.v1+json Attached to [registry] quay.io/redhat-appstudio-qe/build-e2e-prefetch-bundler/component-prefetch-bundler:on-pr-cd88ba9cbcd358acc1785329ed6ce0c60587e84c@sha256:1806486990f86738e26ea4751f25cd961b841d64af0fffe4c91affa4f2d116f9 Digest: sha256:ae6b3afcd5a2e48cf41acd823b0e1be77100860336a23a30a683e4fe9fef7935 pod: component-prefetch-bundler-on-pull-request-ncd7p-apply-tags-pod | init container: prepare 2026/08/14 13:18:20 Entrypoint initialization pod: component-prefetch-bundler-on-pull-request-ncd7p-apply-tags-pod | container step-apply-additional-tags: time="2026-08-14T13:18:43Z" level=info msg="[param] image-url: quay.io/redhat-appstudio-qe/build-e2e-prefetch-bundler/component-prefetch-bundler:on-pr-cd88ba9cbcd358acc1785329ed6ce0c60587e84c" time="2026-08-14T13:18:43Z" level=info msg="[param] digest: sha256:1806486990f86738e26ea4751f25cd961b841d64af0fffe4c91affa4f2d116f9" time="2026-08-14T13:18:43Z" level=info msg="[param] tags-from-image-label: konflux.additional-tags" time="2026-08-14T13:18:45Z" level=warning msg="No tags given in 'konflux.additional-tags' image label" {"tags":null} pod: component-prefetch-bundler-on-pull-request-ncd7p-clair-scan-pod | init container: prepare 2026/08/14 13:18:16 Entrypoint initialization pod: component-prefetch-bundler-on-pull-request-ncd7p-clair-scan-pod | init container: place-scripts 2026/08/14 13:18:20 Decoded script /tekton/scripts/script-0-trr58 2026/08/14 13:18:20 Decoded script /tekton/scripts/script-1-w4vfq 2026/08/14 13:18:20 Decoded script /tekton/scripts/script-2-8hw2z 2026/08/14 13:18:20 Decoded script /tekton/scripts/script-3-kkz4g pod: component-prefetch-bundler-on-pull-request-ncd7p-clair-scan-pod | container step-get-image-manifests: Inspecting raw image manifest quay.io/redhat-appstudio-qe/build-e2e-prefetch-bundler/component-prefetch-bundler@sha256:1806486990f86738e26ea4751f25cd961b841d64af0fffe4c91affa4f2d116f9. Using token for quay.io/redhat-appstudio-qe/build-e2e-prefetch-bundler/component-prefetch-bundler pod: component-prefetch-bundler-on-pull-request-ncd7p-clair-scan-pod | container step-get-vulnerabilities: Using token for quay.io/redhat-appstudio-qe/build-e2e-prefetch-bundler/component-prefetch-bundler Running clair-action on amd64 image manifest... 2026/08/14 13:20:11 INFO matchers created matcher.java-maven=https://pkg.go.dev/github.com/quay/claircore/java matcher.photon=https://pkg.go.dev/github.com/quay/claircore/photon matcher.rhel-container-matcher=https://pkg.go.dev/github.com/quay/claircore/rhel/rhcc matcher.suse=https://pkg.go.dev/github.com/quay/claircore/suse matcher.rhel=https://pkg.go.dev/github.com/quay/claircore/rhel matcher.alpine-matcher=https://pkg.go.dev/github.com/quay/claircore/alpine matcher.ruby-gem=https://pkg.go.dev/github.com/quay/claircore/ruby matcher.ubuntu-matcher=https://pkg.go.dev/github.com/quay/claircore/ubuntu matcher.aws-matcher=https://pkg.go.dev/github.com/quay/claircore/aws matcher.debian-matcher=https://pkg.go.dev/github.com/quay/claircore/debian matcher.oracle=https://pkg.go.dev/github.com/quay/claircore/oracle matcher.python=https://pkg.go.dev/github.com/quay/claircore/python matcher.gobin=https://pkg.go.dev/github.com/quay/claircore/gobin 2026/08/14 13:20:11 INFO vex factory configured base_url=https://security.access.redhat.com/data/csaf/v2/vex/ compressed_file_timeout=2m0s 2026/08/14 13:20:11 INFO libvuln initialized 2026/08/14 13:20:11 INFO registered configured scanners 2026/08/14 13:20:11 INFO constructing 2026/08/14 13:20:11 INFO index request start 2026/08/14 13:20:11 INFO starting scan 2026/08/14 13:20:11 INFO manifest to be scanned 2026/08/14 13:20:11 INFO layers fetch start 2026/08/14 13:20:19 INFO layers fetch success 2026/08/14 13:20:19 INFO layers fetch done 2026/08/14 13:20:19 INFO layers scan start 2026/08/14 13:20:21 WARN rpm source packages always record 0 epoch; this may cause incorrect matching see-also="https://github.com/rpm-software-management/rpm/issues/2796 https://github.com/rpm-software-management/rpm/discussions/3703 https://github.com/rpm-software-management/rpm/pull/3755" 2026/08/14 13:20:26 INFO layers scan done 2026/08/14 13:20:26 INFO starting index manifest 2026/08/14 13:20:26 INFO finishing scan 2026/08/14 13:20:26 INFO manifest successfully scanned 2026/08/14 13:20:26 INFO index request done { "manifest_hash": "sha256:1806486990f86738e26ea4751f25cd961b841d64af0fffe4c91affa4f2d116f9", "packages": { "+8b2rLdXTkZ4Ylx7vWU2tQ==": { "id": "+8b2rLdXTkZ4Ylx7vWU2tQ==", "name": "systemd-libs", "version": "252-55.el9_7.2", "kind": "binary", "source": { "id": "", "name": "systemd", "version": "252-55.el9_7.2", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "+A7/nzEXX3Q/xJZ50VMnlQ==": { "id": "+A7/nzEXX3Q/xJZ50VMnlQ==", "name": "libidn2", "version": "2.3.0-7.el9", "kind": "binary", "source": { "id": "", "name": "libidn2", "version": "2.3.0-7.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "+B22ALb6YCnXu+3s6afaLg==": { "id": "+B22ALb6YCnXu+3s6afaLg==", "name": "python3-decorator", "version": "4.4.2-6.el9", "kind": "binary", "source": { "id": "", "name": "python-decorator", "version": "4.4.2-6.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "noarch", "cpe": "", "detector": null }, "+ELGclZlzVhkDoWJwZc9OA==": { "id": "+ELGclZlzVhkDoWJwZc9OA==", "name": "libtirpc", "version": "1.3.3-9.el9", "kind": "binary", "source": { "id": "", "name": "libtirpc", "version": "1.3.3-9.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "+HmNQdmjJTL5gC4nHHd6rw==": { "id": "+HmNQdmjJTL5gC4nHHd6rw==", "name": "kernel-srpm-macros", "version": "1.0-14.el9", "kind": "binary", "source": { "id": "", "name": "kernel-srpm-macros", "version": "1.0-14.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "noarch", "cpe": "", "detector": null }, "+X1MdmtPTbyDb/wq7joJhA==": { "id": "+X1MdmtPTbyDb/wq7joJhA==", "name": "libtool-ltdl", "version": "2.4.6-46.el9", "kind": "binary", "source": { "id": "", "name": "libtool", "version": "2.4.6-46.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "+bwl6UbMaWOBWdHNekJsEw==": { "id": "+bwl6UbMaWOBWdHNekJsEw==", "name": "coreutils-single", "version": "8.32-39.el9", "kind": "binary", "source": { "id": "", "name": "coreutils", "version": "8.32-39.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "+kdviPHeaPmwEsPQK85KjQ==": { "id": "+kdviPHeaPmwEsPQK85KjQ==", "name": "openssl", "version": "1:3.5.1-4.el9_7", "kind": "binary", "source": { "id": "", "name": "openssl", "version": "3.5.1-4.el9_7", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "+v/DtyduRnxay/g57zCBpw==": { "id": "+v/DtyduRnxay/g57zCBpw==", "name": "python3-librepo", "version": "1.14.5-3.el9", "kind": "binary", "source": { "id": "", "name": "librepo", "version": "1.14.5-3.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "+y+as2YNBEvOddTPxl73DA==": { "id": "+y+as2YNBEvOddTPxl73DA==", "name": "source-highlight", "version": "3.1.9-12.el9", "kind": "binary", "source": { "id": "", "name": "source-highlight", "version": "3.1.9-12.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "/Bb6eVO+je9kbuIGTvt6Ww==": { "id": "/Bb6eVO+je9kbuIGTvt6Ww==", "name": "ncurses", "version": "6.2-12.20210508.el9", "kind": "binary", "source": { "id": "", "name": "ncurses", "version": "6.2-12.20210508.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "/L1kFEoHZTukrNTCQLypFQ==": { "id": "/L1kFEoHZTukrNTCQLypFQ==", "name": "xz-libs", "version": "5.2.5-8.el9_0", "kind": "binary", "source": { "id": "", "name": "xz", "version": "5.2.5-8.el9_0", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "/O7rOBo1qRMFm3q3Kf3mEw==": { "id": "/O7rOBo1qRMFm3q3Kf3mEw==", "name": "libselinux", "version": "3.6-3.el9", "kind": "binary", "source": { "id": "", "name": "libselinux", "version": "3.6-3.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "/THiuz93dsCZJETS3A4Xtw==": { "id": "/THiuz93dsCZJETS3A4Xtw==", "name": "libcom_err", "version": "1.46.5-8.el9", "kind": "binary", "source": { "id": "", "name": "e2fsprogs", "version": "1.46.5-8.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "/XUXPfxfCal3j0ldx+af3A==": { "id": "/XUXPfxfCal3j0ldx+af3A==", "name": "bzip2", "version": "1.0.8-10.el9_5", "kind": "binary", "source": { "id": "", "name": "bzip2", "version": "1.0.8-10.el9_5", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "/h/TBQhfoSMCmey5oN87jA==": { "id": "/h/TBQhfoSMCmey5oN87jA==", "name": "libsolv", "version": "0.7.24-3.el9", "kind": "binary", "source": { "id": "", "name": "libsolv", "version": "0.7.24-3.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "/l8wc0qlQdZdqgMIy+AX4w==": { "id": "/l8wc0qlQdZdqgMIy+AX4w==", "name": "gcc-c++", "version": "11.5.0-11.el9", "kind": "binary", "source": { "id": "", "name": "gcc", "version": "11.5.0-11.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "/oIjTiZph8FPjlWNL5s82w==": { "id": "/oIjTiZph8FPjlWNL5s82w==", "name": "environment-modules", "version": "5.3.0-2.el9", "kind": "binary", "source": { "id": "", "name": "environment-modules", "version": "5.3.0-2.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "/oLe91LMLglvpqo76adFGw==": { "id": "/oLe91LMLglvpqo76adFGw==", "name": "dwz", "version": "0.16-1.el9", "kind": "binary", "source": { "id": "", "name": "dwz", "version": "0.16-1.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "/ub7EE8Da46T0x7lRdlVJg==": { "id": "/ub7EE8Da46T0x7lRdlVJg==", "name": "libsmartcols", "version": "2.37.4-21.el9", "kind": "binary", "source": { "id": "", "name": "util-linux", "version": "2.37.4-21.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "0133y/ZC+9hrvuSzgka7cw==": { "id": "0133y/ZC+9hrvuSzgka7cw==", "name": "man-db", "version": "2.9.3-9.el9", "kind": "binary", "source": { "id": "", "name": "man-db", "version": "2.9.3-9.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "04b0yaCHYk5DVzS89hVjvw==": { "id": "04b0yaCHYk5DVzS89hVjvw==", "name": "libeconf", "version": "0.4.1-4.el9", "kind": "binary", "source": { "id": "", "name": "libeconf", "version": "0.4.1-4.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "09fH92fqoWDOaYEpwQ9p2g==": { "id": "09fH92fqoWDOaYEpwQ9p2g==", "name": "ed", "version": "1.14.2-12.el9", "kind": "binary", "source": { "id": "", "name": "ed", "version": "1.14.2-12.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "09r8DbZFJmI1tQW/a+ZlWQ==": { "id": "09r8DbZFJmI1tQW/a+ZlWQ==", "name": "shadow-utils", "version": "2:4.9-15.el9", "kind": "binary", "source": { "id": "", "name": "shadow-utils", "version": "4.9-15.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "0NHnPl3pNsT2FH8oGcfyEw==": { "id": "0NHnPl3pNsT2FH8oGcfyEw==", "name": "perl-libs", "version": "4:5.32.1-481.1.el9_6", "kind": "binary", "source": { "id": "", "name": "perl", "version": "5.32.1-481.1.el9_6", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "0fqyUk3Q4wjepXsEzVTbuQ==": { "id": "0fqyUk3Q4wjepXsEzVTbuQ==", "name": "libuser", "version": "0.63-17.el9", "kind": "binary", "source": { "id": "", "name": "libuser", "version": "0.63-17.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "0gNpYdx7/dHkr8z85zHOSg==": { "id": "0gNpYdx7/dHkr8z85zHOSg==", "name": "perl-File-stat", "version": "1.09-481.1.el9_6", "kind": "binary", "source": { "id": "", "name": "perl", "version": "5.32.1-481.1.el9_6", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "noarch", "cpe": "", "detector": null }, "0kf4C6OH9tp4+UaKjumyEg==": { "id": "0kf4C6OH9tp4+UaKjumyEg==", "name": "llvm-filesystem", "version": "20.1.8-3.el9", "kind": "binary", "source": { "id": "", "name": "llvm", "version": "20.1.8-3.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "1+Lg0PO3SMtKcC7avbi64w==": { "id": "1+Lg0PO3SMtKcC7avbi64w==", "name": "xorg-x11-proto-devel", "version": "2024.1-1.el9", "kind": "binary", "source": { "id": "", "name": "xorg-x11-proto-devel", "version": "2024.1-1.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "noarch", "cpe": "", "detector": null }, "13LJ8VSSR7Q+r1oKIOzegw==": { "id": "13LJ8VSSR7Q+r1oKIOzegw==", "name": "ubi9/s2i-core", "version": "1764601991", "kind": "ancestry", "source": { "id": "BLrNfmomqpFT8qecLZ99jQ==", "name": "ubi9/s2i-core", "version": "1764601991", "kind": "source", "source": { "id": "", "name": "", "version": "", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "unmatchable:1764601991.0.0.0.0.0.0.0.0.0", "arch": "x86_64", "cpe": "", "detector": null }, "normalized_version": "unmatchable:1764601991.0.0.0.0.0.0.0.0.0", "arch": "x86_64", "cpe": "", "detector": null }, "1XXuvf69/0I2dNHaU2UndQ==": { "id": "1XXuvf69/0I2dNHaU2UndQ==", "name": "patch", "version": "2.7.6-16.el9", "kind": "binary", "source": { "id": "", "name": "patch", "version": "2.7.6-16.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "1Xbb0MgMTadhlE/gdXAC9g==": { "id": "1Xbb0MgMTadhlE/gdXAC9g==", "name": "ubi9/ruby-33", "version": "1764649613", "kind": "binary", "source": { "id": "rOo0eaSDbJ9TZ3lifnsvSQ==", "name": "ubi9/ruby-33", "version": "1764649613", "kind": "source", "source": { "id": "", "name": "", "version": "", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "unmatchable:1764649613.0.0.0.0.0.0.0.0.0", "arch": "x86_64", "cpe": "", "detector": null }, "normalized_version": "unmatchable:1764649613.0.0.0.0.0.0.0.0.0", "arch": "x86_64", "cpe": "", "detector": null }, "1atoBfoH0mJ0bCpetQ7/0g==": { "id": "1atoBfoH0mJ0bCpetQ7/0g==", "name": "file-libs", "version": "5.39-16.el9", "kind": "binary", "source": { "id": "", "name": "file", "version": "5.39-16.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "1c78imYwGnF54k326pUleA==": { "id": "1c78imYwGnF54k326pUleA==", "name": "kernel-headers", "version": "5.14.0-611.11.1.el9_7", "kind": "binary", "source": { "id": "", "name": "kernel", "version": "5.14.0-611.11.1.el9_7", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "1h2bWnAaSbAMrDYM8V/8sw==": { "id": "1h2bWnAaSbAMrDYM8V/8sw==", "name": "pcre-utf16", "version": "8.44-4.el9", "kind": "binary", "source": { "id": "", "name": "pcre", "version": "8.44-4.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "1m9sKqHTfU4F/K4fidg9cg==": { "id": "1m9sKqHTfU4F/K4fidg9cg==", "name": "perl-Exporter", "version": "5.74-461.el9", "kind": "binary", "source": { "id": "", "name": "perl-Exporter", "version": "5.74-461.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "noarch", "cpe": "", "detector": null }, "1p1wTPVFlokLdC9/X3ksGg==": { "id": "1p1wTPVFlokLdC9/X3ksGg==", "name": "expat", "version": "2.5.0-5.el9_7.1", "kind": "binary", "source": { "id": "", "name": "expat", "version": "2.5.0-5.el9_7.1", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "1pWwHIWE2UYOVNkFfcPZhQ==": { "id": "1pWwHIWE2UYOVNkFfcPZhQ==", "name": "sqlite", "version": "3.34.1-9.el9_7", "kind": "binary", "source": { "id": "", "name": "sqlite", "version": "3.34.1-9.el9_7", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "1pqtMQqVpCMzDCv8KXVyuA==": { "id": "1pqtMQqVpCMzDCv8KXVyuA==", "name": "perl-Class-Struct", "version": "0.66-481.1.el9_6", "kind": "binary", "source": { "id": "", "name": "perl", "version": "5.32.1-481.1.el9_6", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "noarch", "cpe": "", "detector": null }, "20ttMIcZDyeRDwHLGLpY5g==": { "id": "20ttMIcZDyeRDwHLGLpY5g==", "name": "python3-libs", "version": "3.9.23-2.el9", "kind": "binary", "source": { "id": "", "name": "python3.9", "version": "3.9.23-2.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "2QUKRSh7NN4cTp6+OOEm8w==": { "id": "2QUKRSh7NN4cTp6+OOEm8w==", "name": "rsync", "version": "3.2.5-3.el9", "kind": "binary", "source": { "id": "", "name": "rsync", "version": "3.2.5-3.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "2gCbp4kt+cF44NF/LqukDg==": { "id": "2gCbp4kt+cF44NF/LqukDg==", "name": "pcre2-syntax", "version": "10.40-6.el9", "kind": "binary", "source": { "id": "", "name": "pcre2", "version": "10.40-6.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "noarch", "cpe": "", "detector": null }, "2hVeGisxeIl5ZCVdBXxWKg==": { "id": "2hVeGisxeIl5ZCVdBXxWKg==", "name": "virt-what", "version": "1.27-2.el9", "kind": "binary", "source": { "id": "", "name": "virt-what", "version": "1.27-2.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "2tnKv76FL7fQoypGU9dvWQ==": { "id": "2tnKv76FL7fQoypGU9dvWQ==", "name": "binutils-gold", "version": "2.35.2-67.el9", "kind": "binary", "source": { "id": "", "name": "binutils", "version": "2.35.2-67.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "2w8qE/d9mqIY/9+1qBBrPg==": { "id": "2w8qE/d9mqIY/9+1qBBrPg==", "name": "perl-IO-Socket-IP", "version": "0.41-5.el9", "kind": "binary", "source": { "id": "", "name": "perl-IO-Socket-IP", "version": "0.41-5.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "noarch", "cpe": "", "detector": null }, "35MvZs/A5NUjD+xZ1Vlnyw==": { "id": "35MvZs/A5NUjD+xZ1Vlnyw==", "name": "libpkgconf", "version": "1.7.3-10.el9", "kind": "binary", "source": { "id": "", "name": "pkgconf", "version": "1.7.3-10.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "38FdUixzs3eDg/NPZRiJIA==": { "id": "38FdUixzs3eDg/NPZRiJIA==", "name": "glibc-langpack-en", "version": "2.34-231.el9_7.2", "kind": "binary", "source": { "id": "", "name": "glibc", "version": "2.34-231.el9_7.2", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "3YAw8el/3rSN8/26QNTqsA==": { "id": "3YAw8el/3rSN8/26QNTqsA==", "name": "pixman", "version": "0.40.0-6.el9_3", "kind": "binary", "source": { "id": "", "name": "pixman", "version": "0.40.0-6.el9_3", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "3adzKM06LvCWYFXCgwdnjA==": { "id": "3adzKM06LvCWYFXCgwdnjA==", "name": "efi-srpm-macros", "version": "6-4.el9", "kind": "binary", "source": { "id": "", "name": "efi-rpm-macros", "version": "6-4.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "noarch", "cpe": "", "detector": null }, "3kiQXJjCV5HlO0qf9OFzoQ==": { "id": "3kiQXJjCV5HlO0qf9OFzoQ==", "name": "perl-File-Find", "version": "1.37-481.1.el9_6", "kind": "binary", "source": { "id": "", "name": "perl", "version": "5.32.1-481.1.el9_6", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "noarch", "cpe": "", "detector": null }, "3nZGfOwzhExfw1oIgyJNUg==": { "id": "3nZGfOwzhExfw1oIgyJNUg==", "name": "util-linux-core", "version": "2.37.4-21.el9", "kind": "binary", "source": { "id": "", "name": "util-linux", "version": "2.37.4-21.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "4DALE9qlRQsocTmGTN3jhg==": { "id": "4DALE9qlRQsocTmGTN3jhg==", "name": "glibc-locale-source", "version": "2.34-231.el9_7.2", "kind": "binary", "source": { "id": "", "name": "glibc", "version": "2.34-231.el9_7.2", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "4Kw/w2gH7CYCOCv19cdYYA==": { "id": "4Kw/w2gH7CYCOCv19cdYYA==", "name": "perl-File-Path", "version": "2.18-4.el9", "kind": "binary", "source": { "id": "", "name": "perl-File-Path", "version": "2.18-4.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "noarch", "cpe": "", "detector": null }, "4U8NwfIL6oZ9HtlVrK/5EQ==": { "id": "4U8NwfIL6oZ9HtlVrK/5EQ==", "name": "gettext", "version": "0.21-8.el9", "kind": "binary", "source": { "id": "", "name": "gettext", "version": "0.21-8.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "4xm12R/wZXmG2Cs/ve2Zjw==": { "id": "4xm12R/wZXmG2Cs/ve2Zjw==", "name": "cpp", "version": "11.5.0-11.el9", "kind": "binary", "source": { "id": "", "name": "gcc", "version": "11.5.0-11.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "5+tHFkkNi+1rUDSrmgYdkw==": { "id": "5+tHFkkNi+1rUDSrmgYdkw==", "name": "p11-kit-trust", "version": "0.25.3-3.el9_5", "kind": "binary", "source": { "id": "", "name": "p11-kit", "version": "0.25.3-3.el9_5", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "582nBqlxZXz0sTRmkFvU4Q==": { "id": "582nBqlxZXz0sTRmkFvU4Q==", "name": "libxcb", "version": "1.13.1-9.el9", "kind": "binary", "source": { "id": "", "name": "libxcb", "version": "1.13.1-9.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "5GtYmv+rWUY9Nq0zLzVwuQ==": { "id": "5GtYmv+rWUY9Nq0zLzVwuQ==", "name": "automake", "version": "1.16.2-8.el9", "kind": "binary", "source": { "id": "", "name": "automake", "version": "1.16.2-8.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "noarch", "cpe": "", "detector": null }, "5JAFUJWmy04+T6x2oJw2jg==": { "id": "5JAFUJWmy04+T6x2oJw2jg==", "name": "libxml2", "version": "2.9.13-14.el9_7", "kind": "binary", "source": { "id": "", "name": "libxml2", "version": "2.9.13-14.el9_7", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "5hkeK2sS5i1OF8czY7eD+A==": { "id": "5hkeK2sS5i1OF8czY7eD+A==", "name": "perl-HTTP-Tiny", "version": "0.076-462.el9", "kind": "binary", "source": { "id": "", "name": "perl-HTTP-Tiny", "version": "0.076-462.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "noarch", "cpe": "", "detector": null }, "5w6Z1FeiHTUU7Pzs/S0tow==": { "id": "5w6Z1FeiHTUU7Pzs/S0tow==", "name": "rspec-mocks", "version": "3.13.7", "kind": "binary", "source": { "id": "", "name": "", "version": "", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "cpe": "", "detector": null }, "5x6eb7pZ/EuGII0pLw9fTg==": { "id": "5x6eb7pZ/EuGII0pLw9fTg==", "name": "libffi-devel", "version": "3.4.2-8.el9", "kind": "binary", "source": { "id": "", "name": "libffi", "version": "3.4.2-8.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "60b1mOIk+ncF/benyKWfug==": { "id": "60b1mOIk+ncF/benyKWfug==", "name": "perl-Data-Dumper", "version": "2.174-462.el9", "kind": "binary", "source": { "id": "", "name": "perl-Data-Dumper", "version": "2.174-462.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "60pEkQUMtqjJkDtrBnZkZw==": { "id": "60pEkQUMtqjJkDtrBnZkZw==", "name": "rpm-build-libs", "version": "4.16.1.3-39.el9", "kind": "binary", "source": { "id": "", "name": "rpm", "version": "4.16.1.3-39.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "65vQ2fJTp0DlFVHdZmyGLw==": { "id": "65vQ2fJTp0DlFVHdZmyGLw==", "name": "rpm-sign-libs", "version": "4.16.1.3-39.el9", "kind": "binary", "source": { "id": "", "name": "rpm", "version": "4.16.1.3-39.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "6AYt+NWt55432RGa/HxiQg==": { "id": "6AYt+NWt55432RGa/HxiQg==", "name": "libXt", "version": "1.2.0-6.el9", "kind": "binary", "source": { "id": "", "name": "libXt", "version": "1.2.0-6.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "6G1ytjIPgX0NNsVwuPQKkQ==": { "id": "6G1ytjIPgX0NNsVwuPQKkQ==", "name": "python3-gpg", "version": "1.15.1-6.el9", "kind": "binary", "source": { "id": "", "name": "gpgme", "version": "1.15.1-6.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "6HUC1/dPziZpbtWEymw0nQ==": { "id": "6HUC1/dPziZpbtWEymw0nQ==", "name": "gzip", "version": "1.12-1.el9", "kind": "binary", "source": { "id": "", "name": "gzip", "version": "1.12-1.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "6MFxZDjn6ZxVQspQib4VSA==": { "id": "6MFxZDjn6ZxVQspQib4VSA==", "name": "libXau", "version": "1.0.9-8.el9", "kind": "binary", "source": { "id": "", "name": "libXau", "version": "1.0.9-8.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "6yTvnPP57NJPXUaaMuHa5Q==": { "id": "6yTvnPP57NJPXUaaMuHa5Q==", "name": "libdnf", "version": "0.69.0-16.el9", "kind": "binary", "source": { "id": "", "name": "libdnf", "version": "0.69.0-16.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "7/k2KO9ZYtIX1WvnibuCwg==": { "id": "7/k2KO9ZYtIX1WvnibuCwg==", "name": "procps-ng", "version": "3.3.17-14.el9", "kind": "binary", "source": { "id": "", "name": "procps-ng", "version": "3.3.17-14.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "71E7ojyMFQ1Uwy0VMr2WLg==": { "id": "71E7ojyMFQ1Uwy0VMr2WLg==", "name": "rpm", "version": "4.16.1.3-39.el9", "kind": "binary", "source": { "id": "", "name": "rpm", "version": "4.16.1.3-39.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "7NGPdoQ8CufgoRI2a0XI0g==": { "id": "7NGPdoQ8CufgoRI2a0XI0g==", "name": "perl-File-Compare", "version": "1.100.600-481.1.el9_6", "kind": "binary", "source": { "id": "", "name": "perl", "version": "5.32.1-481.1.el9_6", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "noarch", "cpe": "", "detector": null }, "7cpIREEQnkaI7dbmWgmrvg==": { "id": "7cpIREEQnkaI7dbmWgmrvg==", "name": "gdbm-libs", "version": "1:1.23-1.el9", "kind": "binary", "source": { "id": "", "name": "gdbm", "version": "1.23-1.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "7mDaaxs3ev+uNEDYC97U3Q==": { "id": "7mDaaxs3ev+uNEDYC97U3Q==", "name": "zlib", "version": "1.2.11-40.el9", "kind": "binary", "source": { "id": "", "name": "zlib", "version": "1.2.11-40.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "7oPP0/pHHdyRIJK6pYsCbQ==": { "id": "7oPP0/pHHdyRIJK6pYsCbQ==", "name": "python3", "version": "3.9.23-2.el9", "kind": "binary", "source": { "id": "", "name": "python3.9", "version": "3.9.23-2.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "7qAMBOvJ2FYxpK9n05pI7Q==": { "id": "7qAMBOvJ2FYxpK9n05pI7Q==", "name": "libpng", "version": "2:1.6.37-12.el9", "kind": "binary", "source": { "id": "", "name": "libpng", "version": "1.6.37-12.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "7ra56f21gLrcSpBD8a9+NQ==": { "id": "7ra56f21gLrcSpBD8a9+NQ==", "name": "libmount", "version": "2.37.4-21.el9", "kind": "binary", "source": { "id": "", "name": "util-linux", "version": "2.37.4-21.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "7yB5oIQve4tWIMlUmHbdQQ==": { "id": "7yB5oIQve4tWIMlUmHbdQQ==", "name": "graphite2", "version": "1.3.14-9.el9", "kind": "binary", "source": { "id": "", "name": "graphite2", "version": "1.3.14-9.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "8+AT+dHyoFXmtWYeClg3hQ==": { "id": "8+AT+dHyoFXmtWYeClg3hQ==", "name": "libmnl", "version": "1.0.4-16.el9_4", "kind": "binary", "source": { "id": "", "name": "libmnl", "version": "1.0.4-16.el9_4", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "8/+OIixLXu+fX/6UoQwl/g==": { "id": "8/+OIixLXu+fX/6UoQwl/g==", "name": "go-srpm-macros", "version": "3.6.0-12.el9_7", "kind": "binary", "source": { "id": "", "name": "go-rpm-macros", "version": "3.6.0-12.el9_7", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "noarch", "cpe": "", "detector": null }, "87VUAbsTn2cSvq70x9SIKw==": { "id": "87VUAbsTn2cSvq70x9SIKw==", "name": "rubygem-io-console", "version": "0.7.1-4.module+el9.7.0+23096+6a95897f", "kind": "binary", "source": { "id": "", "name": "ruby", "version": "3.3.8-4.module+el9.7.0+23096+6a95897f", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "module": "ruby:3.3", "arch": "x86_64", "cpe": "", "detector": null }, "88jYB91M4ddvxo2XjMJKmQ==": { "id": "88jYB91M4ddvxo2XjMJKmQ==", "name": "libmpc", "version": "1.2.1-4.el9", "kind": "binary", "source": { "id": "", "name": "libmpc", "version": "1.2.1-4.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "8Al1Y3mQILwPqoFjfjIK0Q==": { "id": "8Al1Y3mQILwPqoFjfjIK0Q==", "name": "python3-setuptools-wheel", "version": "53.0.0-15.el9", "kind": "binary", "source": { "id": "", "name": "python-setuptools", "version": "53.0.0-15.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "noarch", "cpe": "", "detector": null }, "8OE8ax/E0UXByEoVMTfkbA==": { "id": "8OE8ax/E0UXByEoVMTfkbA==", "name": "openssl-libs", "version": "1:3.5.1-4.el9_7", "kind": "binary", "source": { "id": "", "name": "openssl", "version": "3.5.1-4.el9_7", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "8dKij0lKhp8eGM5ynaMPfg==": { "id": "8dKij0lKhp8eGM5ynaMPfg==", "name": "glibc-minimal-langpack", "version": "2.34-231.el9_7.2", "kind": "binary", "source": { "id": "", "name": "glibc", "version": "2.34-231.el9_7.2", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "8gpmX0NZa9MMhcqi6FUGtg==": { "id": "8gpmX0NZa9MMhcqi6FUGtg==", "name": "python3-gobject-base", "version": "3.40.1-6.el9", "kind": "binary", "source": { "id": "", "name": "pygobject3", "version": "3.40.1-6.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "8k+Ulo3wv2SSKo3DSJNJ6A==": { "id": "8k+Ulo3wv2SSKo3DSJNJ6A==", "name": "kmod-libs", "version": "28-11.el9", "kind": "binary", "source": { "id": "", "name": "kmod", "version": "28-11.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "8n6bVUPPsV3vtnz+vLHqKQ==": { "id": "8n6bVUPPsV3vtnz+vLHqKQ==", "name": "pam", "version": "1.5.1-26.el9_6", "kind": "binary", "source": { "id": "", "name": "pam", "version": "1.5.1-26.el9_6", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "8uME+PFu6p/OAD7q+ZTVLw==": { "id": "8uME+PFu6p/OAD7q+ZTVLw==", "name": "p11-kit", "version": "0.25.3-3.el9_5", "kind": "binary", "source": { "id": "", "name": "p11-kit", "version": "0.25.3-3.el9_5", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "8uNlRHm24HlCfj4vRuzAgA==": { "id": "8uNlRHm24HlCfj4vRuzAgA==", "name": "perl-if", "version": "0.60.800-481.1.el9_6", "kind": "binary", "source": { "id": "", "name": "perl", "version": "5.32.1-481.1.el9_6", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "noarch", "cpe": "", "detector": null }, "9HjCH3SeUwgItfYZysNlOw==": { "id": "9HjCH3SeUwgItfYZysNlOw==", "name": "mariadb-connector-c-config", "version": "3.2.6-1.el9_0", "kind": "binary", "source": { "id": "", "name": "mariadb-connector-c", "version": "3.2.6-1.el9_0", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "noarch", "cpe": "", "detector": null }, "9bMXqD09C2r4s8P+HNy2uw==": { "id": "9bMXqD09C2r4s8P+HNy2uw==", "name": "perl-Pod-Perldoc", "version": "3.28.01-461.el9", "kind": "binary", "source": { "id": "", "name": "perl-Pod-Perldoc", "version": "3.28.01-461.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "noarch", "cpe": "", "detector": null }, "9olIUlLHZMdoUMju+8diyQ==": { "id": "9olIUlLHZMdoUMju+8diyQ==", "name": "filesystem", "version": "3.16-5.el9", "kind": "binary", "source": { "id": "", "name": "filesystem", "version": "3.16-5.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "A5zg77FwqyQ7YbgSi5bkFw==": { "id": "A5zg77FwqyQ7YbgSi5bkFw==", "name": "libxslt-devel", "version": "1.1.34-13.el9_6", "kind": "binary", "source": { "id": "", "name": "libxslt", "version": "1.1.34-13.el9_6", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "ACNA1cjsRpihwLsZYxMiYQ==": { "id": "ACNA1cjsRpihwLsZYxMiYQ==", "name": "libXrender", "version": "0.9.10-16.el9", "kind": "binary", "source": { "id": "", "name": "libXrender", "version": "0.9.10-16.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "AMvlCR3g+vHIXnbjgXeX2Q==": { "id": "AMvlCR3g+vHIXnbjgXeX2Q==", "name": "redhat-rpm-config", "version": "210-1.el9", "kind": "binary", "source": { "id": "", "name": "redhat-rpm-config", "version": "210-1.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "noarch", "cpe": "", "detector": null }, "AUjudWCWcMUZtLYqynIMkg==": { "id": "AUjudWCWcMUZtLYqynIMkg==", "name": "tpm2-tss", "version": "3.2.3-1.el9", "kind": "binary", "source": { "id": "", "name": "tpm2-tss", "version": "3.2.3-1.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "AbW1lRpGUjSEKNnr/Toz6A==": { "id": "AbW1lRpGUjSEKNnr/Toz6A==", "name": "jbigkit-libs", "version": "2.1-23.el9", "kind": "binary", "source": { "id": "", "name": "jbigkit", "version": "2.1-23.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "At9otkYcx2c7gDG/+qxMog==": { "id": "At9otkYcx2c7gDG/+qxMog==", "name": "libxml2-devel", "version": "2.9.13-14.el9_7", "kind": "binary", "source": { "id": "", "name": "libxml2", "version": "2.9.13-14.el9_7", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "BIzbOPagaosMprtM0oW/UQ==": { "id": "BIzbOPagaosMprtM0oW/UQ==", "name": "git-core-doc", "version": "2.47.3-1.el9_6", "kind": "binary", "source": { "id": "", "name": "git", "version": "2.47.3-1.el9_6", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "noarch", "cpe": "", "detector": null }, "BLrNfmomqpFT8qecLZ99jQ==": { "id": "BLrNfmomqpFT8qecLZ99jQ==", "name": "ubi9/s2i-core", "version": "1764601991", "kind": "source", "source": { "id": "", "name": "", "version": "", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "unmatchable:1764601991.0.0.0.0.0.0.0.0.0", "arch": "x86_64", "cpe": "", "detector": null }, "BQhiFmX4hLYteW4oRCLTSA==": { "id": "BQhiFmX4hLYteW4oRCLTSA==", "name": "libassuan", "version": "2.5.5-3.el9", "kind": "binary", "source": { "id": "", "name": "libassuan", "version": "2.5.5-3.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "BRLVvSCW1qZQlEQR2x48fQ==": { "id": "BRLVvSCW1qZQlEQR2x48fQ==", "name": "gobject-introspection", "version": "1.68.0-11.el9", "kind": "binary", "source": { "id": "", "name": "gobject-introspection", "version": "1.68.0-11.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "BUmLEOIviku9guiDM/J5qA==": { "id": "BUmLEOIviku9guiDM/J5qA==", "name": "libcurl-minimal", "version": "7.76.1-34.el9", "kind": "binary", "source": { "id": "", "name": "curl", "version": "7.76.1-34.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "Be3u3fxCSx0yV9rW5tn7+A==": { "id": "Be3u3fxCSx0yV9rW5tn7+A==", "name": "harfbuzz-icu", "version": "2.7.4-10.el9", "kind": "binary", "source": { "id": "", "name": "harfbuzz", "version": "2.7.4-10.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "CM/XLOAV8nEwvYEgfvOluA==": { "id": "CM/XLOAV8nEwvYEgfvOluA==", "name": "perl-Net-SSLeay", "version": "1.94-3.el9", "kind": "binary", "source": { "id": "", "name": "perl-Net-SSLeay", "version": "1.94-3.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "CQ7LW8sdHcbka0B3IpMM1Q==": { "id": "CQ7LW8sdHcbka0B3IpMM1Q==", "name": "which", "version": "2.21-30.el9_6", "kind": "binary", "source": { "id": "", "name": "which", "version": "2.21-30.el9_6", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "CS6z0/SKwjMOr6VBFQ1+lw==": { "id": "CS6z0/SKwjMOr6VBFQ1+lw==", "name": "findutils", "version": "1:4.8.0-7.el9", "kind": "binary", "source": { "id": "", "name": "findutils", "version": "4.8.0-7.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "CfMo51dlSGLRWNluoKfMUQ==": { "id": "CfMo51dlSGLRWNluoKfMUQ==", "name": "perl-Scalar-List-Utils", "version": "4:1.56-462.el9", "kind": "binary", "source": { "id": "", "name": "perl-Scalar-List-Utils", "version": "1.56-462.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "Cn4UOizx3r/8sEEZ0cgGfw==": { "id": "Cn4UOizx3r/8sEEZ0cgGfw==", "name": "libgomp", "version": "11.5.0-11.el9", "kind": "binary", "source": { "id": "", "name": "gcc", "version": "11.5.0-11.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "CpfomSYboaXPZ9yn9NgGgw==": { "id": "CpfomSYboaXPZ9yn9NgGgw==", "name": "krb5-libs", "version": "1.21.1-8.el9_6", "kind": "binary", "source": { "id": "", "name": "krb5", "version": "1.21.1-8.el9_6", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "Cwut2mrMMUaIvKenvO1qWw==": { "id": "Cwut2mrMMUaIvKenvO1qWw==", "name": "perl-Socket", "version": "4:2.031-4.el9", "kind": "binary", "source": { "id": "", "name": "perl-Socket", "version": "2.031-4.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "CyeMFBrESWOU4r5NgnAVEQ==": { "id": "CyeMFBrESWOU4r5NgnAVEQ==", "name": "cmake-filesystem", "version": "3.26.5-2.el9", "kind": "binary", "source": { "id": "", "name": "cmake", "version": "3.26.5-2.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "D3RCrUIdQ+uwLTm+GGcqSA==": { "id": "D3RCrUIdQ+uwLTm+GGcqSA==", "name": "autoconf", "version": "2.69-41.el9", "kind": "binary", "source": { "id": "", "name": "autoconf", "version": "2.69-41.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "noarch", "cpe": "", "detector": null }, "D5m7YK6SRxMXWJzbEMw9qw==": { "id": "D5m7YK6SRxMXWJzbEMw9qw==", "name": "pyproject-srpm-macros", "version": "1.16.2-1.el9", "kind": "binary", "source": { "id": "", "name": "pyproject-rpm-macros", "version": "1.16.2-1.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "noarch", "cpe": "", "detector": null }, "DK0d2bPQCX0xz6Lec7u1cg==": { "id": "DK0d2bPQCX0xz6Lec7u1cg==", "name": "info", "version": "6.7-15.el9", "kind": "binary", "source": { "id": "", "name": "texinfo", "version": "6.7-15.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "DNyIkrd4IXePRueLDNc6ZA==": { "id": "DNyIkrd4IXePRueLDNc6ZA==", "name": "libXpm", "version": "3.5.13-10.el9", "kind": "binary", "source": { "id": "", "name": "libXpm", "version": "3.5.13-10.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "DVT5EsNYhhc4TADNn+PvwA==": { "id": "DVT5EsNYhhc4TADNn+PvwA==", "name": "rootfiles", "version": "8.1-35.el9", "kind": "binary", "source": { "id": "", "name": "rootfiles", "version": "8.1-35.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "noarch", "cpe": "", "detector": null }, "DVWG3mWD7odZzCgFCUPZPw==": { "id": "DVWG3mWD7odZzCgFCUPZPw==", "name": "pkgconf-pkg-config", "version": "1.7.3-10.el9", "kind": "binary", "source": { "id": "", "name": "pkgconf", "version": "1.7.3-10.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "DXPX19bdN5nJbVwnxKFlOA==": { "id": "DXPX19bdN5nJbVwnxKFlOA==", "name": "brotli", "version": "1.0.9-7.el9_5", "kind": "binary", "source": { "id": "", "name": "brotli", "version": "1.0.9-7.el9_5", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "DrLq8qfU1bfE8o8AfdvkrQ==": { "id": "DrLq8qfU1bfE8o8AfdvkrQ==", "name": "libverto", "version": "0.3.2-3.el9", "kind": "binary", "source": { "id": "", "name": "libverto", "version": "0.3.2-3.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "DyVc00dL0fB/TbUtdImPIA==": { "id": "DyVc00dL0fB/TbUtdImPIA==", "name": "libedit", "version": "3.1-38.20210216cvs.el9", "kind": "binary", "source": { "id": "", "name": "libedit", "version": "3.1-38.20210216cvs.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "EEcEMKhGMvXAfnMhboIpqw==": { "id": "EEcEMKhGMvXAfnMhboIpqw==", "name": "publicsuffix-list-dafsa", "version": "20210518-3.el9", "kind": "binary", "source": { "id": "", "name": "publicsuffix-list", "version": "20210518-3.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "noarch", "cpe": "", "detector": null }, "EhaFwS5l8+kj0ips0KX28g==": { "id": "EhaFwS5l8+kj0ips0KX28g==", "name": "vim-minimal", "version": "2:8.2.2637-23.el9_7", "kind": "binary", "source": { "id": "", "name": "vim", "version": "8.2.2637-23.el9_7", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "EjrCko4EN35q3gOrHdIWjw==": { "id": "EjrCko4EN35q3gOrHdIWjw==", "name": "rpm-libs", "version": "4.16.1.3-39.el9", "kind": "binary", "source": { "id": "", "name": "rpm", "version": "4.16.1.3-39.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "Ep9qjtRg5KBEw8RkogSOKQ==": { "id": "Ep9qjtRg5KBEw8RkogSOKQ==", "name": "python3-dateutil", "version": "1:2.9.0.post0-1.el9_7", "kind": "binary", "source": { "id": "", "name": "python-dateutil", "version": "2.9.0.post0-1.el9_7", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "noarch", "cpe": "", "detector": null }, "Esfj4A6yCPG0aR5IhgHmUg==": { "id": "Esfj4A6yCPG0aR5IhgHmUg==", "name": "libgcc", "version": "11.5.0-11.el9", "kind": "binary", "source": { "id": "", "name": "gcc", "version": "11.5.0-11.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "Exv8+xTp+7Y4AfuM+ph47Q==": { "id": "Exv8+xTp+7Y4AfuM+ph47Q==", "name": "perl-parent", "version": "1:0.238-460.el9", "kind": "binary", "source": { "id": "", "name": "perl-parent", "version": "0.238-460.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "noarch", "cpe": "", "detector": null }, "F5S3/GN2uyb/+Q/5rj2gBA==": { "id": "F5S3/GN2uyb/+Q/5rj2gBA==", "name": "ruby-default-gems", "version": "3.3.8-4.module+el9.7.0+23096+6a95897f", "kind": "binary", "source": { "id": "", "name": "ruby", "version": "3.3.8-4.module+el9.7.0+23096+6a95897f", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "module": "ruby:3.3", "arch": "noarch", "cpe": "", "detector": null }, "F6sWmqQXkobYs1E0otG8/A==": { "id": "F6sWmqQXkobYs1E0otG8/A==", "name": "openssh", "version": "8.7p1-46.el9", "kind": "binary", "source": { "id": "", "name": "openssh", "version": "8.7p1-46.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "F90x58kELkC16MbTpMw3vg==": { "id": "F90x58kELkC16MbTpMw3vg==", "name": "perl-POSIX", "version": "1.94-481.1.el9_6", "kind": "binary", "source": { "id": "", "name": "perl", "version": "5.32.1-481.1.el9_6", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "FDdpwYO23GZzR/6AZCdQZA==": { "id": "FDdpwYO23GZzR/6AZCdQZA==", "name": "harfbuzz", "version": "2.7.4-10.el9", "kind": "binary", "source": { "id": "", "name": "harfbuzz", "version": "2.7.4-10.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "FEF27h+V5TzrUeQsFddapA==": { "id": "FEF27h+V5TzrUeQsFddapA==", "name": "libSM", "version": "1.2.3-10.el9", "kind": "binary", "source": { "id": "", "name": "libSM", "version": "1.2.3-10.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "FEW4+DY0GhovHIdRCyqYhg==": { "id": "FEW4+DY0GhovHIdRCyqYhg==", "name": "gnutls", "version": "3.8.3-9.el9", "kind": "binary", "source": { "id": "", "name": "gnutls", "version": "3.8.3-9.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "FFSNe661VBElA1asGZ7k3g==": { "id": "FFSNe661VBElA1asGZ7k3g==", "name": "rust-srpm-macros", "version": "17-4.el9", "kind": "binary", "source": { "id": "", "name": "rust-srpm-macros", "version": "17-4.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "noarch", "cpe": "", "detector": null }, "FKD/ouYSWOOZHy4i43SaxA==": { "id": "FKD/ouYSWOOZHy4i43SaxA==", "name": "perl-TermReadKey", "version": "2.38-11.el9", "kind": "binary", "source": { "id": "", "name": "perl-TermReadKey", "version": "2.38-11.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "FW8ByCOP6ljvNWDQolahwg==": { "id": "FW8ByCOP6ljvNWDQolahwg==", "name": "sysprof-capture-devel", "version": "3.40.1-3.el9", "kind": "binary", "source": { "id": "", "name": "sysprof", "version": "3.40.1-3.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "FaNO6QWs1mWPp40PrBiBUQ==": { "id": "FaNO6QWs1mWPp40PrBiBUQ==", "name": "libseccomp", "version": "2.5.2-2.el9", "kind": "binary", "source": { "id": "", "name": "libseccomp", "version": "2.5.2-2.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "FiLBkAWUUsnpX53xBEBwNw==": { "id": "FiLBkAWUUsnpX53xBEBwNw==", "name": "dbus", "version": "1:1.12.20-8.el9", "kind": "binary", "source": { "id": "", "name": "dbus", "version": "1.12.20-8.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "FoNZoDzlktTR7m0xbn6aAw==": { "id": "FoNZoDzlktTR7m0xbn6aAw==", "name": "python3-libdnf", "version": "0.69.0-16.el9", "kind": "binary", "source": { "id": "", "name": "libdnf", "version": "0.69.0-16.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "FoncQi9chif7gDbfNIi6VQ==": { "id": "FoncQi9chif7gDbfNIi6VQ==", "name": "file", "version": "5.39-16.el9", "kind": "binary", "source": { "id": "", "name": "file", "version": "5.39-16.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "G1YDEd7+V95Qa+PMxB8sJw==": { "id": "G1YDEd7+V95Qa+PMxB8sJw==", "name": "perl-Digest", "version": "1.19-4.el9", "kind": "binary", "source": { "id": "", "name": "perl-Digest", "version": "1.19-4.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "noarch", "cpe": "", "detector": null }, "G61ZL2SOHR2qgvQfi118gw==": { "id": "G61ZL2SOHR2qgvQfi118gw==", "name": "dejavu-sans-fonts", "version": "2.37-18.el9", "kind": "binary", "source": { "id": "", "name": "dejavu-fonts", "version": "2.37-18.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "noarch", "cpe": "", "detector": null }, "GIScmMWQrnoFNoEgq3fg2w==": { "id": "GIScmMWQrnoFNoEgq3fg2w==", "name": "python3-dbus", "version": "1.2.18-2.el9", "kind": "binary", "source": { "id": "", "name": "dbus-python", "version": "1.2.18-2.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "GSkR2SOuqWQN8NtOvU4cgw==": { "id": "GSkR2SOuqWQN8NtOvU4cgw==", "name": "perl-Thread-Queue", "version": "3.14-460.el9", "kind": "binary", "source": { "id": "", "name": "perl-Thread-Queue", "version": "3.14-460.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "noarch", "cpe": "", "detector": null }, "GdLrcchvFseDsR7KOv0vSQ==": { "id": "GdLrcchvFseDsR7KOv0vSQ==", "name": "crypto-policies", "version": "20250905-1.git377cc42.el9_7", "kind": "binary", "source": { "id": "", "name": "crypto-policies", "version": "20250905-1.git377cc42.el9_7", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "noarch", "cpe": "", "detector": null }, "Gfvf4LQKHStcGqbzaAe/lA==": { "id": "Gfvf4LQKHStcGqbzaAe/lA==", "name": "brotli-devel", "version": "1.0.9-7.el9_5", "kind": "binary", "source": { "id": "", "name": "brotli", "version": "1.0.9-7.el9_5", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "GrPCC9ybwOy98qwLdeCX6A==": { "id": "GrPCC9ybwOy98qwLdeCX6A==", "name": "nodejs", "version": "1:22.19.0-2.module+el9.6.0+23473+45664c2d", "kind": "binary", "source": { "id": "", "name": "nodejs", "version": "22.19.0-2.module+el9.6.0+23473+45664c2d", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "module": "nodejs:22", "arch": "x86_64", "cpe": "", "detector": null }, "GrohJMl/MISMll2qndOSGg==": { "id": "GrohJMl/MISMll2qndOSGg==", "name": "libX11-xcb", "version": "1.7.0-11.el9", "kind": "binary", "source": { "id": "", "name": "libX11", "version": "1.7.0-11.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "GtFO3rQtk4lExV/Q1qfFOg==": { "id": "GtFO3rQtk4lExV/Q1qfFOg==", "name": "zip", "version": "3.0-35.el9", "kind": "binary", "source": { "id": "", "name": "zip", "version": "3.0-35.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "GwNK8p9XcJLynTdoZWdCxg==": { "id": "GwNK8p9XcJLynTdoZWdCxg==", "name": "libdb", "version": "5.3.28-57.el9_6", "kind": "binary", "source": { "id": "", "name": "libdb", "version": "5.3.28-57.el9_6", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "H3zfV58LzeEUiNQbZbZb2A==": { "id": "H3zfV58LzeEUiNQbZbZb2A==", "name": "perl-File-Temp", "version": "1:0.231.100-4.el9", "kind": "binary", "source": { "id": "", "name": "perl-File-Temp", "version": "0.231.100-4.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "noarch", "cpe": "", "detector": null }, "HF0BuzgGNjLOUKqVyjw0oA==": { "id": "HF0BuzgGNjLOUKqVyjw0oA==", "name": "rubygem-irb", "version": "1.13.1-4.module+el9.7.0+23096+6a95897f", "kind": "binary", "source": { "id": "", "name": "ruby", "version": "3.3.8-4.module+el9.7.0+23096+6a95897f", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "module": "ruby:3.3", "arch": "noarch", "cpe": "", "detector": null }, "HKlRsQZtXaa3HoNDv500tg==": { "id": "HKlRsQZtXaa3HoNDv500tg==", "name": "openssl-fips-provider-so", "version": "3.0.7-8.el9", "kind": "binary", "source": { "id": "", "name": "openssl-fips-provider", "version": "3.0.7-8.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "HQLCuUiHA+476ax5LmI78Q==": { "id": "HQLCuUiHA+476ax5LmI78Q==", "name": "rubygem-bigdecimal", "version": "3.1.5-4.module+el9.7.0+23096+6a95897f", "kind": "binary", "source": { "id": "", "name": "ruby", "version": "3.3.8-4.module+el9.7.0+23096+6a95897f", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "module": "ruby:3.3", "arch": "x86_64", "cpe": "", "detector": null }, "HQdWvmyUSqtI3UTY0T4JiQ==": { "id": "HQdWvmyUSqtI3UTY0T4JiQ==", "name": "pcre", "version": "8.44-4.el9", "kind": "binary", "source": { "id": "", "name": "pcre", "version": "8.44-4.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "HaOoNwb8lV6rMAwKRGxXbA==": { "id": "HaOoNwb8lV6rMAwKRGxXbA==", "name": "python3-dnf-plugins-core", "version": "4.3.0-24.el9_7", "kind": "binary", "source": { "id": "", "name": "dnf-plugins-core", "version": "4.3.0-24.el9_7", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "noarch", "cpe": "", "detector": null }, "HyWYXl8ZaOY6wtr4mKF7qA==": { "id": "HyWYXl8ZaOY6wtr4mKF7qA==", "name": "elfutils-libelf", "version": "0.193-1.el9", "kind": "binary", "source": { "id": "", "name": "elfutils", "version": "0.193-1.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "HyjfzS7o9NZj6mKbOA36wA==": { "id": "HyjfzS7o9NZj6mKbOA36wA==", "name": "ruby-devel", "version": "3.3.8-4.module+el9.7.0+23096+6a95897f", "kind": "binary", "source": { "id": "", "name": "ruby", "version": "3.3.8-4.module+el9.7.0+23096+6a95897f", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "module": "ruby:3.3", "arch": "x86_64", "cpe": "", "detector": null }, "I16VSEydeiRYB1TSf5694A==": { "id": "I16VSEydeiRYB1TSf5694A==", "name": "libreport-filesystem", "version": "2.15.2-6.el9", "kind": "binary", "source": { "id": "", "name": "libreport", "version": "2.15.2-6.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "noarch", "cpe": "", "detector": null }, "I4xeNeKgfXcsAYIlRhjPiQ==": { "id": "I4xeNeKgfXcsAYIlRhjPiQ==", "name": "glibc-devel", "version": "2.34-231.el9_7.2", "kind": "binary", "source": { "id": "", "name": "glibc", "version": "2.34-231.el9_7.2", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "IC3qYOgP07zDDhN8OMm04Q==": { "id": "IC3qYOgP07zDDhN8OMm04Q==", "name": "perl-lib", "version": "0.65-481.1.el9_6", "kind": "binary", "source": { "id": "", "name": "perl", "version": "5.32.1-481.1.el9_6", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "IDaB7M+//88qbPppM+LpUw==": { "id": "IDaB7M+//88qbPppM+LpUw==", "name": "cracklib", "version": "2.9.6-27.el9", "kind": "binary", "source": { "id": "", "name": "cracklib", "version": "2.9.6-27.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "IG/inuDbgBm/XuY2u/Aumw==": { "id": "IG/inuDbgBm/XuY2u/Aumw==", "name": "vim-filesystem", "version": "2:8.2.2637-23.el9_7", "kind": "binary", "source": { "id": "", "name": "vim", "version": "8.2.2637-23.el9_7", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "noarch", "cpe": "", "detector": null }, "IZ65O3ZOapykHwhaOX1/YA==": { "id": "IZ65O3ZOapykHwhaOX1/YA==", "name": "libnghttp2", "version": "1.43.0-6.el9", "kind": "binary", "source": { "id": "", "name": "nghttp2", "version": "1.43.0-6.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "IqB8E1ANUG9NXQorLZJDiQ==": { "id": "IqB8E1ANUG9NXQorLZJDiQ==", "name": "perl-DynaLoader", "version": "1.47-481.1.el9_6", "kind": "binary", "source": { "id": "", "name": "perl", "version": "5.32.1-481.1.el9_6", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "IxIhH0Z+Om/E2wWJgs7oqA==": { "id": "IxIhH0Z+Om/E2wWJgs7oqA==", "name": "libstdc++-devel", "version": "11.5.0-11.el9", "kind": "binary", "source": { "id": "", "name": "gcc", "version": "11.5.0-11.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "J4wVTpjsd90BinvJHS7Zqw==": { "id": "J4wVTpjsd90BinvJHS7Zqw==", "name": "sqlite-devel", "version": "3.34.1-9.el9_7", "kind": "binary", "source": { "id": "", "name": "sqlite", "version": "3.34.1-9.el9_7", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "J9Ac2zSOxpvD4YQ2MZMs6w==": { "id": "J9Ac2zSOxpvD4YQ2MZMs6w==", "name": "nodejs-docs", "version": "1:22.19.0-2.module+el9.6.0+23473+45664c2d", "kind": "binary", "source": { "id": "", "name": "nodejs", "version": "22.19.0-2.module+el9.6.0+23473+45664c2d", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "module": "nodejs:22", "arch": "noarch", "cpe": "", "detector": null }, "JF/KXrYQKwPQyQXcXBUzkQ==": { "id": "JF/KXrYQKwPQyQXcXBUzkQ==", "name": "librepo", "version": "1.14.5-3.el9", "kind": "binary", "source": { "id": "", "name": "librepo", "version": "1.14.5-3.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "JFKff4xqwvXPuYTu9WPwUQ==": { "id": "JFKff4xqwvXPuYTu9WPwUQ==", "name": "binutils", "version": "2.35.2-67.el9", "kind": "binary", "source": { "id": "", "name": "binutils", "version": "2.35.2-67.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "JKP7JzVg7UGaAz4VrH03lQ==": { "id": "JKP7JzVg7UGaAz4VrH03lQ==", "name": "langpacks-core-font-en", "version": "3.0-16.el9", "kind": "binary", "source": { "id": "", "name": "langpacks", "version": "3.0-16.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "noarch", "cpe": "", "detector": null }, "JaeGSHoaw5r486gmcDmRVA==": { "id": "JaeGSHoaw5r486gmcDmRVA==", "name": "gcc-plugin-annobin", "version": "11.5.0-11.el9", "kind": "binary", "source": { "id": "", "name": "gcc", "version": "11.5.0-11.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "KEwhWR+KmcE0gZ+mC6lSDw==": { "id": "KEwhWR+KmcE0gZ+mC6lSDw==", "name": "perl-SelectSaver", "version": "1.02-481.1.el9_6", "kind": "binary", "source": { "id": "", "name": "perl", "version": "5.32.1-481.1.el9_6", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "noarch", "cpe": "", "detector": null }, "KF5C+zKu/uFB7knCqOvDAQ==": { "id": "KF5C+zKu/uFB7knCqOvDAQ==", "name": "json-glib", "version": "1.6.6-1.el9", "kind": "binary", "source": { "id": "", "name": "json-glib", "version": "1.6.6-1.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "KH0/KbRUi7KL6UvWa8i6Pg==": { "id": "KH0/KbRUi7KL6UvWa8i6Pg==", "name": "python3-inotify", "version": "0.9.6-25.el9", "kind": "binary", "source": { "id": "", "name": "python-inotify", "version": "0.9.6-25.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "noarch", "cpe": "", "detector": null }, "KS0gfrpBqK77mtupKmitjw==": { "id": "KS0gfrpBqK77mtupKmitjw==", "name": "glibc", "version": "2.34-231.el9_7.2", "kind": "binary", "source": { "id": "", "name": "glibc", "version": "2.34-231.el9_7.2", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "KcPAdOork3AFYl8WLwr8lQ==": { "id": "KcPAdOork3AFYl8WLwr8lQ==", "name": "zlib-devel", "version": "1.2.11-40.el9", "kind": "binary", "source": { "id": "", "name": "zlib", "version": "1.2.11-40.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "KcftiMkhTw4x89HNJI8NNg==": { "id": "KcftiMkhTw4x89HNJI8NNg==", "name": "perl-Text-ParseWords", "version": "3.30-460.el9", "kind": "binary", "source": { "id": "", "name": "perl-Text-ParseWords", "version": "3.30-460.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "noarch", "cpe": "", "detector": null }, "KnsryeYjIOfmvupUdl8bDg==": { "id": "KnsryeYjIOfmvupUdl8bDg==", "name": "scl-utils", "version": "1:2.0.3-4.el9", "kind": "binary", "source": { "id": "", "name": "scl-utils", "version": "2.0.3-4.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "KyRw1LumZrRo6AKKkHgP7w==": { "id": "KyRw1LumZrRo6AKKkHgP7w==", "name": "libXext", "version": "1.3.4-8.el9", "kind": "binary", "source": { "id": "", "name": "libXext", "version": "1.3.4-8.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "L1CJW90/qIOW7PuGFCWT3g==": { "id": "L1CJW90/qIOW7PuGFCWT3g==", "name": "perl-mro", "version": "1.23-481.1.el9_6", "kind": "binary", "source": { "id": "", "name": "perl", "version": "5.32.1-481.1.el9_6", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "L2RUW2Fm5EOgoqwyitY3bg==": { "id": "L2RUW2Fm5EOgoqwyitY3bg==", "name": "dbus-broker", "version": "28-7.el9", "kind": "binary", "source": { "id": "", "name": "dbus-broker", "version": "28-7.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "LDIMlzOywHz1+CG5FwjKdQ==": { "id": "LDIMlzOywHz1+CG5FwjKdQ==", "name": "subscription-manager-rhsm-certificates", "version": "20220623-1.el9", "kind": "binary", "source": { "id": "", "name": "subscription-manager-rhsm-certificates", "version": "20220623-1.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "noarch", "cpe": "", "detector": null }, "LEyuwSco7tb1WIyWy42H8g==": { "id": "LEyuwSco7tb1WIyWy42H8g==", "name": "perl-Storable", "version": "1:3.21-460.el9", "kind": "binary", "source": { "id": "", "name": "perl-Storable", "version": "3.21-460.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "LPNXQi0V2EN73HoDD+RYaw==": { "id": "LPNXQi0V2EN73HoDD+RYaw==", "name": "annobin", "version": "12.98-1.el9", "kind": "binary", "source": { "id": "", "name": "annobin", "version": "12.98-1.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "LW/iN16rWtvIqrNuZRqrvA==": { "id": "LW/iN16rWtvIqrNuZRqrvA==", "name": "npm", "version": "1:10.9.3-1.22.19.0.2.module+el9.6.0+23473+45664c2d", "kind": "binary", "source": { "id": "", "name": "nodejs", "version": "22.19.0-2.module+el9.6.0+23473+45664c2d", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "module": "nodejs:22", "arch": "x86_64", "cpe": "", "detector": null }, "Leh3RdsGa1oyRcl5Dz4SdA==": { "id": "Leh3RdsGa1oyRcl5Dz4SdA==", "name": "gd-devel", "version": "2.3.2-3.el9", "kind": "binary", "source": { "id": "", "name": "gd", "version": "2.3.2-3.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "LjtOegR/S/Y0KwJeOuSl/w==": { "id": "LjtOegR/S/Y0KwJeOuSl/w==", "name": "perl-podlators", "version": "1:4.14-460.el9", "kind": "binary", "source": { "id": "", "name": "perl-podlators", "version": "4.14-460.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "noarch", "cpe": "", "detector": null }, "Lwqn0aweLQLZmo12VvYcog==": { "id": "Lwqn0aweLQLZmo12VvYcog==", "name": "popt", "version": "1.18-8.el9", "kind": "binary", "source": { "id": "", "name": "popt", "version": "1.18-8.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "M2qdPAOOvb+CWXJwouP4Rw==": { "id": "M2qdPAOOvb+CWXJwouP4Rw==", "name": "mariadb-connector-c-devel", "version": "3.2.6-1.el9_0", "kind": "binary", "source": { "id": "", "name": "mariadb-connector-c", "version": "3.2.6-1.el9_0", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "MDH8Zt4oQWDiYk9qFV5Lbg==": { "id": "MDH8Zt4oQWDiYk9qFV5Lbg==", "name": "libxcrypt", "version": "4.4.18-3.el9", "kind": "binary", "source": { "id": "", "name": "libxcrypt", "version": "4.4.18-3.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "MORX6hW9ZLZCt/52w71zTg==": { "id": "MORX6hW9ZLZCt/52w71zTg==", "name": "perl-PathTools", "version": "3.78-461.el9", "kind": "binary", "source": { "id": "", "name": "perl-PathTools", "version": "3.78-461.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "MdGkZ055CI+TZYqVm7FIPg==": { "id": "MdGkZ055CI+TZYqVm7FIPg==", "name": "libcbor", "version": "0.7.0-5.el9", "kind": "binary", "source": { "id": "", "name": "libcbor", "version": "0.7.0-5.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "Mp61fGpK3II0W8dIQgk3hA==": { "id": "Mp61fGpK3II0W8dIQgk3hA==", "name": "libpipeline", "version": "1.5.3-4.el9", "kind": "binary", "source": { "id": "", "name": "libpipeline", "version": "1.5.3-4.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "Mta8K+tWCjAV6ERlLy6JNw==": { "id": "Mta8K+tWCjAV6ERlLy6JNw==", "name": "audit-libs", "version": "3.1.5-7.el9", "kind": "binary", "source": { "id": "", "name": "audit", "version": "3.1.5-7.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "MvInuV8lMA+9LBSzIEvv5g==": { "id": "MvInuV8lMA+9LBSzIEvv5g==", "name": "ruby-libs", "version": "3.3.8-4.module+el9.7.0+23096+6a95897f", "kind": "binary", "source": { "id": "", "name": "ruby", "version": "3.3.8-4.module+el9.7.0+23096+6a95897f", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "module": "ruby:3.3", "arch": "x86_64", "cpe": "", "detector": null }, "N2AxbBO2ySQgGMgkdbfo+w==": { "id": "N2AxbBO2ySQgGMgkdbfo+w==", "name": "python3-requests", "version": "2.25.1-10.el9_6", "kind": "binary", "source": { "id": "", "name": "python-requests", "version": "2.25.1-10.el9_6", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "noarch", "cpe": "", "detector": null }, "N9SQ1VZ/1zaqG0gdsMW91g==": { "id": "N9SQ1VZ/1zaqG0gdsMW91g==", "name": "perl-Term-ANSIColor", "version": "5.01-461.el9", "kind": "binary", "source": { "id": "", "name": "perl-Term-ANSIColor", "version": "5.01-461.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "noarch", "cpe": "", "detector": null }, "NCC3wkuc6lwSKJH9fwRaTQ==": { "id": "NCC3wkuc6lwSKJH9fwRaTQ==", "name": "ubi9/ubi", "version": "1764578730", "kind": "binary", "source": { "id": "isMk2o0BvgtLnlqdbo7sxQ==", "name": "ubi9/ubi", "version": "1764578730", "kind": "source", "source": { "id": "", "name": "", "version": "", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "unmatchable:1764578730.0.0.0.0.0.0.0.0.0", "arch": "x86_64", "cpe": "", "detector": null }, "normalized_version": "unmatchable:1764578730.0.0.0.0.0.0.0.0.0", "arch": "x86_64", "cpe": "", "detector": null }, "NDKmI4fvu2M/TtapvknDEg==": { "id": "NDKmI4fvu2M/TtapvknDEg==", "name": "libsepol-devel", "version": "3.6-3.el9", "kind": "binary", "source": { "id": "", "name": "libsepol", "version": "3.6-3.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "NSiprMdkK5/5pxuNNJOh2A==": { "id": "NSiprMdkK5/5pxuNNJOh2A==", "name": "openssl-fips-provider", "version": "3.0.7-8.el9", "kind": "binary", "source": { "id": "", "name": "openssl-fips-provider", "version": "3.0.7-8.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "Nak/NGhCYVubG4CsEbHhug==": { "id": "Nak/NGhCYVubG4CsEbHhug==", "name": "graphite2-devel", "version": "1.3.14-9.el9", "kind": "binary", "source": { "id": "", "name": "graphite2", "version": "1.3.14-9.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "NdCY2/S+syamLH224R4hug==": { "id": "NdCY2/S+syamLH224R4hug==", "name": "langpacks-en", "version": "3.0-16.el9", "kind": "binary", "source": { "id": "", "name": "langpacks", "version": "3.0-16.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "noarch", "cpe": "", "detector": null }, "NsU0bgQSA1JrKw3zvB+XBw==": { "id": "NsU0bgQSA1JrKw3zvB+XBw==", "name": "dbus-libs", "version": "1:1.12.20-8.el9", "kind": "binary", "source": { "id": "", "name": "dbus", "version": "1.12.20-8.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "O6NCE8KkqNnnBGJrWxfPwA==": { "id": "O6NCE8KkqNnnBGJrWxfPwA==", "name": "libstdc++", "version": "11.5.0-11.el9", "kind": "binary", "source": { "id": "", "name": "gcc", "version": "11.5.0-11.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "OCIjbR16ktOEiFK36r0WNw==": { "id": "OCIjbR16ktOEiFK36r0WNw==", "name": "libtasn1", "version": "4.16.0-9.el9", "kind": "binary", "source": { "id": "", "name": "libtasn1", "version": "4.16.0-9.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "OgwdUybWl/HQYbnPTE4Psw==": { "id": "OgwdUybWl/HQYbnPTE4Psw==", "name": "npth", "version": "1.6-8.el9", "kind": "binary", "source": { "id": "", "name": "npth", "version": "1.6-8.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "Ohssf0Jzlafd9vtrrUKCXg==": { "id": "Ohssf0Jzlafd9vtrrUKCXg==", "name": "bash", "version": "5.1.8-9.el9", "kind": "binary", "source": { "id": "", "name": "bash", "version": "5.1.8-9.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "OkY4XBjh2jDTkYhGjNkrUA==": { "id": "OkY4XBjh2jDTkYhGjNkrUA==", "name": "mariadb-connector-c", "version": "3.2.6-1.el9_0", "kind": "binary", "source": { "id": "", "name": "mariadb-connector-c", "version": "3.2.6-1.el9_0", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "Ol1YWxU11Z64v1nA/zb/5w==": { "id": "Ol1YWxU11Z64v1nA/zb/5w==", "name": "pkgconf", "version": "1.7.3-10.el9", "kind": "binary", "source": { "id": "", "name": "pkgconf", "version": "1.7.3-10.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "OvOSK0YS4U6j2gyFBATNXg==": { "id": "OvOSK0YS4U6j2gyFBATNXg==", "name": "xz", "version": "5.2.5-8.el9_0", "kind": "binary", "source": { "id": "", "name": "xz", "version": "5.2.5-8.el9_0", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "P5Om9zCJ/QZ+hnrEvj6fGw==": { "id": "P5Om9zCJ/QZ+hnrEvj6fGw==", "name": "libgcrypt", "version": "1.10.0-11.el9", "kind": "binary", "source": { "id": "", "name": "libgcrypt", "version": "1.10.0-11.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "PCxuTBi9SbzcxEcQiiLesg==": { "id": "PCxuTBi9SbzcxEcQiiLesg==", "name": "pcre-utf32", "version": "8.44-4.el9", "kind": "binary", "source": { "id": "", "name": "pcre", "version": "8.44-4.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "PIk2BBAWexCFofMi5q03RA==": { "id": "PIk2BBAWexCFofMi5q03RA==", "name": "pcre2", "version": "10.40-6.el9", "kind": "binary", "source": { "id": "", "name": "pcre2", "version": "10.40-6.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "PQJujrJagYV+Ey8n4uQ95g==": { "id": "PQJujrJagYV+Ey8n4uQ95g==", "name": "subscription-manager", "version": "1.29.47.1-1.el9_7", "kind": "binary", "source": { "id": "", "name": "subscription-manager", "version": "1.29.47.1-1.el9_7", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "Q4EH8dHdml+oN5T9LssIRw==": { "id": "Q4EH8dHdml+oN5T9LssIRw==", "name": "gettext-libs", "version": "0.21-8.el9", "kind": "binary", "source": { "id": "", "name": "gettext", "version": "0.21-8.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "Q8V6CJq+uIfjVUujX4I61Q==": { "id": "Q8V6CJq+uIfjVUujX4I61Q==", "name": "pcre2-utf32", "version": "10.40-6.el9", "kind": "binary", "source": { "id": "", "name": "pcre2", "version": "10.40-6.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "QG9+UTOvnb8kW+im/fjlJQ==": { "id": "QG9+UTOvnb8kW+im/fjlJQ==", "name": "libpq-devel", "version": "13.20-1.el9_5", "kind": "binary", "source": { "id": "", "name": "libpq", "version": "13.20-1.el9_5", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "QbZd82FdnCLBtn8fUkWn0A==": { "id": "QbZd82FdnCLBtn8fUkWn0A==", "name": "glib2", "version": "2.68.4-18.el9_7", "kind": "binary", "source": { "id": "", "name": "glib2", "version": "2.68.4-18.el9_7", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "QcXiQZ6UKeueoaxjtrYKog==": { "id": "QcXiQZ6UKeueoaxjtrYKog==", "name": "perl-Symbol", "version": "1.08-481.1.el9_6", "kind": "binary", "source": { "id": "", "name": "perl", "version": "5.32.1-481.1.el9_6", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "noarch", "cpe": "", "detector": null }, "Qk1bxbjfumdXF7/eZ6qhuw==": { "id": "Qk1bxbjfumdXF7/eZ6qhuw==", "name": "less", "version": "590-6.el9", "kind": "binary", "source": { "id": "", "name": "less", "version": "590-6.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "QlHijPVbW9yTtx/mAeIhAg==": { "id": "QlHijPVbW9yTtx/mAeIhAg==", "name": "python3-dnf", "version": "4.14.0-31.el9", "kind": "binary", "source": { "id": "", "name": "dnf", "version": "4.14.0-31.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "noarch", "cpe": "", "detector": null }, "QpWwMw97N/44PyIvwMh0cA==": { "id": "QpWwMw97N/44PyIvwMh0cA==", "name": "perl-interpreter", "version": "4:5.32.1-481.1.el9_6", "kind": "binary", "source": { "id": "", "name": "perl", "version": "5.32.1-481.1.el9_6", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "R9sC7SuM6vJmJZYq/bMHWw==": { "id": "R9sC7SuM6vJmJZYq/bMHWw==", "name": "m4", "version": "1.4.19-1.el9", "kind": "binary", "source": { "id": "", "name": "m4", "version": "1.4.19-1.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "RH5gHxMLfgSMn5ktJt/VXA==": { "id": "RH5gHxMLfgSMn5ktJt/VXA==", "name": "psmisc", "version": "23.4-3.el9", "kind": "binary", "source": { "id": "", "name": "psmisc", "version": "23.4-3.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "RIdJTslNAIfH4yKbDsoK9Q==": { "id": "RIdJTslNAIfH4yKbDsoK9Q==", "name": "redhat-release", "version": "9.7-0.7.el9", "kind": "binary", "source": { "id": "", "name": "redhat-release", "version": "9.7-0.7.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "RXh3fimX8fGZeCt4chJEiA==": { "id": "RXh3fimX8fGZeCt4chJEiA==", "name": "librhsm", "version": "0.0.3-9.el9", "kind": "binary", "source": { "id": "", "name": "librhsm", "version": "0.0.3-9.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "Riemnu+blxsuHCoBGaacLA==": { "id": "Riemnu+blxsuHCoBGaacLA==", "name": "ubi9/ruby-33", "version": "1786713372", "kind": "source", "source": { "id": "", "name": "", "version": "", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "rhctag:1786713372.0.0.0.0.0.0.0.0.0", "arch": "x86_64", "cpe": "", "detector": null }, "RlkbUDRj6k1VsLWBs4sx5g==": { "id": "RlkbUDRj6k1VsLWBs4sx5g==", "name": "rspec-support", "version": "3.13.6", "kind": "binary", "source": { "id": "", "name": "", "version": "", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "cpe": "", "detector": null }, "Rmp+/J0Vf6Z1c/jUFbiVFw==": { "id": "Rmp+/J0Vf6Z1c/jUFbiVFw==", "name": "gdb", "version": "16.3-2.el9", "kind": "binary", "source": { "id": "", "name": "gdb", "version": "16.3-2.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "RmtwCYp+M3KMl7TiyHKwMA==": { "id": "RmtwCYp+M3KMl7TiyHKwMA==", "name": "pcre2-devel", "version": "10.40-6.el9", "kind": "binary", "source": { "id": "", "name": "pcre2", "version": "10.40-6.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "S8p9UGak1oycptcpYp/1eg==": { "id": "S8p9UGak1oycptcpYp/1eg==", "name": "openldap", "version": "2.6.8-4.el9", "kind": "binary", "source": { "id": "", "name": "openldap", "version": "2.6.8-4.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "SDcVZRLpwAQNjUwZ+PuxkA==": { "id": "SDcVZRLpwAQNjUwZ+PuxkA==", "name": "freetype-devel", "version": "2.10.4-10.el9_5", "kind": "binary", "source": { "id": "", "name": "freetype", "version": "2.10.4-10.el9_5", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "SZllfeGD2yJm0VL0H7onLg==": { "id": "SZllfeGD2yJm0VL0H7onLg==", "name": "libxcb-devel", "version": "1.13.1-9.el9", "kind": "binary", "source": { "id": "", "name": "libxcb", "version": "1.13.1-9.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "ScSZYXWuosUrTT47e6vL3g==": { "id": "ScSZYXWuosUrTT47e6vL3g==", "name": "emacs-filesystem", "version": "1:27.2-18.el9", "kind": "binary", "source": { "id": "", "name": "emacs", "version": "27.2-18.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "noarch", "cpe": "", "detector": null }, "SjQtW3gQmgt+Qj8JlnY4Mg==": { "id": "SjQtW3gQmgt+Qj8JlnY4Mg==", "name": "libblkid", "version": "2.37.4-21.el9", "kind": "binary", "source": { "id": "", "name": "util-linux", "version": "2.37.4-21.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "SsUshR21MZuli8B+sjKoRg==": { "id": "SsUshR21MZuli8B+sjKoRg==", "name": "perl-File-Basename", "version": "2.85-481.1.el9_6", "kind": "binary", "source": { "id": "", "name": "perl", "version": "5.32.1-481.1.el9_6", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "noarch", "cpe": "", "detector": null }, "Su8bfW9ijc0V5CiAum2V1g==": { "id": "Su8bfW9ijc0V5CiAum2V1g==", "name": "bzip2-libs", "version": "1.0.8-10.el9_5", "kind": "binary", "source": { "id": "", "name": "bzip2", "version": "1.0.8-10.el9_5", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "TPIRq84Pr3a6ywzPeCr3Pw==": { "id": "TPIRq84Pr3a6ywzPeCr3Pw==", "name": "libcap-ng", "version": "0.8.2-7.el9", "kind": "binary", "source": { "id": "", "name": "libcap-ng", "version": "0.8.2-7.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "TSs+KS9B9pkzz7FIgxu+aw==": { "id": "TSs+KS9B9pkzz7FIgxu+aw==", "name": "wget", "version": "1.21.1-8.el9_4", "kind": "binary", "source": { "id": "", "name": "wget", "version": "1.21.1-8.el9_4", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "Tniy6w9fMQe2ISrhGqJ8ww==": { "id": "Tniy6w9fMQe2ISrhGqJ8ww==", "name": "rspec-core", "version": "3.13.6", "kind": "binary", "source": { "id": "", "name": "", "version": "", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "cpe": "", "detector": null }, "To0NR+oyXDu1CYJfmVGurQ==": { "id": "To0NR+oyXDu1CYJfmVGurQ==", "name": "gpgme", "version": "1.15.1-6.el9", "kind": "binary", "source": { "id": "", "name": "gpgme", "version": "1.15.1-6.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "ULrmZHuHE64atjgQOV1lWQ==": { "id": "ULrmZHuHE64atjgQOV1lWQ==", "name": "nodejs-libs", "version": "1:22.19.0-2.module+el9.6.0+23473+45664c2d", "kind": "binary", "source": { "id": "", "name": "nodejs", "version": "22.19.0-2.module+el9.6.0+23473+45664c2d", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "module": "nodejs:22", "arch": "x86_64", "cpe": "", "detector": null }, "UPcwub579LDL6kq2lq/xZw==": { "id": "UPcwub579LDL6kq2lq/xZw==", "name": "harfbuzz-devel", "version": "2.7.4-10.el9", "kind": "binary", "source": { "id": "", "name": "harfbuzz", "version": "2.7.4-10.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "UTNN7VK61RHl/IW+g5aMJA==": { "id": "UTNN7VK61RHl/IW+g5aMJA==", "name": "libjpeg-turbo", "version": "2.0.90-7.el9", "kind": "binary", "source": { "id": "", "name": "libjpeg-turbo", "version": "2.0.90-7.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "UWXJUZfGCJSFYUff3zhl3g==": { "id": "UWXJUZfGCJSFYUff3zhl3g==", "name": "dmidecode", "version": "1:3.6-1.el9", "kind": "binary", "source": { "id": "", "name": "dmidecode", "version": "3.6-1.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "UcGy2+DIOqObBfK9GBmDEw==": { "id": "UcGy2+DIOqObBfK9GBmDEw==", "name": "python-srpm-macros", "version": "3.9-54.el9", "kind": "binary", "source": { "id": "", "name": "python-rpm-macros", "version": "3.9-54.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "noarch", "cpe": "", "detector": null }, "UnaL8VteZLsad5rFJhaXcw==": { "id": "UnaL8VteZLsad5rFJhaXcw==", "name": "python3-rpm", "version": "4.16.1.3-39.el9", "kind": "binary", "source": { "id": "", "name": "rpm", "version": "4.16.1.3-39.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "VPMvwiwbrTXjPkPpxmP3sw==": { "id": "VPMvwiwbrTXjPkPpxmP3sw==", "name": "acl", "version": "2.3.1-4.el9", "kind": "binary", "source": { "id": "", "name": "acl", "version": "2.3.1-4.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "VV2Z1ngTs6sGvt5SrayPCg==": { "id": "VV2Z1ngTs6sGvt5SrayPCg==", "name": "libgpg-error", "version": "1.42-5.el9", "kind": "binary", "source": { "id": "", "name": "libgpg-error", "version": "1.42-5.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "VX9V+Y680L2xf2tBREdpCw==": { "id": "VX9V+Y680L2xf2tBREdpCw==", "name": "gmp", "version": "1:6.2.0-13.el9", "kind": "binary", "source": { "id": "", "name": "gmp", "version": "6.2.0-13.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "VhjrPOGZ9XGEFgLnQWc+KQ==": { "id": "VhjrPOGZ9XGEFgLnQWc+KQ==", "name": "perl-Text-Tabs+Wrap", "version": "2013.0523-460.el9", "kind": "binary", "source": { "id": "", "name": "perl-Text-Tabs+Wrap", "version": "2013.0523-460.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "noarch", "cpe": "", "detector": null }, "Vk7Abr1qzxUEVjteKWWX5g==": { "id": "Vk7Abr1qzxUEVjteKWWX5g==", "name": "tar", "version": "2:1.34-7.el9", "kind": "binary", "source": { "id": "", "name": "tar", "version": "1.34-7.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "W7uBqJb8l9AhSXjNg1JZQg==": { "id": "W7uBqJb8l9AhSXjNg1JZQg==", "name": "ncurses-libs", "version": "6.2-12.20210508.el9", "kind": "binary", "source": { "id": "", "name": "ncurses", "version": "6.2-12.20210508.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "WCQtqHWXoTXna7IAIUuLVg==": { "id": "WCQtqHWXoTXna7IAIUuLVg==", "name": "rubygem-json", "version": "2.7.2-4.module+el9.7.0+23096+6a95897f", "kind": "binary", "source": { "id": "", "name": "ruby", "version": "3.3.8-4.module+el9.7.0+23096+6a95897f", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "module": "ruby:3.3", "arch": "x86_64", "cpe": "", "detector": null }, "WKbv3dOPjWYMO8/3E5KlHQ==": { "id": "WKbv3dOPjWYMO8/3E5KlHQ==", "name": "libbrotli", "version": "1.0.9-7.el9_5", "kind": "binary", "source": { "id": "", "name": "brotli", "version": "1.0.9-7.el9_5", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "WQqPFo8Asn86tAeRqCxr1w==": { "id": "WQqPFo8Asn86tAeRqCxr1w==", "name": "perl-IPC-Open3", "version": "1.21-481.1.el9_6", "kind": "binary", "source": { "id": "", "name": "perl", "version": "5.32.1-481.1.el9_6", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "noarch", "cpe": "", "detector": null }, "WVajSGKLGm8z6I23XYAhLQ==": { "id": "WVajSGKLGm8z6I23XYAhLQ==", "name": "cyrus-sasl-lib", "version": "2.1.27-22.el9", "kind": "binary", "source": { "id": "", "name": "cyrus-sasl", "version": "2.1.27-22.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "WifWl02dLM2pp5urxOSuNg==": { "id": "WifWl02dLM2pp5urxOSuNg==", "name": "perl-URI", "version": "5.09-3.el9", "kind": "binary", "source": { "id": "", "name": "perl-URI", "version": "5.09-3.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "noarch", "cpe": "", "detector": null }, "WrJXEOHH0Gy0bbmWqGmrDg==": { "id": "WrJXEOHH0Gy0bbmWqGmrDg==", "name": "ubi9/ruby-33", "version": "1786713372", "kind": "binary", "source": { "id": "Riemnu+blxsuHCoBGaacLA==", "name": "ubi9/ruby-33", "version": "1786713372", "kind": "source", "source": { "id": "", "name": "", "version": "", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "rhctag:1786713372.0.0.0.0.0.0.0.0.0", "arch": "x86_64", "cpe": "", "detector": null }, "normalized_version": "rhctag:1786713372.0.0.0.0.0.0.0.0.0", "arch": "x86_64", "cpe": "", "detector": null }, "WzYxymAFFZiduGsTG/o8gA==": { "id": "WzYxymAFFZiduGsTG/o8gA==", "name": "attr", "version": "2.5.1-3.el9", "kind": "binary", "source": { "id": "", "name": "attr", "version": "2.5.1-3.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "XG5+bW8np2NedSy/od6z8Q==": { "id": "XG5+bW8np2NedSy/od6z8Q==", "name": "libacl", "version": "2.3.1-4.el9", "kind": "binary", "source": { "id": "", "name": "acl", "version": "2.3.1-4.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "XGaIL7YJmyr8vz8ETC4dAA==": { "id": "XGaIL7YJmyr8vz8ETC4dAA==", "name": "perl-IO", "version": "1.43-481.1.el9_6", "kind": "binary", "source": { "id": "", "name": "perl", "version": "5.32.1-481.1.el9_6", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "XIcr6HdP94Dud7DtFrfMZg==": { "id": "XIcr6HdP94Dud7DtFrfMZg==", "name": "libcap", "version": "2.48-10.el9", "kind": "binary", "source": { "id": "", "name": "libcap", "version": "2.48-10.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "XMI2bnJZdxdcHnKc3zgCUA==": { "id": "XMI2bnJZdxdcHnKc3zgCUA==", "name": "ghc-srpm-macros", "version": "1.5.0-6.el9", "kind": "binary", "source": { "id": "", "name": "ghc-srpm-macros", "version": "1.5.0-6.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "noarch", "cpe": "", "detector": null }, "XP0LiIWbLisoI52ZCyFcLg==": { "id": "XP0LiIWbLisoI52ZCyFcLg==", "name": "libXpm-devel", "version": "3.5.13-10.el9", "kind": "binary", "source": { "id": "", "name": "libXpm", "version": "3.5.13-10.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "XTnX2VddNvCYpYt/meLgYA==": { "id": "XTnX2VddNvCYpYt/meLgYA==", "name": "libxslt", "version": "1.1.34-13.el9_6", "kind": "binary", "source": { "id": "", "name": "libxslt", "version": "1.1.34-13.el9_6", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "XgE+qDogkObCc5XPQHN25A==": { "id": "XgE+qDogkObCc5XPQHN25A==", "name": "python3-cloud-what", "version": "1.29.47.1-1.el9_7", "kind": "binary", "source": { "id": "", "name": "subscription-manager", "version": "1.29.47.1-1.el9_7", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "XliA1VgMzM5VjjSZdnmlQw==": { "id": "XliA1VgMzM5VjjSZdnmlQw==", "name": "perl-Getopt-Long", "version": "1:2.52-4.el9", "kind": "binary", "source": { "id": "", "name": "perl-Getopt-Long", "version": "2.52-4.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "noarch", "cpe": "", "detector": null }, "XpiKzmFjoUH4P3gzIyNStg==": { "id": "XpiKzmFjoUH4P3gzIyNStg==", "name": "rspec", "version": "3.13.2", "kind": "binary", "source": { "id": "", "name": "", "version": "", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "cpe": "", "detector": null }, "XvQXlm/D2h/0lO6HdF8+7g==": { "id": "XvQXlm/D2h/0lO6HdF8+7g==", "name": "rspec-expectations", "version": "3.13.5", "kind": "binary", "source": { "id": "", "name": "", "version": "", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "cpe": "", "detector": null }, "XwbkaIGCYyq6BjBMVZ1wzw==": { "id": "XwbkaIGCYyq6BjBMVZ1wzw==", "name": "readline", "version": "8.1-4.el9", "kind": "binary", "source": { "id": "", "name": "readline", "version": "8.1-4.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "Y35yrxWjtTUkUbNtS9+p6g==": { "id": "Y35yrxWjtTUkUbNtS9+p6g==", "name": "python3-six", "version": "1.15.0-9.el9", "kind": "binary", "source": { "id": "", "name": "python-six", "version": "1.15.0-9.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "noarch", "cpe": "", "detector": null }, "Y5PnxdiaM8nGZKt9U6sMKw==": { "id": "Y5PnxdiaM8nGZKt9U6sMKw==", "name": "pcre-cpp", "version": "8.44-4.el9", "kind": "binary", "source": { "id": "", "name": "pcre", "version": "8.44-4.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "YMB2ro5tOcEm81D0RjHxXA==": { "id": "YMB2ro5tOcEm81D0RjHxXA==", "name": "rubygem-psych", "version": "5.1.2-4.module+el9.7.0+23096+6a95897f", "kind": "binary", "source": { "id": "", "name": "ruby", "version": "3.3.8-4.module+el9.7.0+23096+6a95897f", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "module": "ruby:3.3", "arch": "x86_64", "cpe": "", "detector": null }, "YuMHdRatKmZ56mnoWUwdqw==": { "id": "YuMHdRatKmZ56mnoWUwdqw==", "name": "perl-Git", "version": "2.47.3-1.el9_6", "kind": "binary", "source": { "id": "", "name": "git", "version": "2.47.3-1.el9_6", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "noarch", "cpe": "", "detector": null }, "YwobqP8raRKIH+wXi7ZS4g==": { "id": "YwobqP8raRKIH+wXi7ZS4g==", "name": "curl-minimal", "version": "7.76.1-34.el9", "kind": "binary", "source": { "id": "", "name": "curl", "version": "7.76.1-34.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "Z+lO9FXEjKlmAeYPAHGorA==": { "id": "Z+lO9FXEjKlmAeYPAHGorA==", "name": "libmount-devel", "version": "2.37.4-21.el9", "kind": "binary", "source": { "id": "", "name": "util-linux", "version": "2.37.4-21.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "ZX4vKkXsoMfQ2HH9oPb0TA==": { "id": "ZX4vKkXsoMfQ2HH9oPb0TA==", "name": "libXau-devel", "version": "1.0.9-8.el9", "kind": "binary", "source": { "id": "", "name": "libXau", "version": "1.0.9-8.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "ZhfyLrfrE9A0xmCI9BiGXA==": { "id": "ZhfyLrfrE9A0xmCI9BiGXA==", "name": "tzdata", "version": "2025b-2.el9", "kind": "binary", "source": { "id": "", "name": "tzdata", "version": "2025b-2.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "noarch", "cpe": "", "detector": null }, "aJNccc76ay90akro/A82ww==": { "id": "aJNccc76ay90akro/A82ww==", "name": "python3-systemd", "version": "234-19.el9", "kind": "binary", "source": { "id": "", "name": "python-systemd", "version": "234-19.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "afL/h/3XzYq6me3BTaFWlA==": { "id": "afL/h/3XzYq6me3BTaFWlA==", "name": "libdnf-plugin-subscription-manager", "version": "1.29.47.1-1.el9_7", "kind": "binary", "source": { "id": "", "name": "subscription-manager", "version": "1.29.47.1-1.el9_7", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "al0lbET4LJsNSGMw0pP5wg==": { "id": "al0lbET4LJsNSGMw0pP5wg==", "name": "libjpeg-turbo-devel", "version": "2.0.90-7.el9", "kind": "binary", "source": { "id": "", "name": "libjpeg-turbo", "version": "2.0.90-7.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "arLt5War9yeQ8auYn/Idmw==": { "id": "arLt5War9yeQ8auYn/Idmw==", "name": "nettle", "version": "3.10.1-1.el9", "kind": "binary", "source": { "id": "", "name": "nettle", "version": "3.10.1-1.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "bEsPytE/ZdCMbfuAgQc9AA==": { "id": "bEsPytE/ZdCMbfuAgQc9AA==", "name": "perl-srpm-macros", "version": "1-41.el9", "kind": "binary", "source": { "id": "", "name": "perl-srpm-macros", "version": "1-41.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "noarch", "cpe": "", "detector": null }, "bFvWffGqJWr7FWnI7K9NVw==": { "id": "bFvWffGqJWr7FWnI7K9NVw==", "name": "grep", "version": "3.6-5.el9", "kind": "binary", "source": { "id": "", "name": "grep", "version": "3.6-5.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "bemGVBhbDe9iV1Kjvd9hAA==": { "id": "bemGVBhbDe9iV1Kjvd9hAA==", "name": "libffi", "version": "3.4.2-8.el9", "kind": "binary", "source": { "id": "", "name": "libffi", "version": "3.4.2-8.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "cHAJILwEV0OAQcBBnKqncg==": { "id": "cHAJILwEV0OAQcBBnKqncg==", "name": "elfutils-default-yama-scope", "version": "0.193-1.el9", "kind": "binary", "source": { "id": "", "name": "elfutils", "version": "0.193-1.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "noarch", "cpe": "", "detector": null }, "cZtZpGQDMJ8/qYUdQbgb3Q==": { "id": "cZtZpGQDMJ8/qYUdQbgb3Q==", "name": "glibc-headers", "version": "2.34-231.el9_7.2", "kind": "binary", "source": { "id": "", "name": "glibc", "version": "2.34-231.el9_7.2", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "ck/z6XzYDT2o8eVJI5IO+Q==": { "id": "ck/z6XzYDT2o8eVJI5IO+Q==", "name": "ubi9/s2i-base", "version": "1764621512", "kind": "source", "source": { "id": "", "name": "", "version": "", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "unmatchable:1764621512.0.0.0.0.0.0.0.0.0", "arch": "x86_64", "cpe": "", "detector": null }, "cpIirH9DE6nFQZA6wIpxLg==": { "id": "cpIirH9DE6nFQZA6wIpxLg==", "name": "gdb-gdbserver", "version": "16.3-2.el9", "kind": "binary", "source": { "id": "", "name": "gdb", "version": "16.3-2.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "ct/ndQfSB+G17YP34ufDBA==": { "id": "ct/ndQfSB+G17YP34ufDBA==", "name": "perl-Digest-MD5", "version": "2.58-4.el9", "kind": "binary", "source": { "id": "", "name": "perl-Digest-MD5", "version": "2.58-4.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "dBKXgz7fNBsMAqmGTkj8sQ==": { "id": "dBKXgz7fNBsMAqmGTkj8sQ==", "name": "freetype", "version": "2.10.4-10.el9_5", "kind": "binary", "source": { "id": "", "name": "freetype", "version": "2.10.4-10.el9_5", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "dC9CoYt17eaqinGSVCfCxw==": { "id": "dC9CoYt17eaqinGSVCfCxw==", "name": "libattr", "version": "2.5.1-3.el9", "kind": "binary", "source": { "id": "", "name": "attr", "version": "2.5.1-3.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "dH7n2Ct/z7JALFNo9SCMDg==": { "id": "dH7n2Ct/z7JALFNo9SCMDg==", "name": "gdb-headless", "version": "16.3-2.el9", "kind": "binary", "source": { "id": "", "name": "gdb", "version": "16.3-2.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "de44cUqF23LvU0fOSvNRjA==": { "id": "de44cUqF23LvU0fOSvNRjA==", "name": "libevent", "version": "2.1.12-8.el9_4", "kind": "binary", "source": { "id": "", "name": "libevent", "version": "2.1.12-8.el9_4", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "dj7DwOHHHI+8+9QuzFaSUA==": { "id": "dj7DwOHHHI+8+9QuzFaSUA==", "name": "keyutils", "version": "1.6.3-1.el9", "kind": "binary", "source": { "id": "", "name": "keyutils", "version": "1.6.3-1.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "dpQG/pUwAqVv1OdQqnvylQ==": { "id": "dpQG/pUwAqVv1OdQqnvylQ==", "name": "libsigsegv", "version": "2.13-4.el9", "kind": "binary", "source": { "id": "", "name": "libsigsegv", "version": "2.13-4.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "e+CtHsEaBCLbHEFWXwHRyg==": { "id": "e+CtHsEaBCLbHEFWXwHRyg==", "name": "perl-base", "version": "2.27-481.1.el9_6", "kind": "binary", "source": { "id": "", "name": "perl", "version": "5.32.1-481.1.el9_6", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "noarch", "cpe": "", "detector": null }, "e40n/77uWc/t2R+0m7WchA==": { "id": "e40n/77uWc/t2R+0m7WchA==", "name": "glibc-common", "version": "2.34-231.el9_7.2", "kind": "binary", "source": { "id": "", "name": "glibc", "version": "2.34-231.el9_7.2", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "e7W78NrdwYaVEcBcXhDv5Q==": { "id": "e7W78NrdwYaVEcBcXhDv5Q==", "name": "libcomps", "version": "0.1.18-1.el9", "kind": "binary", "source": { "id": "", "name": "libcomps", "version": "0.1.18-1.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "e9e6iwwufr2qvMYpuZgq7Q==": { "id": "e9e6iwwufr2qvMYpuZgq7Q==", "name": "elfutils-libs", "version": "0.193-1.el9", "kind": "binary", "source": { "id": "", "name": "elfutils", "version": "0.193-1.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "eEjpOxWkwvzzJN5kkeVUcg==": { "id": "eEjpOxWkwvzzJN5kkeVUcg==", "name": "perl-Encode", "version": "4:3.08-462.el9", "kind": "binary", "source": { "id": "", "name": "perl-Encode", "version": "3.08-462.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "eRa7MZyiHBvsv7GPhkGKdg==": { "id": "eRa7MZyiHBvsv7GPhkGKdg==", "name": "lua-libs", "version": "5.4.4-4.el9", "kind": "binary", "source": { "id": "", "name": "lua", "version": "5.4.4-4.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "ejmVM2MTGmDkkntlZCpYEw==": { "id": "ejmVM2MTGmDkkntlZCpYEw==", "name": "dbus-common", "version": "1:1.12.20-8.el9", "kind": "binary", "source": { "id": "", "name": "dbus", "version": "1.12.20-8.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "noarch", "cpe": "", "detector": null }, "ev4LjEwclLnf3ehIi3l8oA==": { "id": "ev4LjEwclLnf3ehIi3l8oA==", "name": "sqlite-libs", "version": "3.34.1-9.el9_7", "kind": "binary", "source": { "id": "", "name": "sqlite", "version": "3.34.1-9.el9_7", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "ewbqmzgK8Rzf739yT7IKUQ==": { "id": "ewbqmzgK8Rzf739yT7IKUQ==", "name": "ncurses-base", "version": "6.2-12.20210508.el9", "kind": "binary", "source": { "id": "", "name": "ncurses", "version": "6.2-12.20210508.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "noarch", "cpe": "", "detector": null }, "ez3E/Jxg/MQLUXOYIN/OlQ==": { "id": "ez3E/Jxg/MQLUXOYIN/OlQ==", "name": "ubi9/s2i-core", "version": "1764601991", "kind": "binary", "source": { "id": "BLrNfmomqpFT8qecLZ99jQ==", "name": "ubi9/s2i-core", "version": "1764601991", "kind": "source", "source": { "id": "", "name": "", "version": "", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "unmatchable:1764601991.0.0.0.0.0.0.0.0.0", "arch": "x86_64", "cpe": "", "detector": null }, "normalized_version": "unmatchable:1764601991.0.0.0.0.0.0.0.0.0", "arch": "x86_64", "cpe": "", "detector": null }, "f2GhXCi0MGW6C5vh1ih8XQ==": { "id": "f2GhXCi0MGW6C5vh1ih8XQ==", "name": "perl-threads", "version": "1:2.25-460.el9", "kind": "binary", "source": { "id": "", "name": "perl-threads", "version": "2.25-460.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "f3K2r1U+QmHjsUiML4ziOQ==": { "id": "f3K2r1U+QmHjsUiML4ziOQ==", "name": "perl-subs", "version": "1.03-481.1.el9_6", "kind": "binary", "source": { "id": "", "name": "perl", "version": "5.32.1-481.1.el9_6", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "noarch", "cpe": "", "detector": null }, "f86Wc3apFCnJqkXk60X7Cw==": { "id": "f86Wc3apFCnJqkXk60X7Cw==", "name": "git", "version": "2.47.3-1.el9_6", "kind": "binary", "source": { "id": "", "name": "git", "version": "2.47.3-1.el9_6", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "fDuwmXmKOYEK5h1q2eODXQ==": { "id": "fDuwmXmKOYEK5h1q2eODXQ==", "name": "python3-urllib3", "version": "1.26.5-6.el9", "kind": "binary", "source": { "id": "", "name": "python-urllib3", "version": "1.26.5-6.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "noarch", "cpe": "", "detector": null }, "fVq3Liql8bu1Y+KmIvpQoA==": { "id": "fVq3Liql8bu1Y+KmIvpQoA==", "name": "rubygem-rdoc", "version": "6.6.3.1-4.module+el9.7.0+23096+6a95897f", "kind": "binary", "source": { "id": "", "name": "ruby", "version": "3.3.8-4.module+el9.7.0+23096+6a95897f", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "module": "ruby:3.3", "arch": "noarch", "cpe": "", "detector": null }, "fao+yXdp7lvp4+d732rCkw==": { "id": "fao+yXdp7lvp4+d732rCkw==", "name": "libblkid-devel", "version": "2.37.4-21.el9", "kind": "binary", "source": { "id": "", "name": "util-linux", "version": "2.37.4-21.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "gBWlSWdEA8U1+Ep4A/+M2g==": { "id": "gBWlSWdEA8U1+Ep4A/+M2g==", "name": "perl-Error", "version": "1:0.17029-7.el9", "kind": "binary", "source": { "id": "", "name": "perl-Error", "version": "0.17029-7.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "noarch", "cpe": "", "detector": null }, "gJHwCqer7Rl9ijGK6wpg4A==": { "id": "gJHwCqer7Rl9ijGK6wpg4A==", "name": "libICE", "version": "1.0.10-8.el9", "kind": "binary", "source": { "id": "", "name": "libICE", "version": "1.0.10-8.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "gihIEYR/lLwr4ndjyvVROA==": { "id": "gihIEYR/lLwr4ndjyvVROA==", "name": "ruby", "version": "3.3.8-4.module+el9.7.0+23096+6a95897f", "kind": "binary", "source": { "id": "", "name": "ruby", "version": "3.3.8-4.module+el9.7.0+23096+6a95897f", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "module": "ruby:3.3", "arch": "x86_64", "cpe": "", "detector": null }, "gjJq4XQiX28zDnKvnb0/jg==": { "id": "gjJq4XQiX28zDnKvnb0/jg==", "name": "libfdisk", "version": "2.37.4-21.el9", "kind": "binary", "source": { "id": "", "name": "util-linux", "version": "2.37.4-21.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "gngAZQYf0zy4+w3GwgpLmw==": { "id": "gngAZQYf0zy4+w3GwgpLmw==", "name": "python3-libcomps", "version": "0.1.18-1.el9", "kind": "binary", "source": { "id": "", "name": "libcomps", "version": "0.1.18-1.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "gsKPriszRNKAqMnHK+dXgw==": { "id": "gsKPriszRNKAqMnHK+dXgw==", "name": "libksba", "version": "1.5.1-7.el9", "kind": "binary", "source": { "id": "", "name": "libksba", "version": "1.5.1-7.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "hKJ3xmpaes4B2vxd2C5M1Q==": { "id": "hKJ3xmpaes4B2vxd2C5M1Q==", "name": "ocaml-srpm-macros", "version": "6-6.el9", "kind": "binary", "source": { "id": "", "name": "ocaml-srpm-macros", "version": "6-6.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "noarch", "cpe": "", "detector": null }, "hWZOSd0A+iLGAwoMoW6sgw==": { "id": "hWZOSd0A+iLGAwoMoW6sgw==", "name": "systemd", "version": "252-55.el9_7.2", "kind": "binary", "source": { "id": "", "name": "systemd", "version": "252-55.el9_7.2", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "hYEisV19Dxn4PvCvxJFm5A==": { "id": "hYEisV19Dxn4PvCvxJFm5A==", "name": "lz4-libs", "version": "1.9.3-5.el9", "kind": "binary", "source": { "id": "", "name": "lz4", "version": "1.9.3-5.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "hgsVhmCR+D+pPaE1yMWDsg==": { "id": "hgsVhmCR+D+pPaE1yMWDsg==", "name": "libicu-devel", "version": "67.1-10.el9_6", "kind": "binary", "source": { "id": "", "name": "icu", "version": "67.1-10.el9_6", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "hjikQWtnmVPaWts63wYw4Q==": { "id": "hjikQWtnmVPaWts63wYw4Q==", "name": "passwd", "version": "0.80-12.el9", "kind": "binary", "source": { "id": "", "name": "passwd", "version": "0.80-12.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "hktk4wXij5O6pY5X6Pdp/Q==": { "id": "hktk4wXij5O6pY5X6Pdp/Q==", "name": "elfutils-debuginfod-client", "version": "0.193-1.el9", "kind": "binary", "source": { "id": "", "name": "elfutils", "version": "0.193-1.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "iMLMqCcRXnm6QslpJnCS7w==": { "id": "iMLMqCcRXnm6QslpJnCS7w==", "name": "cairo", "version": "1.17.4-7.el9", "kind": "binary", "source": { "id": "", "name": "cairo", "version": "1.17.4-7.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "iQByZpdRXgW/fl3SoDuoAA==": { "id": "iQByZpdRXgW/fl3SoDuoAA==", "name": "libipt", "version": "2.0.4-5.el9", "kind": "binary", "source": { "id": "", "name": "libipt", "version": "2.0.4-5.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "ipG1YUFrN7KyPdU8o+2M6Q==": { "id": "ipG1YUFrN7KyPdU8o+2M6Q==", "name": "libicu", "version": "67.1-10.el9_6", "kind": "binary", "source": { "id": "", "name": "icu", "version": "67.1-10.el9_6", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "irdTBCwmsDefJyVDw+cS3A==": { "id": "irdTBCwmsDefJyVDw+cS3A==", "name": "ima-evm-utils", "version": "1.6.2-2.el9", "kind": "binary", "source": { "id": "", "name": "ima-evm-utils", "version": "1.6.2-2.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "isMk2o0BvgtLnlqdbo7sxQ==": { "id": "isMk2o0BvgtLnlqdbo7sxQ==", "name": "ubi9/ubi", "version": "1764578730", "kind": "source", "source": { "id": "", "name": "", "version": "", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "unmatchable:1764578730.0.0.0.0.0.0.0.0.0", "arch": "x86_64", "cpe": "", "detector": null }, "iswhVSntR4QnIsTAyM6ydQ==": { "id": "iswhVSntR4QnIsTAyM6ydQ==", "name": "perl-Pod-Escapes", "version": "1:1.07-460.el9", "kind": "binary", "source": { "id": "", "name": "perl-Pod-Escapes", "version": "1.07-460.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "noarch", "cpe": "", "detector": null }, "ix3lD4/Nn7qLbcpDm0AIhg==": { "id": "ix3lD4/Nn7qLbcpDm0AIhg==", "name": "perl-constant", "version": "1.33-461.el9", "kind": "binary", "source": { "id": "", "name": "perl-constant", "version": "1.33-461.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "noarch", "cpe": "", "detector": null }, "izKk4aK07ZN99JT+tBsSBg==": { "id": "izKk4aK07ZN99JT+tBsSBg==", "name": "libpq", "version": "13.20-1.el9_5", "kind": "binary", "source": { "id": "", "name": "libpq", "version": "13.20-1.el9_5", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "j+mzBjs+9Rp1lGL7uVd5sA==": { "id": "j+mzBjs+9Rp1lGL7uVd5sA==", "name": "llvm-libs", "version": "20.1.8-3.el9", "kind": "binary", "source": { "id": "", "name": "llvm", "version": "20.1.8-3.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "j3sZgUo/K49ejMiEqbRAtg==": { "id": "j3sZgUo/K49ejMiEqbRAtg==", "name": "ubi9/s2i-base", "version": "1764621512", "kind": "ancestry", "source": { "id": "ck/z6XzYDT2o8eVJI5IO+Q==", "name": "ubi9/s2i-base", "version": "1764621512", "kind": "source", "source": { "id": "", "name": "", "version": "", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "unmatchable:1764621512.0.0.0.0.0.0.0.0.0", "arch": "x86_64", "cpe": "", "detector": null }, "normalized_version": "unmatchable:1764621512.0.0.0.0.0.0.0.0.0", "arch": "x86_64", "cpe": "", "detector": null }, "j5f/exLQUf/AfnuQvtw1ag==": { "id": "j5f/exLQUf/AfnuQvtw1ag==", "name": "perl-overload", "version": "1.31-481.1.el9_6", "kind": "binary", "source": { "id": "", "name": "perl", "version": "5.32.1-481.1.el9_6", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "noarch", "cpe": "", "detector": null }, "jAjaNW7NMGiv7HfByDu4RQ==": { "id": "jAjaNW7NMGiv7HfByDu4RQ==", "name": "alternatives", "version": "1.24-2.el9", "kind": "binary", "source": { "id": "", "name": "chkconfig", "version": "1.24-2.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "jDIVpAdvhjPN/gmOBNQuag==": { "id": "jDIVpAdvhjPN/gmOBNQuag==", "name": "perl-Time-Local", "version": "2:1.300-7.el9", "kind": "binary", "source": { "id": "", "name": "perl-Time-Local", "version": "1.300-7.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "noarch", "cpe": "", "detector": null }, "jDR7o2j2gfJePh/5YNDLjw==": { "id": "jDR7o2j2gfJePh/5YNDLjw==", "name": "systemd-pam", "version": "252-55.el9_7.2", "kind": "binary", "source": { "id": "", "name": "systemd", "version": "252-55.el9_7.2", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "jH43ZEoPP2TpNiUJXUizMw==": { "id": "jH43ZEoPP2TpNiUJXUizMw==", "name": "libutempter", "version": "1.2.1-6.el9", "kind": "binary", "source": { "id": "", "name": "libutempter", "version": "1.2.1-6.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "jMxy8GAhrrA2mTT5vqlfcg==": { "id": "jMxy8GAhrrA2mTT5vqlfcg==", "name": "gcc", "version": "11.5.0-11.el9", "kind": "binary", "source": { "id": "", "name": "gcc", "version": "11.5.0-11.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "jXo3rXdhdYGkiXYZpQxZ3Q==": { "id": "jXo3rXdhdYGkiXYZpQxZ3Q==", "name": "python3-chardet", "version": "4.0.0-5.el9", "kind": "binary", "source": { "id": "", "name": "python-chardet", "version": "4.0.0-5.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "noarch", "cpe": "", "detector": null }, "jrYNd66NtmHdHhjnoxRx/A==": { "id": "jrYNd66NtmHdHhjnoxRx/A==", "name": "perl-FileHandle", "version": "2.03-481.1.el9_6", "kind": "binary", "source": { "id": "", "name": "perl", "version": "5.32.1-481.1.el9_6", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "noarch", "cpe": "", "detector": null }, "kDzRHkg3txncDWuyd5771g==": { "id": "kDzRHkg3txncDWuyd5771g==", "name": "fontconfig", "version": "2.14.0-2.el9_1", "kind": "binary", "source": { "id": "", "name": "fontconfig", "version": "2.14.0-2.el9_1", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "kFxhSjWy84mTZBM4XiZaeQ==": { "id": "kFxhSjWy84mTZBM4XiZaeQ==", "name": "setup", "version": "2.13.7-10.el9", "kind": "binary", "source": { "id": "", "name": "setup", "version": "2.13.7-10.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "noarch", "cpe": "", "detector": null }, "kQDs6otjkbsijCAC8Ln06g==": { "id": "kQDs6otjkbsijCAC8Ln06g==", "name": "ubi9/ubi", "version": "1764578730", "kind": "ancestry", "source": { "id": "isMk2o0BvgtLnlqdbo7sxQ==", "name": "ubi9/ubi", "version": "1764578730", "kind": "source", "source": { "id": "", "name": "", "version": "", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "unmatchable:1764578730.0.0.0.0.0.0.0.0.0", "arch": "x86_64", "cpe": "", "detector": null }, "normalized_version": "unmatchable:1764578730.0.0.0.0.0.0.0.0.0", "arch": "x86_64", "cpe": "", "detector": null }, "kigiD4fuysu8/DeCr+ONKQ==": { "id": "kigiD4fuysu8/DeCr+ONKQ==", "name": "basesystem", "version": "11-13.el9", "kind": "binary", "source": { "id": "", "name": "basesystem", "version": "11-13.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "noarch", "cpe": "", "detector": null }, "kp6BaioAZ30jbVeZkkzokA==": { "id": "kp6BaioAZ30jbVeZkkzokA==", "name": "libzstd", "version": "1.5.5-1.el9", "kind": "binary", "source": { "id": "", "name": "zstd", "version": "1.5.5-1.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "kqjucdtmnvYZVSGwSyc0aA==": { "id": "kqjucdtmnvYZVSGwSyc0aA==", "name": "iproute", "version": "6.14.0-2.el9", "kind": "binary", "source": { "id": "", "name": "iproute", "version": "6.14.0-2.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "l36Y8lL0dC04c9AnKIpOCw==": { "id": "l36Y8lL0dC04c9AnKIpOCw==", "name": "perl-vars", "version": "1.05-481.1.el9_6", "kind": "binary", "source": { "id": "", "name": "perl", "version": "5.32.1-481.1.el9_6", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "noarch", "cpe": "", "detector": null }, "lCuOAKu3TEbLIlxlfIdxkg==": { "id": "lCuOAKu3TEbLIlxlfIdxkg==", "name": "diff-lcs", "version": "1.6.2", "kind": "binary", "source": { "id": "", "name": "", "version": "", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "cpe": "", "detector": null }, "lNWcYbl6h71sUZV6B4E+bw==": { "id": "lNWcYbl6h71sUZV6B4E+bw==", "name": "pkgconf-m4", "version": "1.7.3-10.el9", "kind": "binary", "source": { "id": "", "name": "pkgconf", "version": "1.7.3-10.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "noarch", "cpe": "", "detector": null }, "lV2MRz2nTh21rS47LJ6XIQ==": { "id": "lV2MRz2nTh21rS47LJ6XIQ==", "name": "python3-pip-wheel", "version": "21.3.1-1.el9", "kind": "binary", "source": { "id": "", "name": "python-pip", "version": "21.3.1-1.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "noarch", "cpe": "", "detector": null }, "lbcitH3ttNejz+IVDee9kA==": { "id": "lbcitH3ttNejz+IVDee9kA==", "name": "dnf-data", "version": "4.14.0-31.el9", "kind": "binary", "source": { "id": "", "name": "dnf", "version": "4.14.0-31.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "noarch", "cpe": "", "detector": null }, "lqKUNuoxzC8zSaSnPi26WQ==": { "id": "lqKUNuoxzC8zSaSnPi26WQ==", "name": "perl-overloading", "version": "0.02-481.1.el9_6", "kind": "binary", "source": { "id": "", "name": "perl", "version": "5.32.1-481.1.el9_6", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "noarch", "cpe": "", "detector": null }, "m7hOFCjo7x6PMvux7htFOg==": { "id": "m7hOFCjo7x6PMvux7htFOg==", "name": "cracklib-dicts", "version": "2.9.6-27.el9", "kind": "binary", "source": { "id": "", "name": "cracklib", "version": "2.9.6-27.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "mK/FUfODp3MR7WS2xegPsw==": { "id": "mK/FUfODp3MR7WS2xegPsw==", "name": "langpacks-core-en", "version": "3.0-16.el9", "kind": "binary", "source": { "id": "", "name": "langpacks", "version": "3.0-16.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "noarch", "cpe": "", "detector": null }, "mPqGnMbiXN6jP61aGbHvOA==": { "id": "mPqGnMbiXN6jP61aGbHvOA==", "name": "libyaml", "version": "0.2.5-7.el9", "kind": "binary", "source": { "id": "", "name": "libyaml", "version": "0.2.5-7.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "mWpxQAUiV6nN451/LkTR5w==": { "id": "mWpxQAUiV6nN451/LkTR5w==", "name": "git-core", "version": "2.47.3-1.el9_6", "kind": "binary", "source": { "id": "", "name": "git", "version": "2.47.3-1.el9_6", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "mkPyuhaF03PTIjEd+8p5XQ==": { "id": "mkPyuhaF03PTIjEd+8p5XQ==", "name": "ubi9/s2i-base", "version": "1764621512", "kind": "binary", "source": { "id": "ck/z6XzYDT2o8eVJI5IO+Q==", "name": "ubi9/s2i-base", "version": "1764621512", "kind": "source", "source": { "id": "", "name": "", "version": "", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "unmatchable:1764621512.0.0.0.0.0.0.0.0.0", "arch": "x86_64", "cpe": "", "detector": null }, "normalized_version": "unmatchable:1764621512.0.0.0.0.0.0.0.0.0", "arch": "x86_64", "cpe": "", "detector": null }, "mqINnrlOZQGPnpnT9GZG5w==": { "id": "mqINnrlOZQGPnpnT9GZG5w==", "name": "rubygem-bundler", "version": "2.5.22-4.module+el9.7.0+23096+6a95897f", "kind": "binary", "source": { "id": "", "name": "ruby", "version": "3.3.8-4.module+el9.7.0+23096+6a95897f", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "module": "ruby:3.3", "arch": "noarch", "cpe": "", "detector": null }, "mx/6FfeunMu7M9pQ9cRKkQ==": { "id": "mx/6FfeunMu7M9pQ9cRKkQ==", "name": "glib2-devel", "version": "2.68.4-18.el9_7", "kind": "binary", "source": { "id": "", "name": "glib2", "version": "2.68.4-18.el9_7", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "n9GoYS9J7jkIET4QDQWijA==": { "id": "n9GoYS9J7jkIET4QDQWijA==", "name": "openssl-devel", "version": "1:3.5.1-4.el9_7", "kind": "binary", "source": { "id": "", "name": "openssl", "version": "3.5.1-4.el9_7", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "na4ojyfFHL07xf5Yr8wxsg==": { "id": "na4ojyfFHL07xf5Yr8wxsg==", "name": "libgpg-error-devel", "version": "1.42-5.el9", "kind": "binary", "source": { "id": "", "name": "libgpg-error", "version": "1.42-5.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "niOKQxfAYGHJ3oUq3VHjdA==": { "id": "niOKQxfAYGHJ3oUq3VHjdA==", "name": "nodejs-full-i18n", "version": "1:22.19.0-2.module+el9.6.0+23473+45664c2d", "kind": "binary", "source": { "id": "", "name": "nodejs", "version": "22.19.0-2.module+el9.6.0+23473+45664c2d", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "module": "nodejs:22", "arch": "x86_64", "cpe": "", "detector": null }, "nqniqNEVhrfub8cS+os87A==": { "id": "nqniqNEVhrfub8cS+os87A==", "name": "fonts-srpm-macros", "version": "1:2.0.5-7.el9.1", "kind": "binary", "source": { "id": "", "name": "fonts-rpm-macros", "version": "2.0.5-7.el9.1", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "noarch", "cpe": "", "detector": null }, "nuIyutUqK6hTmg/S9ojklw==": { "id": "nuIyutUqK6hTmg/S9ojklw==", "name": "yum", "version": "4.14.0-31.el9", "kind": "binary", "source": { "id": "", "name": "dnf", "version": "4.14.0-31.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "noarch", "cpe": "", "detector": null }, "nzQEyt4JfkGeZIIHPiBhog==": { "id": "nzQEyt4JfkGeZIIHPiBhog==", "name": "libuuid", "version": "2.37.4-21.el9", "kind": "binary", "source": { "id": "", "name": "util-linux", "version": "2.37.4-21.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "oIqBLVUdTw3vIPAyQdS/tA==": { "id": "oIqBLVUdTw3vIPAyQdS/tA==", "name": "python3-subscription-manager-rhsm", "version": "1.29.47.1-1.el9_7", "kind": "binary", "source": { "id": "", "name": "subscription-manager", "version": "1.29.47.1-1.el9_7", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "oK41W21MyjS/j+5BoCQjuA==": { "id": "oK41W21MyjS/j+5BoCQjuA==", "name": "tcl", "version": "1:8.6.10-7.el9", "kind": "binary", "source": { "id": "", "name": "tcl", "version": "8.6.10-7.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "obNuQXzAwE3TzjUoRN1yEw==": { "id": "obNuQXzAwE3TzjUoRN1yEw==", "name": "libbabeltrace", "version": "1.5.8-10.el9", "kind": "binary", "source": { "id": "", "name": "babeltrace", "version": "1.5.8-10.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "osuCNzTJ+Fjh0P4Yfe9E1g==": { "id": "osuCNzTJ+Fjh0P4Yfe9E1g==", "name": "python3-setuptools", "version": "53.0.0-15.el9", "kind": "binary", "source": { "id": "", "name": "python-setuptools", "version": "53.0.0-15.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "noarch", "cpe": "", "detector": null }, "p9E62zY/VzvgMSvTX9UkJg==": { "id": "p9E62zY/VzvgMSvTX9UkJg==", "name": "crypto-policies-scripts", "version": "20250905-1.git377cc42.el9_7", "kind": "binary", "source": { "id": "", "name": "crypto-policies", "version": "20250905-1.git377cc42.el9_7", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "noarch", "cpe": "", "detector": null }, "q4zKXqPU+5vLvZLEG6zEXw==": { "id": "q4zKXqPU+5vLvZLEG6zEXw==", "name": "perl-Getopt-Std", "version": "1.12-481.1.el9_6", "kind": "binary", "source": { "id": "", "name": "perl", "version": "5.32.1-481.1.el9_6", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "noarch", "cpe": "", "detector": null }, "q8h8ag3Ho33Zc/60lMOvVA==": { "id": "q8h8ag3Ho33Zc/60lMOvVA==", "name": "unzip", "version": "6.0-59.el9", "kind": "binary", "source": { "id": "", "name": "unzip", "version": "6.0-59.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "qGKV3oqLguMWpyzvjv1+wg==": { "id": "qGKV3oqLguMWpyzvjv1+wg==", "name": "libtiff-devel", "version": "4.4.0-15.el9_7.2", "kind": "binary", "source": { "id": "", "name": "libtiff", "version": "4.4.0-15.el9_7.2", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "qKN/Sy8G7n1xl+F5J1m1bg==": { "id": "qKN/Sy8G7n1xl+F5J1m1bg==", "name": "perl-File-Copy", "version": "2.34-481.1.el9_6", "kind": "binary", "source": { "id": "", "name": "perl", "version": "5.32.1-481.1.el9_6", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "noarch", "cpe": "", "detector": null }, "qYSZ6aKFWol313IOGRXaug==": { "id": "qYSZ6aKFWol313IOGRXaug==", "name": "json-c", "version": "0.14-11.el9", "kind": "binary", "source": { "id": "", "name": "json-c", "version": "0.14-11.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "qc0Yt1AzZC+CY6qdjO+fZA==": { "id": "qc0Yt1AzZC+CY6qdjO+fZA==", "name": "python3-idna", "version": "2.10-7.el9_4.1", "kind": "binary", "source": { "id": "", "name": "python-idna", "version": "2.10-7.el9_4.1", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "noarch", "cpe": "", "detector": null }, "qco/AqMt9denZ9GeHFnEaA==": { "id": "qco/AqMt9denZ9GeHFnEaA==", "name": "libbpf", "version": "2:1.5.0-2.el9", "kind": "binary", "source": { "id": "", "name": "libbpf", "version": "1.5.0-2.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "qklPItzKPipAd2a3RHZZIA==": { "id": "qklPItzKPipAd2a3RHZZIA==", "name": "libfido2", "version": "1.13.0-2.el9", "kind": "binary", "source": { "id": "", "name": "libfido2", "version": "1.13.0-2.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "qsJmM3aYeYGdvjHxtaNdaQ==": { "id": "qsJmM3aYeYGdvjHxtaNdaQ==", "name": "perl-Errno", "version": "1.30-481.1.el9_6", "kind": "binary", "source": { "id": "", "name": "perl", "version": "5.32.1-481.1.el9_6", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "r0GDCuRXOUGVJzCqB4JFMw==": { "id": "r0GDCuRXOUGVJzCqB4JFMw==", "name": "bzip2-devel", "version": "1.0.8-10.el9_5", "kind": "binary", "source": { "id": "", "name": "bzip2", "version": "1.0.8-10.el9_5", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "rB+tPXab1eESNe/6qy7U4Q==": { "id": "rB+tPXab1eESNe/6qy7U4Q==", "name": "boost-regex", "version": "1.75.0-12.el9", "kind": "binary", "source": { "id": "", "name": "boost", "version": "1.75.0-12.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "rCLp3m64Catai9VuHvh3Lw==": { "id": "rCLp3m64Catai9VuHvh3Lw==", "name": "keyutils-libs", "version": "1.6.3-1.el9", "kind": "binary", "source": { "id": "", "name": "keyutils", "version": "1.6.3-1.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "rEU0uZUpz06y9hg0ORc49A==": { "id": "rEU0uZUpz06y9hg0ORc49A==", "name": "libpwquality", "version": "1.4.4-8.el9", "kind": "binary", "source": { "id": "", "name": "libpwquality", "version": "1.4.4-8.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "rOo0eaSDbJ9TZ3lifnsvSQ==": { "id": "rOo0eaSDbJ9TZ3lifnsvSQ==", "name": "ubi9/ruby-33", "version": "1764649613", "kind": "source", "source": { "id": "", "name": "", "version": "", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "unmatchable:1764649613.0.0.0.0.0.0.0.0.0", "arch": "x86_64", "cpe": "", "detector": null }, "rUUieTQ6JPdOKUOFRfhvNw==": { "id": "rUUieTQ6JPdOKUOFRfhvNw==", "name": "perl-MIME-Base64", "version": "3.16-4.el9", "kind": "binary", "source": { "id": "", "name": "perl-MIME-Base64", "version": "3.16-4.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "rY/kE/V4JnxYoqV+lmc9mg==": { "id": "rY/kE/V4JnxYoqV+lmc9mg==", "name": "gawk", "version": "5.1.0-6.el9", "kind": "binary", "source": { "id": "", "name": "gawk", "version": "5.1.0-6.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "rZckolqfVnE7xInGZn5Zzw==": { "id": "rZckolqfVnE7xInGZn5Zzw==", "name": "python3-pysocks", "version": "1.7.1-12.el9", "kind": "binary", "source": { "id": "", "name": "python-pysocks", "version": "1.7.1-12.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "noarch", "cpe": "", "detector": null }, "rd4/gPEUtK2p++ni1m1dDg==": { "id": "rd4/gPEUtK2p++ni1m1dDg==", "name": "libsepol", "version": "3.6-3.el9", "kind": "binary", "source": { "id": "", "name": "libsepol", "version": "3.6-3.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "rflqn7XKJvnH8dP67kgM7A==": { "id": "rflqn7XKJvnH8dP67kgM7A==", "name": "qt5-srpm-macros", "version": "5.15.9-1.el9", "kind": "binary", "source": { "id": "", "name": "qt5", "version": "5.15.9-1.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "noarch", "cpe": "", "detector": null }, "rj2k4My0f4W7sR9R0rDeJg==": { "id": "rj2k4My0f4W7sR9R0rDeJg==", "name": "perl-Pod-Usage", "version": "4:2.01-4.el9", "kind": "binary", "source": { "id": "", "name": "perl-Pod-Usage", "version": "2.01-4.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "noarch", "cpe": "", "detector": null }, "rlHYqOr0lkUB/Gs6b1kD2g==": { "id": "rlHYqOr0lkUB/Gs6b1kD2g==", "name": "mpfr", "version": "4.1.0-7.el9", "kind": "binary", "source": { "id": "", "name": "mpfr", "version": "4.1.0-7.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "s/zVhVCY3vRmmv6PJdGLCg==": { "id": "s/zVhVCY3vRmmv6PJdGLCg==", "name": "perl-IO-Socket-SSL", "version": "2.073-2.el9", "kind": "binary", "source": { "id": "", "name": "perl-IO-Socket-SSL", "version": "2.073-2.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "noarch", "cpe": "", "detector": null }, "s6wkZ09Eozv3vmfwsPHUvQ==": { "id": "s6wkZ09Eozv3vmfwsPHUvQ==", "name": "systemd-rpm-macros", "version": "252-55.el9_7.2", "kind": "binary", "source": { "id": "", "name": "systemd", "version": "252-55.el9_7.2", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "noarch", "cpe": "", "detector": null }, "sE1EmQ5Nhv4P4rilE6lODw==": { "id": "sE1EmQ5Nhv4P4rilE6lODw==", "name": "lsof", "version": "4.94.0-3.el9", "kind": "binary", "source": { "id": "", "name": "lsof", "version": "4.94.0-3.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "sJhS0sL3jXf+ZUi4oTiojw==": { "id": "sJhS0sL3jXf+ZUi4oTiojw==", "name": "ruby-bundled-gems", "version": "3.3.8-4.module+el9.7.0+23096+6a95897f", "kind": "binary", "source": { "id": "", "name": "ruby", "version": "3.3.8-4.module+el9.7.0+23096+6a95897f", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "module": "ruby:3.3", "arch": "x86_64", "cpe": "", "detector": null }, "sREtPFILPccNXLGF49Cnmw==": { "id": "sREtPFILPccNXLGF49Cnmw==", "name": "libcurl-devel", "version": "7.76.1-34.el9", "kind": "binary", "source": { "id": "", "name": "curl", "version": "7.76.1-34.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "ssPaV1VLDu6d5ZJ6Rrmh3A==": { "id": "ssPaV1VLDu6d5ZJ6Rrmh3A==", "name": "sed", "version": "4.8-9.el9", "kind": "binary", "source": { "id": "", "name": "sed", "version": "4.8-9.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "sukNATkcLkohYgGrhDtrZA==": { "id": "sukNATkcLkohYgGrhDtrZA==", "name": "libxcrypt-devel", "version": "4.4.18-3.el9", "kind": "binary", "source": { "id": "", "name": "libxcrypt", "version": "4.4.18-3.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "sx0C6L5COHIkv6yQQyPlbw==": { "id": "sx0C6L5COHIkv6yQQyPlbw==", "name": "libunistring", "version": "0.9.10-15.el9", "kind": "binary", "source": { "id": "", "name": "libunistring", "version": "0.9.10-15.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "t28Zc7/vifVyS7O17xTUSA==": { "id": "t28Zc7/vifVyS7O17xTUSA==", "name": "pcre-devel", "version": "8.44-4.el9", "kind": "binary", "source": { "id": "", "name": "pcre", "version": "8.44-4.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "tGPn3pK3U8y547XMf1WmhQ==": { "id": "tGPn3pK3U8y547XMf1WmhQ==", "name": "glibc-gconv-extra", "version": "2.34-231.el9_7.2", "kind": "binary", "source": { "id": "", "name": "glibc", "version": "2.34-231.el9_7.2", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "tWWw65aFr0Her+B1hlgbqA==": { "id": "tWWw65aFr0Her+B1hlgbqA==", "name": "perl-Pod-Simple", "version": "1:3.42-4.el9", "kind": "binary", "source": { "id": "", "name": "perl-Pod-Simple", "version": "3.42-4.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "noarch", "cpe": "", "detector": null }, "tYvC71hd5ARf4WITmeyfxA==": { "id": "tYvC71hd5ARf4WITmeyfxA==", "name": "pcre2-utf16", "version": "10.40-6.el9", "kind": "binary", "source": { "id": "", "name": "pcre2", "version": "10.40-6.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "tqVXueFBgSdMZpggpUjjjA==": { "id": "tqVXueFBgSdMZpggpUjjjA==", "name": "ubi9/ruby-33", "version": "1764649613", "kind": "ancestry", "source": { "id": "rOo0eaSDbJ9TZ3lifnsvSQ==", "name": "ubi9/ruby-33", "version": "1764649613", "kind": "source", "source": { "id": "", "name": "", "version": "", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "unmatchable:1764649613.0.0.0.0.0.0.0.0.0", "arch": "x86_64", "cpe": "", "detector": null }, "normalized_version": "unmatchable:1764649613.0.0.0.0.0.0.0.0.0", "arch": "x86_64", "cpe": "", "detector": null }, "txEovS086NkVY5rNikpoEA==": { "id": "txEovS086NkVY5rNikpoEA==", "name": "python3-hawkey", "version": "0.69.0-16.el9", "kind": "binary", "source": { "id": "", "name": "libdnf", "version": "0.69.0-16.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "u3thu0wHuvY+STb8TrhkKQ==": { "id": "u3thu0wHuvY+STb8TrhkKQ==", "name": "openssh-clients", "version": "8.7p1-46.el9", "kind": "binary", "source": { "id": "", "name": "openssh", "version": "8.7p1-46.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "u5TyEoU5GA6Z2czzwhMLiA==": { "id": "u5TyEoU5GA6Z2czzwhMLiA==", "name": "fonts-filesystem", "version": "1:2.0.5-7.el9.1", "kind": "binary", "source": { "id": "", "name": "fonts-rpm-macros", "version": "2.0.5-7.el9.1", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "noarch", "cpe": "", "detector": null }, "v3i4ez5juML2ZWwR+6dFFg==": { "id": "v3i4ez5juML2ZWwR+6dFFg==", "name": "gnupg2", "version": "2.3.3-4.el9", "kind": "binary", "source": { "id": "", "name": "gnupg2", "version": "2.3.3-4.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "v6X9Dt1wPw8fK6VaHz1Ffw==": { "id": "v6X9Dt1wPw8fK6VaHz1Ffw==", "name": "perl-threads-shared", "version": "1.61-460.el9", "kind": "binary", "source": { "id": "", "name": "perl-threads-shared", "version": "1.61-460.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "v9Q18SPC524XLCjLQkFyLg==": { "id": "v9Q18SPC524XLCjLQkFyLg==", "name": "perl-AutoLoader", "version": "5.74-481.1.el9_6", "kind": "binary", "source": { "id": "", "name": "perl", "version": "5.32.1-481.1.el9_6", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "noarch", "cpe": "", "detector": null }, "vtNcuXyRth8r8K/W3sfqrQ==": { "id": "vtNcuXyRth8r8K/W3sfqrQ==", "name": "libpng-devel", "version": "2:1.6.37-12.el9", "kind": "binary", "source": { "id": "", "name": "libpng", "version": "1.6.37-12.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "vw1F3IS9ZqFqIEU3E24hLQ==": { "id": "vw1F3IS9ZqFqIEU3E24hLQ==", "name": "libwebp-devel", "version": "1.2.0-8.el9_3", "kind": "binary", "source": { "id": "", "name": "libwebp", "version": "1.2.0-8.el9_3", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "w2DoavvB02S/+BS01jQqJw==": { "id": "w2DoavvB02S/+BS01jQqJw==", "name": "openblas-srpm-macros", "version": "2-11.el9", "kind": "binary", "source": { "id": "", "name": "openblas-srpm-macros", "version": "2-11.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "noarch", "cpe": "", "detector": null }, "w9ndxjIpPQXv3PDulnya7A==": { "id": "w9ndxjIpPQXv3PDulnya7A==", "name": "libX11", "version": "1.7.0-11.el9", "kind": "binary", "source": { "id": "", "name": "libX11", "version": "1.7.0-11.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "wCA3gMNtInqX1xg18QcnQg==": { "id": "wCA3gMNtInqX1xg18QcnQg==", "name": "ca-certificates", "version": "2024.2.69_v8.0.303-91.4.el9_4", "kind": "binary", "source": { "id": "", "name": "ca-certificates", "version": "2024.2.69_v8.0.303-91.4.el9_4", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "noarch", "cpe": "", "detector": null }, "wVOHUaFC3qlk+Ft1W2VH7A==": { "id": "wVOHUaFC3qlk+Ft1W2VH7A==", "name": "python3-gobject-base-noarch", "version": "3.40.1-6.el9", "kind": "binary", "source": { "id": "", "name": "pygobject3", "version": "3.40.1-6.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "noarch", "cpe": "", "detector": null }, "wYIIhtw19AhoRPO0XAvoxw==": { "id": "wYIIhtw19AhoRPO0XAvoxw==", "name": "bsdtar", "version": "3.5.3-6.el9_6", "kind": "binary", "source": { "id": "", "name": "libarchive", "version": "3.5.3-6.el9_6", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "wdMozBSF06uhI4HOI003SQ==": { "id": "wdMozBSF06uhI4HOI003SQ==", "name": "perl-Term-Cap", "version": "1.17-460.el9", "kind": "binary", "source": { "id": "", "name": "perl-Term-Cap", "version": "1.17-460.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "noarch", "cpe": "", "detector": null }, "wfJGCqOH8d+IYg/dAepx1A==": { "id": "wfJGCqOH8d+IYg/dAepx1A==", "name": "libarchive", "version": "3.5.3-6.el9_6", "kind": "binary", "source": { "id": "", "name": "libarchive", "version": "3.5.3-6.el9_6", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "wvtx3JsOUmPyorardjeYSQ==": { "id": "wvtx3JsOUmPyorardjeYSQ==", "name": "fontconfig-devel", "version": "2.14.0-2.el9_1", "kind": "binary", "source": { "id": "", "name": "fontconfig", "version": "2.14.0-2.el9_1", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "ww1NPX/mwmdtd47p1Hp8FQ==": { "id": "ww1NPX/mwmdtd47p1Hp8FQ==", "name": "libX11-devel", "version": "1.7.0-11.el9", "kind": "binary", "source": { "id": "", "name": "libX11", "version": "1.7.0-11.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "x4oijVhQU8BUwJwoFvk4QA==": { "id": "x4oijVhQU8BUwJwoFvk4QA==", "name": "libmodulemd", "version": "2.13.0-2.el9", "kind": "binary", "source": { "id": "", "name": "libmodulemd", "version": "2.13.0-2.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "xGsFnJNA7f9q/+8cz1QFqg==": { "id": "xGsFnJNA7f9q/+8cz1QFqg==", "name": "lua-srpm-macros", "version": "1-6.el9", "kind": "binary", "source": { "id": "", "name": "lua-rpm-macros", "version": "1-6.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "noarch", "cpe": "", "detector": null }, "xItFXMbfthPTJh/VhaoYeA==": { "id": "xItFXMbfthPTJh/VhaoYeA==", "name": "perl-Fcntl", "version": "1.13-481.1.el9_6", "kind": "binary", "source": { "id": "", "name": "perl", "version": "5.32.1-481.1.el9_6", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "xMqWNWDJot/UVGgOoRsUVQ==": { "id": "xMqWNWDJot/UVGgOoRsUVQ==", "name": "rubygems", "version": "3.5.22-4.module+el9.7.0+23096+6a95897f", "kind": "binary", "source": { "id": "", "name": "ruby", "version": "3.3.8-4.module+el9.7.0+23096+6a95897f", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "module": "ruby:3.3", "arch": "noarch", "cpe": "", "detector": null }, "xRkX4SbymzipYnnd/tIGVw==": { "id": "xRkX4SbymzipYnnd/tIGVw==", "name": "ubi9/ruby-33", "version": "1786713372", "kind": "ancestry", "source": { "id": "Riemnu+blxsuHCoBGaacLA==", "name": "ubi9/ruby-33", "version": "1786713372", "kind": "source", "source": { "id": "", "name": "", "version": "", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "rhctag:1786713372.0.0.0.0.0.0.0.0.0", "arch": "x86_64", "cpe": "", "detector": null }, "normalized_version": "rhctag:1786713372.0.0.0.0.0.0.0.0.0", "arch": "x86_64", "cpe": "", "detector": null }, "xTea8RVD9wez5DTFDIkCYg==": { "id": "xTea8RVD9wez5DTFDIkCYg==", "name": "libtiff", "version": "4.4.0-15.el9_7.2", "kind": "binary", "source": { "id": "", "name": "libtiff", "version": "4.4.0-15.el9_7.2", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "xVpXFb43dZh4HfBX53yyew==": { "id": "xVpXFb43dZh4HfBX53yyew==", "name": "python3-iniparse", "version": "0.4-45.el9", "kind": "binary", "source": { "id": "", "name": "python-iniparse", "version": "0.4-45.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "noarch", "cpe": "", "detector": null }, "xfiNHrth0bRlTgQnR3IgUw==": { "id": "xfiNHrth0bRlTgQnR3IgUw==", "name": "libpsl", "version": "0.21.1-5.el9", "kind": "binary", "source": { "id": "", "name": "libpsl", "version": "0.21.1-5.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "xgCGPQ7CZbjJqBTw2Nmu9w==": { "id": "xgCGPQ7CZbjJqBTw2Nmu9w==", "name": "groff-base", "version": "1.22.4-10.el9", "kind": "binary", "source": { "id": "", "name": "groff", "version": "1.22.4-10.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "xnmn6fk+/THLJg3emXYMww==": { "id": "xnmn6fk+/THLJg3emXYMww==", "name": "perl-libnet", "version": "3.13-4.el9", "kind": "binary", "source": { "id": "", "name": "perl-libnet", "version": "3.13-4.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "noarch", "cpe": "", "detector": null }, "xuRjbnwW5VkRHg0Huc5RCg==": { "id": "xuRjbnwW5VkRHg0Huc5RCg==", "name": "util-linux", "version": "2.37.4-21.el9", "kind": "binary", "source": { "id": "", "name": "util-linux", "version": "2.37.4-21.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "y9sflCLWTaHWSSC+w8u7bQ==": { "id": "y9sflCLWTaHWSSC+w8u7bQ==", "name": "xz-devel", "version": "5.2.5-8.el9_0", "kind": "binary", "source": { "id": "", "name": "xz", "version": "5.2.5-8.el9_0", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "yEp9fQVFIQAEDPCwC3GLmA==": { "id": "yEp9fQVFIQAEDPCwC3GLmA==", "name": "libsemanage", "version": "3.6-5.el9_6", "kind": "binary", "source": { "id": "", "name": "libsemanage", "version": "3.6-5.el9_6", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "yHwqZ1KSVBKOdg3PvZkURg==": { "id": "yHwqZ1KSVBKOdg3PvZkURg==", "name": "perl-NDBM_File", "version": "1.15-481.1.el9_6", "kind": "binary", "source": { "id": "", "name": "perl", "version": "5.32.1-481.1.el9_6", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "yMfhY0UxLchgIpNP2r2lyQ==": { "id": "yMfhY0UxLchgIpNP2r2lyQ==", "name": "make", "version": "1:4.3-8.el9", "kind": "binary", "source": { "id": "", "name": "make", "version": "4.3-8.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "yY469KfvqdHWbJwmOcIU1Q==": { "id": "yY469KfvqdHWbJwmOcIU1Q==", "name": "perl-Carp", "version": "1.50-460.el9", "kind": "binary", "source": { "id": "", "name": "perl-Carp", "version": "1.50-460.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "noarch", "cpe": "", "detector": null }, "ycSS8xsUDu5nMwsql04xfQ==": { "id": "ycSS8xsUDu5nMwsql04xfQ==", "name": "gd", "version": "2.3.2-3.el9", "kind": "binary", "source": { "id": "", "name": "gd", "version": "2.3.2-3.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "z+4p7UhT99HApht5JWOY7w==": { "id": "z+4p7UhT99HApht5JWOY7w==", "name": "libselinux-devel", "version": "3.6-3.el9", "kind": "binary", "source": { "id": "", "name": "libselinux", "version": "3.6-3.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "zDt2Vfv35KL/GbH9JG8H3A==": { "id": "zDt2Vfv35KL/GbH9JG8H3A==", "name": "libX11-common", "version": "1.7.0-11.el9", "kind": "binary", "source": { "id": "", "name": "libX11", "version": "1.7.0-11.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "noarch", "cpe": "", "detector": null }, "zLbmCpiDy68qsFvtKNzmgQ==": { "id": "zLbmCpiDy68qsFvtKNzmgQ==", "name": "xml-common", "version": "0.6.3-58.el9", "kind": "binary", "source": { "id": "", "name": "sgml-common", "version": "0.6.3-58.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "noarch", "cpe": "", "detector": null }, "zYkGoXzaE5np8s88FoALNQ==": { "id": "zYkGoXzaE5np8s88FoALNQ==", "name": "usermode", "version": "1.114-7.el9", "kind": "binary", "source": { "id": "", "name": "usermode", "version": "1.114-7.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "zbfsUtSlKsegyV6mTxR13A==": { "id": "zbfsUtSlKsegyV6mTxR13A==", "name": "dnf", "version": "4.14.0-31.el9", "kind": "binary", "source": { "id": "", "name": "dnf", "version": "4.14.0-31.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "noarch", "cpe": "", "detector": null }, "zfyfWkP+jPZaONI2HeiXQw==": { "id": "zfyfWkP+jPZaONI2HeiXQw==", "name": "perl-B", "version": "1.80-481.1.el9_6", "kind": "binary", "source": { "id": "", "name": "perl", "version": "5.32.1-481.1.el9_6", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "zmiWZ9YjduqgYQPI8rU4ug==": { "id": "zmiWZ9YjduqgYQPI8rU4ug==", "name": "libwebp", "version": "1.2.0-8.el9_3", "kind": "binary", "source": { "id": "", "name": "libwebp", "version": "1.2.0-8.el9_3", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "x86_64", "cpe": "", "detector": null }, "znACbAN0JGBPtCXNh1d0Ng==": { "id": "znACbAN0JGBPtCXNh1d0Ng==", "name": "rubygem-rake", "version": "13.1.0-4.module+el9.7.0+23096+6a95897f", "kind": "binary", "source": { "id": "", "name": "ruby", "version": "3.3.8-4.module+el9.7.0+23096+6a95897f", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "module": "ruby:3.3", "arch": "noarch", "cpe": "", "detector": null }, "zxuLMmxubC84XoLpkfxZ3w==": { "id": "zxuLMmxubC84XoLpkfxZ3w==", "name": "perl-Mozilla-CA", "version": "20200520-6.el9", "kind": "binary", "source": { "id": "", "name": "perl-Mozilla-CA", "version": "20200520-6.el9", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "normalized_version": "", "arch": "noarch", "cpe": "", "detector": null } }, "distributions": { "0e229e17-d459-4174-a862-4ac814070695": { "id": "0e229e17-d459-4174-a862-4ac814070695", "did": "rhel", "name": "Red Hat Enterprise Linux Server", "version": "9", "version_code_name": "", "version_id": "9", "arch": "", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "pretty_name": "Red Hat Enterprise Linux Server 9" } }, "repository": { "0401d292-a8ff-4814-9a7c-11d864fa5f84": { "id": "0401d292-a8ff-4814-9a7c-11d864fa5f84", "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "uri": "repoid=rhel-9-for-x86_64-baseos-rpms", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "094b57a8-611b-45bd-b338-0f1e3ba94b76": { "id": "094b57a8-611b-45bd-b338-0f1e3ba94b76", "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "uri": "repoid=rhel-9-for-x86_64-appstream-rpms", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "2ae3eccc-f14d-44e2-9b7e-ceb5684ea595": { "id": "2ae3eccc-f14d-44e2-9b7e-ceb5684ea595", "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "uri": "repoid=rhel-9-for-x86_64-baseos-rpms", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "49620a67-2a69-4965-87b7-cf8e91792454": { "id": "49620a67-2a69-4965-87b7-cf8e91792454", "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhcc-container-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "616b4892-2aee-4a60-a46a-6cac7161a964": { "id": "616b4892-2aee-4a60-a46a-6cac7161a964", "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "uri": "repoid=rhel-9-for-x86_64-baseos-rpms", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "624606e7-9195-428c-b44c-9a363be0d39e": { "id": "624606e7-9195-428c-b44c-9a363be0d39e", "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhcc-container-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "68a7ce1a-f8e4-4fc3-b254-6cbbc1f1e251": { "id": "68a7ce1a-f8e4-4fc3-b254-6cbbc1f1e251", "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhcc-container-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "7c0fcdb8-6748-4d51-8c0f-22d062631cfe": { "id": "7c0fcdb8-6748-4d51-8c0f-22d062631cfe", "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhcc-container-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "7e98fa1e-1ff8-49b5-a6d1-c48a9213af4a": { "id": "7e98fa1e-1ff8-49b5-a6d1-c48a9213af4a", "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "uri": "repoid=rhel-9-for-x86_64-appstream-rpms", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "81447011-d8ab-46e4-8fc1-e6abb52d52ca": { "id": "81447011-d8ab-46e4-8fc1-e6abb52d52ca", "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "uri": "repoid=rhel-9-for-x86_64-baseos-rpms", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7": { "id": "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7", "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "uri": "repoid=rhel-9-for-x86_64-appstream-rpms", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "9233afa2-d32f-47ca-a768-d2fc0c05a540": { "id": "9233afa2-d32f-47ca-a768-d2fc0c05a540", "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "uri": "repoid=rhel-9-for-x86_64-baseos-rpms", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "99dfe52b-c38e-4726-a51a-93ad820c4596": { "id": "99dfe52b-c38e-4726-a51a-93ad820c4596", "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhcc-container-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "9eaa4267-c64e-4348-a45b-c0b836f4d708": { "id": "9eaa4267-c64e-4348-a45b-c0b836f4d708", "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "uri": "repoid=rhel-9-for-x86_64-baseos-rpms", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "ac41f493-ae0a-4233-8d1f-2e3b9706fb57": { "id": "ac41f493-ae0a-4233-8d1f-2e3b9706fb57", "name": "rubygems", "uri": "https://rubygems.org/gems/", "cpe": "" }, "c25f9d12-eee8-46f8-82d5-9b736db168d4": { "id": "c25f9d12-eee8-46f8-82d5-9b736db168d4", "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "uri": "repoid=rhel-9-for-x86_64-baseos-rpms", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "dfaef1f7-0917-41e7-90f7-f6a298a5464e": { "id": "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "uri": "repoid=rhel-9-for-x86_64-baseos-rpms", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "f02093ed-178d-479c-badc-f189b0146a57": { "id": "f02093ed-178d-479c-badc-f189b0146a57", "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "uri": "repoid=rhel-9-for-x86_64-appstream-rpms", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" } }, "environments": { "+8b2rLdXTkZ4Ylx7vWU2tQ==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "+A7/nzEXX3Q/xJZ50VMnlQ==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "+B22ALb6YCnXu+3s6afaLg==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "+ELGclZlzVhkDoWJwZc9OA==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "616b4892-2aee-4a60-a46a-6cac7161a964", "9eaa4267-c64e-4348-a45b-c0b836f4d708" ] } ], "+HmNQdmjJTL5gC4nHHd6rw==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "+X1MdmtPTbyDb/wq7joJhA==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "+bwl6UbMaWOBWdHNekJsEw==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "+kdviPHeaPmwEsPQK85KjQ==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "+v/DtyduRnxay/g57zCBpw==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "+y+as2YNBEvOddTPxl73DA==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "/Bb6eVO+je9kbuIGTvt6Ww==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "616b4892-2aee-4a60-a46a-6cac7161a964", "9eaa4267-c64e-4348-a45b-c0b836f4d708" ] } ], "/L1kFEoHZTukrNTCQLypFQ==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "/O7rOBo1qRMFm3q3Kf3mEw==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "/THiuz93dsCZJETS3A4Xtw==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "/XUXPfxfCal3j0ldx+af3A==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "616b4892-2aee-4a60-a46a-6cac7161a964", "9eaa4267-c64e-4348-a45b-c0b836f4d708" ] } ], "/h/TBQhfoSMCmey5oN87jA==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "/l8wc0qlQdZdqgMIy+AX4w==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "/oIjTiZph8FPjlWNL5s82w==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:9f35f2b57577774b834118db7188bdec31b167b8fbd2f9b426e9a088125aba15", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:9f35f2b57577774b834118db7188bdec31b167b8fbd2f9b426e9a088125aba15", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "9233afa2-d32f-47ca-a768-d2fc0c05a540", "c25f9d12-eee8-46f8-82d5-9b736db168d4" ] } ], "/oLe91LMLglvpqo76adFGw==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "/ub7EE8Da46T0x7lRdlVJg==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "0133y/ZC+9hrvuSzgka7cw==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:9f35f2b57577774b834118db7188bdec31b167b8fbd2f9b426e9a088125aba15", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:9f35f2b57577774b834118db7188bdec31b167b8fbd2f9b426e9a088125aba15", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "9233afa2-d32f-47ca-a768-d2fc0c05a540", "c25f9d12-eee8-46f8-82d5-9b736db168d4" ] } ], "04b0yaCHYk5DVzS89hVjvw==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "09fH92fqoWDOaYEpwQ9p2g==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "616b4892-2aee-4a60-a46a-6cac7161a964", "9eaa4267-c64e-4348-a45b-c0b836f4d708" ] } ], "09r8DbZFJmI1tQW/a+ZlWQ==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "0NHnPl3pNsT2FH8oGcfyEw==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "0fqyUk3Q4wjepXsEzVTbuQ==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "0gNpYdx7/dHkr8z85zHOSg==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "0kf4C6OH9tp4+UaKjumyEg==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "1+Lg0PO3SMtKcC7avbi64w==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "13LJ8VSSR7Q+r1oKIOzegw==": [ { "package_db": "root/buildinfo/labels.json", "introduced_in": "sha256:9f35f2b57577774b834118db7188bdec31b167b8fbd2f9b426e9a088125aba15", "distribution_id": "", "repository_ids": [ "49620a67-2a69-4965-87b7-cf8e91792454" ] } ], "1XXuvf69/0I2dNHaU2UndQ==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "1Xbb0MgMTadhlE/gdXAC9g==": [ { "package_db": "root/buildinfo/labels.json", "introduced_in": "sha256:f01f404db6433dada5ec30e0f4d793ede39a963d0f9825c822fbbb074082b604", "distribution_id": "", "repository_ids": [ "7c0fcdb8-6748-4d51-8c0f-22d062631cfe" ] } ], "1atoBfoH0mJ0bCpetQ7/0g==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "1c78imYwGnF54k326pUleA==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "1h2bWnAaSbAMrDYM8V/8sw==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "1m9sKqHTfU4F/K4fidg9cg==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "1p1wTPVFlokLdC9/X3ksGg==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "1pWwHIWE2UYOVNkFfcPZhQ==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "1pqtMQqVpCMzDCv8KXVyuA==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "20ttMIcZDyeRDwHLGLpY5g==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "2QUKRSh7NN4cTp6+OOEm8w==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:9f35f2b57577774b834118db7188bdec31b167b8fbd2f9b426e9a088125aba15", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:9f35f2b57577774b834118db7188bdec31b167b8fbd2f9b426e9a088125aba15", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "9233afa2-d32f-47ca-a768-d2fc0c05a540", "c25f9d12-eee8-46f8-82d5-9b736db168d4" ] } ], "2gCbp4kt+cF44NF/LqukDg==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "2hVeGisxeIl5ZCVdBXxWKg==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "2tnKv76FL7fQoypGU9dvWQ==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "616b4892-2aee-4a60-a46a-6cac7161a964", "9eaa4267-c64e-4348-a45b-c0b836f4d708" ] } ], "2w8qE/d9mqIY/9+1qBBrPg==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "35MvZs/A5NUjD+xZ1Vlnyw==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "616b4892-2aee-4a60-a46a-6cac7161a964", "9eaa4267-c64e-4348-a45b-c0b836f4d708" ] } ], "38FdUixzs3eDg/NPZRiJIA==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:9f35f2b57577774b834118db7188bdec31b167b8fbd2f9b426e9a088125aba15", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:9f35f2b57577774b834118db7188bdec31b167b8fbd2f9b426e9a088125aba15", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "9233afa2-d32f-47ca-a768-d2fc0c05a540", "c25f9d12-eee8-46f8-82d5-9b736db168d4" ] } ], "3YAw8el/3rSN8/26QNTqsA==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "3adzKM06LvCWYFXCgwdnjA==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "3kiQXJjCV5HlO0qf9OFzoQ==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "3nZGfOwzhExfw1oIgyJNUg==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "4DALE9qlRQsocTmGTN3jhg==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:9f35f2b57577774b834118db7188bdec31b167b8fbd2f9b426e9a088125aba15", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:9f35f2b57577774b834118db7188bdec31b167b8fbd2f9b426e9a088125aba15", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "094b57a8-611b-45bd-b338-0f1e3ba94b76" ] } ], "4Kw/w2gH7CYCOCv19cdYYA==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "4U8NwfIL6oZ9HtlVrK/5EQ==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:9f35f2b57577774b834118db7188bdec31b167b8fbd2f9b426e9a088125aba15", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:9f35f2b57577774b834118db7188bdec31b167b8fbd2f9b426e9a088125aba15", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "9233afa2-d32f-47ca-a768-d2fc0c05a540", "c25f9d12-eee8-46f8-82d5-9b736db168d4" ] } ], "4xm12R/wZXmG2Cs/ve2Zjw==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "5+tHFkkNi+1rUDSrmgYdkw==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "582nBqlxZXz0sTRmkFvU4Q==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "5GtYmv+rWUY9Nq0zLzVwuQ==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "5JAFUJWmy04+T6x2oJw2jg==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "5hkeK2sS5i1OF8czY7eD+A==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "5w6Z1FeiHTUU7Pzs/S0tow==": [ { "package_db": "ruby:app/vendor/bundle/ruby/3.3.0/specifications/rspec-mocks-3.13.7.gemspec", "introduced_in": "sha256:2b73e0ac411b60e005011e13106f30b5be55574d1ec9ce15ae5f20618930f9d1", "distribution_id": "", "repository_ids": [ "ac41f493-ae0a-4233-8d1f-2e3b9706fb57" ] } ], "5x6eb7pZ/EuGII0pLw9fTg==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "60b1mOIk+ncF/benyKWfug==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "60pEkQUMtqjJkDtrBnZkZw==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "65vQ2fJTp0DlFVHdZmyGLw==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "6AYt+NWt55432RGa/HxiQg==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "6G1ytjIPgX0NNsVwuPQKkQ==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "6HUC1/dPziZpbtWEymw0nQ==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "6MFxZDjn6ZxVQspQib4VSA==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "6yTvnPP57NJPXUaaMuHa5Q==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "7/k2KO9ZYtIX1WvnibuCwg==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:9f35f2b57577774b834118db7188bdec31b167b8fbd2f9b426e9a088125aba15", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:9f35f2b57577774b834118db7188bdec31b167b8fbd2f9b426e9a088125aba15", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "9233afa2-d32f-47ca-a768-d2fc0c05a540", "c25f9d12-eee8-46f8-82d5-9b736db168d4" ] } ], "71E7ojyMFQ1Uwy0VMr2WLg==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "7NGPdoQ8CufgoRI2a0XI0g==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "7cpIREEQnkaI7dbmWgmrvg==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "7mDaaxs3ev+uNEDYC97U3Q==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "7oPP0/pHHdyRIJK6pYsCbQ==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "7qAMBOvJ2FYxpK9n05pI7Q==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "616b4892-2aee-4a60-a46a-6cac7161a964", "9eaa4267-c64e-4348-a45b-c0b836f4d708" ] } ], "7ra56f21gLrcSpBD8a9+NQ==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "7yB5oIQve4tWIMlUmHbdQQ==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "616b4892-2aee-4a60-a46a-6cac7161a964", "9eaa4267-c64e-4348-a45b-c0b836f4d708" ] } ], "8+AT+dHyoFXmtWYeClg3hQ==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "8/+OIixLXu+fX/6UoQwl/g==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "87VUAbsTn2cSvq70x9SIKw==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:f01f404db6433dada5ec30e0f4d793ede39a963d0f9825c822fbbb074082b604", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:f01f404db6433dada5ec30e0f4d793ede39a963d0f9825c822fbbb074082b604", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "f02093ed-178d-479c-badc-f189b0146a57" ] } ], "88jYB91M4ddvxo2XjMJKmQ==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "8Al1Y3mQILwPqoFjfjIK0Q==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "8OE8ax/E0UXByEoVMTfkbA==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "8dKij0lKhp8eGM5ynaMPfg==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "8gpmX0NZa9MMhcqi6FUGtg==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "8k+Ulo3wv2SSKo3DSJNJ6A==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "8n6bVUPPsV3vtnz+vLHqKQ==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "8uME+PFu6p/OAD7q+ZTVLw==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "8uNlRHm24HlCfj4vRuzAgA==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "9HjCH3SeUwgItfYZysNlOw==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "9bMXqD09C2r4s8P+HNy2uw==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "9olIUlLHZMdoUMju+8diyQ==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "A5zg77FwqyQ7YbgSi5bkFw==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "ACNA1cjsRpihwLsZYxMiYQ==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "AMvlCR3g+vHIXnbjgXeX2Q==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "AUjudWCWcMUZtLYqynIMkg==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "AbW1lRpGUjSEKNnr/Toz6A==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "At9otkYcx2c7gDG/+qxMog==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "BIzbOPagaosMprtM0oW/UQ==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "BLrNfmomqpFT8qecLZ99jQ==": [ { "package_db": "root/buildinfo/labels.json", "introduced_in": "sha256:9f35f2b57577774b834118db7188bdec31b167b8fbd2f9b426e9a088125aba15", "distribution_id": "", "repository_ids": [ "49620a67-2a69-4965-87b7-cf8e91792454" ] } ], "BQhiFmX4hLYteW4oRCLTSA==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "BRLVvSCW1qZQlEQR2x48fQ==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "BUmLEOIviku9guiDM/J5qA==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "Be3u3fxCSx0yV9rW5tn7+A==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "CM/XLOAV8nEwvYEgfvOluA==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "CQ7LW8sdHcbka0B3IpMM1Q==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "CS6z0/SKwjMOr6VBFQ1+lw==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "CfMo51dlSGLRWNluoKfMUQ==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "Cn4UOizx3r/8sEEZ0cgGfw==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "CpfomSYboaXPZ9yn9NgGgw==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "Cwut2mrMMUaIvKenvO1qWw==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "CyeMFBrESWOU4r5NgnAVEQ==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "D3RCrUIdQ+uwLTm+GGcqSA==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "D5m7YK6SRxMXWJzbEMw9qw==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "DK0d2bPQCX0xz6Lec7u1cg==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "616b4892-2aee-4a60-a46a-6cac7161a964", "9eaa4267-c64e-4348-a45b-c0b836f4d708" ] } ], "DNyIkrd4IXePRueLDNc6ZA==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "DVT5EsNYhhc4TADNn+PvwA==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "DVWG3mWD7odZzCgFCUPZPw==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "616b4892-2aee-4a60-a46a-6cac7161a964", "9eaa4267-c64e-4348-a45b-c0b836f4d708" ] } ], "DXPX19bdN5nJbVwnxKFlOA==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "DrLq8qfU1bfE8o8AfdvkrQ==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "DyVc00dL0fB/TbUtdImPIA==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "616b4892-2aee-4a60-a46a-6cac7161a964", "9eaa4267-c64e-4348-a45b-c0b836f4d708" ] } ], "EEcEMKhGMvXAfnMhboIpqw==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "616b4892-2aee-4a60-a46a-6cac7161a964", "9eaa4267-c64e-4348-a45b-c0b836f4d708" ] } ], "EhaFwS5l8+kj0ips0KX28g==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "EjrCko4EN35q3gOrHdIWjw==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "Ep9qjtRg5KBEw8RkogSOKQ==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "Esfj4A6yCPG0aR5IhgHmUg==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "Exv8+xTp+7Y4AfuM+ph47Q==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "F5S3/GN2uyb/+Q/5rj2gBA==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:f01f404db6433dada5ec30e0f4d793ede39a963d0f9825c822fbbb074082b604", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:f01f404db6433dada5ec30e0f4d793ede39a963d0f9825c822fbbb074082b604", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "f02093ed-178d-479c-badc-f189b0146a57" ] } ], "F6sWmqQXkobYs1E0otG8/A==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "616b4892-2aee-4a60-a46a-6cac7161a964", "9eaa4267-c64e-4348-a45b-c0b836f4d708" ] } ], "F90x58kELkC16MbTpMw3vg==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "FDdpwYO23GZzR/6AZCdQZA==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "616b4892-2aee-4a60-a46a-6cac7161a964", "9eaa4267-c64e-4348-a45b-c0b836f4d708" ] } ], "FEF27h+V5TzrUeQsFddapA==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "FEW4+DY0GhovHIdRCyqYhg==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "FFSNe661VBElA1asGZ7k3g==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "FKD/ouYSWOOZHy4i43SaxA==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "FW8ByCOP6ljvNWDQolahwg==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "FaNO6QWs1mWPp40PrBiBUQ==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "FiLBkAWUUsnpX53xBEBwNw==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "FoNZoDzlktTR7m0xbn6aAw==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "FoncQi9chif7gDbfNIi6VQ==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "616b4892-2aee-4a60-a46a-6cac7161a964", "9eaa4267-c64e-4348-a45b-c0b836f4d708" ] } ], "G1YDEd7+V95Qa+PMxB8sJw==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "G61ZL2SOHR2qgvQfi118gw==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "GIScmMWQrnoFNoEgq3fg2w==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "GSkR2SOuqWQN8NtOvU4cgw==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "GdLrcchvFseDsR7KOv0vSQ==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "Gfvf4LQKHStcGqbzaAe/lA==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "GrPCC9ybwOy98qwLdeCX6A==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "GrohJMl/MISMll2qndOSGg==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "GtFO3rQtk4lExV/Q1qfFOg==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "616b4892-2aee-4a60-a46a-6cac7161a964", "9eaa4267-c64e-4348-a45b-c0b836f4d708" ] } ], "GwNK8p9XcJLynTdoZWdCxg==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "H3zfV58LzeEUiNQbZbZb2A==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "HF0BuzgGNjLOUKqVyjw0oA==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:f01f404db6433dada5ec30e0f4d793ede39a963d0f9825c822fbbb074082b604", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:f01f404db6433dada5ec30e0f4d793ede39a963d0f9825c822fbbb074082b604", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "f02093ed-178d-479c-badc-f189b0146a57" ] } ], "HKlRsQZtXaa3HoNDv500tg==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "HQLCuUiHA+476ax5LmI78Q==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:f01f404db6433dada5ec30e0f4d793ede39a963d0f9825c822fbbb074082b604", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:f01f404db6433dada5ec30e0f4d793ede39a963d0f9825c822fbbb074082b604", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "f02093ed-178d-479c-badc-f189b0146a57" ] } ], "HQdWvmyUSqtI3UTY0T4JiQ==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "HaOoNwb8lV6rMAwKRGxXbA==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "HyWYXl8ZaOY6wtr4mKF7qA==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "HyjfzS7o9NZj6mKbOA36wA==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:f01f404db6433dada5ec30e0f4d793ede39a963d0f9825c822fbbb074082b604", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:f01f404db6433dada5ec30e0f4d793ede39a963d0f9825c822fbbb074082b604", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "f02093ed-178d-479c-badc-f189b0146a57" ] } ], "I16VSEydeiRYB1TSf5694A==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "I4xeNeKgfXcsAYIlRhjPiQ==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "IC3qYOgP07zDDhN8OMm04Q==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "IDaB7M+//88qbPppM+LpUw==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "IG/inuDbgBm/XuY2u/Aumw==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:9f35f2b57577774b834118db7188bdec31b167b8fbd2f9b426e9a088125aba15", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:9f35f2b57577774b834118db7188bdec31b167b8fbd2f9b426e9a088125aba15", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "9233afa2-d32f-47ca-a768-d2fc0c05a540", "c25f9d12-eee8-46f8-82d5-9b736db168d4" ] } ], "IZ65O3ZOapykHwhaOX1/YA==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "IqB8E1ANUG9NXQorLZJDiQ==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "IxIhH0Z+Om/E2wWJgs7oqA==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "J4wVTpjsd90BinvJHS7Zqw==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "J9Ac2zSOxpvD4YQ2MZMs6w==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "JF/KXrYQKwPQyQXcXBUzkQ==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "JFKff4xqwvXPuYTu9WPwUQ==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "616b4892-2aee-4a60-a46a-6cac7161a964", "9eaa4267-c64e-4348-a45b-c0b836f4d708" ] } ], "JKP7JzVg7UGaAz4VrH03lQ==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "7e98fa1e-1ff8-49b5-a6d1-c48a9213af4a" ] } ], "JaeGSHoaw5r486gmcDmRVA==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "KEwhWR+KmcE0gZ+mC6lSDw==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "KF5C+zKu/uFB7knCqOvDAQ==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "KH0/KbRUi7KL6UvWa8i6Pg==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "KS0gfrpBqK77mtupKmitjw==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "KcPAdOork3AFYl8WLwr8lQ==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "KcftiMkhTw4x89HNJI8NNg==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "KnsryeYjIOfmvupUdl8bDg==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:9f35f2b57577774b834118db7188bdec31b167b8fbd2f9b426e9a088125aba15", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:9f35f2b57577774b834118db7188bdec31b167b8fbd2f9b426e9a088125aba15", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "094b57a8-611b-45bd-b338-0f1e3ba94b76" ] } ], "KyRw1LumZrRo6AKKkHgP7w==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "L1CJW90/qIOW7PuGFCWT3g==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "L2RUW2Fm5EOgoqwyitY3bg==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "LDIMlzOywHz1+CG5FwjKdQ==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "LEyuwSco7tb1WIyWy42H8g==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "LPNXQi0V2EN73HoDD+RYaw==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "LW/iN16rWtvIqrNuZRqrvA==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "Leh3RdsGa1oyRcl5Dz4SdA==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "LjtOegR/S/Y0KwJeOuSl/w==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "Lwqn0aweLQLZmo12VvYcog==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "M2qdPAOOvb+CWXJwouP4Rw==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "MDH8Zt4oQWDiYk9qFV5Lbg==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "MORX6hW9ZLZCt/52w71zTg==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "MdGkZ055CI+TZYqVm7FIPg==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "616b4892-2aee-4a60-a46a-6cac7161a964", "9eaa4267-c64e-4348-a45b-c0b836f4d708" ] } ], "Mp61fGpK3II0W8dIQgk3hA==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:9f35f2b57577774b834118db7188bdec31b167b8fbd2f9b426e9a088125aba15", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:9f35f2b57577774b834118db7188bdec31b167b8fbd2f9b426e9a088125aba15", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "9233afa2-d32f-47ca-a768-d2fc0c05a540", "c25f9d12-eee8-46f8-82d5-9b736db168d4" ] } ], "Mta8K+tWCjAV6ERlLy6JNw==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "MvInuV8lMA+9LBSzIEvv5g==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:f01f404db6433dada5ec30e0f4d793ede39a963d0f9825c822fbbb074082b604", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:f01f404db6433dada5ec30e0f4d793ede39a963d0f9825c822fbbb074082b604", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "f02093ed-178d-479c-badc-f189b0146a57" ] } ], "N2AxbBO2ySQgGMgkdbfo+w==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "N9SQ1VZ/1zaqG0gdsMW91g==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "NCC3wkuc6lwSKJH9fwRaTQ==": [ { "package_db": "root/buildinfo/labels.json", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": [ "99dfe52b-c38e-4726-a51a-93ad820c4596" ] } ], "NDKmI4fvu2M/TtapvknDEg==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "NSiprMdkK5/5pxuNNJOh2A==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "Nak/NGhCYVubG4CsEbHhug==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "NdCY2/S+syamLH224R4hug==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "7e98fa1e-1ff8-49b5-a6d1-c48a9213af4a" ] } ], "NsU0bgQSA1JrKw3zvB+XBw==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "O6NCE8KkqNnnBGJrWxfPwA==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "OCIjbR16ktOEiFK36r0WNw==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "OgwdUybWl/HQYbnPTE4Psw==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "Ohssf0Jzlafd9vtrrUKCXg==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "OkY4XBjh2jDTkYhGjNkrUA==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "Ol1YWxU11Z64v1nA/zb/5w==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "616b4892-2aee-4a60-a46a-6cac7161a964", "9eaa4267-c64e-4348-a45b-c0b836f4d708" ] } ], "OvOSK0YS4U6j2gyFBATNXg==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:9f35f2b57577774b834118db7188bdec31b167b8fbd2f9b426e9a088125aba15", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:9f35f2b57577774b834118db7188bdec31b167b8fbd2f9b426e9a088125aba15", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "9233afa2-d32f-47ca-a768-d2fc0c05a540", "c25f9d12-eee8-46f8-82d5-9b736db168d4" ] } ], "P5Om9zCJ/QZ+hnrEvj6fGw==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "PCxuTBi9SbzcxEcQiiLesg==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "PIk2BBAWexCFofMi5q03RA==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "PQJujrJagYV+Ey8n4uQ95g==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "Q4EH8dHdml+oN5T9LssIRw==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:9f35f2b57577774b834118db7188bdec31b167b8fbd2f9b426e9a088125aba15", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:9f35f2b57577774b834118db7188bdec31b167b8fbd2f9b426e9a088125aba15", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "9233afa2-d32f-47ca-a768-d2fc0c05a540", "c25f9d12-eee8-46f8-82d5-9b736db168d4" ] } ], "Q8V6CJq+uIfjVUujX4I61Q==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "QG9+UTOvnb8kW+im/fjlJQ==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "QbZd82FdnCLBtn8fUkWn0A==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "QcXiQZ6UKeueoaxjtrYKog==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "Qk1bxbjfumdXF7/eZ6qhuw==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:9f35f2b57577774b834118db7188bdec31b167b8fbd2f9b426e9a088125aba15", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:9f35f2b57577774b834118db7188bdec31b167b8fbd2f9b426e9a088125aba15", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "9233afa2-d32f-47ca-a768-d2fc0c05a540", "c25f9d12-eee8-46f8-82d5-9b736db168d4" ] } ], "QlHijPVbW9yTtx/mAeIhAg==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "QpWwMw97N/44PyIvwMh0cA==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "R9sC7SuM6vJmJZYq/bMHWw==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "RH5gHxMLfgSMn5ktJt/VXA==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "RIdJTslNAIfH4yKbDsoK9Q==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "RXh3fimX8fGZeCt4chJEiA==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "Riemnu+blxsuHCoBGaacLA==": [ { "package_db": "root/buildinfo/labels.json", "introduced_in": "sha256:2b73e0ac411b60e005011e13106f30b5be55574d1ec9ce15ae5f20618930f9d1", "distribution_id": "", "repository_ids": [ "68a7ce1a-f8e4-4fc3-b254-6cbbc1f1e251" ] } ], "RlkbUDRj6k1VsLWBs4sx5g==": [ { "package_db": "ruby:app/vendor/bundle/ruby/3.3.0/specifications/rspec-support-3.13.6.gemspec", "introduced_in": "sha256:2b73e0ac411b60e005011e13106f30b5be55574d1ec9ce15ae5f20618930f9d1", "distribution_id": "", "repository_ids": [ "ac41f493-ae0a-4233-8d1f-2e3b9706fb57" ] } ], "Rmp+/J0Vf6Z1c/jUFbiVFw==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "RmtwCYp+M3KMl7TiyHKwMA==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "S8p9UGak1oycptcpYp/1eg==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "SDcVZRLpwAQNjUwZ+PuxkA==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "SZllfeGD2yJm0VL0H7onLg==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "ScSZYXWuosUrTT47e6vL3g==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "SjQtW3gQmgt+Qj8JlnY4Mg==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "SsUshR21MZuli8B+sjKoRg==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "Su8bfW9ijc0V5CiAum2V1g==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "TPIRq84Pr3a6ywzPeCr3Pw==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "TSs+KS9B9pkzz7FIgxu+aw==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "Tniy6w9fMQe2ISrhGqJ8ww==": [ { "package_db": "ruby:app/vendor/bundle/ruby/3.3.0/specifications/rspec-core-3.13.6.gemspec", "introduced_in": "sha256:2b73e0ac411b60e005011e13106f30b5be55574d1ec9ce15ae5f20618930f9d1", "distribution_id": "", "repository_ids": [ "ac41f493-ae0a-4233-8d1f-2e3b9706fb57" ] } ], "To0NR+oyXDu1CYJfmVGurQ==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "ULrmZHuHE64atjgQOV1lWQ==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "UPcwub579LDL6kq2lq/xZw==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "UTNN7VK61RHl/IW+g5aMJA==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "UWXJUZfGCJSFYUff3zhl3g==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "UcGy2+DIOqObBfK9GBmDEw==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "UnaL8VteZLsad5rFJhaXcw==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "VPMvwiwbrTXjPkPpxmP3sw==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "VV2Z1ngTs6sGvt5SrayPCg==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "VX9V+Y680L2xf2tBREdpCw==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "VhjrPOGZ9XGEFgLnQWc+KQ==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "Vk7Abr1qzxUEVjteKWWX5g==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "W7uBqJb8l9AhSXjNg1JZQg==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "WCQtqHWXoTXna7IAIUuLVg==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:f01f404db6433dada5ec30e0f4d793ede39a963d0f9825c822fbbb074082b604", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:f01f404db6433dada5ec30e0f4d793ede39a963d0f9825c822fbbb074082b604", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "f02093ed-178d-479c-badc-f189b0146a57" ] } ], "WKbv3dOPjWYMO8/3E5KlHQ==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "616b4892-2aee-4a60-a46a-6cac7161a964", "9eaa4267-c64e-4348-a45b-c0b836f4d708" ] } ], "WQqPFo8Asn86tAeRqCxr1w==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "WVajSGKLGm8z6I23XYAhLQ==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "WifWl02dLM2pp5urxOSuNg==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "WrJXEOHH0Gy0bbmWqGmrDg==": [ { "package_db": "root/buildinfo/labels.json", "introduced_in": "sha256:2b73e0ac411b60e005011e13106f30b5be55574d1ec9ce15ae5f20618930f9d1", "distribution_id": "", "repository_ids": [ "68a7ce1a-f8e4-4fc3-b254-6cbbc1f1e251" ] } ], "WzYxymAFFZiduGsTG/o8gA==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "XG5+bW8np2NedSy/od6z8Q==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "XGaIL7YJmyr8vz8ETC4dAA==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "XIcr6HdP94Dud7DtFrfMZg==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "XMI2bnJZdxdcHnKc3zgCUA==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "XP0LiIWbLisoI52ZCyFcLg==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "XTnX2VddNvCYpYt/meLgYA==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "XgE+qDogkObCc5XPQHN25A==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "XliA1VgMzM5VjjSZdnmlQw==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "XpiKzmFjoUH4P3gzIyNStg==": [ { "package_db": "ruby:app/vendor/bundle/ruby/3.3.0/specifications/rspec-3.13.2.gemspec", "introduced_in": "sha256:2b73e0ac411b60e005011e13106f30b5be55574d1ec9ce15ae5f20618930f9d1", "distribution_id": "", "repository_ids": [ "ac41f493-ae0a-4233-8d1f-2e3b9706fb57" ] } ], "XvQXlm/D2h/0lO6HdF8+7g==": [ { "package_db": "ruby:app/vendor/bundle/ruby/3.3.0/specifications/rspec-expectations-3.13.5.gemspec", "introduced_in": "sha256:2b73e0ac411b60e005011e13106f30b5be55574d1ec9ce15ae5f20618930f9d1", "distribution_id": "", "repository_ids": [ "ac41f493-ae0a-4233-8d1f-2e3b9706fb57" ] } ], "XwbkaIGCYyq6BjBMVZ1wzw==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "Y35yrxWjtTUkUbNtS9+p6g==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "Y5PnxdiaM8nGZKt9U6sMKw==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "YMB2ro5tOcEm81D0RjHxXA==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:f01f404db6433dada5ec30e0f4d793ede39a963d0f9825c822fbbb074082b604", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:f01f404db6433dada5ec30e0f4d793ede39a963d0f9825c822fbbb074082b604", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "f02093ed-178d-479c-badc-f189b0146a57" ] } ], "YuMHdRatKmZ56mnoWUwdqw==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "YwobqP8raRKIH+wXi7ZS4g==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "Z+lO9FXEjKlmAeYPAHGorA==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "ZX4vKkXsoMfQ2HH9oPb0TA==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "ZhfyLrfrE9A0xmCI9BiGXA==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "aJNccc76ay90akro/A82ww==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "afL/h/3XzYq6me3BTaFWlA==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "al0lbET4LJsNSGMw0pP5wg==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "arLt5War9yeQ8auYn/Idmw==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "bEsPytE/ZdCMbfuAgQc9AA==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "bFvWffGqJWr7FWnI7K9NVw==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "bemGVBhbDe9iV1Kjvd9hAA==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "cHAJILwEV0OAQcBBnKqncg==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "cZtZpGQDMJ8/qYUdQbgb3Q==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "ck/z6XzYDT2o8eVJI5IO+Q==": [ { "package_db": "root/buildinfo/labels.json", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": [ "624606e7-9195-428c-b44c-9a363be0d39e" ] } ], "cpIirH9DE6nFQZA6wIpxLg==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "7e98fa1e-1ff8-49b5-a6d1-c48a9213af4a" ] } ], "ct/ndQfSB+G17YP34ufDBA==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "dBKXgz7fNBsMAqmGTkj8sQ==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "616b4892-2aee-4a60-a46a-6cac7161a964", "9eaa4267-c64e-4348-a45b-c0b836f4d708" ] } ], "dC9CoYt17eaqinGSVCfCxw==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "dH7n2Ct/z7JALFNo9SCMDg==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "de44cUqF23LvU0fOSvNRjA==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "dj7DwOHHHI+8+9QuzFaSUA==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "dpQG/pUwAqVv1OdQqnvylQ==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "e+CtHsEaBCLbHEFWXwHRyg==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "e40n/77uWc/t2R+0m7WchA==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "e7W78NrdwYaVEcBcXhDv5Q==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "e9e6iwwufr2qvMYpuZgq7Q==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "eEjpOxWkwvzzJN5kkeVUcg==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "eRa7MZyiHBvsv7GPhkGKdg==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "ejmVM2MTGmDkkntlZCpYEw==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "ev4LjEwclLnf3ehIi3l8oA==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "ewbqmzgK8Rzf739yT7IKUQ==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "ez3E/Jxg/MQLUXOYIN/OlQ==": [ { "package_db": "root/buildinfo/labels.json", "introduced_in": "sha256:9f35f2b57577774b834118db7188bdec31b167b8fbd2f9b426e9a088125aba15", "distribution_id": "", "repository_ids": [ "49620a67-2a69-4965-87b7-cf8e91792454" ] } ], "f2GhXCi0MGW6C5vh1ih8XQ==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "f3K2r1U+QmHjsUiML4ziOQ==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "f86Wc3apFCnJqkXk60X7Cw==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "fDuwmXmKOYEK5h1q2eODXQ==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "fVq3Liql8bu1Y+KmIvpQoA==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:f01f404db6433dada5ec30e0f4d793ede39a963d0f9825c822fbbb074082b604", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:f01f404db6433dada5ec30e0f4d793ede39a963d0f9825c822fbbb074082b604", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "f02093ed-178d-479c-badc-f189b0146a57" ] } ], "fao+yXdp7lvp4+d732rCkw==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "gBWlSWdEA8U1+Ep4A/+M2g==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "gJHwCqer7Rl9ijGK6wpg4A==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "gihIEYR/lLwr4ndjyvVROA==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:f01f404db6433dada5ec30e0f4d793ede39a963d0f9825c822fbbb074082b604", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:f01f404db6433dada5ec30e0f4d793ede39a963d0f9825c822fbbb074082b604", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "f02093ed-178d-479c-badc-f189b0146a57" ] } ], "gjJq4XQiX28zDnKvnb0/jg==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "gngAZQYf0zy4+w3GwgpLmw==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "gsKPriszRNKAqMnHK+dXgw==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "hKJ3xmpaes4B2vxd2C5M1Q==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "hWZOSd0A+iLGAwoMoW6sgw==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "hYEisV19Dxn4PvCvxJFm5A==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "hgsVhmCR+D+pPaE1yMWDsg==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "hjikQWtnmVPaWts63wYw4Q==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "hktk4wXij5O6pY5X6Pdp/Q==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "616b4892-2aee-4a60-a46a-6cac7161a964", "9eaa4267-c64e-4348-a45b-c0b836f4d708" ] } ], "iMLMqCcRXnm6QslpJnCS7w==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "iQByZpdRXgW/fl3SoDuoAA==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "ipG1YUFrN7KyPdU8o+2M6Q==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "616b4892-2aee-4a60-a46a-6cac7161a964", "9eaa4267-c64e-4348-a45b-c0b836f4d708" ] } ], "irdTBCwmsDefJyVDw+cS3A==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "isMk2o0BvgtLnlqdbo7sxQ==": [ { "package_db": "root/buildinfo/labels.json", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": [ "99dfe52b-c38e-4726-a51a-93ad820c4596" ] } ], "iswhVSntR4QnIsTAyM6ydQ==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "ix3lD4/Nn7qLbcpDm0AIhg==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "izKk4aK07ZN99JT+tBsSBg==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "j+mzBjs+9Rp1lGL7uVd5sA==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "j3sZgUo/K49ejMiEqbRAtg==": [ { "package_db": "root/buildinfo/labels.json", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": [ "624606e7-9195-428c-b44c-9a363be0d39e" ] } ], "j5f/exLQUf/AfnuQvtw1ag==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "jAjaNW7NMGiv7HfByDu4RQ==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "jDIVpAdvhjPN/gmOBNQuag==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "jDR7o2j2gfJePh/5YNDLjw==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "jH43ZEoPP2TpNiUJXUizMw==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "jMxy8GAhrrA2mTT5vqlfcg==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "jXo3rXdhdYGkiXYZpQxZ3Q==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "jrYNd66NtmHdHhjnoxRx/A==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "kDzRHkg3txncDWuyd5771g==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "kFxhSjWy84mTZBM4XiZaeQ==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "kQDs6otjkbsijCAC8Ln06g==": [ { "package_db": "root/buildinfo/labels.json", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": [ "99dfe52b-c38e-4726-a51a-93ad820c4596" ] } ], "kigiD4fuysu8/DeCr+ONKQ==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "kp6BaioAZ30jbVeZkkzokA==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "kqjucdtmnvYZVSGwSyc0aA==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "l36Y8lL0dC04c9AnKIpOCw==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "lCuOAKu3TEbLIlxlfIdxkg==": [ { "package_db": "ruby:app/vendor/bundle/ruby/3.3.0/specifications/diff-lcs-1.6.2.gemspec", "introduced_in": "sha256:2b73e0ac411b60e005011e13106f30b5be55574d1ec9ce15ae5f20618930f9d1", "distribution_id": "", "repository_ids": [ "ac41f493-ae0a-4233-8d1f-2e3b9706fb57" ] } ], "lNWcYbl6h71sUZV6B4E+bw==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "616b4892-2aee-4a60-a46a-6cac7161a964", "9eaa4267-c64e-4348-a45b-c0b836f4d708" ] } ], "lV2MRz2nTh21rS47LJ6XIQ==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "lbcitH3ttNejz+IVDee9kA==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "lqKUNuoxzC8zSaSnPi26WQ==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "m7hOFCjo7x6PMvux7htFOg==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "mK/FUfODp3MR7WS2xegPsw==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "7e98fa1e-1ff8-49b5-a6d1-c48a9213af4a" ] } ], "mPqGnMbiXN6jP61aGbHvOA==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "mWpxQAUiV6nN451/LkTR5w==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "mkPyuhaF03PTIjEd+8p5XQ==": [ { "package_db": "root/buildinfo/labels.json", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": [ "624606e7-9195-428c-b44c-9a363be0d39e" ] } ], "mqINnrlOZQGPnpnT9GZG5w==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:f01f404db6433dada5ec30e0f4d793ede39a963d0f9825c822fbbb074082b604", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:f01f404db6433dada5ec30e0f4d793ede39a963d0f9825c822fbbb074082b604", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "f02093ed-178d-479c-badc-f189b0146a57" ] } ], "mx/6FfeunMu7M9pQ9cRKkQ==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "n9GoYS9J7jkIET4QDQWijA==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "na4ojyfFHL07xf5Yr8wxsg==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "niOKQxfAYGHJ3oUq3VHjdA==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "nqniqNEVhrfub8cS+os87A==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "nuIyutUqK6hTmg/S9ojklw==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "nzQEyt4JfkGeZIIHPiBhog==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "oIqBLVUdTw3vIPAyQdS/tA==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "oK41W21MyjS/j+5BoCQjuA==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:9f35f2b57577774b834118db7188bdec31b167b8fbd2f9b426e9a088125aba15", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:9f35f2b57577774b834118db7188bdec31b167b8fbd2f9b426e9a088125aba15", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "9233afa2-d32f-47ca-a768-d2fc0c05a540", "c25f9d12-eee8-46f8-82d5-9b736db168d4" ] } ], "obNuQXzAwE3TzjUoRN1yEw==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "osuCNzTJ+Fjh0P4Yfe9E1g==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "p9E62zY/VzvgMSvTX9UkJg==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "q4zKXqPU+5vLvZLEG6zEXw==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "q8h8ag3Ho33Zc/60lMOvVA==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:9f35f2b57577774b834118db7188bdec31b167b8fbd2f9b426e9a088125aba15", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:9f35f2b57577774b834118db7188bdec31b167b8fbd2f9b426e9a088125aba15", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "9233afa2-d32f-47ca-a768-d2fc0c05a540", "c25f9d12-eee8-46f8-82d5-9b736db168d4" ] } ], "qGKV3oqLguMWpyzvjv1+wg==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "qKN/Sy8G7n1xl+F5J1m1bg==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "qYSZ6aKFWol313IOGRXaug==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "qc0Yt1AzZC+CY6qdjO+fZA==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "qco/AqMt9denZ9GeHFnEaA==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "qklPItzKPipAd2a3RHZZIA==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "616b4892-2aee-4a60-a46a-6cac7161a964", "9eaa4267-c64e-4348-a45b-c0b836f4d708" ] } ], "qsJmM3aYeYGdvjHxtaNdaQ==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "r0GDCuRXOUGVJzCqB4JFMw==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "rB+tPXab1eESNe/6qy7U4Q==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "rCLp3m64Catai9VuHvh3Lw==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "rEU0uZUpz06y9hg0ORc49A==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "rOo0eaSDbJ9TZ3lifnsvSQ==": [ { "package_db": "root/buildinfo/labels.json", "introduced_in": "sha256:f01f404db6433dada5ec30e0f4d793ede39a963d0f9825c822fbbb074082b604", "distribution_id": "", "repository_ids": [ "7c0fcdb8-6748-4d51-8c0f-22d062631cfe" ] } ], "rUUieTQ6JPdOKUOFRfhvNw==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "rY/kE/V4JnxYoqV+lmc9mg==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "rZckolqfVnE7xInGZn5Zzw==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "rd4/gPEUtK2p++ni1m1dDg==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "rflqn7XKJvnH8dP67kgM7A==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "rj2k4My0f4W7sR9R0rDeJg==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "rlHYqOr0lkUB/Gs6b1kD2g==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "s/zVhVCY3vRmmv6PJdGLCg==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "s6wkZ09Eozv3vmfwsPHUvQ==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "sE1EmQ5Nhv4P4rilE6lODw==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "616b4892-2aee-4a60-a46a-6cac7161a964", "9eaa4267-c64e-4348-a45b-c0b836f4d708" ] } ], "sJhS0sL3jXf+ZUi4oTiojw==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:f01f404db6433dada5ec30e0f4d793ede39a963d0f9825c822fbbb074082b604", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:f01f404db6433dada5ec30e0f4d793ede39a963d0f9825c822fbbb074082b604", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "f02093ed-178d-479c-badc-f189b0146a57" ] } ], "sREtPFILPccNXLGF49Cnmw==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "ssPaV1VLDu6d5ZJ6Rrmh3A==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "sukNATkcLkohYgGrhDtrZA==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "sx0C6L5COHIkv6yQQyPlbw==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "t28Zc7/vifVyS7O17xTUSA==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "tGPn3pK3U8y547XMf1WmhQ==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "616b4892-2aee-4a60-a46a-6cac7161a964", "9eaa4267-c64e-4348-a45b-c0b836f4d708" ] } ], "tWWw65aFr0Her+B1hlgbqA==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "tYvC71hd5ARf4WITmeyfxA==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "tqVXueFBgSdMZpggpUjjjA==": [ { "package_db": "root/buildinfo/labels.json", "introduced_in": "sha256:f01f404db6433dada5ec30e0f4d793ede39a963d0f9825c822fbbb074082b604", "distribution_id": "", "repository_ids": [ "7c0fcdb8-6748-4d51-8c0f-22d062631cfe" ] } ], "txEovS086NkVY5rNikpoEA==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "u3thu0wHuvY+STb8TrhkKQ==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "616b4892-2aee-4a60-a46a-6cac7161a964", "9eaa4267-c64e-4348-a45b-c0b836f4d708" ] } ], "u5TyEoU5GA6Z2czzwhMLiA==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "v3i4ez5juML2ZWwR+6dFFg==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "v6X9Dt1wPw8fK6VaHz1Ffw==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "v9Q18SPC524XLCjLQkFyLg==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "vtNcuXyRth8r8K/W3sfqrQ==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "vw1F3IS9ZqFqIEU3E24hLQ==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "w2DoavvB02S/+BS01jQqJw==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "w9ndxjIpPQXv3PDulnya7A==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "wCA3gMNtInqX1xg18QcnQg==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "wVOHUaFC3qlk+Ft1W2VH7A==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "wYIIhtw19AhoRPO0XAvoxw==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:9f35f2b57577774b834118db7188bdec31b167b8fbd2f9b426e9a088125aba15", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:9f35f2b57577774b834118db7188bdec31b167b8fbd2f9b426e9a088125aba15", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "094b57a8-611b-45bd-b338-0f1e3ba94b76" ] } ], "wdMozBSF06uhI4HOI003SQ==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "wfJGCqOH8d+IYg/dAepx1A==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "wvtx3JsOUmPyorardjeYSQ==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "ww1NPX/mwmdtd47p1Hp8FQ==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "x4oijVhQU8BUwJwoFvk4QA==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "xGsFnJNA7f9q/+8cz1QFqg==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "xItFXMbfthPTJh/VhaoYeA==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "xMqWNWDJot/UVGgOoRsUVQ==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:f01f404db6433dada5ec30e0f4d793ede39a963d0f9825c822fbbb074082b604", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:f01f404db6433dada5ec30e0f4d793ede39a963d0f9825c822fbbb074082b604", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "f02093ed-178d-479c-badc-f189b0146a57" ] } ], "xRkX4SbymzipYnnd/tIGVw==": [ { "package_db": "root/buildinfo/labels.json", "introduced_in": "sha256:2b73e0ac411b60e005011e13106f30b5be55574d1ec9ce15ae5f20618930f9d1", "distribution_id": "", "repository_ids": [ "68a7ce1a-f8e4-4fc3-b254-6cbbc1f1e251" ] } ], "xTea8RVD9wez5DTFDIkCYg==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "xVpXFb43dZh4HfBX53yyew==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "xfiNHrth0bRlTgQnR3IgUw==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "616b4892-2aee-4a60-a46a-6cac7161a964", "9eaa4267-c64e-4348-a45b-c0b836f4d708" ] } ], "xgCGPQ7CZbjJqBTw2Nmu9w==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:9f35f2b57577774b834118db7188bdec31b167b8fbd2f9b426e9a088125aba15", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:9f35f2b57577774b834118db7188bdec31b167b8fbd2f9b426e9a088125aba15", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "9233afa2-d32f-47ca-a768-d2fc0c05a540", "c25f9d12-eee8-46f8-82d5-9b736db168d4" ] } ], "xnmn6fk+/THLJg3emXYMww==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "xuRjbnwW5VkRHg0Huc5RCg==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "y9sflCLWTaHWSSC+w8u7bQ==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "yEp9fQVFIQAEDPCwC3GLmA==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "yHwqZ1KSVBKOdg3PvZkURg==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "yMfhY0UxLchgIpNP2r2lyQ==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "616b4892-2aee-4a60-a46a-6cac7161a964", "9eaa4267-c64e-4348-a45b-c0b836f4d708" ] } ], "yY469KfvqdHWbJwmOcIU1Q==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "ycSS8xsUDu5nMwsql04xfQ==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "z+4p7UhT99HApht5JWOY7w==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "zDt2Vfv35KL/GbH9JG8H3A==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "zLbmCpiDy68qsFvtKNzmgQ==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "zYkGoXzaE5np8s88FoALNQ==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "zbfsUtSlKsegyV6mTxR13A==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:3f34e2ccedac73cfa38f9c3bb7cab93a0a339e8627c85e4e62a4239e63528b04", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "dfaef1f7-0917-41e7-90f7-f6a298a5464e", "0401d292-a8ff-4814-9a7c-11d864fa5f84" ] } ], "zfyfWkP+jPZaONI2HeiXQw==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "zmiWZ9YjduqgYQPI8rU4ug==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ], "znACbAN0JGBPtCXNh1d0Ng==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:f01f404db6433dada5ec30e0f4d793ede39a963d0f9825c822fbbb074082b604", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:f01f404db6433dada5ec30e0f4d793ede39a963d0f9825c822fbbb074082b604", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "f02093ed-178d-479c-badc-f189b0146a57" ] } ], "zxuLMmxubC84XoLpkfxZ3w==": [ { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "", "repository_ids": null }, { "package_db": "sqlite:var/lib/rpm", "introduced_in": "sha256:65a376416bc864d56cc3b260a129dec059886e98e9e40350ecb87435827d2288", "distribution_id": "0e229e17-d459-4174-a862-4ac814070695", "repository_ids": [ "8acf35a1-1db8-4a07-970d-62eeb6cc2eb7" ] } ] }, "vulnerabilities": { "+20onLS/dWLg9saGZqMvvA==": { "id": "+20onLS/dWLg9saGZqMvvA==", "updater": "rhel-vex", "name": "CVE-2026-42766", "description": "A flaw was found in OpenSSL. A remote attacker could exploit a NULL pointer dereference vulnerability in the Cryptographic Message Syntax (CMS) decryption process by providing a specially crafted password-encrypted CMS message. This occurs because the keyDerivationAlgorithm field, which is optional, is dereferenced without proper validation. Successful exploitation leads to an application crash, resulting in a Denial of Service.", "issued": "2026-06-09T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-42766 https://bugzilla.redhat.com/show_bug.cgi?id=2481890 https://www.cve.org/CVERecord?id=CVE-2026-42766 https://nvd.nist.gov/vuln/detail/CVE-2026-42766 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42766.json https://access.redhat.com/errata/RHSA-2026:25239", "severity": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "openssl", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "1:3.5.5-4.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "+4boUUXSpak/++mwJDcv/A==": { "id": "+4boUUXSpak/++mwJDcv/A==", "updater": "rhel-vex", "name": "CVE-2025-14104", "description": "A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the `setpwnam()` function, affecting SUID (Set User ID) login-utils utilities writing to the password database.", "issued": "2025-12-05T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2025-14104 https://bugzilla.redhat.com/show_bug.cgi?id=2419369 https://www.cve.org/CVERecord?id=CVE-2025-14104 https://nvd.nist.gov/vuln/detail/CVE-2025-14104 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-14104.json https://access.redhat.com/errata/RHSA-2026:1913", "severity": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "util-linux", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:2.37.4-21.el9_7", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "+81WHs4+NlxNNP8OWMLJ2g==": { "id": "+81WHs4+NlxNNP8OWMLJ2g==", "updater": "rhel-vex", "name": "CVE-2026-33056", "description": "A flaw was found in tar-rs, a Rust library for reading and writing tar archives. When unpacking a crafted tar archive, an attacker can exploit a symbolic link vulnerability. By including a symlink followed by a directory with the same name, the library incorrectly applies file permissions to the symlink's target. This allows an attacker to modify the permissions of arbitrary directories outside the intended extraction location.", "issued": "2026-03-20T07:11:10Z", "links": "https://access.redhat.com/security/cve/CVE-2026-33056 https://bugzilla.redhat.com/show_bug.cgi?id=2449490 https://www.cve.org/CVERecord?id=CVE-2026-33056 https://nvd.nist.gov/vuln/detail/CVE-2026-33056 https://github.com/alexcrichton/tar-rs/commit/17b1fd84e632071cb8eef9d3709bf347bd266446 https://github.com/alexcrichton/tar-rs/security/advisories/GHSA-j4xf-2g29-59ph https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33056.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N", "normalized_severity": "Medium", "package": { "id": "", "name": "tar", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "+CgZKiM2jpLyW2jlIXneLw==": { "id": "+CgZKiM2jpLyW2jlIXneLw==", "updater": "rhel-vex", "name": "CVE-2026-42245", "description": "A flaw was found in Net::IMAP, a Ruby library implementing the Internet Message Access Protocol (IMAP) client functionality. A hostile server can exploit a quadratic time complexity issue in the `Net::IMAP::ResponseReader` when processing large responses containing numerous string literals. This can lead to the client's CPU being exhausted, resulting in a denial of service (DoS) attack.", "issued": "2026-05-09T19:37:08Z", "links": "https://access.redhat.com/security/cve/CVE-2026-42245 https://bugzilla.redhat.com/show_bug.cgi?id=2468495 https://www.cve.org/CVERecord?id=CVE-2026-42245 https://nvd.nist.gov/vuln/detail/CVE-2026-42245 https://github.com/ruby/net-imap/commit/6091f7d6b1f3514cafbfe39c76f2b5d73de3ca96 https://github.com/ruby/net-imap/commit/88d95231fc8afef11c1f074453f7d75b68c9dfda https://github.com/ruby/net-imap/commit/de685f91a4a4cc75eb80da898c2bf8af08d34819 https://github.com/ruby/net-imap/releases/tag/v0.4.24 https://github.com/ruby/net-imap/releases/tag/v0.5.14 https://github.com/ruby/net-imap/releases/tag/v0.6.4 https://github.com/ruby/net-imap/security/advisories/GHSA-q2mw-fvj9-vvcw https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42245.json https://access.redhat.com/errata/RHSA-2026:33576", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "ruby-default-gems", "version": "", "kind": "binary", "normalized_version": "", "module": "ruby:3.3", "arch": "noarch", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "0:3.3.10-7.module+el9.8.0+24406+8975e57f", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "+DR5Qfe30tw0byM4w3zykQ==": { "id": "+DR5Qfe30tw0byM4w3zykQ==", "updater": "rhel-vex", "name": "CVE-2026-16118", "description": "A flaw was found in xdgmime. A heap-based buffer overflow can be triggered in _xdg_mime_magic_parse_magic_line() in the xdgmimemagic.c file on little-endian systems when an attacker-controlled MIME magic file in a user-writable XDG data location (e.g., in the $XDG_DATA_HOME/mime/magic path) is parsed by an application performing MIME type detection (e.g., via g_content_type_guess()). When performing byte-swap, incorrect pointer arithmetic on the write side causes an out-of-bounds write of 2 bytes, resulting in an application crash or memory corruption.", "issued": "2026-07-07T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-16118 https://bugzilla.redhat.com/show_bug.cgi?id=2501732 https://www.cve.org/CVERecord?id=CVE-2026-16118 https://nvd.nist.gov/vuln/detail/CVE-2026-16118 https://gitlab.freedesktop.org/xdg/xdgmime/-/work_items/41 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-16118.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "glib2", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "+JlLlfOobk7OBriIdQRELQ==": { "id": "+JlLlfOobk7OBriIdQRELQ==", "updater": "rhel-vex", "name": "CVE-2025-24294", "description": "A denial of service flaw was found in resolv ruby gem. This flaw allows an attacker to craft a malicious DNS packet containing a highly compressed domain name. When the resolv library parses this packet, the name decompression process consumes a large amount of CPU resources, as the library does not limit the resulting length of the name.", "issued": "2025-07-12T03:30:40Z", "links": "https://access.redhat.com/security/cve/CVE-2025-24294 https://bugzilla.redhat.com/show_bug.cgi?id=2379684 https://www.cve.org/CVERecord?id=CVE-2025-24294 https://nvd.nist.gov/vuln/detail/CVE-2025-24294 https://www.ruby-lang.org/en/news/2025/07/08/dos-resolv-cve-2025-24294/ https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-24294.json https://access.redhat.com/errata/RHSA-2025:23063", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "normalized_severity": "Medium", "package": { "id": "", "name": "ruby-devel", "version": "", "kind": "binary", "normalized_version": "", "module": "ruby:3.3", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "0:3.3.10-5.module+el9.7.0+23651+15dc1615", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "+Jox86Lr4olzZZpeF2W5Cg==": { "id": "+Jox86Lr4olzZZpeF2W5Cg==", "updater": "rhel-vex", "name": "CVE-2025-12818", "description": "A vulnerability has been identified in PostgreSQL’s libpq client library, where integer wraparound in several allocation-size calculations allows a peer or input provider to cause an undersized buffer and then write out-of-bounds by hundreds of megabytes. This can lead to a client application segmentation fault or crash when using libpq to connect to a PostgreSQL server.", "issued": "2025-11-13T13:00:12Z", "links": "https://access.redhat.com/security/cve/CVE-2025-12818 https://bugzilla.redhat.com/show_bug.cgi?id=2414826 https://www.cve.org/CVERecord?id=CVE-2025-12818 https://nvd.nist.gov/vuln/detail/CVE-2025-12818 https://www.postgresql.org/support/security/CVE-2025-12818/ https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-12818.json https://access.redhat.com/errata/RHSA-2026:0458", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "libpq-devel", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "0:13.23-1.el9_7", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "+Kc8jbRzLLDVqPaeFngWtQ==": { "id": "+Kc8jbRzLLDVqPaeFngWtQ==", "updater": "rhel-vex", "name": "CVE-2026-48618", "description": "A flaw was found in Node.js. This flaw involves a mismatch in how Node.js handles TLS (Transport Layer Security) hostnames and unicode dot separators during authentication. This mismatch can lead to a wildcard-depth authentication bypass. An attacker could exploit this to bypass intended security boundaries, potentially leading to unauthorized access and confidentiality impact.", "issued": "2026-06-26T01:14:36Z", "links": "https://access.redhat.com/security/cve/CVE-2026-48618 https://bugzilla.redhat.com/show_bug.cgi?id=2493337 https://www.cve.org/CVERecord?id=CVE-2026-48618 https://nvd.nist.gov/vuln/detail/CVE-2026-48618 https://nodejs.org/en/blog/vulnerability/june-2026-security-releases https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-48618.json https://access.redhat.com/errata/RHSA-2026:35892", "severity": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N", "normalized_severity": "High", "package": { "id": "", "name": "nodejs-libs", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:22.23.1-1.module+el9.8.0+24457+996af7aa", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "+Ny4TpLzLiX1vAXKrYuRkg==": { "id": "+Ny4TpLzLiX1vAXKrYuRkg==", "updater": "rhel-vex", "name": "CVE-2026-5435", "description": "A flaw was found in glibc, the GNU C Library. Specifically, deprecated functions responsible for printing TSIG (Transaction Signature) records fail to properly manage memory buffers. This oversight can lead to an out-of-bounds write when processing specially crafted TSIG records. An attacker could exploit this to cause a denial of service or potentially execute arbitrary code.", "issued": "2026-04-28T11:58:54Z", "links": "https://access.redhat.com/security/cve/CVE-2026-5435 https://bugzilla.redhat.com/show_bug.cgi?id=2463465 https://www.cve.org/CVERecord?id=CVE-2026-5435 https://nvd.nist.gov/vuln/detail/CVE-2026-5435 https://inbox.sourceware.org/libc-announce/7a655d55-276f-41fe-b550-feb3ebb2ce91@redhat.com/T/#u https://sourceware.org/bugzilla/show_bug.cgi?id=34033 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-5435.json https://access.redhat.com/errata/RHSA-2026:42952", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "glibc-gconv-extra", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:2.34-274.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "+PjI2yN4wCMPyf1oygeT5Q==": { "id": "+PjI2yN4wCMPyf1oygeT5Q==", "updater": "rhel-vex", "name": "CVE-2023-48237", "description": "A flaw was found in Vim, an open source command line text editor. In affected versions, when shifting lines in operator pending mode and using a large value, it may be possible to overflow the size of the integer. The impact is low because user interaction is required and a crash may not happen in all situations.", "issued": "2023-11-16T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2023-48237 https://bugzilla.redhat.com/show_bug.cgi?id=2250274 https://www.cve.org/CVERecord?id=CVE-2023-48237 https://nvd.nist.gov/vuln/detail/CVE-2023-48237 http://www.openwall.com/lists/oss-security/2023/11/16/1 https://github.com/vim/vim/commit/6bf131888a3d1de62bbfa8a7ea03c0ddccfd496e https://github.com/vim/vim/security/advisories/GHSA-f2m2-v387-gv87 https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-48237.json", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "normalized_severity": "Low", "package": { "id": "", "name": "vim", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "+R/6bpHEFR4SpBeguCorTQ==": { "id": "+R/6bpHEFR4SpBeguCorTQ==", "updater": "rhel-vex", "name": "CVE-2026-2673", "description": "A key group selection preference flaw has been discovered in OpenSSL. An OpenSSL TLS 1.3 server may fail to negotiate the expected preferred key exchange group when its key exchange group configuration includes the default by using the \"DEFAULT\" keyword. A less preferred key exchange may be used even when a more preferred group is supported by both client and server, if the group was not included among the client's initial predicated keyshares. This will sometimes be the case with the new hybrid post-quantum groups, if the client chooses to defer their use until specifically requested by the server. No OpenSSL FIPS modules are affected by this issue, the code in question lies outside the FIPS boundary.", "issued": "2026-03-13T13:23:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-2673 https://bugzilla.redhat.com/show_bug.cgi?id=2447327 https://www.cve.org/CVERecord?id=CVE-2026-2673 https://nvd.nist.gov/vuln/detail/CVE-2026-2673 https://github.com/openssl/openssl/commit/2157c9d81f7b0bd7dfa25b960e928ec28e8dd63f https://github.com/openssl/openssl/commit/85977e013f32ceb96aa034c0e741adddc1a05e34 https://openssl-library.org/news/secadv/20260313.txt https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-2673.json", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L", "normalized_severity": "Medium", "package": { "id": "", "name": "openssl-fips-provider", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "+TrS27bZKgEeir9pISurnQ==": { "id": "+TrS27bZKgEeir9pISurnQ==", "updater": "rhel-vex", "name": "CVE-2026-5773", "description": "A flaw was found in libcurl. Due to a logical error in the connection reuse mechanism for SMB (Server Message Block) transfers, libcurl might reuse an existing SMB connection with a different share than intended. This vulnerability, categorized as CWE-488 (Exposure of Data Element to Wrong Session), could lead to the download of an incorrect file or the upload of a file to an unintended location when an application uses libcurl for SMB transfers.", "issued": "2026-04-29T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-5773 https://bugzilla.redhat.com/show_bug.cgi?id=2461201 https://www.cve.org/CVERecord?id=CVE-2026-5773 https://nvd.nist.gov/vuln/detail/CVE-2026-5773 https://curl.se/docs/CVE-2026-5773.html https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-5773.json", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "normalized_severity": "Medium", "package": { "id": "", "name": "curl", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "+U7CyAHaY71mhNm2Xnq2uw==": { "id": "+U7CyAHaY71mhNm2Xnq2uw==", "updater": "rhel-vex", "name": "CVE-2025-68160", "description": "A flaw was found in OpenSSL. This vulnerability involves an out-of-bounds write in the line-buffering BIO filter, which can lead to memory corruption. While exploitation is unlikely to be under direct attacker control, a successful attack could cause an application to crash, resulting in a Denial of Service (DoS).", "issued": "2026-01-27T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2025-68160 https://bugzilla.redhat.com/show_bug.cgi?id=2430380 https://www.cve.org/CVERecord?id=CVE-2025-68160 https://nvd.nist.gov/vuln/detail/CVE-2025-68160 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-68160.json https://access.redhat.com/errata/RHSA-2026:1473", "severity": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "openssl-libs", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "1:3.5.1-7.el9_7", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "+UOyQgpOAnrWS+mVMK5k1Q==": { "id": "+UOyQgpOAnrWS+mVMK5k1Q==", "updater": "rhel-vex", "name": "CVE-2026-0861", "description": "A flaw was found in the glibc library. Passing an excessively large alignment value to the memalign suite of functions, such as memalign, posix_memalign, aligned_alloc, valloc and pvalloc, an integer overflow can occur during internal size calculations due to improper overflow checks, causing an allocation of a small chunk of memory which is subsequently used for writing. This issue can result in an application crash or heap memory corruption.", "issued": "2026-01-14T21:01:11Z", "links": "https://access.redhat.com/security/cve/CVE-2026-0861 https://bugzilla.redhat.com/show_bug.cgi?id=2429771 https://www.cve.org/CVERecord?id=CVE-2026-0861 https://nvd.nist.gov/vuln/detail/CVE-2026-0861 https://sourceware.org/bugzilla/show_bug.cgi?id=33796 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-0861.json https://access.redhat.com/errata/RHSA-2026:2786", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "glibc", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:2.34-231.el9_7.10", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "+X2XfuAS28uyjxaPoK8Ysw==": { "id": "+X2XfuAS28uyjxaPoK8Ysw==", "updater": "rhel-vex", "name": "CVE-2026-58016", "description": "A flaw was found in GLib. A state confusion issue exists in g_dbus_node_info_new_for_xml() in the gio/gdbusintrospection.c file when processing malformed D-Bus introspection XML, specifically with a `node` element nested within other elements like `method`, `signal`, `property` or `arg`. This issue can cause an unsigned integer overflow and lead to an out-of-bounds read, resulting in a denial of service.", "issued": "2026-04-08T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-58016 https://bugzilla.redhat.com/show_bug.cgi?id=2492257 https://www.cve.org/CVERecord?id=CVE-2026-58016 https://nvd.nist.gov/vuln/detail/CVE-2026-58016 https://gitlab.gnome.org/GNOME/glib/-/issues/3932 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-58016.json https://access.redhat.com/errata/RHSA-2026:42089", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "High", "package": { "id": "", "name": "glib2-devel", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "0:2.68.4-19.el9_8.2", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "+ba3qhqho8lfMXJQtKiMwQ==": { "id": "+ba3qhqho8lfMXJQtKiMwQ==", "updater": "rhel-vex", "name": "CVE-2026-1526", "description": "A flaw was found in undici. A remote attacker can exploit this vulnerability by sending a specially crafted compressed frame, known as a \"decompression bomb,\" during permessage-deflate decompression. The undici WebSocket client does not properly limit the size of decompressed data, leading to unbounded memory consumption. This can cause the Node.js process to exhaust available memory, resulting in a denial of service (DoS) where the process crashes or becomes unresponsive.", "issued": "2026-03-12T20:08:05Z", "links": "https://access.redhat.com/security/cve/CVE-2026-1526 https://bugzilla.redhat.com/show_bug.cgi?id=2447142 https://www.cve.org/CVERecord?id=CVE-2026-1526 https://nvd.nist.gov/vuln/detail/CVE-2026-1526 https://cna.openjsf.org/security-advisories.html https://datatracker.ietf.org/doc/html/rfc7692 https://github.com/nodejs/undici/security/advisories/GHSA-vrm6-8vpv-qv8q https://hackerone.com/reports/3481206 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-1526.json https://access.redhat.com/errata/RHSA-2026:7302", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "High", "package": { "id": "", "name": "nodejs-docs", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "noarch", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:22.22.2-1.module+el9.7.0+24157+8ddb2461", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "+fYUom03o4taYF0LdBwDsg==": { "id": "+fYUom03o4taYF0LdBwDsg==", "updater": "rhel-vex", "name": "CVE-2025-66199", "description": "A flaw was found in OpenSSL. A remote attacker can exploit this vulnerability by sending a specially crafted CompressedCertificate message during the TLS 1.3 handshake. This can cause excessive per-connection memory allocations, leading to resource exhaustion and a Denial of Service (DoS) for affected clients and servers. This issue occurs when TLS 1.3 certificate compression is enabled and negotiated.", "issued": "2026-01-27T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2025-66199 https://bugzilla.redhat.com/show_bug.cgi?id=2430379 https://www.cve.org/CVERecord?id=CVE-2025-66199 https://nvd.nist.gov/vuln/detail/CVE-2025-66199 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-66199.json https://access.redhat.com/errata/RHSA-2026:1473", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "openssl", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "1:3.5.1-7.el9_7", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "+hBhqk1qKnkU+nqn6a96qg==": { "id": "+hBhqk1qKnkU+nqn6a96qg==", "updater": "rhel-vex", "name": "CVE-2023-48233", "description": "A flaw was found in Vim, an open source command line text editor. If the count after the :s command is larger than what fits into a signed long variable, abort with e_value_too_large. The impact is low because user interaction is required and a crash may not happen in all situations.", "issued": "2023-11-16T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2023-48233 https://bugzilla.redhat.com/show_bug.cgi?id=2250270 https://www.cve.org/CVERecord?id=CVE-2023-48233 https://nvd.nist.gov/vuln/detail/CVE-2023-48233 http://www.openwall.com/lists/oss-security/2023/11/16/1 https://github.com/vim/vim/commit/ac63787734fda2e294e477af52b3bd601517fa78 https://github.com/vim/vim/security/advisories/GHSA-3xx4-hcq6-r2vj https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-48233.json", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "normalized_severity": "Low", "package": { "id": "", "name": "vim", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "+ihXD4KFgwxouHTRyQ5EbA==": { "id": "+ihXD4KFgwxouHTRyQ5EbA==", "updater": "rhel-vex", "name": "CVE-2026-45232", "description": "A flaw was found in rsync. A network attacker can exploit an off-by-one out-of-bounds stack write vulnerability in the `establish_proxy_connection()` function by sending a malformed HTTP proxy response. This occurs when the `RSYNC_PROXY` environment variable is set and the attacker sends a response line of 1023 or more bytes without a newline terminator. This can corrupt stack memory, potentially leading to a Denial of Service (DoS).", "issued": "2026-05-20T00:45:28Z", "links": "https://access.redhat.com/security/cve/CVE-2026-45232 https://bugzilla.redhat.com/show_bug.cgi?id=2480057 https://www.cve.org/CVERecord?id=CVE-2026-45232 https://nvd.nist.gov/vuln/detail/CVE-2026-45232 https://github.com/RsyncProject/rsync/releases/tag/v3.4.3 https://github.com/RsyncProject/rsync/security/advisories/GHSA-8f85-j2cv-59m8 https://www.vulncheck.com/advisories/rsync-off-by-one-stack-write-via-http-proxy https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-45232.json", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "rsync", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "+mMVfpx9oV/yykDKHrEHwQ==": { "id": "+mMVfpx9oV/yykDKHrEHwQ==", "updater": "rhel-vex", "name": "CVE-2026-29111", "description": "A flaw was found in systemd, a system and service manager. An unprivileged user can exploit this vulnerability by making an Inter-Process Communication (IPC) API call with spurious data. In older versions (v249 and earlier), this can lead to stack overwriting with attacker-controlled content, potentially enabling arbitrary code execution or privilege escalation. In newer versions (v250 and later), the flaw causes systemd to assert and freeze, resulting in a Denial of Service (DoS).", "issued": "2026-03-23T21:03:56Z", "links": "https://access.redhat.com/security/cve/CVE-2026-29111 https://bugzilla.redhat.com/show_bug.cgi?id=2450505 https://www.cve.org/CVERecord?id=CVE-2026-29111 https://nvd.nist.gov/vuln/detail/CVE-2026-29111 https://github.com/systemd/systemd/commit/1d22f706bd04f45f8422e17fbde3f56ece17758a https://github.com/systemd/systemd/commit/20021e7686426052e3a7505425d7e12085feb2a6 https://github.com/systemd/systemd/commit/21167006574d6b83813c7596759b474f56562412 https://github.com/systemd/systemd/commit/3cee294fe8cf4fa0eff933ab21416d099942cabd https://github.com/systemd/systemd/commit/42aee39107fbdd7db1ccd402a2151822b2805e9f https://github.com/systemd/systemd/commit/54588d2dedff54bfb6036670820650e4ea74628f https://github.com/systemd/systemd/commit/7ac3220213690e8a8d6d2a6e81e43bd1dce01d69 https://github.com/systemd/systemd/commit/80acea4ef80a4bb78560ed970c34952299b890d6 https://github.com/systemd/systemd/commit/b5fd14693057e5f2c9b4a49603be64ec3608ff6c https://github.com/systemd/systemd/commit/efa6ba2ab625aaa160ac435a09e6482fc63bdbe8 https://github.com/systemd/systemd/security/advisories/GHSA-gx6q-6f99-m764 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-29111.json https://access.redhat.com/errata/RHSA-2026:19213", "severity": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "systemd-libs", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:252-67.el9_8.2", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "+p1B+LZP5hvhPeU88puOfg==": { "id": "+p1B+LZP5hvhPeU88puOfg==", "updater": "rhel-vex", "name": "CVE-2026-48930", "description": "A flaw was found in Node.js. This vulnerability in the TLS (Transport Layer Security) hostname handling allows embedded null characters in hostnames. This can lead to silent authority rebinding, potentially enabling an attacker to redirect network traffic to an unintended server and disclose sensitive information.", "issued": "2026-06-26T01:14:37Z", "links": "https://access.redhat.com/security/cve/CVE-2026-48930 https://bugzilla.redhat.com/show_bug.cgi?id=2493326 https://www.cve.org/CVERecord?id=CVE-2026-48930 https://nvd.nist.gov/vuln/detail/CVE-2026-48930 https://github.com/nodejs/node/commit/7dafafa2424710ded8b77eb7c878e884c1aef64e https://hackerone.com/reports/3656716 https://nodejs.org/en/blog/vulnerability/june-2026-security-releases https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-48930.json https://access.redhat.com/errata/RHSA-2026:35892", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L", "normalized_severity": "Medium", "package": { "id": "", "name": "npm", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:10.9.8-1.22.23.1.1.module+el9.8.0+24457+996af7aa", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "+uMSPU5jbqI0+jsP/eX6PA==": { "id": "+uMSPU5jbqI0+jsP/eX6PA==", "updater": "rhel-vex", "name": "CVE-2022-3037", "description": "A flaw was found in vim, where it is vulnerable to a use-after-free in the qf_buf_add_line() function. This flaw allows a specially crafted file to crash a program, use unexpected values, or execute code.", "issued": "2022-08-30T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2022-3037 https://bugzilla.redhat.com/show_bug.cgi?id=2122907 https://www.cve.org/CVERecord?id=CVE-2022-3037 https://nvd.nist.gov/vuln/detail/CVE-2022-3037 https://huntr.dev/bounties/af4c2f2d-d754-4607-b565-9e92f3f717b5 https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-3037.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "vim", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "+usEQpepP7UaLaTDZ7AUHQ==": { "id": "+usEQpepP7UaLaTDZ7AUHQ==", "updater": "rhel-vex", "name": "CVE-2025-24294", "description": "A denial of service flaw was found in resolv ruby gem. This flaw allows an attacker to craft a malicious DNS packet containing a highly compressed domain name. When the resolv library parses this packet, the name decompression process consumes a large amount of CPU resources, as the library does not limit the resulting length of the name.", "issued": "2025-07-12T03:30:40Z", "links": "https://access.redhat.com/security/cve/CVE-2025-24294 https://bugzilla.redhat.com/show_bug.cgi?id=2379684 https://www.cve.org/CVERecord?id=CVE-2025-24294 https://nvd.nist.gov/vuln/detail/CVE-2025-24294 https://www.ruby-lang.org/en/news/2025/07/08/dos-resolv-cve-2025-24294/ https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-24294.json https://access.redhat.com/errata/RHSA-2025:23063", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "normalized_severity": "Medium", "package": { "id": "", "name": "rubygem-rake", "version": "", "kind": "binary", "normalized_version": "", "module": "ruby:3.3", "arch": "noarch", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "0:13.1.0-5.module+el9.7.0+23651+15dc1615", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "+vYcckG24NBhOrHM/LGq8A==": { "id": "+vYcckG24NBhOrHM/LGq8A==", "updater": "rhel-vex", "name": "CVE-2026-4878", "description": "A flaw was found in libcap. A local unprivileged user can exploit a Time-of-check-to-time-of-use (TOCTOU) race condition in the `cap_set_file()` function. This allows an attacker with write access to a parent directory to redirect file capability updates to an attacker-controlled file. By doing so, capabilities can be injected into or stripped from unintended executables, leading to privilege escalation.", "issued": "2026-04-06T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-4878 https://bugzilla.redhat.com/show_bug.cgi?id=2451615 https://www.cve.org/CVERecord?id=CVE-2026-4878 https://nvd.nist.gov/vuln/detail/CVE-2026-4878 https://bugzilla.redhat.com/show_bug.cgi?id=2447554 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-4878.json https://access.redhat.com/errata/RHSA-2026:19346", "severity": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H", "normalized_severity": "High", "package": { "id": "", "name": "libcap", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:2.48-10.el9_8.1", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "+yuesL9NY5Qpvu7wv7kHHA==": { "id": "+yuesL9NY5Qpvu7wv7kHHA==", "updater": "rhel-vex", "name": "CVE-2026-4046", "description": "A flaw was found in glibc, the GNU C Library. A remote attacker could exploit this vulnerability by providing specially crafted inputs using the IBM1390 or IBM1399 character sets to the `iconv()` function. This could lead to an assertion failure, causing the application to crash and resulting in a Denial of Service (DoS).", "issued": "2026-03-30T17:16:11Z", "links": "https://access.redhat.com/security/cve/CVE-2026-4046 https://bugzilla.redhat.com/show_bug.cgi?id=2453117 https://www.cve.org/CVERecord?id=CVE-2026-4046 https://nvd.nist.gov/vuln/detail/CVE-2026-4046 https://packages.fedoraproject.org/pkgs/glibc/glibc-gconv-extra/ https://sourceware.org/bugzilla/show_bug.cgi?id=33980 https://sourceware.org/git/?p=glibc.git;a=blob_plain;f=advisories/GLIBC-SA-2026-0007;hb=HEAD https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-4046.json https://access.redhat.com/errata/RHSA-2026:20597", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "normalized_severity": "Medium", "package": { "id": "", "name": "glibc-locale-source", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "0:2.34-270.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "//8buewiV8gb20qv4g1cqQ==": { "id": "//8buewiV8gb20qv4g1cqQ==", "updater": "rhel-vex", "name": "CVE-2025-65018", "description": "A buffer overflow flaw has been discovered in libpng. There is a heap buffer overflow vulnerability in the libpng simplified API function png_image_finish_read when processing 16-bit interlaced PNGs with 8-bit output format. Attacker-crafted interlaced PNG files cause heap writes beyond allocated buffer bounds.", "issued": "2025-11-24T23:50:18Z", "links": "https://access.redhat.com/security/cve/CVE-2025-65018 https://bugzilla.redhat.com/show_bug.cgi?id=2416907 https://www.cve.org/CVERecord?id=CVE-2025-65018 https://nvd.nist.gov/vuln/detail/CVE-2025-65018 https://github.com/pnggroup/libpng/commit/16b5e3823918840aae65c0a6da57c78a5a496a4d https://github.com/pnggroup/libpng/commit/218612ddd6b17944e21eda56caf8b4bf7779d1ea https://github.com/pnggroup/libpng/issues/755 https://github.com/pnggroup/libpng/pull/757 https://github.com/pnggroup/libpng/security/advisories/GHSA-7wv6-48j4-hj3g https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-65018.json https://access.redhat.com/errata/RHSA-2026:0238", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H", "normalized_severity": "High", "package": { "id": "", "name": "libpng-devel", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "2:1.6.37-12.el9_7.1", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "/9MMSCBwxCiKjJobh+tDpw==": { "id": "/9MMSCBwxCiKjJobh+tDpw==", "updater": "rhel-vex", "name": "CVE-2026-42766", "description": "A flaw was found in OpenSSL. A remote attacker could exploit a NULL pointer dereference vulnerability in the Cryptographic Message Syntax (CMS) decryption process by providing a specially crafted password-encrypted CMS message. This occurs because the keyDerivationAlgorithm field, which is optional, is dereferenced without proper validation. Successful exploitation leads to an application crash, resulting in a Denial of Service.", "issued": "2026-06-09T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-42766 https://bugzilla.redhat.com/show_bug.cgi?id=2481890 https://www.cve.org/CVERecord?id=CVE-2026-42766 https://nvd.nist.gov/vuln/detail/CVE-2026-42766 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42766.json https://access.redhat.com/errata/RHSA-2026:25239", "severity": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "openssl-libs", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "1:3.5.5-4.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "/DjJHQ4LUqD/kDDEZQnGMQ==": { "id": "/DjJHQ4LUqD/kDDEZQnGMQ==", "updater": "rhel-vex", "name": "CVE-2026-18477", "description": "A TOCTOU (Time-of-Check Time-of-Use) vulnerability in GNU tar's incremental dumpdir 'X' rename handling allows a local attacker with write access to a directory being backed up to influence the restore process if the attacker has access to the system where the restore is being performed. During restoration, files or directories may be created, renamed or overwritten outside the intended extraction directory. This could lead to unauthorized file modification or, in some cases, privilege escalation. Exploitation does not require the attacker to modify or craft the archive, and standard backup and restore workflows—including extracting into a newly created directory without using the -P option do not mitigate the issue.", "issued": "2026-07-31T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-18477 https://bugzilla.redhat.com/show_bug.cgi?id=2509735 https://www.cve.org/CVERecord?id=CVE-2026-18477 https://nvd.nist.gov/vuln/detail/CVE-2026-18477 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-18477.json", "severity": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:N", "normalized_severity": "Medium", "package": { "id": "", "name": "tar", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "/GP9UYzgnUNp/vOMMDf7mw==": { "id": "/GP9UYzgnUNp/vOMMDf7mw==", "updater": "rhel-vex", "name": "CVE-2026-16517", "description": "A signed integer overflow vulnerability was found in libarchive's ZIP writer. In the archive_write_zip_header function in archive_write_set_format_zip.c, when ZIP encryption is enabled and the entry file size is close to INT64_MAX, the addition of the encryption overhead to the entry size overflows int64_t, resulting in undefined behavior. This could lead to incorrect Zip64 extension decisions or potential memory corruption.", "issued": "2026-07-03T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-16517 https://bugzilla.redhat.com/show_bug.cgi?id=2505492 https://www.cve.org/CVERecord?id=CVE-2026-16517 https://nvd.nist.gov/vuln/detail/CVE-2026-16517 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-16517.json", "severity": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L", "normalized_severity": "Low", "package": { "id": "", "name": "libarchive", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "/M50+nAheHXCE2atpE2VJA==": { "id": "/M50+nAheHXCE2atpE2VJA==", "updater": "rhel-vex", "name": "CVE-2026-4438", "description": "A flaw was found in the GNU C library (glibc). When applications use the `gethostbyaddr` or `gethostbyaddr_r` functions with a `nsswitch.conf` configuration that specifies glibc's DNS backend, the library may return an invalid DNS hostname. This violates the DNS specification and could lead to applications receiving incorrect hostname information, potentially impacting network operations or security decisions.", "issued": "2026-03-20T19:59:06Z", "links": "https://access.redhat.com/security/cve/CVE-2026-4438 https://bugzilla.redhat.com/show_bug.cgi?id=2449783 https://www.cve.org/CVERecord?id=CVE-2026-4438 https://nvd.nist.gov/vuln/detail/CVE-2026-4438 https://sourceware.org/bugzilla/show_bug.cgi?id=34015 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-4438.json https://access.redhat.com/errata/RHSA-2026:20597", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "normalized_severity": "Low", "package": { "id": "", "name": "glibc-common", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:2.34-270.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "/MgFHW097IAGIZkNc/Fltw==": { "id": "/MgFHW097IAGIZkNc/Fltw==", "updater": "rhel-vex", "name": "CVE-2025-5245", "description": "A denial-of-service vulnerability has been identified in GNU Binutils, affecting versions up to 2.44. The flaw resides within the debug_type_samep function in the /binutils/debug.c file of the objdump component. An attacker with local access can trigger a program crash by manipulating input data, leading to a denial of service for the objdump utility.", "issued": "2025-05-27T14:31:12Z", "links": "https://access.redhat.com/security/cve/CVE-2025-5245 https://bugzilla.redhat.com/show_bug.cgi?id=2368771 https://www.cve.org/CVERecord?id=CVE-2025-5245 https://nvd.nist.gov/vuln/detail/CVE-2025-5245 https://sourceware.org/bugzilla/attachment.cgi?id=16004 https://sourceware.org/bugzilla/show_bug.cgi?id=32829 https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=6c3458a8b7ee7d39f070c7b2350851cb2110c65a https://vuldb.com/?ctiid.310347 https://vuldb.com/?id.310347 https://vuldb.com/?submit.584635 https://www.gnu.org/ https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-5245.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "normalized_severity": "Medium", "package": { "id": "", "name": "binutils", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "/Q70+j219nLwNP4Phg4sag==": { "id": "/Q70+j219nLwNP4Phg4sag==", "updater": "rhel-vex", "name": "CVE-2026-6653", "description": "A flaw was found in libxml2. A remote attacker can exploit a use-after-free vulnerability in the `xmlParseInternalSubset` function by providing maliciously crafted XML input. This improper handling of entity resolution can lead to a denial-of-service (DoS), making the affected system or application unavailable.", "issued": "2026-06-22T12:40:31Z", "links": "https://access.redhat.com/security/cve/CVE-2026-6653 https://bugzilla.redhat.com/show_bug.cgi?id=2491354 https://www.cve.org/CVERecord?id=CVE-2026-6653 https://nvd.nist.gov/vuln/detail/CVE-2026-6653 https://bugs.launchpad.net/ubuntu/+source/libxml2/+bug/2141260 https://gitlab.gnome.org/GNOME/libxml2/-/work_items/1058 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6653.json", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "libxml2", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "/YcdipQjiqJUDpddwhDiIw==": { "id": "/YcdipQjiqJUDpddwhDiIw==", "updater": "rhel-vex", "name": "CVE-2022-2345", "description": "A use-after-free vulnerability was found in Vim in the skipwhite function in the charset.c file. This issue occurs because an already freed memory is used when a specially crafted input is processed. This flaw allows an attacker who can trick a user into opening a specially crafted file into triggering the use-after-free, and cause the application to crash, possibly executing code and corrupting memory.", "issued": "2022-07-05T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2022-2345 https://bugzilla.redhat.com/show_bug.cgi?id=2106775 https://www.cve.org/CVERecord?id=CVE-2022-2345 https://nvd.nist.gov/vuln/detail/CVE-2022-2345 https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-2345.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "vim", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "/Zbh/oTVYOn4fLQqcvLFNw==": { "id": "/Zbh/oTVYOn4fLQqcvLFNw==", "updater": "rhel-vex", "name": "CVE-2026-42258", "description": "A flaw was found in Net::IMAP, a Ruby library that provides Internet Message Access Protocol (IMAP) client functionality. This vulnerability allows a remote attacker to inject arbitrary IMAP commands. This is achieved by passing specially crafted symbol arguments to IMAP commands. Successful exploitation could lead to unauthorized actions on the IMAP server or client, potentially resulting in information disclosure or other integrity impacts.", "issued": "2026-05-09T19:40:49Z", "links": "https://access.redhat.com/security/cve/CVE-2026-42258 https://bugzilla.redhat.com/show_bug.cgi?id=2468498 https://www.cve.org/CVERecord?id=CVE-2026-42258 https://nvd.nist.gov/vuln/detail/CVE-2026-42258 https://github.com/ruby/net-imap/releases/tag/v0.4.24 https://github.com/ruby/net-imap/releases/tag/v0.5.14 https://github.com/ruby/net-imap/releases/tag/v0.6.4 https://github.com/ruby/net-imap/security/advisories/GHSA-75xq-5h9v-w6px https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42258.json https://access.redhat.com/errata/RHSA-2026:33576", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:N", "normalized_severity": "High", "package": { "id": "", "name": "rubygem-io-console", "version": "", "kind": "binary", "normalized_version": "", "module": "ruby:3.3", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "0:0.7.1-7.module+el9.8.0+24406+8975e57f", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "/eHyvb2Yvu/vFkWHODEbfw==": { "id": "/eHyvb2Yvu/vFkWHODEbfw==", "updater": "rhel-vex", "name": "CVE-2026-0865", "description": "Missing newline filtering has been discovered in Python. User-controlled header names and values containing newlines can allow injecting HTTP headers.", "issued": "2026-01-20T21:26:15Z", "links": "https://access.redhat.com/security/cve/CVE-2026-0865 https://bugzilla.redhat.com/show_bug.cgi?id=2431367 https://www.cve.org/CVERecord?id=CVE-2026-0865 https://nvd.nist.gov/vuln/detail/CVE-2026-0865 https://github.com/python/cpython/issues/143916 https://github.com/python/cpython/pull/143917 https://mail.python.org/archives/list/security-announce@python.org/thread/BJ6QPHNSHJTS3A7CFV6IBMCAP2DWRVNT/ https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-0865.json https://access.redhat.com/errata/RHSA-2026:4168", "severity": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:N", "normalized_severity": "Medium", "package": { "id": "", "name": "python3-libs", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:3.9.25-3.el9_7.1", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "/h81Nr0GSz2fO9zGO8rpYw==": { "id": "/h81Nr0GSz2fO9zGO8rpYw==", "updater": "rhel-vex", "name": "CVE-2025-69421", "description": "A flaw was found in OpenSSL. This vulnerability allows a remote attacker to trigger a Denial of Service (DoS) by providing a specially crafted, malformed PKCS#12 file to an application that processes it. The flaw occurs due to a NULL pointer dereference in the PKCS12_item_decrypt_d2i_ex() function when handling the malformed file, leading to an application crash.", "issued": "2026-01-27T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2025-69421 https://bugzilla.redhat.com/show_bug.cgi?id=2430387 https://www.cve.org/CVERecord?id=CVE-2025-69421 https://nvd.nist.gov/vuln/detail/CVE-2025-69421 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-69421.json https://access.redhat.com/errata/RHSA-2026:1473", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "openssl-devel", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:3.5.1-7.el9_7", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "/jvSCV2RwJ6c/Llx9z8uvA==": { "id": "/jvSCV2RwJ6c/Llx9z8uvA==", "updater": "rhel-vex", "name": "CVE-2025-15469", "description": "A flaw was found in openssl. When a user signs or verifies files larger than 16MB using the `openssl dgst` command with one-shot algorithms, the tool silently truncates the input to 16MB. This creates an integrity gap, allowing trailing data beyond the initial 16MB to be modified without detection because it remains unauthenticated. This vulnerability primarily impacts workflows that both sign and verify files using the affected `openssl dgst` command.", "issued": "2026-01-27T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2025-15469 https://bugzilla.redhat.com/show_bug.cgi?id=2430378 https://www.cve.org/CVERecord?id=CVE-2025-15469 https://nvd.nist.gov/vuln/detail/CVE-2025-15469 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-15469.json https://access.redhat.com/errata/RHSA-2026:1473", "severity": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N", "normalized_severity": "Low", "package": { "id": "", "name": "openssl-libs", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "1:3.5.1-7.el9_7", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "/km0PGGx5jgJEo1YpWisAQ==": { "id": "/km0PGGx5jgJEo1YpWisAQ==", "updater": "rhel-vex", "name": "CVE-2026-29518", "description": "A flaw was found in rsync. An rsync daemon configured with \"use chroot = no\" is exposed\nto a time-of-check / time-of-use race on parent path components. A local\nattacker with write access to a module can replace a parent directory\ncomponent with a symlink between the receiver's check and its open(),\nredirecting reads (basis-file disclosure) and writes (file overwrite)\noutside the module. Under elevated daemon privilege this allows privilege\nescalation. Default \"use chroot = yes\" is not exposed.\nReach: local attacker on the daemon host, write access to a module path,\ndaemon configured with use chroot = no.", "issued": "2026-05-20T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-29518 https://bugzilla.redhat.com/show_bug.cgi?id=2469055 https://www.cve.org/CVERecord?id=CVE-2026-29518 https://nvd.nist.gov/vuln/detail/CVE-2026-29518 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-29518.json https://access.redhat.com/errata/RHSA-2026:26410", "severity": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H", "normalized_severity": "High", "package": { "id": "", "name": "rsync", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:3.2.5-7.el9_8.2", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "/pEYCNwBz8VXiXwXl+mS3w==": { "id": "/pEYCNwBz8VXiXwXl+mS3w==", "updater": "rhel-vex", "name": "CVE-2026-6238", "description": "A flaw was found in glibc (GNU C Library). The deprecated functions ns_printrrf, ns_printrr, and fp_nquery do not properly validate the length of RDATA (Resource Record Data) in a DNS (Domain Name System) response when processing specific record types like LOC, CERT, TKEY, or TSIG. A remote attacker could craft a malicious DNS response, leading to a target application crashing or reading uninitialized memory. These functions are intended for application debugging and are not part of the standard DNS resolver path.", "issued": "2026-04-28T16:43:08Z", "links": "https://access.redhat.com/security/cve/CVE-2026-6238 https://bugzilla.redhat.com/show_bug.cgi?id=2463539 https://www.cve.org/CVERecord?id=CVE-2026-6238 https://nvd.nist.gov/vuln/detail/CVE-2026-6238 https://inbox.sourceware.org/libc-announce/7a655d55-276f-41fe-b550-feb3ebb2ce91@redhat.com/T/#u https://sourceware.org/bugzilla/show_bug.cgi?id=34069 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6238.json https://access.redhat.com/errata/RHSA-2026:42952", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "glibc", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:2.34-274.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "/rKG82d/RCig7yYmsr6Kpg==": { "id": "/rKG82d/RCig7yYmsr6Kpg==", "updater": "rhel-vex", "name": "CVE-2026-44432", "description": "A flaw was found in urllib3, an HTTP client library for Python. This vulnerability allows a remote attacker to cause excessive resource consumption, such as high CPU usage and massive memory allocation, on the client side. This occurs when urllib3 attempts to decompress an entire HTTP response, even if only a partial read was requested, or when draining the connection after a partial decompression. This can lead to a Denial of Service (DoS) condition.", "issued": "2026-05-13T15:17:12Z", "links": "https://access.redhat.com/security/cve/CVE-2026-44432 https://bugzilla.redhat.com/show_bug.cgi?id=2477154 https://www.cve.org/CVERecord?id=CVE-2026-44432 https://nvd.nist.gov/vuln/detail/CVE-2026-44432 https://github.com/urllib3/urllib3/security/advisories/GHSA-mf9v-mfxr-j63j https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-44432.json https://access.redhat.com/errata/RHSA-2026:28158", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "High", "package": { "id": "", "name": "python3-urllib3", "version": "", "kind": "binary", "normalized_version": "", "arch": "noarch", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:1.26.5-8.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "/rrV/dLSeVDaHUnAvPeh7A==": { "id": "/rrV/dLSeVDaHUnAvPeh7A==", "updater": "rhel-vex", "name": "CVE-2026-8927", "description": "A flaw was found in libcurl. When reusing a libcurl handle for sequential transfers with environment-variable proxy configuration, the library does not properly clear the proxy authentication state. This oversight can lead to the unintended disclosure of `Proxy-Authorization` headers to an incorrect proxy, potentially exposing sensitive authentication information to an unauthorized entity. This is an information disclosure vulnerability.", "issued": "2026-07-03T06:16:06Z", "links": "https://access.redhat.com/security/cve/CVE-2026-8927 https://bugzilla.redhat.com/show_bug.cgi?id=2496769 https://www.cve.org/CVERecord?id=CVE-2026-8927 https://nvd.nist.gov/vuln/detail/CVE-2026-8927 https://curl.se/docs/CVE-2026-8927.html https://curl.se/docs/CVE-2026-8927.json https://hackerone.com/reports/3744543 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-8927.json", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "normalized_severity": "High", "package": { "id": "", "name": "curl", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "/s8Q0HsneAZhk9Mgclm/OA==": { "id": "/s8Q0HsneAZhk9Mgclm/OA==", "updater": "rhel-vex", "name": "CVE-2026-45445", "description": "A flaw was found in OpenSSL. Applications that use the AES-OCB encryption method with a specific one-shot interface (EVP_Cipher()) will have their provided Initialization Vector (IV) silently discarded. This leads to the same internal cryptographic value being used repeatedly, which compromises the confidentiality of encrypted data. Additionally, this issue allows for the universal forgery of authentication tags, undermining the integrity of communications.", "issued": "2026-06-09T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-45445 https://bugzilla.redhat.com/show_bug.cgi?id=2481896 https://www.cve.org/CVERecord?id=CVE-2026-45445 https://nvd.nist.gov/vuln/detail/CVE-2026-45445 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-45445.json https://access.redhat.com/errata/RHSA-2026:25239", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "normalized_severity": "Medium", "package": { "id": "", "name": "openssl-libs", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "1:3.5.5-4.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "/wEypZTr5run3SLjfJxcSA==": { "id": "/wEypZTr5run3SLjfJxcSA==", "updater": "rhel-vex", "name": "CVE-2026-34982", "description": "A flaw was found in Vim. A modeline is used to set specific editor options directly from a text file. However, the `complete`, `guitabtooltip`, `printheader` options and the `mapset` function lack proper security checks, allowing an attacker to bypass restrictions and cause arbitrary OS command execution.", "issued": "2026-04-06T15:16:48Z", "links": "https://access.redhat.com/security/cve/CVE-2026-34982 https://bugzilla.redhat.com/show_bug.cgi?id=2455400 https://www.cve.org/CVERecord?id=CVE-2026-34982 https://nvd.nist.gov/vuln/detail/CVE-2026-34982 http://www.openwall.com/lists/oss-security/2026/04/01/1 https://github.com/vim/vim/commit/75661a66a1db1e1f3f1245c615 https://github.com/vim/vim/releases/tag/v9.2.0276 https://github.com/vim/vim/security/advisories/GHSA-8h6p-m6gr-mpw9 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-34982.json https://access.redhat.com/errata/RHSA-2026:19224", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N", "normalized_severity": "High", "package": { "id": "", "name": "vim-minimal", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "2:8.2.2637-26.el9_8.4", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "0+lfA724ypJdmbNfIKjiog==": { "id": "0+lfA724ypJdmbNfIKjiog==", "updater": "rhel-vex", "name": "CVE-2026-4437", "description": "A flaw was found in glibc (the GNU C Library). When an application uses the `gethostbyaddr` or `gethostbyaddr_r` functions with a `nsswitch.conf` configuration that specifies glibc's DNS backend, a remote attacker can send a specially crafted DNS (Domain Name System) response. This crafted response can cause the application to incorrectly interpret a non-answer section of the DNS response as a valid answer, leading to potential misbehavior or incorrect information processing.", "issued": "2026-03-20T19:59:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-4437 https://bugzilla.redhat.com/show_bug.cgi?id=2449777 https://www.cve.org/CVERecord?id=CVE-2026-4437 https://nvd.nist.gov/vuln/detail/CVE-2026-4437 https://sourceware.org/bugzilla/show_bug.cgi?id=34014 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-4437.json https://access.redhat.com/errata/RHSA-2026:20597", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L", "normalized_severity": "Medium", "package": { "id": "", "name": "glibc-langpack-en", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:2.34-270.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "00cDk2w3qfvdzMbO27c/+w==": { "id": "00cDk2w3qfvdzMbO27c/+w==", "updater": "rhel-vex", "name": "CVE-2022-2982", "description": "A heap use-after-free vulnerability was found in vim's qf_fill_buffer() function of the src/quickfix.c file. The issue occurs because vim uses freed memory when recursively using 'quickfixtextfunc.' This flaw allows an attacker to trick a user into opening a specially crafted file, triggering a heap use-after-free that causes an application to crash, possibly executing code and corrupting memory.", "issued": "2022-08-25T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2022-2982 https://bugzilla.redhat.com/show_bug.cgi?id=2123714 https://www.cve.org/CVERecord?id=CVE-2022-2982 https://nvd.nist.gov/vuln/detail/CVE-2022-2982 https://huntr.dev/bounties/53f53d9a-ba8a-4985-b7ba-23efbe6833be/ https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-2982.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "vim", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "041SU8x5Wrw6mRfaRurHIg==": { "id": "041SU8x5Wrw6mRfaRurHIg==", "updater": "rhel-vex", "name": "CVE-2025-69419", "description": "A flaw was found in OpenSSL. When processing a specially crafted PKCS#12 (Personal Information Exchange Syntax Standard) file, a remote attacker can exploit an out-of-bounds write vulnerability. This issue, occurring within the OPENSSL_uni2utf8() function, leads to memory corruption by writing data beyond its allocated buffer. Successful exploitation could result in a denial of service or potentially allow for arbitrary code execution.", "issued": "2026-01-27T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2025-69419 https://bugzilla.redhat.com/show_bug.cgi?id=2430386 https://www.cve.org/CVERecord?id=CVE-2025-69419 https://nvd.nist.gov/vuln/detail/CVE-2025-69419 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-69419.json https://access.redhat.com/errata/RHSA-2026:1473", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "normalized_severity": "Medium", "package": { "id": "", "name": "openssl-devel", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:3.5.1-7.el9_7", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "05N5Len6XyuiKITeFewI+A==": { "id": "05N5Len6XyuiKITeFewI+A==", "updater": "rhel-vex", "name": "CVE-2026-41316", "description": "A flaw was found in ERB, a templating system for Ruby. An attacker who can trigger deserialization of untrusted data in a Ruby application can bypass existing protections. This vulnerability allows for arbitrary code execution by exploiting specific public methods that evaluate template source code, which were not properly guarded against deserialization attacks.", "issued": "2026-04-24T02:35:41Z", "links": "https://access.redhat.com/security/cve/CVE-2026-41316 https://bugzilla.redhat.com/show_bug.cgi?id=2461369 https://www.cve.org/CVERecord?id=CVE-2026-41316 https://nvd.nist.gov/vuln/detail/CVE-2026-41316 https://github.com/ruby/erb/security/advisories/GHSA-q339-8rmv-2mhv https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-41316.json https://access.redhat.com/errata/RHSA-2026:18030", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "normalized_severity": "High", "package": { "id": "", "name": "ruby-bundled-gems", "version": "", "kind": "binary", "normalized_version": "", "module": "ruby:3.3", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "0:3.3.10-6.module+el9.7.0+24248+66578cbb", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "07xwapz2PAAGV6vMF10zQw==": { "id": "07xwapz2PAAGV6vMF10zQw==", "updater": "rhel-vex", "name": "CVE-2026-5928", "description": "A flaw was found in glibc (GNU C Library). When the `ungetwc` function is called on a file stream using wide characters with specific overlapping single-byte and multi-byte encodings, it may attempt to read data outside of its allocated buffer. This can lead to the unintentional disclosure of sensitive information from memory or cause the program to crash, resulting in a denial of service.", "issued": "2026-04-20T20:37:31Z", "links": "https://access.redhat.com/security/cve/CVE-2026-5928 https://bugzilla.redhat.com/show_bug.cgi?id=2459854 https://www.cve.org/CVERecord?id=CVE-2026-5928 https://nvd.nist.gov/vuln/detail/CVE-2026-5928 https://sourceware.org/bugzilla/show_bug.cgi?id=33998 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-5928.json https://access.redhat.com/errata/RHSA-2026:42952", "severity": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "glibc-minimal-langpack", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:2.34-274.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "08ogBuWXS+d72R0TAjgJaQ==": { "id": "08ogBuWXS+d72R0TAjgJaQ==", "updater": "rhel-vex", "name": "CVE-2026-52859", "description": "A flaw was found in Vim, an open-source command-line text editor. This vulnerability allows a program displaying output in a Vim terminal window to trigger an out-of-bounds write by sending a specific byte sequence. This can lead to a crash of the Vim application, resulting in a Denial of Service (DoS) for the user.", "issued": "2026-06-11T18:33:09Z", "links": "https://access.redhat.com/security/cve/CVE-2026-52859 https://bugzilla.redhat.com/show_bug.cgi?id=2487989 https://www.cve.org/CVERecord?id=CVE-2026-52859 https://nvd.nist.gov/vuln/detail/CVE-2026-52859 https://github.com/vim/vim/commit/63680c6d3d52477817b49cd1a66e7aabe8a7aa19 https://github.com/vim/vim/releases/tag/v9.2.0565 https://github.com/vim/vim/security/advisories/GHSA-47gw-8gc3-mgcm https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-52859.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "vim", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "0E1VjQWdmolR9lr9ElIZZQ==": { "id": "0E1VjQWdmolR9lr9ElIZZQ==", "updater": "rhel-vex", "name": "CVE-2026-28389", "description": "A flaw was found in OpenSSL. A remote attacker could exploit this by sending a specially crafted Cryptographic Message Syntax (CMS) EnvelopedData message with KeyAgreeRecipientInfo. This vulnerability arises because the software attempts to process an optional field without verifying its existence, leading to a NULL pointer dereference. This can result in a Denial of Service (DoS) for applications that handle untrusted CMS data.", "issued": "2026-04-07T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-28389 https://bugzilla.redhat.com/show_bug.cgi?id=2451096 https://www.cve.org/CVERecord?id=CVE-2026-28389 https://nvd.nist.gov/vuln/detail/CVE-2026-28389 https://openssl-library.org/news/secadv/20260407.txt https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-28389.json", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "openssl", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "0HbetX2gSM32682C6raRqA==": { "id": "0HbetX2gSM32682C6raRqA==", "updater": "rhel-vex", "name": "CVE-2025-55132", "description": "A file access flaw has been discovered in NodeJS. A file's access and modification timestamps to be changed via `futimes()` even when the process has only read permissions. Unlike `utimes()`, `futimes()` does not apply the expected write-permission checks, which means file metadata can be modified in read-only directories. This behavior could be used to alter timestamps in ways that obscure activity, reducing the reliability of logs.", "issued": "2026-01-20T20:41:55Z", "links": "https://access.redhat.com/security/cve/CVE-2025-55132 https://bugzilla.redhat.com/show_bug.cgi?id=2431338 https://www.cve.org/CVERecord?id=CVE-2025-55132 https://nvd.nist.gov/vuln/detail/CVE-2025-55132 https://nodejs.org/en/blog/vulnerability/december-2025-security-releases https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-55132.json https://access.redhat.com/errata/RHSA-2026:2782", "severity": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "normalized_severity": "Medium", "package": { "id": "", "name": "nodejs-full-i18n", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:22.22.0-1.module+el9.7.0+23896+b5802de9", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "0RDuhfilAG8dJEO2Fvk46w==": { "id": "0RDuhfilAG8dJEO2Fvk46w==", "updater": "rhel-vex", "name": "CVE-2026-1526", "description": "A flaw was found in undici. A remote attacker can exploit this vulnerability by sending a specially crafted compressed frame, known as a \"decompression bomb,\" during permessage-deflate decompression. The undici WebSocket client does not properly limit the size of decompressed data, leading to unbounded memory consumption. This can cause the Node.js process to exhaust available memory, resulting in a denial of service (DoS) where the process crashes or becomes unresponsive.", "issued": "2026-03-12T20:08:05Z", "links": "https://access.redhat.com/security/cve/CVE-2026-1526 https://bugzilla.redhat.com/show_bug.cgi?id=2447142 https://www.cve.org/CVERecord?id=CVE-2026-1526 https://nvd.nist.gov/vuln/detail/CVE-2026-1526 https://cna.openjsf.org/security-advisories.html https://datatracker.ietf.org/doc/html/rfc7692 https://github.com/nodejs/undici/security/advisories/GHSA-vrm6-8vpv-qv8q https://hackerone.com/reports/3481206 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-1526.json https://access.redhat.com/errata/RHSA-2026:7302", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "High", "package": { "id": "", "name": "nodejs-libs", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:22.22.2-1.module+el9.7.0+24157+8ddb2461", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "0YVxD0vSH+0MhijemP/Jmg==": { "id": "0YVxD0vSH+0MhijemP/Jmg==", "updater": "rhel-vex", "name": "CVE-2022-3705", "description": "A use-after-free flaw was found in the qf_update_buffer function in vim. This issue allows a specially crafted file to crash a program, use unexpected values, or execute code.", "issued": "2022-10-26T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2022-3705 https://bugzilla.redhat.com/show_bug.cgi?id=2139086 https://www.cve.org/CVERecord?id=CVE-2022-3705 https://nvd.nist.gov/vuln/detail/CVE-2022-3705 https://vuldb.com/?id.212324 https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-3705.json", "severity": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "vim", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "0bK7Vo3x9SXQYvDvMmgzXA==": { "id": "0bK7Vo3x9SXQYvDvMmgzXA==", "updater": "rhel-vex", "name": "CVE-2022-2208", "description": "NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2.5163.", "issued": "2022-06-27T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2022-2208 https://bugzilla.redhat.com/show_bug.cgi?id=2102183 https://www.cve.org/CVERecord?id=CVE-2022-2208 https://nvd.nist.gov/vuln/detail/CVE-2022-2208 https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-2208.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "normalized_severity": "Low", "package": { "id": "", "name": "vim", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "0hc+Z9xWtVy4dEgLyf7GUQ==": { "id": "0hc+Z9xWtVy4dEgLyf7GUQ==", "updater": "rhel-vex", "name": "CVE-2026-59873", "description": "A flaw was found in node-tar, a tar archive manipulation library for Node.js. This vulnerability allows a remote attacker to craft a small gzip bomb, which, when processed, can lead to the exhaustion of disk space and CPU resources. This occurs because node-tar does not enforce strict limits on the total decompressed data, the number of entries, or the decompression ratio during extraction and parsing. The primary impact is a Denial of Service (DoS), making the affected system or application unavailable.", "issued": "2026-07-08T15:22:40Z", "links": "https://access.redhat.com/security/cve/CVE-2026-59873 https://bugzilla.redhat.com/show_bug.cgi?id=2498120 https://www.cve.org/CVERecord?id=CVE-2026-59873 https://nvd.nist.gov/vuln/detail/CVE-2026-59873 https://github.com/isaacs/node-tar/commit/2812e9338665659b183aa7226518c307044957d3 https://github.com/isaacs/node-tar/releases/tag/v7.5.19 https://github.com/isaacs/node-tar/security/advisories/GHSA-23hp-3jrh-7fpw https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59873.json https://access.redhat.com/errata/RHSA-2026:47058", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "High", "package": { "id": "", "name": "nodejs-libs", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:22.23.1-2.module+el9.8.0+24538+3f176d52", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "0lUHXQNoRQLden1OTY/5/w==": { "id": "0lUHXQNoRQLden1OTY/5/w==", "updater": "rhel-vex", "name": "CVE-2026-55654", "description": "A flaw was found in OpenSSH. This vulnerability, a heap out-of-bounds read, occurs during the cleanup of GSSAPI (Generic Security Service Application Programming Interface) indicators when a trailing NULL termination is missing in the auth-indicators array. A remote attacker, under specific configurations involving GSSAPI authentication and a Kerberos environment, could exploit this to cause the SSH authentication path to crash or abort. This leads to a denial of service (DoS), impacting the availability of the SSH service.", "issued": "2026-06-22T23:18:14Z", "links": "https://access.redhat.com/security/cve/CVE-2026-55654 https://bugzilla.redhat.com/show_bug.cgi?id=2462493 https://www.cve.org/CVERecord?id=CVE-2026-55654 https://nvd.nist.gov/vuln/detail/CVE-2026-55654 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-55654.json https://access.redhat.com/errata/RHSA-2026:47756", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L", "normalized_severity": "Low", "package": { "id": "", "name": "openssh-clients", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:9.9p1-9.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "0n2Q+dTJnzCs850WQs7VXA==": { "id": "0n2Q+dTJnzCs850WQs7VXA==", "updater": "rhel-vex", "name": "CVE-2026-33636", "description": "A flaw was found in libpng. A remote attacker could exploit an out-of-bounds read and write vulnerability in the ARM/AArch64 Neon-optimized palette expansion path. This occurs when processing a final partial chunk of 8-bit paletted rows without verifying sufficient input pixels, leading to dereferencing pointers before the start of the row buffer and writing expanded pixel data to underflowed positions. This flaw can result in information disclosure and denial of service.", "issued": "2026-03-26T16:51:58Z", "links": "https://access.redhat.com/security/cve/CVE-2026-33636 https://bugzilla.redhat.com/show_bug.cgi?id=2451819 https://www.cve.org/CVERecord?id=CVE-2026-33636 https://nvd.nist.gov/vuln/detail/CVE-2026-33636 https://github.com/pnggroup/libpng/commit/7734cda20cf1236aef60f3bbd2267c97bbb40869 https://github.com/pnggroup/libpng/commit/aba9f18eba870d14fb52c5ba5d73451349e339c3 https://github.com/pnggroup/libpng/security/advisories/GHSA-wjr5-c57x-95m2 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33636.json https://access.redhat.com/errata/RHSA-2026:28255", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "libpng-devel", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "2:1.6.37-15.el9_8.2", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "0nKksdratD87mbqRPBOINQ==": { "id": "0nKksdratD87mbqRPBOINQ==", "updater": "rhel-vex", "name": "CVE-2026-21637", "description": "A flaw in Node.js TLS error handling allows remote attackers to crash or exhaust resources of a TLS server when `pskCallback` or `ALPNCallback` are in use. Synchronous exceptions thrown during these callbacks bypass standard TLS error handling paths (tlsClientError and error), causing either immediate process termination or silent file descriptor leaks that eventually lead to denial of service. Because these callbacks process attacker-controlled input during the TLS handshake, a remote client can repeatedly trigger the issue. This vulnerability affects TLS servers using PSK or ALPN callbacks across Node.js versions where these callbacks throw without being safely wrapped.", "issued": "2026-01-20T20:41:55Z", "links": "https://access.redhat.com/security/cve/CVE-2026-21637 https://bugzilla.redhat.com/show_bug.cgi?id=2431340 https://www.cve.org/CVERecord?id=CVE-2026-21637 https://nvd.nist.gov/vuln/detail/CVE-2026-21637 https://nodejs.org/en/blog/vulnerability/december-2025-security-releases https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-21637.json https://access.redhat.com/errata/RHSA-2026:2782", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "nodejs-full-i18n", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:22.22.0-1.module+el9.7.0+23896+b5802de9", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "0q4mJ3RDNOZ/qRqKXOz7Tg==": { "id": "0q4mJ3RDNOZ/qRqKXOz7Tg==", "updater": "rhel-vex", "name": "CVE-2026-48864", "description": "A flaw was found in libsolv. This heap buffer overflow occurs during the decompression of attacker-controlled compressed data within `.solv` files due to insufficient input validation. An attacker can provide a specially crafted `.solv` file, which, when processed by a vulnerable application, can lead to out-of-bounds memory access. This could result in information disclosure, alteration of program execution, or a denial of service.", "issued": "2026-05-26T16:07:55Z", "links": "https://access.redhat.com/security/cve/CVE-2026-48864 https://bugzilla.redhat.com/show_bug.cgi?id=2460425 https://www.cve.org/CVERecord?id=CVE-2026-48864 https://nvd.nist.gov/vuln/detail/CVE-2026-48864 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-48864.json https://access.redhat.com/errata/RHSA-2026:39315", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "libsolv", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:0.7.24-6.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "0rfFR2EPlCkjUqAxx57NoA==": { "id": "0rfFR2EPlCkjUqAxx57NoA==", "updater": "rhel-vex", "name": "CVE-2026-6477", "description": "A flaw was found in PostgreSQL libpq. A server superuser can exploit a buffer overflow vulnerability in the PQfn function, which is used by client functions such as lo_export(), lo_read(), lo_lseek64(), and lo_tell64(). This allows the superuser to send an arbitrarily large response, overwriting the client's stack memory, specifically in tools like psql and pg_dump. This could lead to arbitrary code execution on the client system.", "issued": "2026-05-14T13:00:12Z", "links": "https://access.redhat.com/security/cve/CVE-2026-6477 https://bugzilla.redhat.com/show_bug.cgi?id=2477442 https://www.cve.org/CVERecord?id=CVE-2026-6477 https://nvd.nist.gov/vuln/detail/CVE-2026-6477 https://www.postgresql.org/support/security/CVE-2026-6477/ https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6477.json https://access.redhat.com/errata/RHSA-2026:44308", "severity": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H", "normalized_severity": "High", "package": { "id": "", "name": "libpq-devel", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "0:13.23-3.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "0u4nnKNMeZ58/8R+sWLPSQ==": { "id": "0u4nnKNMeZ58/8R+sWLPSQ==", "updater": "rhel-vex", "name": "CVE-2026-48928", "description": "A flaw was found in Node.js. An inconsistency in how Node.js matches hostnames can be exploited by a remote attacker in multi-context mTLS (mutual Transport Layer Security) setups. This vulnerability allows for a trust-policy bypass, potentially leading to unauthorized access to sensitive information or integrity compromise within the affected system.", "issued": "2026-06-26T01:14:36Z", "links": "https://access.redhat.com/security/cve/CVE-2026-48928 https://bugzilla.redhat.com/show_bug.cgi?id=2493333 https://www.cve.org/CVERecord?id=CVE-2026-48928 https://nvd.nist.gov/vuln/detail/CVE-2026-48928 https://nodejs.org/en/blog/vulnerability/june-2026-security-releases https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-48928.json https://access.redhat.com/errata/RHSA-2026:35892", "severity": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N", "normalized_severity": "Medium", "package": { "id": "", "name": "nodejs-full-i18n", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:22.23.1-1.module+el9.8.0+24457+996af7aa", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "0v5F4x1W0RxkklLvRs6NKQ==": { "id": "0v5F4x1W0RxkklLvRs6NKQ==", "updater": "rhel-vex", "name": "CVE-2023-0433", "description": "Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1225.", "issued": "2023-01-21T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2023-0433 https://bugzilla.redhat.com/show_bug.cgi?id=2163612 https://www.cve.org/CVERecord?id=CVE-2023-0433 https://nvd.nist.gov/vuln/detail/CVE-2023-0433 https://huntr.dev/bounties/ae933869-a1ec-402a-bbea-d51764c6618e/ https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-0433.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "vim", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "14Ky/IzCleKAYRnLtZIRFw==": { "id": "14Ky/IzCleKAYRnLtZIRFw==", "updater": "rhel-vex", "name": "CVE-2026-4046", "description": "A flaw was found in glibc, the GNU C Library. A remote attacker could exploit this vulnerability by providing specially crafted inputs using the IBM1390 or IBM1399 character sets to the `iconv()` function. This could lead to an assertion failure, causing the application to crash and resulting in a Denial of Service (DoS).", "issued": "2026-03-30T17:16:11Z", "links": "https://access.redhat.com/security/cve/CVE-2026-4046 https://bugzilla.redhat.com/show_bug.cgi?id=2453117 https://www.cve.org/CVERecord?id=CVE-2026-4046 https://nvd.nist.gov/vuln/detail/CVE-2026-4046 https://packages.fedoraproject.org/pkgs/glibc/glibc-gconv-extra/ https://sourceware.org/bugzilla/show_bug.cgi?id=33980 https://sourceware.org/git/?p=glibc.git;a=blob_plain;f=advisories/GLIBC-SA-2026-0007;hb=HEAD https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-4046.json https://access.redhat.com/errata/RHSA-2026:20597", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "normalized_severity": "Medium", "package": { "id": "", "name": "glibc-gconv-extra", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:2.34-270.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "19Kvl4LS7MCiBo2cRD5fxQ==": { "id": "19Kvl4LS7MCiBo2cRD5fxQ==", "updater": "rhel-vex", "name": "CVE-2021-3974", "description": "A flaw was found in vim. A possible use-after-free vulnerability could allow an attacker to input a specially crafted file leading to a crash or code execution. The highest threat from this vulnerability is to system availability.", "issued": "2021-11-19T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2021-3974 https://bugzilla.redhat.com/show_bug.cgi?id=2025061 https://www.cve.org/CVERecord?id=CVE-2021-3974 https://nvd.nist.gov/vuln/detail/CVE-2021-3974 https://security.access.redhat.com/data/csaf/v2/vex/2021/cve-2021-3974.json", "severity": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L", "normalized_severity": "Low", "package": { "id": "", "name": "vim", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "1CCABRgs/s9xxQcDgxw00A==": { "id": "1CCABRgs/s9xxQcDgxw00A==", "updater": "rhel-vex", "name": "CVE-2025-69645", "description": "A flaw was found in binutils, specifically in the `objdump` utility. A local attacker can exploit this vulnerability by providing a specially crafted binary file containing malformed DWARF (Debugging With Attributed Record Formats) debug information. This can lead to a logic error during the processing of DWARF compilation units, causing the `objdump` utility to crash and resulting in a denial of service.", "issued": "2026-03-06T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2025-69645 https://bugzilla.redhat.com/show_bug.cgi?id=2445261 https://www.cve.org/CVERecord?id=CVE-2025-69645 https://nvd.nist.gov/vuln/detail/CVE-2025-69645 https://sourceware.org/bugzilla/show_bug.cgi?id=33637 https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=cdb728d4da6184631989b192f1022c219dea7677 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-69645.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L", "normalized_severity": "Low", "package": { "id": "", "name": "binutils", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "1I5Zdk3zr6CO9kf+WEea4Q==": { "id": "1I5Zdk3zr6CO9kf+WEea4Q==", "updater": "rhel-vex", "name": "CVE-2026-5450", "description": "A flaw was found in glibc (GNU C Library). This vulnerability occurs when an application uses the `scanf` family of functions with a `%mc` format specifier, which is used for dynamically allocating memory for character input, and provides an explicit width greater than 1024. This specific combination can lead to a one-byte heap buffer overflow, potentially allowing an attacker to corrupt memory.", "issued": "2026-04-20T20:55:41Z", "links": "https://access.redhat.com/security/cve/CVE-2026-5450 https://bugzilla.redhat.com/show_bug.cgi?id=2459853 https://www.cve.org/CVERecord?id=CVE-2026-5450 https://nvd.nist.gov/vuln/detail/CVE-2026-5450 https://inbox.sourceware.org/libc-announce/b11f0003-6ec1-4bd6-b9de-9e38a4efeca3@redhat.com/T/#u https://nvd.nist.gov/vuln/detail/CVE-2026-5450#range-21286997 https://sourceware.org/bugzilla/show_bug.cgi?id=CVE-2026-5450 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-5450.json https://access.redhat.com/errata/RHSA-2026:33226", "severity": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "glibc-common", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:2.34-272.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "1NSoxvCfCFl4ic84FsWulA==": { "id": "1NSoxvCfCFl4ic84FsWulA==", "updater": "rhel-vex", "name": "CVE-2026-6100", "description": "A flaw was found in Python's decompression modules, including `lzma.LZMADecompressor`, `bz2.BZ2Decompressor`, and `gzip.GzipFile`. This vulnerability, a use-after-free, can occur if a program attempts to re-use a decompression object after a memory allocation error, especially when the system is experiencing high memory usage. Exploitation of this flaw could potentially allow an attacker to execute arbitrary code or access sensitive data. The vulnerability is only present if the program re-uses decompressor instances across multiple decompression calls even after a `MemoryError` is raised during decompression. Using the helper functions to one-shot decompress data such as `lzma.decompress()`, `bz2.decompress()`, `gzip.decompress()`, and `zlib.decompress()` are not affected as a new decompressor instance is used per call. If the decompressor instance is not re-used after an error condition, this usage is similarly not vulnerable.", "issued": "2026-04-13T17:15:47Z", "links": "https://access.redhat.com/security/cve/CVE-2026-6100 https://bugzilla.redhat.com/show_bug.cgi?id=2457932 https://www.cve.org/CVERecord?id=CVE-2026-6100 https://nvd.nist.gov/vuln/detail/CVE-2026-6100 https://github.com/python/cpython/commit/6a5f79c8d7bbf22b083b240910c7a8781a59437d https://github.com/python/cpython/commit/8fc66aef6d7b3ae58f43f5c66f9366cc8cbbfcd2 https://github.com/python/cpython/commit/c3cf71c3366fe49acb776a639405c0eea6169c20 https://github.com/python/cpython/issues/148395 https://github.com/python/cpython/pull/148396 https://mail.python.org/archives/list/security-announce@python.org/thread/HTWB2Z6KT5QQX4RYEZAFININDHNOSIF3/ https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6100.json https://access.redhat.com/errata/RHSA-2026:19216", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "normalized_severity": "High", "package": { "id": "", "name": "python3-libs", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:3.9.25-7.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "1PA9NgR35/MRqgXqIHuktA==": { "id": "1PA9NgR35/MRqgXqIHuktA==", "updater": "rhel-vex", "name": "CVE-2026-33416", "description": "A flaw was found in libpng, a library used for processing PNG (Portable Network Graphics) image files. This vulnerability arises from improper memory management where a heap-allocated buffer is aliased between internal data structures. When specific functions are called, a freed memory region can still be referenced, leading to a use-after-free condition. An attacker could potentially exploit this to achieve arbitrary code execution or cause a denial of service.", "issued": "2026-03-26T16:48:54Z", "links": "https://access.redhat.com/security/cve/CVE-2026-33416 https://bugzilla.redhat.com/show_bug.cgi?id=2451805 https://www.cve.org/CVERecord?id=CVE-2026-33416 https://nvd.nist.gov/vuln/detail/CVE-2026-33416 https://github.com/pnggroup/libpng/commit/23019269764e35ed8458e517f1897bd3c54820eb https://github.com/pnggroup/libpng/commit/7ea9eea884a2328cc7fdcb3c0c00246a50d90667 https://github.com/pnggroup/libpng/commit/a3a21443ed12bfa1ef46fa0d4fb2b74a0fa34a25 https://github.com/pnggroup/libpng/commit/c1b0318b393c90679e6fa5bc1d329fd5d5012ec1 https://github.com/pnggroup/libpng/pull/824 https://github.com/pnggroup/libpng/security/advisories/GHSA-m4pc-p4q3-4c7j https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33416.json https://access.redhat.com/errata/RHSA-2026:18028", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "libpng", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "2:1.6.37-12.el9_7.4", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "1WQ/LJu/kefEuHRv58l0Lw==": { "id": "1WQ/LJu/kefEuHRv58l0Lw==", "updater": "rhel-vex", "name": "CVE-2023-4734", "description": "Integer Overflow or Wraparound in GitHub repository vim/vim prior to 9.0.1846.", "issued": "2023-09-02T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2023-4734 https://bugzilla.redhat.com/show_bug.cgi?id=2237161 https://www.cve.org/CVERecord?id=CVE-2023-4734 https://nvd.nist.gov/vuln/detail/CVE-2023-4734 https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-4734.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "vim", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "1WaijHYxan9df8+fB0SQJQ==": { "id": "1WaijHYxan9df8+fB0SQJQ==", "updater": "rhel-vex", "name": "CVE-2026-43620", "description": "A flaw was found in rsync. A malicious rsync server can exploit an out-of-bounds read vulnerability in the `recv_files()` function. By manipulating compatibility flags and transfer records, the server can cause a connecting client to attempt to read memory outside of allocated bounds. This can lead to a segmentation fault, resulting in a denial of service for the client.", "issued": "2026-05-20T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-43620 https://bugzilla.redhat.com/show_bug.cgi?id=2469057 https://www.cve.org/CVERecord?id=CVE-2026-43620 https://nvd.nist.gov/vuln/detail/CVE-2026-43620 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-43620.json", "severity": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "rsync", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "1cSKTg9cjDeVqfRjC+3dyA==": { "id": "1cSKTg9cjDeVqfRjC+3dyA==", "updater": "rhel-vex", "name": "CVE-2025-59466", "description": "A stack overflow flaw has been discovered in Node.js error handling where \"Maximum call stack size exceeded\" errors become uncatchable when `async_hooks.createHook()` is enabled. Instead of reaching `process.on('uncaughtException')`, the process terminates, making the crash unrecoverable. Applications that rely on `AsyncLocalStorage` (v22, v20) or `async_hooks.createHook()` (v24, v22, v20) become vulnerable to denial-of-service crashes triggered by deep recursion under specific conditions.", "issued": "2026-01-20T20:41:55Z", "links": "https://access.redhat.com/security/cve/CVE-2025-59466 https://bugzilla.redhat.com/show_bug.cgi?id=2431343 https://www.cve.org/CVERecord?id=CVE-2025-59466 https://nvd.nist.gov/vuln/detail/CVE-2025-59466 https://nodejs.org/en/blog/vulnerability/december-2025-security-releases https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-59466.json https://access.redhat.com/errata/RHSA-2026:2782", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "npm", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:10.9.4-1.22.22.0.1.module+el9.7.0+23896+b5802de9", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "1cpz1Hzz2hsR9fx5YrxP3g==": { "id": "1cpz1Hzz2hsR9fx5YrxP3g==", "updater": "rhel-vex", "name": "CVE-2025-6176", "description": "Scrapy are vulnerable to a denial of service (DoS) attack due to a flaw in its brotli decompression implementation. The protection mechanism against decompression bombs fails to mitigate the brotli variant, allowing remote servers to crash clients with less than 80GB of available memory. This occurs because brotli can achieve extremely high compression ratios for zero-filled data, leading to excessive memory consumption during decompression.", "issued": "2025-10-31T00:00:21Z", "links": "https://access.redhat.com/security/cve/CVE-2025-6176 https://bugzilla.redhat.com/show_bug.cgi?id=2408762 https://www.cve.org/CVERecord?id=CVE-2025-6176 https://nvd.nist.gov/vuln/detail/CVE-2025-6176 https://huntr.com/bounties/2c26a886-5984-47ee-a421-0d5fe1344eb0 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-6176.json https://access.redhat.com/errata/RHSA-2026:2042", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "High", "package": { "id": "", "name": "brotli-devel", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "0:1.0.9-9.el9_7", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "1geoBO6lBMXVRM+dfApwgw==": { "id": "1geoBO6lBMXVRM+dfApwgw==", "updater": "rhel-vex", "name": "CVE-2026-32776", "description": "A flaw was found in libexpat. A remote attacker could exploit this vulnerability by providing specially crafted XML content with empty external parameter entities. This could lead to a NULL pointer dereference, causing the application to crash and resulting in a Denial of Service (DoS).", "issued": "2026-03-16T06:54:20Z", "links": "https://access.redhat.com/security/cve/CVE-2026-32776 https://bugzilla.redhat.com/show_bug.cgi?id=2447888 https://www.cve.org/CVERecord?id=CVE-2026-32776 https://nvd.nist.gov/vuln/detail/CVE-2026-32776 https://github.com/libexpat/libexpat/pull/1158 https://github.com/libexpat/libexpat/pull/1159 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-32776.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "expat", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "1npmxgSnoYj2MyAhQMaE7g==": { "id": "1npmxgSnoYj2MyAhQMaE7g==", "updater": "rhel-vex", "name": "CVE-2026-27171", "description": "A flaw was found in zlib. An attacker providing specially crafted input to the `crc32_combine64` or `crc32_combine_gen64` functions could trigger an infinite loop within the `x2nmodp` function. This leads to excessive CPU consumption, which can result in a Denial of Service (DoS) for the affected system.", "issued": "2026-02-18T02:36:19Z", "links": "https://access.redhat.com/security/cve/CVE-2026-27171 https://bugzilla.redhat.com/show_bug.cgi?id=2440530 https://www.cve.org/CVERecord?id=CVE-2026-27171 https://nvd.nist.gov/vuln/detail/CVE-2026-27171 https://7asecurity.com/blog/2026/02/zlib-7asecurity-audit/ https://7asecurity.com/reports/pentest-report-zlib-RC1.1.pdf https://github.com/madler/zlib/issues/904 https://github.com/madler/zlib/releases/tag/v1.3.2 https://ostif.org/zlib-audit-complete/ https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-27171.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L", "normalized_severity": "Low", "package": { "id": "", "name": "zlib", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "1r+syFhyATToDtkOkMLqDw==": { "id": "1r+syFhyATToDtkOkMLqDw==", "updater": "rhel-vex", "name": "CVE-2026-48930", "description": "A flaw was found in Node.js. This vulnerability in the TLS (Transport Layer Security) hostname handling allows embedded null characters in hostnames. This can lead to silent authority rebinding, potentially enabling an attacker to redirect network traffic to an unintended server and disclose sensitive information.", "issued": "2026-06-26T01:14:37Z", "links": "https://access.redhat.com/security/cve/CVE-2026-48930 https://bugzilla.redhat.com/show_bug.cgi?id=2493326 https://www.cve.org/CVERecord?id=CVE-2026-48930 https://nvd.nist.gov/vuln/detail/CVE-2026-48930 https://github.com/nodejs/node/commit/7dafafa2424710ded8b77eb7c878e884c1aef64e https://hackerone.com/reports/3656716 https://nodejs.org/en/blog/vulnerability/june-2026-security-releases https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-48930.json https://access.redhat.com/errata/RHSA-2026:35892", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L", "normalized_severity": "Medium", "package": { "id": "", "name": "nodejs-full-i18n", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:22.23.1-1.module+el9.8.0+24457+996af7aa", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "1w+glHHFE32ql3XJuIAYWQ==": { "id": "1w+glHHFE32ql3XJuIAYWQ==", "updater": "rhel-vex", "name": "CVE-2025-66862", "description": "A flaw was found in binutils. Processing a specially crafted PE file with cxxfilt can trigger a heap-based buffer over-read in the gnu_special function in the cplus-dem.c file, causing a crash and resulting in a denial of service.", "issued": "2025-12-29T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2025-66862 https://bugzilla.redhat.com/show_bug.cgi?id=2425825 https://www.cve.org/CVERecord?id=CVE-2025-66862 https://nvd.nist.gov/vuln/detail/CVE-2025-66862 https://github.com/caozhzh/CRGF-Vul/blob/main/cxxfilt/crash3.md https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-66862.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "normalized_severity": "Low", "package": { "id": "", "name": "binutils", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "269Lb6JhyjdTwif2gzpsMQ==": { "id": "269Lb6JhyjdTwif2gzpsMQ==", "updater": "rhel-vex", "name": "CVE-2025-69418", "description": "A flaw was found in OpenSSL. When applications directly call the low-level CRYPTO_ocb128_encrypt() or CRYPTO_ocb128_decrypt() functions with non-block-aligned lengths in a single call on hardware-accelerated builds, the trailing 1-15 bytes of a message may be exposed in cleartext. These exposed bytes are not covered by the authentication tag, allowing an attacker to read or tamper with them without detection.", "issued": "2026-01-27T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2025-69418 https://bugzilla.redhat.com/show_bug.cgi?id=2430381 https://www.cve.org/CVERecord?id=CVE-2025-69418 https://nvd.nist.gov/vuln/detail/CVE-2025-69418 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-69418.json https://access.redhat.com/errata/RHSA-2026:1473", "severity": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N", "normalized_severity": "Low", "package": { "id": "", "name": "openssl-devel", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:3.5.1-7.el9_7", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "2Apbu80O6R41VOd2ICqODw==": { "id": "2Apbu80O6R41VOd2ICqODw==", "updater": "rhel-vex", "name": "CVE-2026-9076", "description": "A flaw was found in OpenSSL. When processing attacker-supplied Cryptographic Message Syntax (CMS) data using password-based decryption, an attacker can choose a stream-mode Key Encryption Key (KEK) cipher. This can trigger a heap out-of-bounds read, potentially causing an application crash and leading to a Denial of Service (DoS). This vulnerability does not require password knowledge and can be exploited before authentication.", "issued": "2026-06-09T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-9076 https://bugzilla.redhat.com/show_bug.cgi?id=2481880 https://www.cve.org/CVERecord?id=CVE-2026-9076 https://nvd.nist.gov/vuln/detail/CVE-2026-9076 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-9076.json https://access.redhat.com/errata/RHSA-2026:25239", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "openssl", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "1:3.5.5-4.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "2BvFtePbGxsdaSFZvYiVWQ==": { "id": "2BvFtePbGxsdaSFZvYiVWQ==", "updater": "rhel-vex", "name": "CVE-2026-6238", "description": "A flaw was found in glibc (GNU C Library). The deprecated functions ns_printrrf, ns_printrr, and fp_nquery do not properly validate the length of RDATA (Resource Record Data) in a DNS (Domain Name System) response when processing specific record types like LOC, CERT, TKEY, or TSIG. A remote attacker could craft a malicious DNS response, leading to a target application crashing or reading uninitialized memory. These functions are intended for application debugging and are not part of the standard DNS resolver path.", "issued": "2026-04-28T16:43:08Z", "links": "https://access.redhat.com/security/cve/CVE-2026-6238 https://bugzilla.redhat.com/show_bug.cgi?id=2463539 https://www.cve.org/CVERecord?id=CVE-2026-6238 https://nvd.nist.gov/vuln/detail/CVE-2026-6238 https://inbox.sourceware.org/libc-announce/7a655d55-276f-41fe-b550-feb3ebb2ce91@redhat.com/T/#u https://sourceware.org/bugzilla/show_bug.cgi?id=34069 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6238.json https://access.redhat.com/errata/RHSA-2026:42952", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "glibc-langpack-en", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:2.34-274.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "2Cyt+PunG/cjJJ5UZqrqrg==": { "id": "2Cyt+PunG/cjJJ5UZqrqrg==", "updater": "rhel-vex", "name": "CVE-2026-1299", "description": "A flaw was found in the email module in the Python standard library. When serializing an email message, the BytesGenerator class fails to properly quote newline characters for email headers. This issue is exploitable when the LiteralHeader class is used as it does not respect email folding rules, allowing an attacker to inject email headers and potentially modify message recipients or the email body, and spoof sender information.", "issued": "2026-01-23T16:27:13Z", "links": "https://access.redhat.com/security/cve/CVE-2026-1299 https://bugzilla.redhat.com/show_bug.cgi?id=2432437 https://www.cve.org/CVERecord?id=CVE-2026-1299 https://nvd.nist.gov/vuln/detail/CVE-2026-1299 https://cve.org/CVERecord?id=CVE-2024-6923 https://github.com/python/cpython/commit/052e55e7d44718fe46cbba0ca995cb8fcc359413 https://github.com/python/cpython/issues/144125 https://github.com/python/cpython/pull/144126 https://mail.python.org/archives/list/security-announce@python.org/thread/6ZZULGALJTITEAGEXLDJE2C6FORDXPBT/ https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-1299.json https://access.redhat.com/errata/RHSA-2026:4168", "severity": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N", "normalized_severity": "Medium", "package": { "id": "", "name": "python3", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:3.9.25-3.el9_7.1", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "2EHc3aND0ui/TYRnIdJ/WA==": { "id": "2EHc3aND0ui/TYRnIdJ/WA==", "updater": "rhel-vex", "name": "CVE-2025-24294", "description": "A denial of service flaw was found in resolv ruby gem. This flaw allows an attacker to craft a malicious DNS packet containing a highly compressed domain name. When the resolv library parses this packet, the name decompression process consumes a large amount of CPU resources, as the library does not limit the resulting length of the name.", "issued": "2025-07-12T03:30:40Z", "links": "https://access.redhat.com/security/cve/CVE-2025-24294 https://bugzilla.redhat.com/show_bug.cgi?id=2379684 https://www.cve.org/CVERecord?id=CVE-2025-24294 https://nvd.nist.gov/vuln/detail/CVE-2025-24294 https://www.ruby-lang.org/en/news/2025/07/08/dos-resolv-cve-2025-24294/ https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-24294.json https://access.redhat.com/errata/RHSA-2025:23063", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "normalized_severity": "Medium", "package": { "id": "", "name": "rubygem-psych", "version": "", "kind": "binary", "normalized_version": "", "module": "ruby:3.3", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "0:5.1.2-5.module+el9.7.0+23651+15dc1615", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "2F6XtsAYpNWm5w+Rwl/tuQ==": { "id": "2F6XtsAYpNWm5w+Rwl/tuQ==", "updater": "rhel-vex", "name": "CVE-2026-57062", "description": "A flaw in GnuPG's gpgsm component improperly handles the Cryptographic Message Syntax (CMS) format for AES-GCM. By accepting an authentication tag length of 4 bytes instead of the required 12 bytes, this vulnerability allows for a low-impact data integrity issue where the cryptographic validity of messages could be compromised.", "issued": "2026-06-23T17:26:25Z", "links": "https://access.redhat.com/security/cve/CVE-2026-57062 https://bugzilla.redhat.com/show_bug.cgi?id=2491859 https://www.cve.org/CVERecord?id=CVE-2026-57062 https://nvd.nist.gov/vuln/detail/CVE-2026-57062 https://blog.calif.io/p/how-to-format-a-ciphertext https://www.gnupg.org/download/ https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-57062.json", "severity": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N", "normalized_severity": "Low", "package": { "id": "", "name": "gnupg2", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "2I/0B+uXhxpPJWXGwNGlLw==": { "id": "2I/0B+uXhxpPJWXGwNGlLw==", "updater": "rhel-vex", "name": "CVE-2023-5344", "description": "A heap-based buffer overflow vulnerability was found in Vim's trunc_string() function of the src/message.c file. This flaw allows an attacker to trick a user into opening a specially crafted file, triggering a heap-based buffer overflow that causes an application to crash, leading to a denial of service.", "issued": "2023-10-02T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2023-5344 https://bugzilla.redhat.com/show_bug.cgi?id=2242141 https://www.cve.org/CVERecord?id=CVE-2023-5344 https://nvd.nist.gov/vuln/detail/CVE-2023-5344 https://huntr.dev/bounties/530cb762-899e-48d7-b50e-dad09eb775bf/ https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-5344.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L", "normalized_severity": "Low", "package": { "id": "", "name": "vim", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "2Jpm8Zc5oiON+VhscwC/4w==": { "id": "2Jpm8Zc5oiON+VhscwC/4w==", "updater": "rhel-vex", "name": "CVE-2025-15469", "description": "A flaw was found in openssl. When a user signs or verifies files larger than 16MB using the `openssl dgst` command with one-shot algorithms, the tool silently truncates the input to 16MB. This creates an integrity gap, allowing trailing data beyond the initial 16MB to be modified without detection because it remains unauthenticated. This vulnerability primarily impacts workflows that both sign and verify files using the affected `openssl dgst` command.", "issued": "2026-01-27T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2025-15469 https://bugzilla.redhat.com/show_bug.cgi?id=2430378 https://www.cve.org/CVERecord?id=CVE-2025-15469 https://nvd.nist.gov/vuln/detail/CVE-2025-15469 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-15469.json https://access.redhat.com/errata/RHSA-2026:1473", "severity": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N", "normalized_severity": "Low", "package": { "id": "", "name": "openssl-devel", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:3.5.1-7.el9_7", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "2No3jCnnmCwOEpCbk+TZGA==": { "id": "2No3jCnnmCwOEpCbk+TZGA==", "updater": "rhel-vex", "name": "CVE-2026-25646", "description": "A heap based buffer overflow flaw has been discovered in LibPNG. Prior to version 1.6.55, an out-of-bounds read vulnerability exists in the png_set_quantize() API function. When the function is called with no histogram and the number of colors in the palette is more than twice the maximum supported by the user's display, certain palettes will cause the function to enter into an infinite loop that reads past the end of an internal heap-allocated buffer. The images that trigger this vulnerability are valid per the PNG specification.", "issued": "2026-02-10T17:04:38Z", "links": "https://access.redhat.com/security/cve/CVE-2026-25646 https://bugzilla.redhat.com/show_bug.cgi?id=2438542 https://www.cve.org/CVERecord?id=CVE-2026-25646 https://nvd.nist.gov/vuln/detail/CVE-2026-25646 http://www.openwall.com/lists/oss-security/2026/02/09/7 https://github.com/pnggroup/libpng/commit/01d03b8453eb30ade759cd45c707e5a1c7277d88 https://github.com/pnggroup/libpng/security/advisories/GHSA-g8hp-mq4h-rqm3 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-25646.json https://access.redhat.com/errata/RHSA-2026:3405", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H", "normalized_severity": "High", "package": { "id": "", "name": "libpng-devel", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "2:1.6.37-12.el9_7.2", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "2RZ3u6UmceVG9iB/xb73SA==": { "id": "2RZ3u6UmceVG9iB/xb73SA==", "updater": "rhel-vex", "name": "CVE-2022-2206", "description": "Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.", "issued": "2022-06-26T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2022-2206 https://bugzilla.redhat.com/show_bug.cgi?id=2102188 https://www.cve.org/CVERecord?id=CVE-2022-2206 https://nvd.nist.gov/vuln/detail/CVE-2022-2206 https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-2206.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "vim", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "2TDjlt2gAEWsLyBBPigFYw==": { "id": "2TDjlt2gAEWsLyBBPigFYw==", "updater": "rhel-vex", "name": "CVE-2024-13176", "description": "A timing side-channel vulnerability was found in OpenSSL. This vulnerability allows an attacker to recover the private key. However, measuring the timing would require local access to the signing application or a fast network connection with low latency. There is a timing signal of around 300 nanoseconds when the top word of the inverted ECDSA nonce value is zero. This issue can happen with significant probability only for some of the supported elliptic curves. In particular, the NIST P-521 curve is affected.", "issued": "2025-01-20T13:29:57Z", "links": "https://access.redhat.com/security/cve/CVE-2024-13176 https://bugzilla.redhat.com/show_bug.cgi?id=2338999 https://www.cve.org/CVERecord?id=CVE-2024-13176 https://nvd.nist.gov/vuln/detail/CVE-2024-13176 https://www.oracle.com/security-alerts/cpuapr2025.html#AppendixMSQL https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-13176.json", "severity": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N", "normalized_severity": "Low", "package": { "id": "", "name": "openssl", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "2UHqEqfMIIn53NkDlDEppQ==": { "id": "2UHqEqfMIIn53NkDlDEppQ==", "updater": "rhel-vex", "name": "CVE-2022-2923", "description": "A flaw was found in vim, where it is vulnerable to a NULL pointer dereference in the sug_filltree function. This flaw allows a specially crafted file to crash the software.", "issued": "2022-08-22T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2022-2923 https://bugzilla.redhat.com/show_bug.cgi?id=2120989 https://www.cve.org/CVERecord?id=CVE-2022-2923 https://nvd.nist.gov/vuln/detail/CVE-2022-2923 https://huntr.dev/bounties/fd3a3ab8-ab0f-452f-afea-8c613e283fd2 https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-2923.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "vim", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "2Yo5V5wVVXhJ0VU+H57P9g==": { "id": "2Yo5V5wVVXhJ0VU+H57P9g==", "updater": "rhel-vex", "name": "CVE-2026-1299", "description": "A flaw was found in the email module in the Python standard library. When serializing an email message, the BytesGenerator class fails to properly quote newline characters for email headers. This issue is exploitable when the LiteralHeader class is used as it does not respect email folding rules, allowing an attacker to inject email headers and potentially modify message recipients or the email body, and spoof sender information.", "issued": "2026-01-23T16:27:13Z", "links": "https://access.redhat.com/security/cve/CVE-2026-1299 https://bugzilla.redhat.com/show_bug.cgi?id=2432437 https://www.cve.org/CVERecord?id=CVE-2026-1299 https://nvd.nist.gov/vuln/detail/CVE-2026-1299 https://cve.org/CVERecord?id=CVE-2024-6923 https://github.com/python/cpython/commit/052e55e7d44718fe46cbba0ca995cb8fcc359413 https://github.com/python/cpython/issues/144125 https://github.com/python/cpython/pull/144126 https://mail.python.org/archives/list/security-announce@python.org/thread/6ZZULGALJTITEAGEXLDJE2C6FORDXPBT/ https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-1299.json https://access.redhat.com/errata/RHSA-2026:4168", "severity": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N", "normalized_severity": "Medium", "package": { "id": "", "name": "python3-libs", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:3.9.25-3.el9_7.1", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "2d2KejA0Nrz6tVNnB1dB5A==": { "id": "2d2KejA0Nrz6tVNnB1dB5A==", "updater": "rhel-vex", "name": "CVE-2025-59466", "description": "A stack overflow flaw has been discovered in Node.js error handling where \"Maximum call stack size exceeded\" errors become uncatchable when `async_hooks.createHook()` is enabled. Instead of reaching `process.on('uncaughtException')`, the process terminates, making the crash unrecoverable. Applications that rely on `AsyncLocalStorage` (v22, v20) or `async_hooks.createHook()` (v24, v22, v20) become vulnerable to denial-of-service crashes triggered by deep recursion under specific conditions.", "issued": "2026-01-20T20:41:55Z", "links": "https://access.redhat.com/security/cve/CVE-2025-59466 https://bugzilla.redhat.com/show_bug.cgi?id=2431343 https://www.cve.org/CVERecord?id=CVE-2025-59466 https://nvd.nist.gov/vuln/detail/CVE-2025-59466 https://nodejs.org/en/blog/vulnerability/december-2025-security-releases https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-59466.json https://access.redhat.com/errata/RHSA-2026:2782", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "nodejs", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "aarch64|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:22.22.0-1.module+el9.7.0+23896+b5802de9", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "2eh/JThmMghcGbhP7jHOJw==": { "id": "2eh/JThmMghcGbhP7jHOJw==", "updater": "rhel-vex", "name": "CVE-2026-31790", "description": "A flaw was found in openssl. Applications that use RSASVE key encapsulation, a method for securely exchanging encryption keys, may inadvertently expose sensitive data. This vulnerability arises when an application processes a malicious, invalid RSA public key provided by an attacker without proper validation. Consequently, the application might send the contents of an uninitialized memory buffer, which could contain confidential information, to the attacker.", "issued": "2026-04-07T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-31790 https://bugzilla.redhat.com/show_bug.cgi?id=2451094 https://www.cve.org/CVERecord?id=CVE-2026-31790 https://nvd.nist.gov/vuln/detail/CVE-2026-31790 https://openssl-library.org/news/secadv/20260407.txt https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-31790.json https://access.redhat.com/errata/RHSA-2026:27744", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "normalized_severity": "Medium", "package": { "id": "", "name": "openssl-fips-provider", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:3.0.7-11.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "2fFhV4f06vNDz4aMbkPOZA==": { "id": "2fFhV4f06vNDz4aMbkPOZA==", "updater": "rhel-vex", "name": "CVE-2026-28390", "description": "A flaw was found in OpenSSL. A remote attacker could exploit this vulnerability by sending a specially crafted Cryptographic Message Syntax (CMS) EnvelopedData message. During the processing of a KeyTransportRecipientInfo with RSA-OAEP encryption, the system attempts to access an optional parameter field without first verifying its presence. This leads to a NULL pointer dereference, which can cause applications processing the attacker-controlled CMS data to crash, resulting in a Denial of Service (DoS).", "issued": "2026-04-07T22:00:54Z", "links": "https://access.redhat.com/security/cve/CVE-2026-28390 https://bugzilla.redhat.com/show_bug.cgi?id=2456314 https://www.cve.org/CVERecord?id=CVE-2026-28390 https://nvd.nist.gov/vuln/detail/CVE-2026-28390 https://github.com/openssl/openssl/commit/01194a8f1941115cd0383bfa91c736dd3993c8bc https://github.com/openssl/openssl/commit/2e39b7a6993be445fddb9fbce316fa756e0397b6 https://github.com/openssl/openssl/commit/af2a5fecd3e71a29e7568f9c1453dec5cebbaff4 https://github.com/openssl/openssl/commit/ea7b4ea4f9f853521ba34830cbcadc970d2e0788 https://github.com/openssl/openssl/commit/fd2f1a6cf53b9ceeca723a001aa4b825d7c7ee75 https://openssl-library.org/news/secadv/20260407.txt https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-28390.json https://access.redhat.com/errata/RHSA-2026:22312", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "openssl-libs", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "1:3.5.5-3.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "2fxlvvJDIsNRRQuBzDD4oA==": { "id": "2fxlvvJDIsNRRQuBzDD4oA==", "updater": "rhel-vex", "name": "CVE-2026-43619", "description": "A flaw was found in rsync. A local attacker with filesystem access on the daemon host can exploit a symlink race vulnerability (CWE-367 Time-of-check to time-of-use) in rsync daemons configured with 'use chroot = no'. This allows the attacker to redirect path-based system calls, such as chmod, lchown, or unlink, outside the intended module. This could lead to unauthorized file operations or other security bypasses.", "issued": "2026-05-20T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-43619 https://bugzilla.redhat.com/show_bug.cgi?id=2469058 https://www.cve.org/CVERecord?id=CVE-2026-43619 https://nvd.nist.gov/vuln/detail/CVE-2026-43619 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-43619.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:L", "normalized_severity": "Medium", "package": { "id": "", "name": "rsync", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "2luu38jiVQvy6qOXHFgpAg==": { "id": "2luu38jiVQvy6qOXHFgpAg==", "updater": "rhel-vex", "name": "CVE-2022-2042", "description": "A heap use-after-free vulnerability was found in Vim's skipwhite() function of the src/charset.c file. This flaw occurs because of an uninitialized attribute value and freed memory in the spell command. This flaw allows an attacker to trick a user into opening a specially crafted file, triggering a heap use-after-free that causes an application to crash and corrupt memory.", "issued": "2022-06-10T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2022-2042 https://bugzilla.redhat.com/show_bug.cgi?id=2097768 https://www.cve.org/CVERecord?id=CVE-2022-2042 https://nvd.nist.gov/vuln/detail/CVE-2022-2042 https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-2042.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "vim", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "2sm08sXcjWtT2Gtu3CdSug==": { "id": "2sm08sXcjWtT2Gtu3CdSug==", "updater": "rhel-vex", "name": "CVE-2022-1725", "description": "A NULL pointer dereference vulnerability was found in Vim's vim_regexec_string() function of the src/regexp.c file. This flaw allows an attacker to trick a user into opening a specially crafted file, triggering a NULL pointer dereference that causes a denial of service.", "issued": "2022-09-29T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2022-1725 https://bugzilla.redhat.com/show_bug.cgi?id=2132561 https://www.cve.org/CVERecord?id=CVE-2022-1725 https://nvd.nist.gov/vuln/detail/CVE-2022-1725 https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-1725.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "vim", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "2w9brA/+oZ5OEdpav+Dkzw==": { "id": "2w9brA/+oZ5OEdpav+Dkzw==", "updater": "rhel-vex", "name": "CVE-2026-31790", "description": "A flaw was found in openssl. Applications that use RSASVE key encapsulation, a method for securely exchanging encryption keys, may inadvertently expose sensitive data. This vulnerability arises when an application processes a malicious, invalid RSA public key provided by an attacker without proper validation. Consequently, the application might send the contents of an uninitialized memory buffer, which could contain confidential information, to the attacker.", "issued": "2026-04-07T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-31790 https://bugzilla.redhat.com/show_bug.cgi?id=2451094 https://www.cve.org/CVERecord?id=CVE-2026-31790 https://nvd.nist.gov/vuln/detail/CVE-2026-31790 https://openssl-library.org/news/secadv/20260407.txt https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-31790.json https://access.redhat.com/errata/RHSA-2026:27744", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "normalized_severity": "Medium", "package": { "id": "", "name": "openssl-fips-provider-so", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:3.0.7-11.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "2wdtg9odVWp21dq/2MNviQ==": { "id": "2wdtg9odVWp21dq/2MNviQ==", "updater": "rhel-vex", "name": "CVE-2025-14512", "description": "A flaw was found in glib. This vulnerability allows a heap buffer overflow and denial-of-service (DoS) via an integer overflow in GLib's GIO (GLib Input/Output) escape_byte_string() function when processing malicious file or remote filesystem attribute values.", "issued": "2025-12-11T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2025-14512 https://bugzilla.redhat.com/show_bug.cgi?id=2421339 https://www.cve.org/CVERecord?id=CVE-2025-14512 https://nvd.nist.gov/vuln/detail/CVE-2025-14512 https://gitlab.gnome.org/GNOME/glib/-/issues/3845 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-14512.json https://access.redhat.com/errata/RHSA-2026:19361", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "glib2-devel", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "0:2.68.4-19.el9_8.1", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "3285RkL43CGSYbmius5+sg==": { "id": "3285RkL43CGSYbmius5+sg==", "updater": "rhel-vex", "name": "CVE-2026-45186", "description": "A flaw was found in libexpat. When processing a specially crafted XML input containing a specific pattern of attributes, the parsing time increases quadratically due to checks for attribute name collisions. This consumes excessive CPU resources and eventually results in a denial of service.", "issued": "2026-05-10T06:36:16Z", "links": "https://access.redhat.com/security/cve/CVE-2026-45186 https://bugzilla.redhat.com/show_bug.cgi?id=2468575 https://www.cve.org/CVERecord?id=CVE-2026-45186 https://nvd.nist.gov/vuln/detail/CVE-2026-45186 https://github.com/libexpat/libexpat/pull/1216 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-45186.json https://access.redhat.com/errata/RHSA-2026:23230", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "High", "package": { "id": "", "name": "expat", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:2.5.0-6.el9_8.1", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "352rQmt68kXSxd4G583XXA==": { "id": "352rQmt68kXSxd4G583XXA==", "updater": "rhel-vex", "name": "CVE-2026-42245", "description": "A flaw was found in Net::IMAP, a Ruby library implementing the Internet Message Access Protocol (IMAP) client functionality. A hostile server can exploit a quadratic time complexity issue in the `Net::IMAP::ResponseReader` when processing large responses containing numerous string literals. This can lead to the client's CPU being exhausted, resulting in a denial of service (DoS) attack.", "issued": "2026-05-09T19:37:08Z", "links": "https://access.redhat.com/security/cve/CVE-2026-42245 https://bugzilla.redhat.com/show_bug.cgi?id=2468495 https://www.cve.org/CVERecord?id=CVE-2026-42245 https://nvd.nist.gov/vuln/detail/CVE-2026-42245 https://github.com/ruby/net-imap/commit/6091f7d6b1f3514cafbfe39c76f2b5d73de3ca96 https://github.com/ruby/net-imap/commit/88d95231fc8afef11c1f074453f7d75b68c9dfda https://github.com/ruby/net-imap/commit/de685f91a4a4cc75eb80da898c2bf8af08d34819 https://github.com/ruby/net-imap/releases/tag/v0.4.24 https://github.com/ruby/net-imap/releases/tag/v0.5.14 https://github.com/ruby/net-imap/releases/tag/v0.6.4 https://github.com/ruby/net-imap/security/advisories/GHSA-q2mw-fvj9-vvcw https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42245.json https://access.redhat.com/errata/RHSA-2026:33576", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "rubygem-rdoc", "version": "", "kind": "binary", "normalized_version": "", "module": "ruby:3.3", "arch": "noarch", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "0:6.6.3.1-7.module+el9.8.0+24406+8975e57f", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "38nk80Avdc96iwBjm0zdqA==": { "id": "38nk80Avdc96iwBjm0zdqA==", "updater": "rhel-vex", "name": "CVE-2026-48930", "description": "A flaw was found in Node.js. This vulnerability in the TLS (Transport Layer Security) hostname handling allows embedded null characters in hostnames. This can lead to silent authority rebinding, potentially enabling an attacker to redirect network traffic to an unintended server and disclose sensitive information.", "issued": "2026-06-26T01:14:37Z", "links": "https://access.redhat.com/security/cve/CVE-2026-48930 https://bugzilla.redhat.com/show_bug.cgi?id=2493326 https://www.cve.org/CVERecord?id=CVE-2026-48930 https://nvd.nist.gov/vuln/detail/CVE-2026-48930 https://github.com/nodejs/node/commit/7dafafa2424710ded8b77eb7c878e884c1aef64e https://hackerone.com/reports/3656716 https://nodejs.org/en/blog/vulnerability/june-2026-security-releases https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-48930.json https://access.redhat.com/errata/RHSA-2026:35892", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L", "normalized_severity": "Medium", "package": { "id": "", "name": "nodejs-docs", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "noarch", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:22.23.1-1.module+el9.8.0+24457+996af7aa", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "3FpQibjt3OzhrwoSJ9I0Mg==": { "id": "3FpQibjt3OzhrwoSJ9I0Mg==", "updater": "rhel-vex", "name": "CVE-2025-4598", "description": "A vulnerability was found in systemd-coredump. This flaw allows an attacker to force a SUID process to crash and replace it with a non-SUID binary to access the original's privileged process coredump, allowing the attacker to read sensitive data, such as /etc/shadow content, loaded by the original process.\n\nA SUID binary or process has a special type of permission, which allows the process to run with the file owner's permissions, regardless of the user executing the binary. This allows the process to access more restricted data than unprivileged users or processes would be able to. An attacker can leverage this flaw by forcing a SUID process to crash and force the Linux kernel to recycle the process PID before systemd-coredump can analyze the /proc/pid/auxv file. If the attacker wins the race condition, they gain access to the original's SUID process coredump file. They can read sensitive content loaded into memory by the original binary, affecting data confidentiality.", "issued": "2025-05-29T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2025-4598 https://bugzilla.redhat.com/show_bug.cgi?id=2369242 https://www.cve.org/CVERecord?id=CVE-2025-4598 https://nvd.nist.gov/vuln/detail/CVE-2025-4598 https://www.openwall.com/lists/oss-security/2025/05/29/3 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-4598.json https://access.redhat.com/errata/RHSA-2025:22660", "severity": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N", "normalized_severity": "Medium", "package": { "id": "", "name": "systemd-pam", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:252-55.el9_7.7", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "3KVKKCxdWl+iCbo/o6cUCw==": { "id": "3KVKKCxdWl+iCbo/o6cUCw==", "updater": "rhel-vex", "name": "CVE-2025-61984", "description": "A flaw was found in OpenSSH where control characters in usernames were not properly validated when sourced from untrusted inputs like the command line or configuration expansion. If a ProxyCommand is used, these control characters could modify command behavior, potentially leading to code execution.", "issued": "2025-10-06T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2025-61984 https://bugzilla.redhat.com/show_bug.cgi?id=2401960 https://www.cve.org/CVERecord?id=CVE-2025-61984 https://nvd.nist.gov/vuln/detail/CVE-2025-61984 https://marc.info/?l=openssh-unix-dev\u0026m=175974522032149\u0026w=2 https://www.openssh.com/releasenotes.html#10.1p1 https://www.openwall.com/lists/oss-security/2025/10/06/1 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-61984.json https://access.redhat.com/errata/RHSA-2025:23480", "severity": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "normalized_severity": "Medium", "package": { "id": "", "name": "openssh", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:8.7p1-47.el9_7", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "3Lvdmj//2sze9S8I3n8yrw==": { "id": "3Lvdmj//2sze9S8I3n8yrw==", "updater": "rhel-vex", "name": "CVE-2023-0288", "description": "Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1189.", "issued": "2023-01-12T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2023-0288 https://bugzilla.redhat.com/show_bug.cgi?id=2163130 https://www.cve.org/CVERecord?id=CVE-2023-0288 https://nvd.nist.gov/vuln/detail/CVE-2023-0288 https://huntr.dev/bounties/5d389a18-5026-47df-a5d0-1548a9b555d5 https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-0288.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "vim", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "3R40oInfBrzPyywU8VZGOA==": { "id": "3R40oInfBrzPyywU8VZGOA==", "updater": "rhel-vex", "name": "CVE-2025-61985", "description": "A flaw was found in OpenSSH where the SSH client accepted \\0 (null) characters in ssh:// URIs. When a ProxyCommand is configured, these characters could alter how the command is parsed, potentially leading to code execution depending on how the proxy is set up.", "issued": "2025-10-06T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2025-61985 https://bugzilla.redhat.com/show_bug.cgi?id=2401962 https://www.cve.org/CVERecord?id=CVE-2025-61985 https://nvd.nist.gov/vuln/detail/CVE-2025-61985 https://marc.info/?l=openssh-unix-dev\u0026m=175974522032149\u0026w=2 https://www.openssh.com/releasenotes.html#10.1p1 https://www.openwall.com/lists/oss-security/2025/10/06/1 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-61985.json https://access.redhat.com/errata/RHSA-2025:23480", "severity": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "normalized_severity": "Medium", "package": { "id": "", "name": "openssh", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:8.7p1-47.el9_7", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "3UNcgW64Eji4iyY2ZDB1cg==": { "id": "3UNcgW64Eji4iyY2ZDB1cg==", "updater": "rhel-vex", "name": "CVE-2026-3783", "description": "A flaw was found in curl. When an OAuth2 bearer token is used for an HTTP(S) transfer that redirects to a second URL, curl could unintentionally leak the token. This occurs if the second hostname has entries in the `.netrc` file, allowing the bearer token intended for the first host to be sent to the redirected host. This information disclosure could allow an attacker to gain unauthorized access.", "issued": "2026-03-11T10:09:08Z", "links": "https://access.redhat.com/security/cve/CVE-2026-3783 https://bugzilla.redhat.com/show_bug.cgi?id=2446450 https://www.cve.org/CVERecord?id=CVE-2026-3783 https://nvd.nist.gov/vuln/detail/CVE-2026-3783 http://www.openwall.com/lists/oss-security/2026/03/11/2 https://curl.se/docs/CVE-2026-3783.html https://curl.se/docs/CVE-2026-3783.json https://hackerone.com/reports/3583983 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-3783.json", "severity": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N", "normalized_severity": "Medium", "package": { "id": "", "name": "curl", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "3WRC4Vl08/leTJ1MFHuCEg==": { "id": "3WRC4Vl08/leTJ1MFHuCEg==", "updater": "rhel-vex", "name": "CVE-2022-3297", "description": "A heap use-after-free vulnerability was found in Vim's process_next_cpt_value() function of the src/insexpand.c file. This flaw occurs due to the usage of freed memory when 'tagfunc' wipes out the buffer that holds 'complete.' This flaw allows an attacker to trick a user into opening a specially crafted file, triggering a heap use-after-free issue that causes an application to crash, possibly executing code and corrupting memory.", "issued": "2022-09-25T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2022-3297 https://bugzilla.redhat.com/show_bug.cgi?id=2129838 https://www.cve.org/CVERecord?id=CVE-2022-3297 https://nvd.nist.gov/vuln/detail/CVE-2022-3297 https://huntr.dev/bounties/1aa9ec92-0355-4710-bf85-5bce9effa01c https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-3297.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "vim", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "3khZTPo1sdTxnkTY+5ATQg==": { "id": "3khZTPo1sdTxnkTY+5ATQg==", "updater": "rhel-vex", "name": "CVE-2026-1528", "description": "A flaw was found in undici. A remote attacker could exploit this vulnerability by sending a specially crafted WebSocket frame with an extremely large 64-bit length. This causes undici's ByteParser to overflow its internal calculations, leading to an invalid state and a fatal TypeError. The primary consequence is a Denial of Service (DoS), which terminates the process.", "issued": "2026-03-12T20:21:57Z", "links": "https://access.redhat.com/security/cve/CVE-2026-1528 https://bugzilla.redhat.com/show_bug.cgi?id=2447145 https://www.cve.org/CVERecord?id=CVE-2026-1528 https://nvd.nist.gov/vuln/detail/CVE-2026-1528 https://cna.openjsf.org/security-advisories.html https://github.com/nodejs/undici/security/advisories/GHSA-f269-vfmq-vjvj https://hackerone.com/reports/3537648 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-1528.json https://access.redhat.com/errata/RHSA-2026:7302", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "High", "package": { "id": "", "name": "nodejs-libs", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:22.22.2-1.module+el9.7.0+24157+8ddb2461", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "3lmx9lr/AS2B0oQRtI5gOA==": { "id": "3lmx9lr/AS2B0oQRtI5gOA==", "updater": "rhel-vex", "name": "CVE-2026-9076", "description": "A flaw was found in OpenSSL. When processing attacker-supplied Cryptographic Message Syntax (CMS) data using password-based decryption, an attacker can choose a stream-mode Key Encryption Key (KEK) cipher. This can trigger a heap out-of-bounds read, potentially causing an application crash and leading to a Denial of Service (DoS). This vulnerability does not require password knowledge and can be exploited before authentication.", "issued": "2026-06-09T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-9076 https://bugzilla.redhat.com/show_bug.cgi?id=2481880 https://www.cve.org/CVERecord?id=CVE-2026-9076 https://nvd.nist.gov/vuln/detail/CVE-2026-9076 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-9076.json https://access.redhat.com/errata/RHSA-2026:25239", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "openssl-devel", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:3.5.5-4.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "3mM/O83kCBM7c1h3oioXHw==": { "id": "3mM/O83kCBM7c1h3oioXHw==", "updater": "rhel-vex", "name": "CVE-2026-2229", "description": "A flaw was found in the undici WebSocket client. A remote malicious server can exploit this vulnerability by sending a WebSocket frame with an invalid `server_max_window_bits` parameter within the permessage-deflate extension. This improper validation causes the client's Node.js process to terminate, leading to a denial-of-service (DoS) condition for the client.", "issued": "2026-03-12T20:27:05Z", "links": "https://access.redhat.com/security/cve/CVE-2026-2229 https://bugzilla.redhat.com/show_bug.cgi?id=2447143 https://www.cve.org/CVERecord?id=CVE-2026-2229 https://nvd.nist.gov/vuln/detail/CVE-2026-2229 https://cna.openjsf.org/security-advisories.html https://datatracker.ietf.org/doc/html/rfc7692 https://github.com/nodejs/undici/security/advisories/GHSA-v9p9-hfj2-hcw8 https://hackerone.com/reports/3487486 https://nodejs.org/api/zlib.html#class-zlibinflateraw https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-2229.json https://access.redhat.com/errata/RHSA-2026:7302", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "High", "package": { "id": "", "name": "nodejs-libs", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:22.22.2-1.module+el9.7.0+24157+8ddb2461", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "3mZTUjJt0v6SBGf7lIXm2Q==": { "id": "3mZTUjJt0v6SBGf7lIXm2Q==", "updater": "rhel-vex", "name": "CVE-2026-7383", "description": "A flaw was found in OpenSSL. A signed integer overflow vulnerability exists when sizing the destination buffer for Unicode output. This can lead to a heap buffer overflow, which may result in a crash or potentially allow an attacker to execute arbitrary code. Exploitation requires an application to directly call specific functions with a large amount of attacker-controlled input.", "issued": "2026-06-09T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-7383 https://bugzilla.redhat.com/show_bug.cgi?id=2481879 https://www.cve.org/CVERecord?id=CVE-2026-7383 https://nvd.nist.gov/vuln/detail/CVE-2026-7383 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-7383.json https://access.redhat.com/errata/RHSA-2026:25239", "severity": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "openssl-devel", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:3.5.5-4.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "3xFSeDOxGkdisnqW9w6B+Q==": { "id": "3xFSeDOxGkdisnqW9w6B+Q==", "updater": "rhel-vex", "name": "CVE-2026-53655", "description": "A flaw was found in node-tar. This vulnerability arises because node-tar incorrectly applies PAX extended header size records to subsequent intermediary metadata headers, leading to a desynchronization of the tar stream cursor compared to other standard tar implementations. A remote attacker could exploit this by crafting a malicious archive, causing different interpretations of archive contents between node-tar and other tools. This could allow an attacker to hide malicious files or sensitive information from security scanners that rely on different tar parsing libraries, potentially leading to information disclosure or bypassing security controls.", "issued": "2026-06-22T14:55:50Z", "links": "https://access.redhat.com/security/cve/CVE-2026-53655 https://bugzilla.redhat.com/show_bug.cgi?id=2491423 https://www.cve.org/CVERecord?id=CVE-2026-53655 https://nvd.nist.gov/vuln/detail/CVE-2026-53655 https://github.com/isaacs/node-tar/security/advisories/GHSA-vmf3-w455-68vh https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-53655.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:N", "normalized_severity": "Medium", "package": { "id": "", "name": "tar", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "3zxG1J6bDKAhZ9wlUE9Y4g==": { "id": "3zxG1J6bDKAhZ9wlUE9Y4g==", "updater": "rhel-vex", "name": "CVE-2026-48935", "description": "A flaw was found in Node.js. The Permission API allows a local user to modify file metadata on paths that have been explicitly set as read-only. This can lead to unauthorized changes in file properties, impacting the integrity of the file system.", "issued": "2026-06-26T01:14:36Z", "links": "https://access.redhat.com/security/cve/CVE-2026-48935 https://bugzilla.redhat.com/show_bug.cgi?id=2493329 https://www.cve.org/CVERecord?id=CVE-2026-48935 https://nvd.nist.gov/vuln/detail/CVE-2026-48935 https://nodejs.org/en/blog/vulnerability/june-2026-security-releases https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-48935.json https://access.redhat.com/errata/RHSA-2026:35892", "severity": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", "normalized_severity": "Low", "package": { "id": "", "name": "nodejs-full-i18n", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:22.23.1-1.module+el9.8.0+24457+996af7aa", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "40wPd5q9E1sRluf3JeA8hw==": { "id": "40wPd5q9E1sRluf3JeA8hw==", "updater": "rhel-vex", "name": "CVE-2026-42764", "description": "A flaw was found in the OpenSSL QUIC (Quick UDP Internet Connections) server. A remote attacker could send a specially crafted QUIC initial packet with an invalid token. If the server's address validation is explicitly disabled, this could lead to a NULL pointer dereference, causing the server process to terminate abnormally and resulting in a Denial of Service (DoS).", "issued": "2026-06-09T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-42764 https://bugzilla.redhat.com/show_bug.cgi?id=2481887 https://www.cve.org/CVERecord?id=CVE-2026-42764 https://nvd.nist.gov/vuln/detail/CVE-2026-42764 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42764.json https://access.redhat.com/errata/RHSA-2026:25239", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "openssl", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "1:3.5.5-4.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "41OUTxSbBLQGne4TzJuTQg==": { "id": "41OUTxSbBLQGne4TzJuTQg==", "updater": "rhel-vex", "name": "CVE-2026-2673", "description": "A key group selection preference flaw has been discovered in OpenSSL. An OpenSSL TLS 1.3 server may fail to negotiate the expected preferred key exchange group when its key exchange group configuration includes the default by using the \"DEFAULT\" keyword. A less preferred key exchange may be used even when a more preferred group is supported by both client and server, if the group was not included among the client's initial predicated keyshares. This will sometimes be the case with the new hybrid post-quantum groups, if the client chooses to defer their use until specifically requested by the server. No OpenSSL FIPS modules are affected by this issue, the code in question lies outside the FIPS boundary.", "issued": "2026-03-13T13:23:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-2673 https://bugzilla.redhat.com/show_bug.cgi?id=2447327 https://www.cve.org/CVERecord?id=CVE-2026-2673 https://nvd.nist.gov/vuln/detail/CVE-2026-2673 https://github.com/openssl/openssl/commit/2157c9d81f7b0bd7dfa25b960e928ec28e8dd63f https://github.com/openssl/openssl/commit/85977e013f32ceb96aa034c0e741adddc1a05e34 https://openssl-library.org/news/secadv/20260313.txt https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-2673.json", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L", "normalized_severity": "Medium", "package": { "id": "", "name": "openssl", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "49x+aBSIi92s9+9k0YBLsA==": { "id": "49x+aBSIi92s9+9k0YBLsA==", "updater": "rhel-vex", "name": "CVE-2025-14087", "description": "A flaw was found in GLib (Gnome Lib). This vulnerability allows a remote attacker to cause heap corruption, leading to a denial of service or potential code execution via a buffer-underflow in the GVariant parser when processing maliciously crafted input strings.", "issued": "2025-12-05T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2025-14087 https://bugzilla.redhat.com/show_bug.cgi?id=2419093 https://www.cve.org/CVERecord?id=CVE-2025-14087 https://nvd.nist.gov/vuln/detail/CVE-2025-14087 https://gitlab.gnome.org/GNOME/glib/-/issues/3834 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-14087.json https://access.redhat.com/errata/RHSA-2026:19361", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L", "normalized_severity": "Medium", "package": { "id": "", "name": "glib2", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:2.68.4-19.el9_8.1", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "4BI9AbtF5Vb7puMudQmp2w==": { "id": "4BI9AbtF5Vb7puMudQmp2w==", "updater": "rhel-vex", "name": "CVE-2026-2229", "description": "A flaw was found in the undici WebSocket client. A remote malicious server can exploit this vulnerability by sending a WebSocket frame with an invalid `server_max_window_bits` parameter within the permessage-deflate extension. This improper validation causes the client's Node.js process to terminate, leading to a denial-of-service (DoS) condition for the client.", "issued": "2026-03-12T20:27:05Z", "links": "https://access.redhat.com/security/cve/CVE-2026-2229 https://bugzilla.redhat.com/show_bug.cgi?id=2447143 https://www.cve.org/CVERecord?id=CVE-2026-2229 https://nvd.nist.gov/vuln/detail/CVE-2026-2229 https://cna.openjsf.org/security-advisories.html https://datatracker.ietf.org/doc/html/rfc7692 https://github.com/nodejs/undici/security/advisories/GHSA-v9p9-hfj2-hcw8 https://hackerone.com/reports/3487486 https://nodejs.org/api/zlib.html#class-zlibinflateraw https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-2229.json https://access.redhat.com/errata/RHSA-2026:7302", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "High", "package": { "id": "", "name": "npm", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:10.9.7-1.22.22.2.1.module+el9.7.0+24157+8ddb2461", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "4FPYx+QEdkXz09AmCNB74A==": { "id": "4FPYx+QEdkXz09AmCNB74A==", "updater": "rhel-vex", "name": "CVE-2026-2229", "description": "A flaw was found in the undici WebSocket client. A remote malicious server can exploit this vulnerability by sending a WebSocket frame with an invalid `server_max_window_bits` parameter within the permessage-deflate extension. This improper validation causes the client's Node.js process to terminate, leading to a denial-of-service (DoS) condition for the client.", "issued": "2026-03-12T20:27:05Z", "links": "https://access.redhat.com/security/cve/CVE-2026-2229 https://bugzilla.redhat.com/show_bug.cgi?id=2447143 https://www.cve.org/CVERecord?id=CVE-2026-2229 https://nvd.nist.gov/vuln/detail/CVE-2026-2229 https://cna.openjsf.org/security-advisories.html https://datatracker.ietf.org/doc/html/rfc7692 https://github.com/nodejs/undici/security/advisories/GHSA-v9p9-hfj2-hcw8 https://hackerone.com/reports/3487486 https://nodejs.org/api/zlib.html#class-zlibinflateraw https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-2229.json https://access.redhat.com/errata/RHSA-2026:7302", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "High", "package": { "id": "", "name": "nodejs-full-i18n", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:22.22.2-1.module+el9.7.0+24157+8ddb2461", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "4H2TsDPy1XcHidTqNqeZpg==": { "id": "4H2TsDPy1XcHidTqNqeZpg==", "updater": "rhel-vex", "name": "CVE-2026-4519", "description": "A flaw was found in Python. The `webbrowser.open()` API, used to launch web browsers, does not properly sanitize input. This allows a remote attacker to craft a malicious URL containing leading dashes. When such a URL is opened, certain web browsers may interpret these dashes as command-line options, which could lead to unexpected behavior, information disclosure, or potentially arbitrary code execution, impacting the integrity of the system.", "issued": "2026-03-20T15:08:32Z", "links": "https://access.redhat.com/security/cve/CVE-2026-4519 https://bugzilla.redhat.com/show_bug.cgi?id=2449649 https://www.cve.org/CVERecord?id=CVE-2026-4519 https://nvd.nist.gov/vuln/detail/CVE-2026-4519 https://github.com/python/cpython/issues/143930 https://github.com/python/cpython/pull/143931 https://mail.python.org/archives/list/security-announce@python.org/thread/AY5NDSS433JK56Q7Q5IS7B37QFZVVOUS/ https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-4519.json https://access.redhat.com/errata/RHSA-2026:6766", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L", "normalized_severity": "High", "package": { "id": "", "name": "python3-libs", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:3.9.25-3.el9_7.2", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "4IJCXmCxOCf3t6/rsnea/A==": { "id": "4IJCXmCxOCf3t6/rsnea/A==", "updater": "rhel-vex", "name": "CVE-2026-41316", "description": "A flaw was found in ERB, a templating system for Ruby. An attacker who can trigger deserialization of untrusted data in a Ruby application can bypass existing protections. This vulnerability allows for arbitrary code execution by exploiting specific public methods that evaluate template source code, which were not properly guarded against deserialization attacks.", "issued": "2026-04-24T02:35:41Z", "links": "https://access.redhat.com/security/cve/CVE-2026-41316 https://bugzilla.redhat.com/show_bug.cgi?id=2461369 https://www.cve.org/CVERecord?id=CVE-2026-41316 https://nvd.nist.gov/vuln/detail/CVE-2026-41316 https://github.com/ruby/erb/security/advisories/GHSA-q339-8rmv-2mhv https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-41316.json https://access.redhat.com/errata/RHSA-2026:18030", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "normalized_severity": "High", "package": { "id": "", "name": "rubygem-io-console", "version": "", "kind": "binary", "normalized_version": "", "module": "ruby:3.3", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "0:0.7.1-6.module+el9.7.0+24248+66578cbb", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "4Ir8FDWM4WPrO3dybbfnYQ==": { "id": "4Ir8FDWM4WPrO3dybbfnYQ==", "updater": "rhel-vex", "name": "CVE-2025-13837", "description": "A flaw was found in the plistlib module in the Python standard library. The amount of data to read from a Plist file is specified in the file itself. This issue allows a specially crafted Plist file to cause an application to allocate a large amount of memory, potentially resulting in allocations errors, swapping, out-of-memory conditions or even system freezes.", "issued": "2025-12-01T18:13:32Z", "links": "https://access.redhat.com/security/cve/CVE-2025-13837 https://bugzilla.redhat.com/show_bug.cgi?id=2418084 https://www.cve.org/CVERecord?id=CVE-2025-13837 https://nvd.nist.gov/vuln/detail/CVE-2025-13837 https://github.com/python/cpython/issues/119342 https://github.com/python/cpython/pull/119343 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-13837.json", "severity": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "python3.9", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "4LZWGm07jnOHHBGX2FzAwg==": { "id": "4LZWGm07jnOHHBGX2FzAwg==", "updater": "rhel-vex", "name": "CVE-2025-1153", "description": "A flaw was found in GNU Binutils. A specially-crafted payload may be able to trigger a memory leak, which can lead to an application crash or other undefined behavior.", "issued": "2025-02-10T19:00:13Z", "links": "https://access.redhat.com/security/cve/CVE-2025-1153 https://bugzilla.redhat.com/show_bug.cgi?id=2344743 https://www.cve.org/CVERecord?id=CVE-2025-1153 https://nvd.nist.gov/vuln/detail/CVE-2025-1153 https://sourceware.org/bugzilla/show_bug.cgi?id=32603 https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=8d97c1a53f3dc9fd8e1ccdb039b8a33d50133150 https://vuldb.com/?ctiid.295057 https://vuldb.com/?id.295057 https://vuldb.com/?submit.489991 https://www.gnu.org/ https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-1153.json", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L", "normalized_severity": "Low", "package": { "id": "", "name": "binutils", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "4Ocx5vfc88FjutK1oBwpCQ==": { "id": "4Ocx5vfc88FjutK1oBwpCQ==", "updater": "rhel-vex", "name": "CVE-2026-42013", "description": "A flaw was found in gnutls. When validating certificates, an oversized Subject Alternative Name (SAN) could cause the validation process to incorrectly fall back to checking the Common Name (CN) field. This could allow a remote attacker to bypass proper certificate validation, potentially leading to spoofing or man-in-the-middle attacks.", "issued": "2026-04-29T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-42013 https://bugzilla.redhat.com/show_bug.cgi?id=2467448 https://www.cve.org/CVERecord?id=CVE-2026-42013 https://nvd.nist.gov/vuln/detail/CVE-2026-42013 https://www.gnutls.org/security-new.html#GNUTLS-SA-2026-04-29-8 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42013.json https://access.redhat.com/errata/RHSA-2026:20612", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N", "normalized_severity": "Medium", "package": { "id": "", "name": "gnutls", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:3.8.10-4.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "4TbG63vud59mo+N/aCOqpg==": { "id": "4TbG63vud59mo+N/aCOqpg==", "updater": "rhel-vex", "name": "CVE-2025-15367", "description": "A flaw was found in the poplib module in the Python standard library. The poplib module does not reject control characters, such as newlines, in user-controlled input passed to POP3 commands. This issue allows an attacker to inject additional commands to be executed in the POP3 server.", "issued": "2026-01-20T21:47:09Z", "links": "https://access.redhat.com/security/cve/CVE-2025-15367 https://bugzilla.redhat.com/show_bug.cgi?id=2431373 https://www.cve.org/CVERecord?id=CVE-2025-15367 https://nvd.nist.gov/vuln/detail/CVE-2025-15367 https://github.com/python/cpython/issues/143923 https://github.com/python/cpython/pull/143924 https://mail.python.org/archives/list/security-announce@python.org/thread/CBFBOWVGGUJFSGITQCCBZS4GEYYZ7ZNE/ https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-15367.json https://access.redhat.com/errata/RHSA-2026:4168", "severity": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N", "normalized_severity": "Medium", "package": { "id": "", "name": "python3-libs", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:3.9.25-3.el9_7.1", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "4W4pMj/8K/7jCdYTXT5uEg==": { "id": "4W4pMj/8K/7jCdYTXT5uEg==", "updater": "rhel-vex", "name": "CVE-2026-11940", "description": "A flaw was found in the `tarfile.extractall()` function within Python. A remote attacker could exploit this vulnerability by providing a specially crafted archive. This archive could bypass security filters by using a hardlink that references a symlink, allowing the symlink to be recreated outside the intended destination directory. This could lead to out-of-destination file reads or writes, potentially resulting in information disclosure or arbitrary file modification.", "issued": "2026-06-23T16:04:17Z", "links": "https://access.redhat.com/security/cve/CVE-2026-11940 https://bugzilla.redhat.com/show_bug.cgi?id=2491848 https://www.cve.org/CVERecord?id=CVE-2026-11940 https://nvd.nist.gov/vuln/detail/CVE-2026-11940 https://github.com/python/cpython/issues/151558 https://github.com/python/cpython/pull/151559 https://mail.python.org/archives/list/security-announce@python.org/thread/LD6QIISNQFQYOIEPJNEUIPV7S3V76FZH/ https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-11940.json https://access.redhat.com/errata/RHSA-2026:54268", "severity": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N", "normalized_severity": "High", "package": { "id": "", "name": "python3-libs", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:3.9.25-7.el9_8.3", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "4WgtH2AC4w3jDaPCHFqEaw==": { "id": "4WgtH2AC4w3jDaPCHFqEaw==", "updater": "rhel-vex", "name": "CVE-2025-11494", "description": "An out of bounds read flaw has been discovered in the GNU Binutils package. The impacted function is _bfd_x86_elf_late_size_sections of the file bfd/elfxx-x86.c of the component Linker. The manipulation results in out-of-bounds read. The attack needs to be approached locally.", "issued": "2025-10-08T19:32:07Z", "links": "https://access.redhat.com/security/cve/CVE-2025-11494 https://bugzilla.redhat.com/show_bug.cgi?id=2402559 https://www.cve.org/CVERecord?id=CVE-2025-11494 https://nvd.nist.gov/vuln/detail/CVE-2025-11494 https://sourceware.org/bugzilla/attachment.cgi?id=16389 https://sourceware.org/bugzilla/show_bug.cgi?id=33499 https://sourceware.org/bugzilla/show_bug.cgi?id=33499#c2 https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=b6ac5a8a5b82f0ae6a4642c8d7149b325f4cc60a https://vuldb.com/?ctiid.327619 https://vuldb.com/?id.327619 https://vuldb.com/?submit.668281 https://www.gnu.org/ https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-11494.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L", "normalized_severity": "Low", "package": { "id": "", "name": "binutils", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "4XO5TL/zvh/gBT0sz3RSYw==": { "id": "4XO5TL/zvh/gBT0sz3RSYw==", "updater": "rhel-vex", "name": "CVE-2026-13149", "description": "A flaw was found in brace-expansion. An attacker can exploit a vulnerability in the `expand()` function by providing a specially crafted string. This string, containing consecutive non-expanding brace groups, can trigger exponential-time complexity, leading to significant CPU consumption and event-loop blocking. This can result in a Denial of Service (DoS) for the affected system.", "issued": "2026-06-30T08:30:34Z", "links": "https://access.redhat.com/security/cve/CVE-2026-13149 https://bugzilla.redhat.com/show_bug.cgi?id=2494813 https://www.cve.org/CVERecord?id=CVE-2026-13149 https://nvd.nist.gov/vuln/detail/CVE-2026-13149 https://github.com/juliangruber/brace-expansion/commit/c7e33ec13ac1a684c116720843ce24e208611754 https://www.npmjs.com/package/brace-expansion https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-13149.json https://access.redhat.com/errata/RHSA-2026:47058", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "High", "package": { "id": "", "name": "nodejs-full-i18n", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:22.23.1-2.module+el9.8.0+24538+3f176d52", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "4aJ6IaFsuGhRpz+mkfUGqQ==": { "id": "4aJ6IaFsuGhRpz+mkfUGqQ==", "updater": "rhel-vex", "name": "CVE-2026-48615", "description": "A flaw was found in Node.js. When proxy credentials are embedded in a proxy URL, an issue in the proxy tunnel error handling can lead to the exposure of these credentials. This information disclosure vulnerability allows an attacker to potentially capture sensitive proxy credentials through logs, diagnostics, or other error-consuming mechanisms.", "issued": "2026-06-26T01:14:36Z", "links": "https://access.redhat.com/security/cve/CVE-2026-48615 https://bugzilla.redhat.com/show_bug.cgi?id=2493335 https://www.cve.org/CVERecord?id=CVE-2026-48615 https://nvd.nist.gov/vuln/detail/CVE-2026-48615 https://nodejs.org/en/blog/vulnerability/june-2026-security-releases https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-48615.json https://access.redhat.com/errata/RHSA-2026:35892", "severity": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "normalized_severity": "Medium", "package": { "id": "", "name": "npm", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:10.9.8-1.22.23.1.1.module+el9.8.0+24457+996af7aa", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "4ardx/cPJA31l/GjZ5ssvw==": { "id": "4ardx/cPJA31l/GjZ5ssvw==", "updater": "rhel-vex", "name": "CVE-2026-42246", "description": "A flaw was found in the Ruby net-imap library. When upgrading a cleartext IMAP connection to TLS using the Net::IMAP#starttls method, the library improperly handles certain responses received during STARTTLS negotiation. A man-in-the-middle (MITM) attacker can inject a predicted tagged OK response before the client completes the STARTTLS command, causing the operation to appear successful without establishing a TLS session. As a result, the connection may continue to transmit sensitive information in cleartext and enable modification of data exchanged over the affected connection, while the application incorrectly believes that encryption has been enabled.", "issued": "2026-05-09T19:33:17Z", "links": "https://access.redhat.com/security/cve/CVE-2026-42246 https://bugzilla.redhat.com/show_bug.cgi?id=2468499 https://www.cve.org/CVERecord?id=CVE-2026-42246 https://nvd.nist.gov/vuln/detail/CVE-2026-42246 https://github.com/ruby/net-imap/commit/0ede4c40b1523dfeaf95777b2678e54cc0fd9618 https://github.com/ruby/net-imap/commit/24a4e770b43230286a05aa2a9746cdbb3eb8485e https://github.com/ruby/net-imap/commit/97e2488fb5401a1783bddd959dde007d9fbce42c https://github.com/ruby/net-imap/commit/f79d35bf5833f186e81044c57c843eda30c873da https://github.com/ruby/net-imap/releases/tag/v0.3.10 https://github.com/ruby/net-imap/releases/tag/v0.4.24 https://github.com/ruby/net-imap/releases/tag/v0.5.14 https://github.com/ruby/net-imap/security/advisories/GHSA-vcgp-9326-pqcp https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42246.json https://access.redhat.com/errata/RHSA-2026:33576", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "normalized_severity": "High", "package": { "id": "", "name": "rubygem-bigdecimal", "version": "", "kind": "binary", "normalized_version": "", "module": "ruby:3.3", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "0:3.1.5-7.module+el9.8.0+24406+8975e57f", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "4g6F/e8mwPh04jP3QYJj0w==": { "id": "4g6F/e8mwPh04jP3QYJj0w==", "updater": "rhel-vex", "name": "CVE-2025-24294", "description": "A denial of service flaw was found in resolv ruby gem. This flaw allows an attacker to craft a malicious DNS packet containing a highly compressed domain name. When the resolv library parses this packet, the name decompression process consumes a large amount of CPU resources, as the library does not limit the resulting length of the name.", "issued": "2025-07-12T03:30:40Z", "links": "https://access.redhat.com/security/cve/CVE-2025-24294 https://bugzilla.redhat.com/show_bug.cgi?id=2379684 https://www.cve.org/CVERecord?id=CVE-2025-24294 https://nvd.nist.gov/vuln/detail/CVE-2025-24294 https://www.ruby-lang.org/en/news/2025/07/08/dos-resolv-cve-2025-24294/ https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-24294.json https://access.redhat.com/errata/RHSA-2025:23063", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "normalized_severity": "Medium", "package": { "id": "", "name": "rubygem-json", "version": "", "kind": "binary", "normalized_version": "", "module": "ruby:3.3", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "0:2.7.2-5.module+el9.7.0+23651+15dc1615", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "4kuxrTpUDtZ3uFOEEztq9g==": { "id": "4kuxrTpUDtZ3uFOEEztq9g==", "updater": "rhel-vex", "name": "CVE-2026-48933", "description": "A flaw was found in the Node.js WebCrypto implementation. A remote attacker could exploit this vulnerability by providing an input to the `subtle.encrypt()` function that is a multiple of 2 gigabytes (GiB). This could lead to a denial of service (DoS) by crashing the Node.js process.", "issued": "2026-06-26T01:14:36Z", "links": "https://access.redhat.com/security/cve/CVE-2026-48933 https://bugzilla.redhat.com/show_bug.cgi?id=2493331 https://www.cve.org/CVERecord?id=CVE-2026-48933 https://nvd.nist.gov/vuln/detail/CVE-2026-48933 https://nodejs.org/en/blog/vulnerability/june-2026-security-releases https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-48933.json https://access.redhat.com/errata/RHSA-2026:35892", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "High", "package": { "id": "", "name": "nodejs", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "aarch64|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:22.23.1-1.module+el9.8.0+24457+996af7aa", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "4o31bbgKJ2cSqPGCPyFjLQ==": { "id": "4o31bbgKJ2cSqPGCPyFjLQ==", "updater": "rhel-vex", "name": "CVE-2026-56404", "description": "A flaw was found in libexpat. This vulnerability, an integer overflow in the `addBinding` function, could allow a local attacker to execute arbitrary code. By exploiting this, an attacker could gain control over the affected system, compromising its confidentiality and integrity.", "issued": "2026-06-21T15:45:55Z", "links": "https://access.redhat.com/security/cve/CVE-2026-56404 https://bugzilla.redhat.com/show_bug.cgi?id=2491185 https://www.cve.org/CVERecord?id=CVE-2026-56404 https://nvd.nist.gov/vuln/detail/CVE-2026-56404 https://github.com/libexpat/libexpat/pull/1249 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-56404.json", "severity": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L", "normalized_severity": "Medium", "package": { "id": "", "name": "expat", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "4os+HU28VQ7buZvoEKQ/kg==": { "id": "4os+HU28VQ7buZvoEKQ/kg==", "updater": "rhel-vex", "name": "CVE-2026-34757", "description": "A flaw was found in libpng, a library used for handling PNG (Portable Network Graphics) image files. This vulnerability arises when an application reuses a pointer, previously obtained from functions like png_get_PLTE, by passing it back to a corresponding setter function within the same image structure. This action causes the setter to access memory that has already been deallocated, leading to a use-after-free condition. A local attacker could potentially exploit this flaw to corrupt image metadata or disclose sensitive information from the application's memory.", "issued": "2026-04-09T14:41:18Z", "links": "https://access.redhat.com/security/cve/CVE-2026-34757 https://bugzilla.redhat.com/show_bug.cgi?id=2456918 https://www.cve.org/CVERecord?id=CVE-2026-34757 https://nvd.nist.gov/vuln/detail/CVE-2026-34757 https://github.com/pnggroup/libpng/commit/398cbe3df03f4e11bb031e07f416dfdde3684e8a https://github.com/pnggroup/libpng/commit/55d20aaa322c9274491cda82c5cd4f99b48c6bcc https://github.com/pnggroup/libpng/issues/836 https://github.com/pnggroup/libpng/issues/837 https://github.com/pnggroup/libpng/security/advisories/GHSA-6fr7-g8h7-v645 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-34757.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N", "normalized_severity": "Medium", "package": { "id": "", "name": "libpng", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "4u3exWl+MPcCOYOgbQLM+A==": { "id": "4u3exWl+MPcCOYOgbQLM+A==", "updater": "rhel-vex", "name": "CVE-2025-69419", "description": "A flaw was found in OpenSSL. When processing a specially crafted PKCS#12 (Personal Information Exchange Syntax Standard) file, a remote attacker can exploit an out-of-bounds write vulnerability. This issue, occurring within the OPENSSL_uni2utf8() function, leads to memory corruption by writing data beyond its allocated buffer. Successful exploitation could result in a denial of service or potentially allow for arbitrary code execution.", "issued": "2026-01-27T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2025-69419 https://bugzilla.redhat.com/show_bug.cgi?id=2430386 https://www.cve.org/CVERecord?id=CVE-2025-69419 https://nvd.nist.gov/vuln/detail/CVE-2025-69419 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-69419.json https://access.redhat.com/errata/RHSA-2026:1473", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "normalized_severity": "Medium", "package": { "id": "", "name": "openssl-libs", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "1:3.5.1-7.el9_7", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "4ugLfuPhGpzb4ohYABxG+w==": { "id": "4ugLfuPhGpzb4ohYABxG+w==", "updater": "rhel-vex", "name": "CVE-2026-29111", "description": "A flaw was found in systemd, a system and service manager. An unprivileged user can exploit this vulnerability by making an Inter-Process Communication (IPC) API call with spurious data. In older versions (v249 and earlier), this can lead to stack overwriting with attacker-controlled content, potentially enabling arbitrary code execution or privilege escalation. In newer versions (v250 and later), the flaw causes systemd to assert and freeze, resulting in a Denial of Service (DoS).", "issued": "2026-03-23T21:03:56Z", "links": "https://access.redhat.com/security/cve/CVE-2026-29111 https://bugzilla.redhat.com/show_bug.cgi?id=2450505 https://www.cve.org/CVERecord?id=CVE-2026-29111 https://nvd.nist.gov/vuln/detail/CVE-2026-29111 https://github.com/systemd/systemd/commit/1d22f706bd04f45f8422e17fbde3f56ece17758a https://github.com/systemd/systemd/commit/20021e7686426052e3a7505425d7e12085feb2a6 https://github.com/systemd/systemd/commit/21167006574d6b83813c7596759b474f56562412 https://github.com/systemd/systemd/commit/3cee294fe8cf4fa0eff933ab21416d099942cabd https://github.com/systemd/systemd/commit/42aee39107fbdd7db1ccd402a2151822b2805e9f https://github.com/systemd/systemd/commit/54588d2dedff54bfb6036670820650e4ea74628f https://github.com/systemd/systemd/commit/7ac3220213690e8a8d6d2a6e81e43bd1dce01d69 https://github.com/systemd/systemd/commit/80acea4ef80a4bb78560ed970c34952299b890d6 https://github.com/systemd/systemd/commit/b5fd14693057e5f2c9b4a49603be64ec3608ff6c https://github.com/systemd/systemd/commit/efa6ba2ab625aaa160ac435a09e6482fc63bdbe8 https://github.com/systemd/systemd/security/advisories/GHSA-gx6q-6f99-m764 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-29111.json https://access.redhat.com/errata/RHSA-2026:19213", "severity": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "systemd-rpm-macros", "version": "", "kind": "binary", "normalized_version": "", "arch": "noarch", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:252-67.el9_8.2", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "4w9ia49tOv0+yiq1lgkH0w==": { "id": "4w9ia49tOv0+yiq1lgkH0w==", "updater": "rhel-vex", "name": "CVE-2026-15308", "description": "A flaw was found in Python. Its incremental HTML parser can be exploited by a remote attacker. By sending specially crafted, uncontrolled data with repeated, incomplete markup declarations, the attacker can cause the system to consume excessive central processing unit (CPU) resources. This leads to a denial of service, making the affected system unresponsive.", "issued": "2026-07-09T17:10:57Z", "links": "https://access.redhat.com/security/cve/CVE-2026-15308 https://bugzilla.redhat.com/show_bug.cgi?id=2498608 https://www.cve.org/CVERecord?id=CVE-2026-15308 https://nvd.nist.gov/vuln/detail/CVE-2026-15308 https://github.com/python/cpython/commit/07efb08123ba9367a7107325adb9d5626dca1ca9 https://github.com/python/cpython/commit/7933f4bf7131aa4140750f9404f5de0aa2969ced https://github.com/python/cpython/commit/bcf98ddbc40ec9b3ee87da0124a5660b19b7e606 https://github.com/python/cpython/commit/e9f92ac0b298292e7ff998e52cb8ccacfb27a0bd https://github.com/python/cpython/issues/153030 https://github.com/python/cpython/pull/153031 https://mail.python.org/archives/list/security-announce@python.org/thread/F6453LWKSHKCTWFLCOURWPLETNUIW2Z5/ https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-15308.json https://access.redhat.com/errata/RHSA-2026:39798", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "High", "package": { "id": "", "name": "python3-libs", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:3.9.25-7.el9_8.2", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "4wegIDtvEZ75QrQWM65auQ==": { "id": "4wegIDtvEZ75QrQWM65auQ==", "updater": "rhel-vex", "name": "CVE-2025-69650", "description": "A flaw was found in binutils. Processing a specially crafted ELF binary file containing malformed relocation data with the readelf program can trigger a double free, causing a crash and resulting in a denial of service.", "issued": "2026-03-06T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2025-69650 https://bugzilla.redhat.com/show_bug.cgi?id=2445293 https://www.cve.org/CVERecord?id=CVE-2025-69650 https://nvd.nist.gov/vuln/detail/CVE-2025-69650 https://sourceware.org/bugzilla/show_bug.cgi?id=33698 https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=ea4bc025abdba85a90e26e13f551c16a44bfa921 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-69650.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "normalized_severity": "Low", "package": { "id": "", "name": "binutils", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "55p6NGxCWjOVcUCBGiCPzw==": { "id": "55p6NGxCWjOVcUCBGiCPzw==", "updater": "rhel-vex", "name": "CVE-2025-45582", "description": "A flaw was found in GNU Tar. An attacker could exploit this vulnerability by providing two specially crafted TAR archives, if those archives were extracted in the same directory. The first archive contains a symbolic link that points to a critical directory. The second archive, when extracted, uses this symbolic link to overwrite sensitive files on the system, bypassing existing directory traversal protections. This could lead to unauthorized file modification or, in some cases, privilege escalation.", "issued": "2025-07-11T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2025-45582 https://bugzilla.redhat.com/show_bug.cgi?id=2379592 https://www.cve.org/CVERecord?id=CVE-2025-45582 https://nvd.nist.gov/vuln/detail/CVE-2025-45582 https://github.com/i900008/vulndb/blob/main/Gnu_tar_vuln.md https://www.gnu.org/software/tar/ https://www.gnu.org/software/tar/manual/html_node/Integrity.html#Integrity https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-45582.json https://access.redhat.com/errata/RHSA-2026:0067", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L", "normalized_severity": "Medium", "package": { "id": "", "name": "tar", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "2:1.34-9.el9_7", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "58xLQ2pjmhkIctIR/pZ5pw==": { "id": "58xLQ2pjmhkIctIR/pZ5pw==", "updater": "rhel-vex", "name": "CVE-2026-4786", "description": "A flaw was found in the Python webbrowser.open() API. If a specially crafted URL containing \"%action\" is processed, an attacker could bypass a previous mitigation for CVE-2026-4519. This bypass allows for command injection into the underlying shell, potentially leading to arbitrary code execution.", "issued": "2026-04-13T21:52:19Z", "links": "https://access.redhat.com/security/cve/CVE-2026-4786 https://bugzilla.redhat.com/show_bug.cgi?id=2458049 https://www.cve.org/CVERecord?id=CVE-2026-4786 https://nvd.nist.gov/vuln/detail/CVE-2026-4786 https://github.com/python/cpython/issues/148169 https://github.com/python/cpython/pull/148170 https://mail.python.org/archives/list/security-announce@python.org/thread/JQDUNJVB4AQNTJECSUKOBDU3XCJIPSE5/ https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-4786.json https://access.redhat.com/errata/RHSA-2026:10949", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L", "normalized_severity": "High", "package": { "id": "", "name": "python3", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:3.9.25-3.el9_7.3", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "5BksN0izCeDRrtFMsNCyvg==": { "id": "5BksN0izCeDRrtFMsNCyvg==", "updater": "rhel-vex", "name": "CVE-2025-9232", "description": "A flaw was found in the OpenSSL HTTP client API no_proxy handling. This vulnerability allows an application level denial of service (application crash) via an attacker-controlled IPv6 URL when the no_proxy environment variable is set.", "issued": "2025-09-30T23:59:00Z", "links": "https://access.redhat.com/security/cve/CVE-2025-9232 https://bugzilla.redhat.com/show_bug.cgi?id=2396056 https://www.cve.org/CVERecord?id=CVE-2025-9232 https://nvd.nist.gov/vuln/detail/CVE-2025-9232 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-9232.json", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L", "normalized_severity": "Low", "package": { "id": "", "name": "openssl", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "5C8DQrs9fwpmV8rRYlvfCQ==": { "id": "5C8DQrs9fwpmV8rRYlvfCQ==", "updater": "rhel-vex", "name": "CVE-2025-66865", "description": "A flaw was found in binutils. Processing a specially crafted PE file with cxxfilt can trigger a stack overflow in the d_print_comp_inner function in the cp-demangle.c file, causing a crash and resulting in a denial of service.", "issued": "2025-12-29T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2025-66865 https://bugzilla.redhat.com/show_bug.cgi?id=2425822 https://www.cve.org/CVERecord?id=CVE-2025-66865 https://nvd.nist.gov/vuln/detail/CVE-2025-66865 https://github.com/caozhzh/CRGF-Vul/blob/main/cxxfilt/crash4.md https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-66865.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "normalized_severity": "Low", "package": { "id": "", "name": "binutils", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "5D5WFK01Su4Lrj4hhwDYGQ==": { "id": "5D5WFK01Su4Lrj4hhwDYGQ==", "updater": "rhel-vex", "name": "CVE-2024-43374", "description": "A heap use-after-free vulnerability was found in Vim's alist_add() function. Adding a new file to the argument list triggers Buf* autocommands. In an autocommand, if the buffer that was just opened is closed, including the window where it is shown, it causes the window structure to be freed, containing a reference to the argument list that is being modified. Once the autocommands are completed, references to the window and argument list are no longer valid, causing a use-after-free issue. To trigger this issue, a local attacker or user must add unusual autocommands that wipe a buffer during creation, either manually or by sourcing a malicious plugin, which will cause Vim to crash.", "issued": "2024-08-16T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2024-43374 https://bugzilla.redhat.com/show_bug.cgi?id=2305259 https://www.cve.org/CVERecord?id=CVE-2024-43374 https://nvd.nist.gov/vuln/detail/CVE-2024-43374 https://github.com/vim/vim/commit/0a6e57b09bc8c76691b367a5babfb79b31b770e8 https://github.com/vim/vim/security/advisories/GHSA-2w8m-443v-cgvw https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-43374.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "normalized_severity": "Low", "package": { "id": "", "name": "vim", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "5JPRWlHhzvwdgcYt2OnpZg==": { "id": "5JPRWlHhzvwdgcYt2OnpZg==", "updater": "rhel-vex", "name": "CVE-2026-58013", "description": "A flaw was found in GLib. A buffer over-read can occur in g_io_channel_read_line_backend() in the giochannel.c file when a custom line terminator with a length greater than one is set, causing memcmp to read past the GString buffer. This vulnerability can cause a minor information disclosure of 7 bytes or a denial of service when the buffer over-read crosses a page boundary.", "issued": "2026-04-03T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-58013 https://bugzilla.redhat.com/show_bug.cgi?id=2492248 https://www.cve.org/CVERecord?id=CVE-2026-58013 https://nvd.nist.gov/vuln/detail/CVE-2026-58013 https://gitlab.gnome.org/GNOME/glib/-/issues/3925 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-58013.json", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L", "normalized_severity": "Medium", "package": { "id": "", "name": "glib2", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "5LplZpuSZzAiOH2fmk3HWg==": { "id": "5LplZpuSZzAiOH2fmk3HWg==", "updater": "rhel-vex", "name": "CVE-2025-14104", "description": "A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the `setpwnam()` function, affecting SUID (Set User ID) login-utils utilities writing to the password database.", "issued": "2025-12-05T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2025-14104 https://bugzilla.redhat.com/show_bug.cgi?id=2419369 https://www.cve.org/CVERecord?id=CVE-2025-14104 https://nvd.nist.gov/vuln/detail/CVE-2025-14104 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-14104.json https://access.redhat.com/errata/RHSA-2026:1913", "severity": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "libblkid-devel", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "0:2.37.4-21.el9_7", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "5QvPKgPa787NiewytO5Aqg==": { "id": "5QvPKgPa787NiewytO5Aqg==", "updater": "rhel-vex", "name": "CVE-2026-21710", "description": "A flaw was found in Node.js. A remote attacker can exploit this vulnerability by sending a specially crafted HTTP request that includes a header named `__proto__`. When a Node.js application processes this request and attempts to access distinct headers, it encounters an unhandled error, leading to an application crash. This can result in a Denial of Service (DoS), making the affected service unavailable to users.", "issued": "2026-03-30T19:07:28Z", "links": "https://access.redhat.com/security/cve/CVE-2026-21710 https://bugzilla.redhat.com/show_bug.cgi?id=2453151 https://www.cve.org/CVERecord?id=CVE-2026-21710 https://nvd.nist.gov/vuln/detail/CVE-2026-21710 https://nodejs.org/en/blog/vulnerability/march-2026-security-releases https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-21710.json https://access.redhat.com/errata/RHSA-2026:7302", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "High", "package": { "id": "", "name": "nodejs-libs", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:22.22.2-1.module+el9.7.0+24157+8ddb2461", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "5VGw1oph7DgrzGqxDXSJIA==": { "id": "5VGw1oph7DgrzGqxDXSJIA==", "updater": "rhel-vex", "name": "CVE-2026-42250", "description": "A flaw was found in bzip2. The bzip2recover utility contains an off-by-one error that allows a local attacker to cause an out-of-bounds write to a global buffer by processing a specially crafted file. This memory corruption can lead to a crash, resulting in a Denial of Service (DoS).", "issued": "2026-05-28T13:15:19Z", "links": "https://access.redhat.com/security/cve/CVE-2026-42250 https://bugzilla.redhat.com/show_bug.cgi?id=2482704 https://www.cve.org/CVERecord?id=CVE-2026-42250 https://nvd.nist.gov/vuln/detail/CVE-2026-42250 https://cert.pl/en/posts/2026/05/CVE-2026-42250/ https://sourceware.org/bzip2/ https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42250.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "bzip2", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "5Wx/BMcr6FkgwAbn3tdwLA==": { "id": "5Wx/BMcr6FkgwAbn3tdwLA==", "updater": "rhel-vex", "name": "CVE-2026-48618", "description": "A flaw was found in Node.js. This flaw involves a mismatch in how Node.js handles TLS (Transport Layer Security) hostnames and unicode dot separators during authentication. This mismatch can lead to a wildcard-depth authentication bypass. An attacker could exploit this to bypass intended security boundaries, potentially leading to unauthorized access and confidentiality impact.", "issued": "2026-06-26T01:14:36Z", "links": "https://access.redhat.com/security/cve/CVE-2026-48618 https://bugzilla.redhat.com/show_bug.cgi?id=2493337 https://www.cve.org/CVERecord?id=CVE-2026-48618 https://nvd.nist.gov/vuln/detail/CVE-2026-48618 https://nodejs.org/en/blog/vulnerability/june-2026-security-releases https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-48618.json https://access.redhat.com/errata/RHSA-2026:35892", "severity": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N", "normalized_severity": "High", "package": { "id": "", "name": "nodejs-docs", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "noarch", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:22.23.1-1.module+el9.8.0+24457+996af7aa", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "5ZeuGlt87r+CNRRQDhU5uw==": { "id": "5ZeuGlt87r+CNRRQDhU5uw==", "updater": "rhel-vex", "name": "CVE-2026-5260", "description": "A flaw was found in libgnutls. A remote attacker, by sending an extremely short premaster secret during an RSA key exchange to a server using an RSA key backed by a PKCS#11 token, could trigger a short heap overread. This memory corruption vulnerability could lead to information disclosure.", "issued": "2026-04-29T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-5260 https://bugzilla.redhat.com/show_bug.cgi?id=2467450 https://www.cve.org/CVERecord?id=CVE-2026-5260 https://nvd.nist.gov/vuln/detail/CVE-2026-5260 https://www.gnutls.org/security-new.html#GNUTLS-SA-2026-04-29-10 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-5260.json https://access.redhat.com/errata/RHSA-2026:20612", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "gnutls", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:3.8.10-4.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "5amguv6OT1njd8r+RXMCQQ==": { "id": "5amguv6OT1njd8r+RXMCQQ==", "updater": "rhel-vex", "name": "CVE-2025-66199", "description": "A flaw was found in OpenSSL. A remote attacker can exploit this vulnerability by sending a specially crafted CompressedCertificate message during the TLS 1.3 handshake. This can cause excessive per-connection memory allocations, leading to resource exhaustion and a Denial of Service (DoS) for affected clients and servers. This issue occurs when TLS 1.3 certificate compression is enabled and negotiated.", "issued": "2026-01-27T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2025-66199 https://bugzilla.redhat.com/show_bug.cgi?id=2430379 https://www.cve.org/CVERecord?id=CVE-2025-66199 https://nvd.nist.gov/vuln/detail/CVE-2025-66199 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-66199.json https://access.redhat.com/errata/RHSA-2026:1473", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "openssl-libs", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "1:3.5.1-7.el9_7", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "5d35KoGqN7hqoORJbRxrzg==": { "id": "5d35KoGqN7hqoORJbRxrzg==", "updater": "rhel-vex", "name": "CVE-2026-4437", "description": "A flaw was found in glibc (the GNU C Library). When an application uses the `gethostbyaddr` or `gethostbyaddr_r` functions with a `nsswitch.conf` configuration that specifies glibc's DNS backend, a remote attacker can send a specially crafted DNS (Domain Name System) response. This crafted response can cause the application to incorrectly interpret a non-answer section of the DNS response as a valid answer, leading to potential misbehavior or incorrect information processing.", "issued": "2026-03-20T19:59:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-4437 https://bugzilla.redhat.com/show_bug.cgi?id=2449777 https://www.cve.org/CVERecord?id=CVE-2026-4437 https://nvd.nist.gov/vuln/detail/CVE-2026-4437 https://sourceware.org/bugzilla/show_bug.cgi?id=34014 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-4437.json https://access.redhat.com/errata/RHSA-2026:20597", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L", "normalized_severity": "Medium", "package": { "id": "", "name": "glibc-headers", "version": "", "kind": "binary", "normalized_version": "", "arch": "s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "0:2.34-270.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "5kIWJ0hrLSTGTMvu/m2VBg==": { "id": "5kIWJ0hrLSTGTMvu/m2VBg==", "updater": "rhel-vex", "name": "CVE-2026-15003", "description": "A flaw was found in the GNU Binutils (Binary Utilities) linker. This vulnerability, a heap-buffer-overflow read (CWE-125), occurs when the linker processes a specially crafted 32-bit XCOFF (Extended Common Object File Format) object file. An attacker could exploit this by providing a malicious file, leading to an out-of-bounds read of memory. This can result in information disclosure, potentially revealing sensitive heap data, and a Denial of Service (DoS) due to the linker crashing.", "issued": "2026-07-27T13:15:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-15003 https://bugzilla.redhat.com/show_bug.cgi?id=2497805 https://www.cve.org/CVERecord?id=CVE-2026-15003 https://nvd.nist.gov/vuln/detail/CVE-2026-15003 https://sourceware.org/bugzilla/show_bug.cgi?id=34053 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-15003.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "binutils", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "5mdxwKcXZHEqEguvWMJQ3w==": { "id": "5mdxwKcXZHEqEguvWMJQ3w==", "updater": "rhel-vex", "name": "CVE-2026-34183", "description": "A flaw was found in OpenSSL's QUIC PATH_CHALLENGE handler. A remote attacker can exploit this vulnerability by flooding a QUIC client or server with specially crafted PATH_CHALLENGE frames. This leads to unbounded memory allocation within the local QUIC stack, as the system continuously allocates PATH_RESPONSE frames without them being acknowledged. The primary consequence is a Denial of Service (DoS), causing the affected application to terminate abnormally due to memory exhaustion.", "issued": "2026-06-09T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-34183 https://bugzilla.redhat.com/show_bug.cgi?id=2481885 https://www.cve.org/CVERecord?id=CVE-2026-34183 https://nvd.nist.gov/vuln/detail/CVE-2026-34183 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-34183.json https://access.redhat.com/errata/RHSA-2026:25239", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "openssl", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "1:3.5.5-4.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "5pY8wChj1DLVETzEMa22Ig==": { "id": "5pY8wChj1DLVETzEMa22Ig==", "updater": "rhel-vex", "name": "CVE-2026-31790", "description": "A flaw was found in openssl. Applications that use RSASVE key encapsulation, a method for securely exchanging encryption keys, may inadvertently expose sensitive data. This vulnerability arises when an application processes a malicious, invalid RSA public key provided by an attacker without proper validation. Consequently, the application might send the contents of an uninitialized memory buffer, which could contain confidential information, to the attacker.", "issued": "2026-04-07T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-31790 https://bugzilla.redhat.com/show_bug.cgi?id=2451094 https://www.cve.org/CVERecord?id=CVE-2026-31790 https://nvd.nist.gov/vuln/detail/CVE-2026-31790 https://openssl-library.org/news/secadv/20260407.txt https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-31790.json https://access.redhat.com/errata/RHSA-2026:19218", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "normalized_severity": "Medium", "package": { "id": "", "name": "openssl", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "1:3.5.5-2.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "5snUlx7ztOquC9N7WioMbg==": { "id": "5snUlx7ztOquC9N7WioMbg==", "updater": "rhel-vex", "name": "CVE-2025-58767", "description": "A denial of service flaw has been discovered in the rubygem REXML. Certain input can cause excess cpu usage and given sufficiently large input this can affect program performance.", "issued": "2025-09-17T17:45:58Z", "links": "https://access.redhat.com/security/cve/CVE-2025-58767 https://bugzilla.redhat.com/show_bug.cgi?id=2396186 https://www.cve.org/CVERecord?id=CVE-2025-58767 https://nvd.nist.gov/vuln/detail/CVE-2025-58767 https://github.com/ruby/rexml/commit/5859bdeac792687eaf93d8e8f0b7e3c1e2ed5c23 https://github.com/ruby/rexml/security/advisories/GHSA-c2f4-jgmc-q2r5 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-58767.json https://access.redhat.com/errata/RHSA-2025:23063", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "normalized_severity": "Medium", "package": { "id": "", "name": "ruby-devel", "version": "", "kind": "binary", "normalized_version": "", "module": "ruby:3.3", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "0:3.3.10-5.module+el9.7.0+23651+15dc1615", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "6+K4D2mkqcFFftanju984w==": { "id": "6+K4D2mkqcFFftanju984w==", "updater": "rhel-vex", "name": "CVE-2025-69420", "description": "A flaw was found in OpenSSL. A type confusion vulnerability exists in the TimeStamp Response verification code, where an ASN1_TYPE union member is accessed without proper type validation. A remote attacker can exploit this by providing a malformed TimeStamp Response to an application that verifies timestamp responses. This can lead to an invalid or NULL pointer dereference, resulting in a Denial of Service (DoS) due to an application crash.", "issued": "2026-01-27T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2025-69420 https://bugzilla.redhat.com/show_bug.cgi?id=2430388 https://www.cve.org/CVERecord?id=CVE-2025-69420 https://nvd.nist.gov/vuln/detail/CVE-2025-69420 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-69420.json https://access.redhat.com/errata/RHSA-2026:1473", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "openssl", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "1:3.5.1-7.el9_7", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "6+TrxTb+GrNbsX7xQgQW9Q==": { "id": "6+TrxTb+GrNbsX7xQgQW9Q==", "updater": "rhel-vex", "name": "CVE-2025-11187", "description": "A flaw was found in OpenSSL. When an application processes a maliciously crafted PKCS#12 file, an attacker can exploit a stack buffer overflow or a NULL pointer dereference. This can lead to a denial of service (DoS) by crashing the application, and in some cases, may enable arbitrary code execution. The vulnerability arises from the lack of validation for PBKDF2 salt and keylength parameters within the PKCS#12 file.", "issued": "2026-01-27T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2025-11187 https://bugzilla.redhat.com/show_bug.cgi?id=2430375 https://www.cve.org/CVERecord?id=CVE-2025-11187 https://nvd.nist.gov/vuln/detail/CVE-2025-11187 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-11187.json https://access.redhat.com/errata/RHSA-2026:1473", "severity": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "openssl-devel", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:3.5.1-7.el9_7", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "6+rn6nrQrafYloJtAeJ2Bg==": { "id": "6+rn6nrQrafYloJtAeJ2Bg==", "updater": "rhel-vex", "name": "CVE-2024-11053", "description": "A flaw was found in curl. A logic error when processing credentials from the .netrc file while performing redirects allows the transfer of credentials from the original host to the followed-to host under certain circumstances, leaking the credentials to the followed-to host.", "issued": "2024-12-11T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2024-11053 https://bugzilla.redhat.com/show_bug.cgi?id=2331191 https://www.cve.org/CVERecord?id=CVE-2024-11053 https://nvd.nist.gov/vuln/detail/CVE-2024-11053 https://curl.se/docs/CVE-2024-11053.html https://www.oracle.com/security-alerts/cpujan2025.html#AppendixMSQL https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-11053.json", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "normalized_severity": "Low", "package": { "id": "", "name": "curl", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "6F1zSnZjp7g1twFO1AhdxA==": { "id": "6F1zSnZjp7g1twFO1AhdxA==", "updater": "rhel-vex", "name": "CVE-2026-5450", "description": "A flaw was found in glibc (GNU C Library). This vulnerability occurs when an application uses the `scanf` family of functions with a `%mc` format specifier, which is used for dynamically allocating memory for character input, and provides an explicit width greater than 1024. This specific combination can lead to a one-byte heap buffer overflow, potentially allowing an attacker to corrupt memory.", "issued": "2026-04-20T20:55:41Z", "links": "https://access.redhat.com/security/cve/CVE-2026-5450 https://bugzilla.redhat.com/show_bug.cgi?id=2459853 https://www.cve.org/CVERecord?id=CVE-2026-5450 https://nvd.nist.gov/vuln/detail/CVE-2026-5450 https://inbox.sourceware.org/libc-announce/b11f0003-6ec1-4bd6-b9de-9e38a4efeca3@redhat.com/T/#u https://nvd.nist.gov/vuln/detail/CVE-2026-5450#range-21286997 https://sourceware.org/bugzilla/show_bug.cgi?id=CVE-2026-5450 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-5450.json https://access.redhat.com/errata/RHSA-2026:33226", "severity": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "glibc-gconv-extra", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:2.34-272.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "6G2lzRj8p7v2QJ3GPO3i9Q==": { "id": "6G2lzRj8p7v2QJ3GPO3i9Q==", "updater": "rhel-vex", "name": "CVE-2025-24294", "description": "A denial of service flaw was found in resolv ruby gem. This flaw allows an attacker to craft a malicious DNS packet containing a highly compressed domain name. When the resolv library parses this packet, the name decompression process consumes a large amount of CPU resources, as the library does not limit the resulting length of the name.", "issued": "2025-07-12T03:30:40Z", "links": "https://access.redhat.com/security/cve/CVE-2025-24294 https://bugzilla.redhat.com/show_bug.cgi?id=2379684 https://www.cve.org/CVERecord?id=CVE-2025-24294 https://nvd.nist.gov/vuln/detail/CVE-2025-24294 https://www.ruby-lang.org/en/news/2025/07/08/dos-resolv-cve-2025-24294/ https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-24294.json https://access.redhat.com/errata/RHSA-2025:23063", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "normalized_severity": "Medium", "package": { "id": "", "name": "rubygem-irb", "version": "", "kind": "binary", "normalized_version": "", "module": "ruby:3.3", "arch": "noarch", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "0:1.13.1-5.module+el9.7.0+23651+15dc1615", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "6LOgJE44rXWziB7/OMO/ig==": { "id": "6LOgJE44rXWziB7/OMO/ig==", "updater": "rhel-vex", "name": "CVE-2026-28422", "description": "A flaw was found in Vim, an open-source command-line text editor. A local user could exploit a stack-buffer-overflow vulnerability in the `build_stl_str_hl()` function by rendering a statusline with a multi-byte fill character on a very wide terminal. This could lead to an integrity impact, where data might be modified.", "issued": "2026-02-27T22:08:11Z", "links": "https://access.redhat.com/security/cve/CVE-2026-28422 https://bugzilla.redhat.com/show_bug.cgi?id=2443475 https://www.cve.org/CVERecord?id=CVE-2026-28422 https://nvd.nist.gov/vuln/detail/CVE-2026-28422 https://github.com/vim/vim/commit/4e5b9e31cb7484ad156f https://github.com/vim/vim/releases/tag/v9.2.0078 https://github.com/vim/vim/security/advisories/GHSA-gmqx-prf2-8mwf https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-28422.json", "severity": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:N", "normalized_severity": "Low", "package": { "id": "", "name": "vim", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "6LazNwUBgu5kQGKPCQnaOw==": { "id": "6LazNwUBgu5kQGKPCQnaOw==", "updater": "rhel-vex", "name": "CVE-2026-26269", "description": "A flaw was found in Vim. A stack-based buffer overflow in the NetBeans integration can be triggered in the special_keys function in the src/netbeans.c file via a malicious NetBeans server due to improper bounds checking, most likely resulting in a denial of service or in arbitrary command execution.", "issued": "2026-02-13T19:18:41Z", "links": "https://access.redhat.com/security/cve/CVE-2026-26269 https://bugzilla.redhat.com/show_bug.cgi?id=2439755 https://www.cve.org/CVERecord?id=CVE-2026-26269 https://nvd.nist.gov/vuln/detail/CVE-2026-26269 https://github.com/vim/vim/commit/c5f312aad8e4179e437f81ad39a860cd0ef11970 https://github.com/vim/vim/releases/tag/v9.1.2148 https://github.com/vim/vim/security/advisories/GHSA-9w5c-hwr9-hc68 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-26269.json", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "vim", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "6MW1lRUdNNc4s+6uD2JNvw==": { "id": "6MW1lRUdNNc4s+6uD2JNvw==", "updater": "rhel-vex", "name": "CVE-2022-2286", "description": "Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.", "issued": "2022-07-02T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2022-2286 https://bugzilla.redhat.com/show_bug.cgi?id=2103875 https://www.cve.org/CVERecord?id=CVE-2022-2286 https://nvd.nist.gov/vuln/detail/CVE-2022-2286 https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-2286.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "vim", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "6Mz5HTJNfyHd+tBxi8A32w==": { "id": "6Mz5HTJNfyHd+tBxi8A32w==", "updater": "rhel-vex", "name": "CVE-2026-41316", "description": "A flaw was found in ERB, a templating system for Ruby. An attacker who can trigger deserialization of untrusted data in a Ruby application can bypass existing protections. This vulnerability allows for arbitrary code execution by exploiting specific public methods that evaluate template source code, which were not properly guarded against deserialization attacks.", "issued": "2026-04-24T02:35:41Z", "links": "https://access.redhat.com/security/cve/CVE-2026-41316 https://bugzilla.redhat.com/show_bug.cgi?id=2461369 https://www.cve.org/CVERecord?id=CVE-2026-41316 https://nvd.nist.gov/vuln/detail/CVE-2026-41316 https://github.com/ruby/erb/security/advisories/GHSA-q339-8rmv-2mhv https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-41316.json https://access.redhat.com/errata/RHSA-2026:18030", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "normalized_severity": "High", "package": { "id": "", "name": "rubygem-json", "version": "", "kind": "binary", "normalized_version": "", "module": "ruby:3.3", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "0:2.7.2-6.module+el9.7.0+24248+66578cbb", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "6QirCtH9GCLBepYrxwQRIg==": { "id": "6QirCtH9GCLBepYrxwQRIg==", "updater": "rhel-vex", "name": "CVE-2026-25646", "description": "A heap based buffer overflow flaw has been discovered in LibPNG. Prior to version 1.6.55, an out-of-bounds read vulnerability exists in the png_set_quantize() API function. When the function is called with no histogram and the number of colors in the palette is more than twice the maximum supported by the user's display, certain palettes will cause the function to enter into an infinite loop that reads past the end of an internal heap-allocated buffer. The images that trigger this vulnerability are valid per the PNG specification.", "issued": "2026-02-10T17:04:38Z", "links": "https://access.redhat.com/security/cve/CVE-2026-25646 https://bugzilla.redhat.com/show_bug.cgi?id=2438542 https://www.cve.org/CVERecord?id=CVE-2026-25646 https://nvd.nist.gov/vuln/detail/CVE-2026-25646 http://www.openwall.com/lists/oss-security/2026/02/09/7 https://github.com/pnggroup/libpng/commit/01d03b8453eb30ade759cd45c707e5a1c7277d88 https://github.com/pnggroup/libpng/security/advisories/GHSA-g8hp-mq4h-rqm3 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-25646.json https://access.redhat.com/errata/RHSA-2026:3405", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H", "normalized_severity": "High", "package": { "id": "", "name": "libpng", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "2:1.6.37-12.el9_7.2", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "6ULb2hTeXRKRWDAjQMdnAQ==": { "id": "6ULb2hTeXRKRWDAjQMdnAQ==", "updater": "rhel-vex", "name": "CVE-2026-5928", "description": "A flaw was found in glibc (GNU C Library). When the `ungetwc` function is called on a file stream using wide characters with specific overlapping single-byte and multi-byte encodings, it may attempt to read data outside of its allocated buffer. This can lead to the unintentional disclosure of sensitive information from memory or cause the program to crash, resulting in a denial of service.", "issued": "2026-04-20T20:37:31Z", "links": "https://access.redhat.com/security/cve/CVE-2026-5928 https://bugzilla.redhat.com/show_bug.cgi?id=2459854 https://www.cve.org/CVERecord?id=CVE-2026-5928 https://nvd.nist.gov/vuln/detail/CVE-2026-5928 https://sourceware.org/bugzilla/show_bug.cgi?id=33998 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-5928.json https://access.redhat.com/errata/RHSA-2026:42952", "severity": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "glibc-headers", "version": "", "kind": "binary", "normalized_version": "", "arch": "s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "0:2.34-274.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "6asSIEJz7ggo9QEXpbSOYg==": { "id": "6asSIEJz7ggo9QEXpbSOYg==", "updater": "rhel-vex", "name": "CVE-2023-48236", "description": "A flaw was found in Vim, an open source command line text editor. When using the z= command, the user may overflow the count with values larger than MAX_INT. The impact is low because user interaction is required and a crash may not happen in all situations.", "issued": "2023-11-16T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2023-48236 https://bugzilla.redhat.com/show_bug.cgi?id=2250273 https://www.cve.org/CVERecord?id=CVE-2023-48236 https://nvd.nist.gov/vuln/detail/CVE-2023-48236 http://www.openwall.com/lists/oss-security/2023/11/16/1 https://github.com/vim/vim/commit/73b2d3790cad5694fc0ed0db2926e4220c48d968 https://github.com/vim/vim/security/advisories/GHSA-pr4c-932v-8hx5 https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-48236.json", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "normalized_severity": "Low", "package": { "id": "", "name": "vim", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "6dwQWrojfQ/1hgTT2PQckg==": { "id": "6dwQWrojfQ/1hgTT2PQckg==", "updater": "rhel-vex", "name": "CVE-2022-2129", "description": "Out-of-bounds Write in GitHub repository vim/vim prior to 8.2.", "issued": "2022-06-19T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2022-2129 https://bugzilla.redhat.com/show_bug.cgi?id=2099586 https://www.cve.org/CVERecord?id=CVE-2022-2129 https://nvd.nist.gov/vuln/detail/CVE-2022-2129 https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-2129.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "vim", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "6hAQW3vY9ZA/8datv1rY4g==": { "id": "6hAQW3vY9ZA/8datv1rY4g==", "updater": "rhel-vex", "name": "CVE-2024-41996", "description": "A vulnerability was found in the Diffie-Hellman Ephemeral (DHE) Key Agreement Protocol, where a malicious client can exploit the server's public key validation process. By forcing the server to use DHE and validating the order of public keys, the client can trigger expensive server-side modular exponentiation calculations. This issue results in asymmetric resource consumption, potentially leading to a denial of service (DoS) attack by overwhelming the server with computationally intensive operations.", "issued": "2024-08-26T06:15:04Z", "links": "https://access.redhat.com/security/cve/CVE-2024-41996 https://bugzilla.redhat.com/show_bug.cgi?id=2307826 https://www.cve.org/CVERecord?id=CVE-2024-41996 https://nvd.nist.gov/vuln/detail/CVE-2024-41996 https://dheatattack.gitlab.io/details/ https://dheatattack.gitlab.io/faq/ https://gist.github.com/c0r0n3r/abccc14d4d96c0442f3a77fa5ca255d1 https://github.com/openssl/openssl/issues/17374 https://openssl-library.org/post/2022-10-21-tls-groups-configuration/ https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-41996.json", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "openssl", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "6o8ui0RxMttDzkyqTDO5tg==": { "id": "6o8ui0RxMttDzkyqTDO5tg==", "updater": "rhel-vex", "name": "CVE-2022-1616", "description": "A flaw was found in vim, which is vulnerable to a heap-buffer-overflow in append_command of the src/ex_docmd.c function. This flaw allows a specially crafted file to crash software, modify memory, or execute code when opened in vim.", "issued": "2022-05-07T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2022-1616 https://bugzilla.redhat.com/show_bug.cgi?id=2083017 https://www.cve.org/CVERecord?id=CVE-2022-1616 https://nvd.nist.gov/vuln/detail/CVE-2022-1616 https://huntr.dev/bounties/40f1d75f-fb2f-4281-b585-a41017f217e2/ https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-1616.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "vim", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "6pxKX6FKH4aTek+6noKFjQ==": { "id": "6pxKX6FKH4aTek+6noKFjQ==", "updater": "rhel-vex", "name": "CVE-2026-42009", "description": "A flaw was found in gnutls. A remote attacker could exploit an issue in the Datagram Transport Layer Security (DTLS) packet reordering logic. The comparator function, responsible for ordering DTLS packets by sequence numbers, did not correctly handle packets with duplicate sequence numbers. This could lead to unstable packet ordering or undefined behavior, resulting in a denial of service.", "issued": "2026-04-29T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-42009 https://bugzilla.redhat.com/show_bug.cgi?id=2467279 https://www.cve.org/CVERecord?id=CVE-2026-42009 https://nvd.nist.gov/vuln/detail/CVE-2026-42009 https://www.gnutls.org/security-new.html#GNUTLS-SA-2026-04-29-2 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42009.json https://access.redhat.com/errata/RHSA-2026:20612", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "High", "package": { "id": "", "name": "gnutls", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:3.8.10-4.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "6rEIsdyQtCC456AuGwgsDQ==": { "id": "6rEIsdyQtCC456AuGwgsDQ==", "updater": "rhel-vex", "name": "CVE-2025-15079", "description": "A flaw was found in curl. When performing SSH-based transfers using SCP or SFTP, libcurl could mistakenly connect to hosts not listed in the user-specified knownhosts file. This occurs if the host is present in the libssh global knownhosts file, effectively bypassing the intended host verification. This could allow a remote attacker to connect to an untrusted host, potentially leading to information disclosure or man-in-the-middle attacks.", "issued": "2026-01-07T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2025-15079 https://bugzilla.redhat.com/show_bug.cgi?id=2426409 https://www.cve.org/CVERecord?id=CVE-2025-15079 https://nvd.nist.gov/vuln/detail/CVE-2025-15079 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-15079.json", "severity": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "normalized_severity": "Low", "package": { "id": "", "name": "curl", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "71C1Nt6KoL1+Dpr0rTxWwA==": { "id": "71C1Nt6KoL1+Dpr0rTxWwA==", "updater": "rhel-vex", "name": "CVE-2026-12151", "description": "A flaw was found in undici. A malicious WebSocket server can exploit this by streaming numerous small or empty continuation frames. This can bypass per-frame and cumulative-size validation, leading to unbounded memory growth in the client process. The primary consequence is memory exhaustion, resulting in a denial of service (DoS) for affected applications using the undici WebSocket client or WebSocketStream API.", "issued": "2026-06-17T16:05:38Z", "links": "https://access.redhat.com/security/cve/CVE-2026-12151 https://bugzilla.redhat.com/show_bug.cgi?id=2489980 https://www.cve.org/CVERecord?id=CVE-2026-12151 https://nvd.nist.gov/vuln/detail/CVE-2026-12151 https://cna.openjsf.org/security-advisories.html https://github.com/nodejs/undici/security/advisories/GHSA-vxpw-j846-p89q https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-12151.json https://access.redhat.com/errata/RHSA-2026:35892", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "High", "package": { "id": "", "name": "nodejs-libs", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:22.23.1-1.module+el9.8.0+24457+996af7aa", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "75iSdAKFlPvTmCAp8d99YQ==": { "id": "75iSdAKFlPvTmCAp8d99YQ==", "updater": "rhel-vex", "name": "CVE-2026-44431", "description": "A flaw was found in urllib3, an HTTP client library for Python. When using the low-level API via `ProxyManager.connection_from_url().urlopen()` with `assert_same_host=False`, cross-origin redirects can still forward sensitive headers. This could allow a remote attacker to gain unauthorized access to sensitive information.", "issued": "2026-05-13T15:20:24Z", "links": "https://access.redhat.com/security/cve/CVE-2026-44431 https://bugzilla.redhat.com/show_bug.cgi?id=2477167 https://www.cve.org/CVERecord?id=CVE-2026-44431 https://nvd.nist.gov/vuln/detail/CVE-2026-44431 https://github.com/urllib3/urllib3/security/advisories/GHSA-qccp-gfcp-xxvc https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-44431.json https://access.redhat.com/errata/RHSA-2026:28158", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "normalized_severity": "Medium", "package": { "id": "", "name": "python3-urllib3", "version": "", "kind": "binary", "normalized_version": "", "arch": "noarch", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:1.26.5-8.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "76eg4nI+WwZq6jvunMGVEQ==": { "id": "76eg4nI+WwZq6jvunMGVEQ==", "updater": "rhel-vex", "name": "CVE-2026-6238", "description": "A flaw was found in glibc (GNU C Library). The deprecated functions ns_printrrf, ns_printrr, and fp_nquery do not properly validate the length of RDATA (Resource Record Data) in a DNS (Domain Name System) response when processing specific record types like LOC, CERT, TKEY, or TSIG. A remote attacker could craft a malicious DNS response, leading to a target application crashing or reading uninitialized memory. These functions are intended for application debugging and are not part of the standard DNS resolver path.", "issued": "2026-04-28T16:43:08Z", "links": "https://access.redhat.com/security/cve/CVE-2026-6238 https://bugzilla.redhat.com/show_bug.cgi?id=2463539 https://www.cve.org/CVERecord?id=CVE-2026-6238 https://nvd.nist.gov/vuln/detail/CVE-2026-6238 https://inbox.sourceware.org/libc-announce/7a655d55-276f-41fe-b550-feb3ebb2ce91@redhat.com/T/#u https://sourceware.org/bugzilla/show_bug.cgi?id=34069 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6238.json https://access.redhat.com/errata/RHSA-2026:42952", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "glibc-common", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:2.34-274.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "76mWuVYhbmIFsc4DNorK9A==": { "id": "76mWuVYhbmIFsc4DNorK9A==", "updater": "rhel-vex", "name": "CVE-2025-5917", "description": "A vulnerability has been identified in the libarchive library. This flaw involves an 'off-by-one' miscalculation when handling prefixes and suffixes for file names. This can lead to a 1-byte write overflow. While seemingly small, such an overflow can corrupt adjacent memory, leading to unpredictable program behavior, crashes, or in specific circumstances, could be leveraged as a building block for more sophisticated exploitation. This bug affects libarchive versions prior to 3.8.0.", "issued": "2025-05-20T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2025-5917 https://bugzilla.redhat.com/show_bug.cgi?id=2370874 https://www.cve.org/CVERecord?id=CVE-2025-5917 https://nvd.nist.gov/vuln/detail/CVE-2025-5917 https://github.com/libarchive/libarchive/pull/2588 https://github.com/libarchive/libarchive/releases/tag/v3.8.0 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-5917.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L", "normalized_severity": "Low", "package": { "id": "", "name": "libarchive", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "76z9Mpn8Jp7lhZSPsHTHug==": { "id": "76z9Mpn8Jp7lhZSPsHTHug==", "updater": "rhel-vex", "name": "CVE-2025-68973", "description": "A flaw was found in GnuPG. An attacker can provide crafted input to the `armor_filter` function, which incorrectly increments an index variable, leading to an out-of-bounds write. This memory corruption vulnerability may allow for information disclosure and could potentially lead to arbitrary code execution.", "issued": "2025-12-28T16:19:11Z", "links": "https://access.redhat.com/security/cve/CVE-2025-68973 https://bugzilla.redhat.com/show_bug.cgi?id=2425966 https://www.cve.org/CVERecord?id=CVE-2025-68973 https://nvd.nist.gov/vuln/detail/CVE-2025-68973 https://github.com/gpg/gnupg/blob/ff30683418695f5d2cc9e6cf8c9418e09378ebe4/g10/armor.c#L1305-L1306 https://github.com/gpg/gnupg/commit/115d138ba599328005c5321c0ef9f00355838ca9 https://gpg.fail/memcpy https://news.ycombinator.com/item?id=46403200 https://www.openwall.com/lists/oss-security/2025/12/28/5 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-68973.json https://access.redhat.com/errata/RHSA-2026:0719", "severity": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N", "normalized_severity": "High", "package": { "id": "", "name": "gnupg2", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:2.3.3-5.el9_7", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "7AoZZiCMmvqX9d9WD62FnQ==": { "id": "7AoZZiCMmvqX9d9WD62FnQ==", "updater": "rhel-vex", "name": "CVE-2023-4781", "description": "Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1873.", "issued": "2023-09-05T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2023-4781 https://bugzilla.redhat.com/show_bug.cgi?id=2237575 https://www.cve.org/CVERecord?id=CVE-2023-4781 https://nvd.nist.gov/vuln/detail/CVE-2023-4781 https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-4781.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "vim", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "7CfySs4FmTkWgJPjEar4eg==": { "id": "7CfySs4FmTkWgJPjEar4eg==", "updater": "rhel-vex", "name": "CVE-2026-13595", "description": "A flaw was found in the libblkid library of util-linux. During nested partition probing, the BSD, Minix, Solaris x86, and UnixWare partition probers cache a raw pointer to a parent partition entry in a dynamically allocated array. When subsequent partition additions cause the array to be reallocated, this pointer becomes stale, leading to a heap use-after-free read. An attacker who can present a crafted block device image (for example, via USB insertion or a loop-mounted disk image) can trigger this flaw without user interaction, as libblkid is invoked automatically by udev/udisks as root on block-device hot-plug events. This could lead to limited information disclosure or denial of service.", "issued": "2026-05-07T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-13595 https://bugzilla.redhat.com/show_bug.cgi?id=2494101 https://www.cve.org/CVERecord?id=CVE-2026-13595 https://nvd.nist.gov/vuln/detail/CVE-2026-13595 https://github.com/util-linux/util-linux/commit/c0186f14fbdb02f64c8e0ba701ce727ea764ff4c https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-13595.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "util-linux", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "7KIsr/dNSaeE3wdgBYfrgQ==": { "id": "7KIsr/dNSaeE3wdgBYfrgQ==", "updater": "rhel-vex", "name": "CVE-2026-56392", "description": "A flaw was found in GNU coreutils, specifically in the `unexpand` utility. This vulnerability, a heap-based buffer overflow, occurs due to an integer overflow when `unexpand` processes unusually large tab stop values provided by a local attacker. This can lead to an undersized memory buffer, allowing subsequent operations to write beyond its boundaries. Successful exploitation can cause the `unexpand` utility to crash, potentially resulting in a denial of service or enabling further memory manipulation.", "issued": "2026-07-24T07:44:54Z", "links": "https://access.redhat.com/security/cve/CVE-2026-56392 https://bugzilla.redhat.com/show_bug.cgi?id=2506694 https://www.cve.org/CVERecord?id=CVE-2026-56392 https://nvd.nist.gov/vuln/detail/CVE-2026-56392 https://cert.pl/en/posts/2026/07/CVE-2026-56391 https://git.savannah.gnu.org/cgit/coreutils.git/ https://git.savannah.gnu.org/cgit/coreutils.git/commit/?id=b60a159fdc5bfcf9988d3a4cb6f53abe8ad5d35d https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-56392.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L", "normalized_severity": "Medium", "package": { "id": "", "name": "coreutils", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "7d4YdteAff532bV2Gg5lmw==": { "id": "7d4YdteAff532bV2Gg5lmw==", "updater": "rhel-vex", "name": "CVE-2026-22795", "description": "A flaw was found in OpenSSL. This type confusion vulnerability allows a remote attacker to cause a Denial of Service (DoS) by tricking a user or application into processing a maliciously crafted PKCS#12 (Personal Information Exchange Syntax Standard) file. The vulnerability leads to an invalid or NULL pointer dereference, resulting in an application crash.", "issued": "2026-01-27T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-22795 https://bugzilla.redhat.com/show_bug.cgi?id=2430389 https://www.cve.org/CVERecord?id=CVE-2026-22795 https://nvd.nist.gov/vuln/detail/CVE-2026-22795 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-22795.json https://access.redhat.com/errata/RHSA-2026:1473", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "openssl", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "1:3.5.1-7.el9_7", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "7sGexlbSpX41SOBbWHg8BQ==": { "id": "7sGexlbSpX41SOBbWHg8BQ==", "updater": "rhel-vex", "name": "CVE-2026-39881", "description": "A flaw was found in Vim. A command injection vulnerability in Vim's NetBeans interface allows a malicious NetBeans server to execute arbitrary Ex commands when Vim connects to it. This occurs due to unsanitized strings in the defineAnnoType and specialKeys protocol messages, leading to arbitrary code execution.", "issued": "2026-04-08T20:18:19Z", "links": "https://access.redhat.com/security/cve/CVE-2026-39881 https://bugzilla.redhat.com/show_bug.cgi?id=2456722 https://www.cve.org/CVERecord?id=CVE-2026-39881 https://nvd.nist.gov/vuln/detail/CVE-2026-39881 https://github.com/vim/vim/commit/7ab76a86048ed492374ac6b19 https://github.com/vim/vim/releases/tag/v9.2.0316 https://github.com/vim/vim/security/advisories/GHSA-mr87-rhgv-7pw6 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-39881.json", "severity": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:H/A:N", "normalized_severity": "Medium", "package": { "id": "", "name": "vim", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "7tbcfIdYm3nwAiNQR5eK/Q==": { "id": "7tbcfIdYm3nwAiNQR5eK/Q==", "updater": "rhel-vex", "name": "CVE-2025-15467", "description": "A flaw was found in OpenSSL. A remote attacker can exploit a stack buffer overflow vulnerability by supplying a crafted Cryptographic Message Syntax (CMS) message with an oversized Initialization Vector (IV) when parsing AuthEnvelopedData structures that use Authenticated Encryption with Associated Data (AEAD) ciphers such as AES-GCM. This can lead to a crash, causing a Denial of Service (DoS), or potentially allow for remote code execution.", "issued": "2026-01-27T14:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2025-15467 https://bugzilla.redhat.com/show_bug.cgi?id=2430376 https://www.cve.org/CVERecord?id=CVE-2025-15467 https://nvd.nist.gov/vuln/detail/CVE-2025-15467 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-15467.json https://access.redhat.com/errata/RHSA-2026:1473", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "normalized_severity": "High", "package": { "id": "", "name": "openssl", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "1:3.5.1-7.el9_7", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "8563iLEht/ghMGItALTFUw==": { "id": "8563iLEht/ghMGItALTFUw==", "updater": "rhel-vex", "name": "CVE-2026-28419", "description": "A flaw was found in Vim, an open-source command-line text editor. This vulnerability, a heap-based buffer underflow, occurs when Vim processes a specially crafted Emacs-style tags file. If a malicious file with a delimiter at the start of a line is opened, Vim attempts to read memory outside its designated area. This could lead to the disclosure of sensitive information or cause the application to crash, resulting in a denial of service.", "issued": "2026-02-27T22:02:55Z", "links": "https://access.redhat.com/security/cve/CVE-2026-28419 https://bugzilla.redhat.com/show_bug.cgi?id=2443482 https://www.cve.org/CVERecord?id=CVE-2026-28419 https://nvd.nist.gov/vuln/detail/CVE-2026-28419 https://github.com/vim/vim/commit/9b7dfa2948c9e1e5e32a5812 https://github.com/vim/vim/releases/tag/v9.2.0075 https://github.com/vim/vim/security/advisories/GHSA-xcc8-r6c5-hvwv https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-28419.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L", "normalized_severity": "Medium", "package": { "id": "", "name": "vim", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "8MfvwX+dRI6Qt2H+x71rZg==": { "id": "8MfvwX+dRI6Qt2H+x71rZg==", "updater": "rhel-vex", "name": "CVE-2025-15224", "description": "A flaw was found in libcurl. When doing SSH-based transfers using either SCP or SFTP, and asked to do\npublic key authentication, curl would wrongly still ask and authenticate using\na locally running SSH agent.", "issued": "2026-01-07T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2025-15224 https://bugzilla.redhat.com/show_bug.cgi?id=2426410 https://www.cve.org/CVERecord?id=CVE-2025-15224 https://nvd.nist.gov/vuln/detail/CVE-2025-15224 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-15224.json", "severity": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N", "normalized_severity": "Low", "package": { "id": "", "name": "curl", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "8XLKalkulxeAh8qfecmGlA==": { "id": "8XLKalkulxeAh8qfecmGlA==", "updater": "rhel-vex", "name": "CVE-2025-66861", "description": "A flaw was found in binutils. Processing a specially crafted PE file with cxxfilt can trigger an out-of-bounds read in the d_unqualified_name function in the cp-demangle.c file, causing a crash and resulting in a denial of service.", "issued": "2025-12-29T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2025-66861 https://bugzilla.redhat.com/show_bug.cgi?id=2425823 https://www.cve.org/CVERecord?id=CVE-2025-66861 https://nvd.nist.gov/vuln/detail/CVE-2025-66861 https://github.com/caozhzh/CRGF-Vul/blob/main/cxxfilt/crash1.md https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-66861.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "normalized_severity": "Low", "package": { "id": "", "name": "binutils", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "8ZCpE1M7eqNdy615aO2gLQ==": { "id": "8ZCpE1M7eqNdy615aO2gLQ==", "updater": "rhel-vex", "name": "CVE-2026-0992", "description": "A flaw was found in the libxml2 library. This uncontrolled resource consumption vulnerability occurs when processing XML catalogs that contain repeated \u003cnextCatalog\u003e elements pointing to the same downstream catalog. A remote attacker can exploit this by supplying crafted catalogs, causing the parser to redundantly traverse catalog chains. This leads to excessive CPU consumption and degrades application availability, resulting in a denial-of-service condition.", "issued": "2026-01-15T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-0992 https://bugzilla.redhat.com/show_bug.cgi?id=2429975 https://www.cve.org/CVERecord?id=CVE-2026-0992 https://nvd.nist.gov/vuln/detail/CVE-2026-0992 https://gitlab.gnome.org/GNOME/libxml2/-/issues/1019 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-0992.json", "severity": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L", "normalized_severity": "Low", "package": { "id": "", "name": "libxml2", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "8efBqSZ3OYqd+nT8a21FNA==": { "id": "8efBqSZ3OYqd+nT8a21FNA==", "updater": "rhel-vex", "name": "CVE-2022-2287", "description": "Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.", "issued": "2022-07-03T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2022-2287 https://bugzilla.redhat.com/show_bug.cgi?id=2103876 https://www.cve.org/CVERecord?id=CVE-2022-2287 https://nvd.nist.gov/vuln/detail/CVE-2022-2287 https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-2287.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "vim", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "8gSzZr+GPWdWrD28SEc1Pg==": { "id": "8gSzZr+GPWdWrD28SEc1Pg==", "updater": "rhel-vex", "name": "CVE-2026-5450", "description": "A flaw was found in glibc (GNU C Library). This vulnerability occurs when an application uses the `scanf` family of functions with a `%mc` format specifier, which is used for dynamically allocating memory for character input, and provides an explicit width greater than 1024. This specific combination can lead to a one-byte heap buffer overflow, potentially allowing an attacker to corrupt memory.", "issued": "2026-04-20T20:55:41Z", "links": "https://access.redhat.com/security/cve/CVE-2026-5450 https://bugzilla.redhat.com/show_bug.cgi?id=2459853 https://www.cve.org/CVERecord?id=CVE-2026-5450 https://nvd.nist.gov/vuln/detail/CVE-2026-5450 https://inbox.sourceware.org/libc-announce/b11f0003-6ec1-4bd6-b9de-9e38a4efeca3@redhat.com/T/#u https://nvd.nist.gov/vuln/detail/CVE-2026-5450#range-21286997 https://sourceware.org/bugzilla/show_bug.cgi?id=CVE-2026-5450 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-5450.json https://access.redhat.com/errata/RHSA-2026:33226", "severity": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "glibc", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:2.34-272.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "8hlo60BBnOd97TpyGOfaLA==": { "id": "8hlo60BBnOd97TpyGOfaLA==", "updater": "rhel-vex", "name": "CVE-2026-5928", "description": "A flaw was found in glibc (GNU C Library). When the `ungetwc` function is called on a file stream using wide characters with specific overlapping single-byte and multi-byte encodings, it may attempt to read data outside of its allocated buffer. This can lead to the unintentional disclosure of sensitive information from memory or cause the program to crash, resulting in a denial of service.", "issued": "2026-04-20T20:37:31Z", "links": "https://access.redhat.com/security/cve/CVE-2026-5928 https://bugzilla.redhat.com/show_bug.cgi?id=2459854 https://www.cve.org/CVERecord?id=CVE-2026-5928 https://nvd.nist.gov/vuln/detail/CVE-2026-5928 https://sourceware.org/bugzilla/show_bug.cgi?id=33998 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-5928.json https://access.redhat.com/errata/RHSA-2026:42952", "severity": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "glibc-common", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:2.34-274.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "8kndQj/aRn+NNJdGVP9v4g==": { "id": "8kndQj/aRn+NNJdGVP9v4g==", "updater": "rhel-vex", "name": "CVE-2023-45322", "description": "A flaw was found in libxml2. In an out-of-memory condition or when limiting the memory allocation, processing a XML document using the HTML parser may result in a use-after-free vulnerability.", "issued": "2023-08-23T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2023-45322 https://bugzilla.redhat.com/show_bug.cgi?id=2242945 https://www.cve.org/CVERecord?id=CVE-2023-45322 https://nvd.nist.gov/vuln/detail/CVE-2023-45322 https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-45322.json", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "libxml2", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "8zIRit7VqNRaBPLxL/+VAg==": { "id": "8zIRit7VqNRaBPLxL/+VAg==", "updater": "rhel-vex", "name": "CVE-2025-66471", "description": "A decompression handling flaw has been discovered in urllib3. When streaming a compressed response, urllib3 can perform decoding or decompression based on the HTTP Content-Encoding header (e.g., gzip, deflate, br, or zstd). The library must read compressed data from the network and decompress it until the requested chunk size is met. Any resulting decompressed data that exceeds the requested amount is held in an internal buffer for the next read operation. The decompression logic could cause urllib3 to fully decode a small amount of highly compressed data in a single operation. This can result in excessive resource consumption (high CPU usage and massive memory allocation for the decompressed data; CWE-409) on the client side, even if the application only requested a small chunk of data.", "issued": "2025-12-05T16:06:08Z", "links": "https://access.redhat.com/security/cve/CVE-2025-66471 https://bugzilla.redhat.com/show_bug.cgi?id=2419467 https://www.cve.org/CVERecord?id=CVE-2025-66471 https://nvd.nist.gov/vuln/detail/CVE-2025-66471 https://github.com/urllib3/urllib3/commit/c19571de34c47de3a766541b041637ba5f716ed7 https://github.com/urllib3/urllib3/security/advisories/GHSA-2xpw-w6gg-jr37 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-66471.json https://access.redhat.com/errata/RHSA-2026:1087", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "High", "package": { "id": "", "name": "python3-urllib3", "version": "", "kind": "binary", "normalized_version": "", "arch": "noarch", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:1.26.5-6.el9_7.1", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "922No9XwoInf4IDk2/SEuA==": { "id": "922No9XwoInf4IDk2/SEuA==", "updater": "rhel-vex", "name": "CVE-2026-9150", "description": "A flaw was found in libsolv. This stack-based buffer overflow vulnerability occurs in libsolv's Debian metadata parser when processing specially crafted Debian repository metadata. An attacker could exploit this by providing malicious SHA384 or SHA512 checksum tags, leading to memory corruption and a denial of service (DoS) in the affected system.", "issued": "2026-05-20T22:59:46Z", "links": "https://access.redhat.com/security/cve/CVE-2026-9150 https://bugzilla.redhat.com/show_bug.cgi?id=2460379 https://www.cve.org/CVERecord?id=CVE-2026-9150 https://nvd.nist.gov/vuln/detail/CVE-2026-9150 https://github.com/openSUSE/libsolv/pull/616 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-9150.json", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "libsolv", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "93O9BjbBwz1jYmTNCzgkUw==": { "id": "93O9BjbBwz1jYmTNCzgkUw==", "updater": "rhel-vex", "name": "CVE-2022-2849", "description": "Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0220.", "issued": "2022-08-17T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2022-2849 https://bugzilla.redhat.com/show_bug.cgi?id=2122137 https://www.cve.org/CVERecord?id=CVE-2022-2849 https://nvd.nist.gov/vuln/detail/CVE-2022-2849 https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-2849.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L", "normalized_severity": "Low", "package": { "id": "", "name": "vim", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "9ANhoIvfhYS2Fj0QOQtcOg==": { "id": "9ANhoIvfhYS2Fj0QOQtcOg==", "updater": "rhel-vex", "name": "CVE-2025-14512", "description": "A flaw was found in glib. This vulnerability allows a heap buffer overflow and denial-of-service (DoS) via an integer overflow in GLib's GIO (GLib Input/Output) escape_byte_string() function when processing malicious file or remote filesystem attribute values.", "issued": "2025-12-11T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2025-14512 https://bugzilla.redhat.com/show_bug.cgi?id=2421339 https://www.cve.org/CVERecord?id=CVE-2025-14512 https://nvd.nist.gov/vuln/detail/CVE-2025-14512 https://gitlab.gnome.org/GNOME/glib/-/issues/3845 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-14512.json https://access.redhat.com/errata/RHSA-2026:15971", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "glib2", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:2.68.4-18.el9_7.2", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "9B4gl+qnaOhRLjmkdKMYbw==": { "id": "9B4gl+qnaOhRLjmkdKMYbw==", "updater": "rhel-vex", "name": "CVE-2025-24294", "description": "A denial of service flaw was found in resolv ruby gem. This flaw allows an attacker to craft a malicious DNS packet containing a highly compressed domain name. When the resolv library parses this packet, the name decompression process consumes a large amount of CPU resources, as the library does not limit the resulting length of the name.", "issued": "2025-07-12T03:30:40Z", "links": "https://access.redhat.com/security/cve/CVE-2025-24294 https://bugzilla.redhat.com/show_bug.cgi?id=2379684 https://www.cve.org/CVERecord?id=CVE-2025-24294 https://nvd.nist.gov/vuln/detail/CVE-2025-24294 https://www.ruby-lang.org/en/news/2025/07/08/dos-resolv-cve-2025-24294/ https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-24294.json https://access.redhat.com/errata/RHSA-2025:23063", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "normalized_severity": "Medium", "package": { "id": "", "name": "ruby", "version": "", "kind": "binary", "normalized_version": "", "module": "ruby:3.3", "arch": "aarch64|i686|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "0:3.3.10-5.module+el9.7.0+23651+15dc1615", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "9DXLRStQLAgyQnNJqYTJEA==": { "id": "9DXLRStQLAgyQnNJqYTJEA==", "updater": "rhel-vex", "name": "CVE-2026-6733", "description": "A flaw was found in undici. An attacker-controlled upstream server can exploit a vulnerability in Undici's HTTP/1.1 client, specifically related to response queue poisoning on reused keep-alive sockets. This allows the attacker to inject an unsolicited HTTP/1.1 response onto an idle socket. Consequently, when the client dispatches a new request on that socket, it may associate the injected response with the new request, leading to responses being delivered to unintended recipients or requests. This could result in a low impact on data integrity.", "issued": "2026-06-17T17:14:50Z", "links": "https://access.redhat.com/security/cve/CVE-2026-6733 https://bugzilla.redhat.com/show_bug.cgi?id=2490006 https://www.cve.org/CVERecord?id=CVE-2026-6733 https://nvd.nist.gov/vuln/detail/CVE-2026-6733 https://cna.openjsf.org/security-advisories.html https://github.com/nodejs/undici/security/advisories/GHSA-35p6-xmwp-9g52 https://hackerone.com/reports/3582376 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6733.json https://access.redhat.com/errata/RHSA-2026:35892", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N", "normalized_severity": "Low", "package": { "id": "", "name": "nodejs", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "aarch64|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:22.23.1-1.module+el9.8.0+24457+996af7aa", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "9GliauANgklOt4mKxwOygQ==": { "id": "9GliauANgklOt4mKxwOygQ==", "updater": "rhel-vex", "name": "CVE-2026-42246", "description": "A flaw was found in the Ruby net-imap library. When upgrading a cleartext IMAP connection to TLS using the Net::IMAP#starttls method, the library improperly handles certain responses received during STARTTLS negotiation. A man-in-the-middle (MITM) attacker can inject a predicted tagged OK response before the client completes the STARTTLS command, causing the operation to appear successful without establishing a TLS session. As a result, the connection may continue to transmit sensitive information in cleartext and enable modification of data exchanged over the affected connection, while the application incorrectly believes that encryption has been enabled.", "issued": "2026-05-09T19:33:17Z", "links": "https://access.redhat.com/security/cve/CVE-2026-42246 https://bugzilla.redhat.com/show_bug.cgi?id=2468499 https://www.cve.org/CVERecord?id=CVE-2026-42246 https://nvd.nist.gov/vuln/detail/CVE-2026-42246 https://github.com/ruby/net-imap/commit/0ede4c40b1523dfeaf95777b2678e54cc0fd9618 https://github.com/ruby/net-imap/commit/24a4e770b43230286a05aa2a9746cdbb3eb8485e https://github.com/ruby/net-imap/commit/97e2488fb5401a1783bddd959dde007d9fbce42c https://github.com/ruby/net-imap/commit/f79d35bf5833f186e81044c57c843eda30c873da https://github.com/ruby/net-imap/releases/tag/v0.3.10 https://github.com/ruby/net-imap/releases/tag/v0.4.24 https://github.com/ruby/net-imap/releases/tag/v0.5.14 https://github.com/ruby/net-imap/security/advisories/GHSA-vcgp-9326-pqcp https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42246.json https://access.redhat.com/errata/RHSA-2026:33576", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "normalized_severity": "High", "package": { "id": "", "name": "rubygem-rdoc", "version": "", "kind": "binary", "normalized_version": "", "module": "ruby:3.3", "arch": "noarch", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "0:6.6.3.1-7.module+el9.8.0+24406+8975e57f", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "9K1bGbpJNlcAkIrOMal8Gw==": { "id": "9K1bGbpJNlcAkIrOMal8Gw==", "updater": "rhel-vex", "name": "CVE-2026-31790", "description": "A flaw was found in openssl. Applications that use RSASVE key encapsulation, a method for securely exchanging encryption keys, may inadvertently expose sensitive data. This vulnerability arises when an application processes a malicious, invalid RSA public key provided by an attacker without proper validation. Consequently, the application might send the contents of an uninitialized memory buffer, which could contain confidential information, to the attacker.", "issued": "2026-04-07T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-31790 https://bugzilla.redhat.com/show_bug.cgi?id=2451094 https://www.cve.org/CVERecord?id=CVE-2026-31790 https://nvd.nist.gov/vuln/detail/CVE-2026-31790 https://openssl-library.org/news/secadv/20260407.txt https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-31790.json https://access.redhat.com/errata/RHSA-2026:19218", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "normalized_severity": "Medium", "package": { "id": "", "name": "openssl-devel", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:3.5.5-2.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "9PkDHwckTpMGddf70S7UIA==": { "id": "9PkDHwckTpMGddf70S7UIA==", "updater": "rhel-vex", "name": "CVE-2026-6238", "description": "A flaw was found in glibc (GNU C Library). The deprecated functions ns_printrrf, ns_printrr, and fp_nquery do not properly validate the length of RDATA (Resource Record Data) in a DNS (Domain Name System) response when processing specific record types like LOC, CERT, TKEY, or TSIG. A remote attacker could craft a malicious DNS response, leading to a target application crashing or reading uninitialized memory. These functions are intended for application debugging and are not part of the standard DNS resolver path.", "issued": "2026-04-28T16:43:08Z", "links": "https://access.redhat.com/security/cve/CVE-2026-6238 https://bugzilla.redhat.com/show_bug.cgi?id=2463539 https://www.cve.org/CVERecord?id=CVE-2026-6238 https://nvd.nist.gov/vuln/detail/CVE-2026-6238 https://inbox.sourceware.org/libc-announce/7a655d55-276f-41fe-b550-feb3ebb2ce91@redhat.com/T/#u https://sourceware.org/bugzilla/show_bug.cgi?id=34069 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6238.json https://access.redhat.com/errata/RHSA-2026:42952", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "glibc-devel", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "0:2.34-274.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "9VSflkDgRQsGPkKM4aVDHw==": { "id": "9VSflkDgRQsGPkKM4aVDHw==", "updater": "rhel-vex", "name": "CVE-2025-24294", "description": "A denial of service flaw was found in resolv ruby gem. This flaw allows an attacker to craft a malicious DNS packet containing a highly compressed domain name. When the resolv library parses this packet, the name decompression process consumes a large amount of CPU resources, as the library does not limit the resulting length of the name.", "issued": "2025-07-12T03:30:40Z", "links": "https://access.redhat.com/security/cve/CVE-2025-24294 https://bugzilla.redhat.com/show_bug.cgi?id=2379684 https://www.cve.org/CVERecord?id=CVE-2025-24294 https://nvd.nist.gov/vuln/detail/CVE-2025-24294 https://www.ruby-lang.org/en/news/2025/07/08/dos-resolv-cve-2025-24294/ https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-24294.json https://access.redhat.com/errata/RHSA-2025:23063", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "normalized_severity": "Medium", "package": { "id": "", "name": "rubygems", "version": "", "kind": "binary", "normalized_version": "", "module": "ruby:3.3", "arch": "noarch", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "0:3.5.22-5.module+el9.7.0+23651+15dc1615", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "9iADtyaox0PEZ/SbvPWJcw==": { "id": "9iADtyaox0PEZ/SbvPWJcw==", "updater": "rhel-vex", "name": "CVE-2026-45409", "description": "A flaw was found in the idna library, which handles Internationalized Domain Names in Python applications. A remote attacker could exploit this vulnerability by sending specially crafted, excessively long inputs to the library's encoding function. This could cause the system to consume significant resources, leading to a Denial of Service (DoS), where the affected application becomes unavailable to legitimate users. This issue stems from an incomplete fix for a previously identified vulnerability.", "issued": "2026-06-05T22:06:07Z", "links": "https://access.redhat.com/security/cve/CVE-2026-45409 https://bugzilla.redhat.com/show_bug.cgi?id=2485616 https://www.cve.org/CVERecord?id=CVE-2026-45409 https://nvd.nist.gov/vuln/detail/CVE-2026-45409 https://github.com/kjd/idna/security/advisories/GHSA-65pc-fj4g-8rjx https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-45409.json", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "normalized_severity": "Medium", "package": { "id": "", "name": "python-pip", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "9iigvnuYDaC8UzcOIDLjIQ==": { "id": "9iigvnuYDaC8UzcOIDLjIQ==", "updater": "rhel-vex", "name": "CVE-2026-24883", "description": "A flaw was found in GnuPG. A remote attacker could provide a specially crafted long signature packet that, when processed, causes the application to crash. This vulnerability leads to a denial of service (DoS), making the GnuPG application unavailable to legitimate users.", "issued": "2026-01-27T18:43:18Z", "links": "https://access.redhat.com/security/cve/CVE-2026-24883 https://bugzilla.redhat.com/show_bug.cgi?id=2433463 https://www.cve.org/CVERecord?id=CVE-2026-24883 https://nvd.nist.gov/vuln/detail/CVE-2026-24883 https://dev.gnupg.org/T8049 https://www.openwall.com/lists/oss-security/2026/01/27/8 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-24883.json", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L", "normalized_severity": "Low", "package": { "id": "", "name": "gnupg2", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "9k9GsZftBlKIenK0IOSwoQ==": { "id": "9k9GsZftBlKIenK0IOSwoQ==", "updater": "rhel-vex", "name": "CVE-2025-58767", "description": "A denial of service flaw has been discovered in the rubygem REXML. Certain input can cause excess cpu usage and given sufficiently large input this can affect program performance.", "issued": "2025-09-17T17:45:58Z", "links": "https://access.redhat.com/security/cve/CVE-2025-58767 https://bugzilla.redhat.com/show_bug.cgi?id=2396186 https://www.cve.org/CVERecord?id=CVE-2025-58767 https://nvd.nist.gov/vuln/detail/CVE-2025-58767 https://github.com/ruby/rexml/commit/5859bdeac792687eaf93d8e8f0b7e3c1e2ed5c23 https://github.com/ruby/rexml/security/advisories/GHSA-c2f4-jgmc-q2r5 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-58767.json https://access.redhat.com/errata/RHSA-2025:23063", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "normalized_severity": "Medium", "package": { "id": "", "name": "ruby-libs", "version": "", "kind": "binary", "normalized_version": "", "module": "ruby:3.3", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "0:3.3.10-5.module+el9.7.0+23651+15dc1615", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "9uC93Z+i1x3p9QMz1A1vlA==": { "id": "9uC93Z+i1x3p9QMz1A1vlA==", "updater": "rhel-vex", "name": "CVE-2026-16730", "description": "A flaw was found in dbus-broker. When the process file-descriptor limit is reached, EMFILE/ENFILE errors during peer setup (notably SO_PEERPIDFD) are handled as fatal failures, causing the broker to exit. A local attacker who can open many connections to the user session bus can trigger this and deny service to the desktop session. Flatpak applications can reach the host session bus through the dbus proxy.", "issued": "2026-07-23T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-16730 https://bugzilla.redhat.com/show_bug.cgi?id=2506348 https://www.cve.org/CVERecord?id=CVE-2026-16730 https://nvd.nist.gov/vuln/detail/CVE-2026-16730 https://github.com/bus1/dbus-broker/issues/435 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-16730.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "dbus-broker", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "9v8e/1gKgcwShm3I7m4SiQ==": { "id": "9v8e/1gKgcwShm3I7m4SiQ==", "updater": "rhel-vex", "name": "CVE-2026-59874", "description": "A flaw was found in node-tar, a tar archive manipulation library for Node.js. A remote attacker could exploit this vulnerability by providing a specially crafted tar archive with a negative entry size in its header. This malformed header causes the archive scanner to enter an infinite loop, repeatedly parsing the same header and preventing further processing. This can lead to a denial of service (DoS) condition, making the affected system or application unresponsive.", "issued": "2026-07-08T15:23:47Z", "links": "https://access.redhat.com/security/cve/CVE-2026-59874 https://bugzilla.redhat.com/show_bug.cgi?id=2498116 https://www.cve.org/CVERecord?id=CVE-2026-59874 https://nvd.nist.gov/vuln/detail/CVE-2026-59874 https://github.com/isaacs/node-tar/commit/9e78bf058b2c22dd4d52e00d8922d5c06fc2f7b5 https://github.com/isaacs/node-tar/releases/tag/v7.5.18 https://github.com/isaacs/node-tar/security/advisories/GHSA-8x88-c5mf-7j5w https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59874.json https://access.redhat.com/errata/RHSA-2026:47058", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "High", "package": { "id": "", "name": "nodejs-full-i18n", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:22.23.1-2.module+el9.8.0+24538+3f176d52", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "A+Jv9uRM/keGEYgIGq4WhQ==": { "id": "A+Jv9uRM/keGEYgIGq4WhQ==", "updater": "rhel-vex", "name": "CVE-2026-42258", "description": "A flaw was found in Net::IMAP, a Ruby library that provides Internet Message Access Protocol (IMAP) client functionality. This vulnerability allows a remote attacker to inject arbitrary IMAP commands. This is achieved by passing specially crafted symbol arguments to IMAP commands. Successful exploitation could lead to unauthorized actions on the IMAP server or client, potentially resulting in information disclosure or other integrity impacts.", "issued": "2026-05-09T19:40:49Z", "links": "https://access.redhat.com/security/cve/CVE-2026-42258 https://bugzilla.redhat.com/show_bug.cgi?id=2468498 https://www.cve.org/CVERecord?id=CVE-2026-42258 https://nvd.nist.gov/vuln/detail/CVE-2026-42258 https://github.com/ruby/net-imap/releases/tag/v0.4.24 https://github.com/ruby/net-imap/releases/tag/v0.5.14 https://github.com/ruby/net-imap/releases/tag/v0.6.4 https://github.com/ruby/net-imap/security/advisories/GHSA-75xq-5h9v-w6px https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42258.json https://access.redhat.com/errata/RHSA-2026:33576", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:N", "normalized_severity": "High", "package": { "id": "", "name": "ruby-libs", "version": "", "kind": "binary", "normalized_version": "", "module": "ruby:3.3", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "0:3.3.10-7.module+el9.8.0+24406+8975e57f", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "A/L5cxR0pUN6sSD1UL7wlw==": { "id": "A/L5cxR0pUN6sSD1UL7wlw==", "updater": "rhel-vex", "name": "CVE-2025-12084", "description": "A flaw was found in cpython. This vulnerability allows impacted availability via a quadratic algorithm in `xml.dom.minidom` methods, such as `appendChild()`, when building excessively nested documents due to a dependency on `_clear_id_cache()`", "issued": "2025-12-03T18:55:32Z", "links": "https://access.redhat.com/security/cve/CVE-2025-12084 https://bugzilla.redhat.com/show_bug.cgi?id=2418655 https://www.cve.org/CVERecord?id=CVE-2025-12084 https://nvd.nist.gov/vuln/detail/CVE-2025-12084 https://github.com/python/cpython/issues/142145 https://github.com/python/cpython/pull/142146 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-12084.json https://access.redhat.com/errata/RHSA-2026:1478", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "python3", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:3.9.25-3.el9_7", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "A1ZQfTMMpQF7G100W1c/Rg==": { "id": "A1ZQfTMMpQF7G100W1c/Rg==", "updater": "rhel-vex", "name": "CVE-2026-48928", "description": "A flaw was found in Node.js. An inconsistency in how Node.js matches hostnames can be exploited by a remote attacker in multi-context mTLS (mutual Transport Layer Security) setups. This vulnerability allows for a trust-policy bypass, potentially leading to unauthorized access to sensitive information or integrity compromise within the affected system.", "issued": "2026-06-26T01:14:36Z", "links": "https://access.redhat.com/security/cve/CVE-2026-48928 https://bugzilla.redhat.com/show_bug.cgi?id=2493333 https://www.cve.org/CVERecord?id=CVE-2026-48928 https://nvd.nist.gov/vuln/detail/CVE-2026-48928 https://nodejs.org/en/blog/vulnerability/june-2026-security-releases https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-48928.json https://access.redhat.com/errata/RHSA-2026:35892", "severity": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N", "normalized_severity": "Medium", "package": { "id": "", "name": "nodejs-docs", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "noarch", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:22.23.1-1.module+el9.8.0+24457+996af7aa", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "A2s8gCjK3uaWI7+q7M5Aog==": { "id": "A2s8gCjK3uaWI7+q7M5Aog==", "updater": "rhel-vex", "name": "CVE-2026-2100", "description": "A flaw was found in p11-kit. A remote attacker could exploit this vulnerability by calling the C_DeriveKey function on a remote token with specific IBM kyber or IBM btc derive mechanism parameters set to NULL. This could lead to the RPC-client attempting to return an uninitialized value, potentially resulting in a NULL dereference or undefined behavior. This issue may cause an application level denial of service or other unpredictable system states.", "issued": "2026-02-06T08:08:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-2100 https://bugzilla.redhat.com/show_bug.cgi?id=2437308 https://www.cve.org/CVERecord?id=CVE-2026-2100 https://nvd.nist.gov/vuln/detail/CVE-2026-2100 https://github.com/p11-glue/p11-kit/pull/740 https://github.com/p11-glue/p11-kit/releases/tag/0.26.2 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-2100.json https://access.redhat.com/errata/RHSA-2026:18599", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "normalized_severity": "Medium", "package": { "id": "", "name": "p11-kit", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:0.26.2-1.el9", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "AF4l+pfrs0Si/0Bf3toHtA==": { "id": "AF4l+pfrs0Si/0Bf3toHtA==", "updater": "rhel-vex", "name": "CVE-2025-69419", "description": "A flaw was found in OpenSSL. When processing a specially crafted PKCS#12 (Personal Information Exchange Syntax Standard) file, a remote attacker can exploit an out-of-bounds write vulnerability. This issue, occurring within the OPENSSL_uni2utf8() function, leads to memory corruption by writing data beyond its allocated buffer. Successful exploitation could result in a denial of service or potentially allow for arbitrary code execution.", "issued": "2026-01-27T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2025-69419 https://bugzilla.redhat.com/show_bug.cgi?id=2430386 https://www.cve.org/CVERecord?id=CVE-2025-69419 https://nvd.nist.gov/vuln/detail/CVE-2025-69419 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-69419.json https://access.redhat.com/errata/RHSA-2026:1473", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "normalized_severity": "Medium", "package": { "id": "", "name": "openssl", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "1:3.5.1-7.el9_7", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "AGwkok3hPLMsQFqdif59+w==": { "id": "AGwkok3hPLMsQFqdif59+w==", "updater": "rhel-vex", "name": "CVE-2026-7383", "description": "A flaw was found in OpenSSL. A signed integer overflow vulnerability exists when sizing the destination buffer for Unicode output. This can lead to a heap buffer overflow, which may result in a crash or potentially allow an attacker to execute arbitrary code. Exploitation requires an application to directly call specific functions with a large amount of attacker-controlled input.", "issued": "2026-06-09T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-7383 https://bugzilla.redhat.com/show_bug.cgi?id=2481879 https://www.cve.org/CVERecord?id=CVE-2026-7383 https://nvd.nist.gov/vuln/detail/CVE-2026-7383 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-7383.json https://access.redhat.com/errata/RHSA-2026:25239", "severity": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "openssl-libs", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "1:3.5.5-4.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "AILk1bhdEUQriiNdRe9Buw==": { "id": "AILk1bhdEUQriiNdRe9Buw==", "updater": "rhel-vex", "name": "CVE-2025-4598", "description": "A vulnerability was found in systemd-coredump. This flaw allows an attacker to force a SUID process to crash and replace it with a non-SUID binary to access the original's privileged process coredump, allowing the attacker to read sensitive data, such as /etc/shadow content, loaded by the original process.\n\nA SUID binary or process has a special type of permission, which allows the process to run with the file owner's permissions, regardless of the user executing the binary. This allows the process to access more restricted data than unprivileged users or processes would be able to. An attacker can leverage this flaw by forcing a SUID process to crash and force the Linux kernel to recycle the process PID before systemd-coredump can analyze the /proc/pid/auxv file. If the attacker wins the race condition, they gain access to the original's SUID process coredump file. They can read sensitive content loaded into memory by the original binary, affecting data confidentiality.", "issued": "2025-05-29T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2025-4598 https://bugzilla.redhat.com/show_bug.cgi?id=2369242 https://www.cve.org/CVERecord?id=CVE-2025-4598 https://nvd.nist.gov/vuln/detail/CVE-2025-4598 https://www.openwall.com/lists/oss-security/2025/05/29/3 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-4598.json https://access.redhat.com/errata/RHSA-2025:22660", "severity": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N", "normalized_severity": "Medium", "package": { "id": "", "name": "systemd-rpm-macros", "version": "", "kind": "binary", "normalized_version": "", "arch": "noarch", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:252-55.el9_7.7", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "AIlN8RmMOvhBveVuVAyHQQ==": { "id": "AIlN8RmMOvhBveVuVAyHQQ==", "updater": "rhel-vex", "name": "CVE-2022-2874", "description": "A NULL pointer dereference vulnerability was found in Vim in the generate_loadvar function in the vim9compile.c file. This flaw allows an attacker who can trick a user into processing a specially crafted file to trigger the NULL pointer dereference, causing the application to crash.", "issued": "2022-08-16T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2022-2874 https://bugzilla.redhat.com/show_bug.cgi?id=2193207 https://www.cve.org/CVERecord?id=CVE-2022-2874 https://nvd.nist.gov/vuln/detail/CVE-2022-2874 https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-2874.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "vim", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "AKiLQ/xfYs8rccBZaw62bQ==": { "id": "AKiLQ/xfYs8rccBZaw62bQ==", "updater": "rhel-vex", "name": "CVE-2026-42245", "description": "A flaw was found in Net::IMAP, a Ruby library implementing the Internet Message Access Protocol (IMAP) client functionality. A hostile server can exploit a quadratic time complexity issue in the `Net::IMAP::ResponseReader` when processing large responses containing numerous string literals. This can lead to the client's CPU being exhausted, resulting in a denial of service (DoS) attack.", "issued": "2026-05-09T19:37:08Z", "links": "https://access.redhat.com/security/cve/CVE-2026-42245 https://bugzilla.redhat.com/show_bug.cgi?id=2468495 https://www.cve.org/CVERecord?id=CVE-2026-42245 https://nvd.nist.gov/vuln/detail/CVE-2026-42245 https://github.com/ruby/net-imap/commit/6091f7d6b1f3514cafbfe39c76f2b5d73de3ca96 https://github.com/ruby/net-imap/commit/88d95231fc8afef11c1f074453f7d75b68c9dfda https://github.com/ruby/net-imap/commit/de685f91a4a4cc75eb80da898c2bf8af08d34819 https://github.com/ruby/net-imap/releases/tag/v0.4.24 https://github.com/ruby/net-imap/releases/tag/v0.5.14 https://github.com/ruby/net-imap/releases/tag/v0.6.4 https://github.com/ruby/net-imap/security/advisories/GHSA-q2mw-fvj9-vvcw https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42245.json https://access.redhat.com/errata/RHSA-2026:33576", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "rubygem-io-console", "version": "", "kind": "binary", "normalized_version": "", "module": "ruby:3.3", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "0:0.7.1-7.module+el9.8.0+24406+8975e57f", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "ALEb7ClqbpU4flidf9/9Vg==": { "id": "ALEb7ClqbpU4flidf9/9Vg==", "updater": "rhel-vex", "name": "CVE-2025-58767", "description": "A denial of service flaw has been discovered in the rubygem REXML. Certain input can cause excess cpu usage and given sufficiently large input this can affect program performance.", "issued": "2025-09-17T17:45:58Z", "links": "https://access.redhat.com/security/cve/CVE-2025-58767 https://bugzilla.redhat.com/show_bug.cgi?id=2396186 https://www.cve.org/CVERecord?id=CVE-2025-58767 https://nvd.nist.gov/vuln/detail/CVE-2025-58767 https://github.com/ruby/rexml/commit/5859bdeac792687eaf93d8e8f0b7e3c1e2ed5c23 https://github.com/ruby/rexml/security/advisories/GHSA-c2f4-jgmc-q2r5 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-58767.json https://access.redhat.com/errata/RHSA-2025:23063", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "normalized_severity": "Medium", "package": { "id": "", "name": "rubygem-bigdecimal", "version": "", "kind": "binary", "normalized_version": "", "module": "ruby:3.3", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "0:3.1.5-5.module+el9.7.0+23651+15dc1615", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "AUiFITCnRjRxctzqqbDeeA==": { "id": "AUiFITCnRjRxctzqqbDeeA==", "updater": "rhel-vex", "name": "CVE-2022-3219", "description": "A vulnerability was found in GnuPG. GnuPG can spin on a relatively small input by crafting a public key with thousands of signatures attached and compressed down to a few kilobytes. This issue can potentially cause a denial of service.", "issued": "2022-09-15T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2022-3219 https://bugzilla.redhat.com/show_bug.cgi?id=2127010 https://www.cve.org/CVERecord?id=CVE-2022-3219 https://nvd.nist.gov/vuln/detail/CVE-2022-3219 https://dev.gnupg.org/D556 https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-3219.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "gnupg2", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "Ah03jmj/7fQOqUbg05PtZg==": { "id": "Ah03jmj/7fQOqUbg05PtZg==", "updater": "rhel-vex", "name": "CVE-2023-0049", "description": "A flaw was found in vim, which is vulnerable to an out-of-bounds read in the build_stl_str_hl function. This flaw allows a specially crafted file to cause information disclosure, data integrity corruption, or crash the software.", "issued": "2023-01-04T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2023-0049 https://bugzilla.redhat.com/show_bug.cgi?id=2158269 https://www.cve.org/CVERecord?id=CVE-2023-0049 https://nvd.nist.gov/vuln/detail/CVE-2023-0049 https://huntr.dev/bounties/5e6f325c-ba54-4bf0-b050-dca048fd3fd9/ https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-0049.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "vim", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "AvmIxq5EDqjW4mtnnlw9lA==": { "id": "AvmIxq5EDqjW4mtnnlw9lA==", "updater": "rhel-vex", "name": "CVE-2026-42012", "description": "A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a specially crafted certificate that contains Uniform Resource Identifier (URI) or Service (SRV) Subject Alternative Names (SANs). This could cause the certificate validation process to incorrectly fall back to checking DNS hostnames against the Common Name (CN), potentially allowing the attacker to spoof legitimate services or intercept sensitive information.", "issued": "2026-04-29T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-42012 https://bugzilla.redhat.com/show_bug.cgi?id=2467441 https://www.cve.org/CVERecord?id=CVE-2026-42012 https://nvd.nist.gov/vuln/detail/CVE-2026-42012 https://www.gnutls.org/security-new.html#GNUTLS-SA-2026-04-29-7 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42012.json https://access.redhat.com/errata/RHSA-2026:20612", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:N", "normalized_severity": "Medium", "package": { "id": "", "name": "gnutls", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:3.8.10-4.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "AwUdH/KSEhHnx1nx0tagUQ==": { "id": "AwUdH/KSEhHnx1nx0tagUQ==", "updater": "rhel-vex", "name": "CVE-2022-2183", "description": "AV:L/AC:L/PR:N/UI:R/S:U/\nC:H ==\u003e C:N\nI:H ==\u003e I:N\nA:H ==\u003e A:L", "issued": "2022-06-23T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2022-2183 https://bugzilla.redhat.com/show_bug.cgi?id=2102159 https://www.cve.org/CVERecord?id=CVE-2022-2183 https://nvd.nist.gov/vuln/detail/CVE-2022-2183 https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-2183.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "normalized_severity": "Low", "package": { "id": "", "name": "vim", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "AwiZctxQMpOexVhl+RZ/eQ==": { "id": "AwiZctxQMpOexVhl+RZ/eQ==", "updater": "rhel-vex", "name": "CVE-2026-6100", "description": "A flaw was found in Python's decompression modules, including `lzma.LZMADecompressor`, `bz2.BZ2Decompressor`, and `gzip.GzipFile`. This vulnerability, a use-after-free, can occur if a program attempts to re-use a decompression object after a memory allocation error, especially when the system is experiencing high memory usage. Exploitation of this flaw could potentially allow an attacker to execute arbitrary code or access sensitive data. The vulnerability is only present if the program re-uses decompressor instances across multiple decompression calls even after a `MemoryError` is raised during decompression. Using the helper functions to one-shot decompress data such as `lzma.decompress()`, `bz2.decompress()`, `gzip.decompress()`, and `zlib.decompress()` are not affected as a new decompressor instance is used per call. If the decompressor instance is not re-used after an error condition, this usage is similarly not vulnerable.", "issued": "2026-04-13T17:15:47Z", "links": "https://access.redhat.com/security/cve/CVE-2026-6100 https://bugzilla.redhat.com/show_bug.cgi?id=2457932 https://www.cve.org/CVERecord?id=CVE-2026-6100 https://nvd.nist.gov/vuln/detail/CVE-2026-6100 https://github.com/python/cpython/commit/6a5f79c8d7bbf22b083b240910c7a8781a59437d https://github.com/python/cpython/commit/8fc66aef6d7b3ae58f43f5c66f9366cc8cbbfcd2 https://github.com/python/cpython/commit/c3cf71c3366fe49acb776a639405c0eea6169c20 https://github.com/python/cpython/issues/148395 https://github.com/python/cpython/pull/148396 https://mail.python.org/archives/list/security-announce@python.org/thread/HTWB2Z6KT5QQX4RYEZAFININDHNOSIF3/ https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6100.json https://access.redhat.com/errata/RHSA-2026:19216", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "normalized_severity": "High", "package": { "id": "", "name": "python3", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:3.9.25-7.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "AzESlP5N9z0ume0UnpGELg==": { "id": "AzESlP5N9z0ume0UnpGELg==", "updater": "rhel-vex", "name": "CVE-2026-41991", "description": "A flaw was found in the `gzexe` utility of GNU `gzip`. When the `mktemp` utility is not available, `gzexe` creates temporary files with predictable names based on the process ID. A local attacker can exploit this by pre-creating a symbolic link to an arbitrary file at the predicted temporary file path. This can lead to a Time-of-Check to Time-of-Use (TOCTOU) condition, allowing the attacker to overwrite arbitrary files on the system.", "issued": "2026-06-29T10:15:50Z", "links": "https://access.redhat.com/security/cve/CVE-2026-41991 https://bugzilla.redhat.com/show_bug.cgi?id=2494158 https://www.cve.org/CVERecord?id=CVE-2026-41991 https://nvd.nist.gov/vuln/detail/CVE-2026-41991 https://cert.pl/en/posts/2026/04/CVE-2026-41991/ https://cgit.git.savannah.gnu.org/cgit/gzip.git/commit/?id=4e6f8b24ab823146ab8776f0b7fe486ab34d4269 https://www.gnu.org/software/gzip/ https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-41991.json", "severity": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "gzip", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "AzUHhCngmr5YuLLD/fQQEA==": { "id": "AzUHhCngmr5YuLLD/fQQEA==", "updater": "rhel-vex", "name": "CVE-2025-13151", "description": "A flaw was found in libtasn1. A remote attacker could exploit a stack-based buffer overflow vulnerability in the `asn1_expend_octet_string` function. This occurs due to a failure in validating the size of input data. Successful exploitation can lead to a Denial of Service (DoS) condition, making the affected system or application unavailable.", "issued": "2026-01-07T21:14:05Z", "links": "https://access.redhat.com/security/cve/CVE-2025-13151 https://bugzilla.redhat.com/show_bug.cgi?id=2427698 https://www.cve.org/CVERecord?id=CVE-2025-13151 https://nvd.nist.gov/vuln/detail/CVE-2025-13151 https://gitlab.com/gnutls/libtasn1 https://gitlab.com/gnutls/libtasn1/-/merge_requests/121 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-13151.json https://access.redhat.com/errata/RHSA-2026:28253", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "libtasn1", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:4.16.0-10.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "B+E5cjNC599y+nmprS3J2Q==": { "id": "B+E5cjNC599y+nmprS3J2Q==", "updater": "rhel-vex", "name": "CVE-2025-15366", "description": "A flaw was found in the imaplib module in the Python standard library. The imaplib module does not reject control characters, such as newlines, in user-controlled input passed to IMAP commands. This issue allows an attacker to inject additional commands to be executed in the IMAP server.", "issued": "2026-01-20T21:40:24Z", "links": "https://access.redhat.com/security/cve/CVE-2025-15366 https://bugzilla.redhat.com/show_bug.cgi?id=2431368 https://www.cve.org/CVERecord?id=CVE-2025-15366 https://nvd.nist.gov/vuln/detail/CVE-2025-15366 https://github.com/python/cpython/issues/143921 https://github.com/python/cpython/pull/143922 https://mail.python.org/archives/list/security-announce@python.org/thread/DD7C7JZJYTBXMDOWKCEIEBJLBRU64OMR/ https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-15366.json https://access.redhat.com/errata/RHSA-2026:4168", "severity": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N", "normalized_severity": "Medium", "package": { "id": "", "name": "python3-libs", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:3.9.25-3.el9_7.1", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "B5DU5CG3Y0pIFFmMM3RU1A==": { "id": "B5DU5CG3Y0pIFFmMM3RU1A==", "updater": "rhel-vex", "name": "CVE-2026-42767", "description": "A flaw was found in OpenSSL. An attacker controlling a Certificate Management Protocol (CMP) server, or acting as a man-in-the-middle, could craft a malicious CMP response. This response, containing a Certificate Request Message Format (CRMF) CertRepMessage with a specific malformed EncryptedValue structure, would trigger a NULL pointer dereference in the OpenSSL CMP client. This vulnerability leads to a crash of the application, resulting in a Denial of Service (DoS).", "issued": "2026-06-09T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-42767 https://bugzilla.redhat.com/show_bug.cgi?id=2481891 https://www.cve.org/CVERecord?id=CVE-2026-42767 https://nvd.nist.gov/vuln/detail/CVE-2026-42767 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42767.json https://access.redhat.com/errata/RHSA-2026:25239", "severity": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "openssl-devel", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:3.5.5-4.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "BB1IXjQVr93It/qGF51Vqg==": { "id": "BB1IXjQVr93It/qGF51Vqg==", "updater": "rhel-vex", "name": "CVE-2026-21710", "description": "A flaw was found in Node.js. A remote attacker can exploit this vulnerability by sending a specially crafted HTTP request that includes a header named `__proto__`. When a Node.js application processes this request and attempts to access distinct headers, it encounters an unhandled error, leading to an application crash. This can result in a Denial of Service (DoS), making the affected service unavailable to users.", "issued": "2026-03-30T19:07:28Z", "links": "https://access.redhat.com/security/cve/CVE-2026-21710 https://bugzilla.redhat.com/show_bug.cgi?id=2453151 https://www.cve.org/CVERecord?id=CVE-2026-21710 https://nvd.nist.gov/vuln/detail/CVE-2026-21710 https://nodejs.org/en/blog/vulnerability/march-2026-security-releases https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-21710.json https://access.redhat.com/errata/RHSA-2026:7302", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "High", "package": { "id": "", "name": "nodejs-full-i18n", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:22.22.2-1.module+el9.7.0+24157+8ddb2461", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "BBVHDYnqIwi0Vk9ZX1yGIw==": { "id": "BBVHDYnqIwi0Vk9ZX1yGIw==", "updater": "rhel-vex", "name": "CVE-2026-23865", "description": "A flaw was found in Freetype. An integer overflow vulnerability exists when processing specially crafted OpenType variable fonts. A local attacker could exploit this by convincing a user to open a malicious font file, which may lead to an out-of-bounds read and potential information disclosure or denial of service.", "issued": "2026-03-02T16:09:42Z", "links": "https://access.redhat.com/security/cve/CVE-2026-23865 https://bugzilla.redhat.com/show_bug.cgi?id=2443891 https://www.cve.org/CVERecord?id=CVE-2026-23865 https://nvd.nist.gov/vuln/detail/CVE-2026-23865 https://gitlab.com/freetype/freetype/-/commit/fc85a255849229c024c8e65f536fe1875d84841c https://sourceforge.net/projects/freetype/files/freetype2/2.14.2/ https://www.facebook.com/security/advisories/cve-2026-23865 https://www.oracle.com/security-alerts/cpuapr2026.html#AppendixJAVA https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-23865.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L", "normalized_severity": "Medium", "package": { "id": "", "name": "freetype", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "BDC/Jijmwb4kfsAYqG7t2Q==": { "id": "BDC/Jijmwb4kfsAYqG7t2Q==", "updater": "rhel-vex", "name": "CVE-2025-64720", "description": "A buffer overflow flaw has been discovered in libpng. An out-of-bounds read vulnerability exists in png_image_read_composite when processing palette images with PNG_FLAG_OPTIMIZE_ALPHA enabled. The palette compositing code in png_init_read_transformations incorrectly applies background compositing during premultiplication, violating the invariant component ≤ alpha × 257 required by the simplified PNG API.", "issued": "2025-11-24T23:45:38Z", "links": "https://access.redhat.com/security/cve/CVE-2025-64720 https://bugzilla.redhat.com/show_bug.cgi?id=2416904 https://www.cve.org/CVERecord?id=CVE-2025-64720 https://nvd.nist.gov/vuln/detail/CVE-2025-64720 https://github.com/pnggroup/libpng/commit/08da33b4c88cfcd36e5a706558a8d7e0e4773643 https://github.com/pnggroup/libpng/issues/686 https://github.com/pnggroup/libpng/pull/751 https://github.com/pnggroup/libpng/security/advisories/GHSA-hfc7-ph9c-wcww https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-64720.json https://access.redhat.com/errata/RHSA-2026:0238", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H", "normalized_severity": "High", "package": { "id": "", "name": "libpng-devel", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "2:1.6.37-12.el9_7.1", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "BS5Qx6nN3HmM64VVoKmayw==": { "id": "BS5Qx6nN3HmM64VVoKmayw==", "updater": "rhel-vex", "name": "CVE-2022-3134", "description": "A heap use-after-free vulnerability was found in vim's do_tag() function of the src/tag.c file. The issue triggers when the 'tagfunc' closes the window. This flaw allows an attacker to trick a user into opening a specially crafted file, triggering a heap use-after-free that causes an application to crash, possibly executing code and corrupting memory.", "issued": "2022-09-06T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2022-3134 https://bugzilla.redhat.com/show_bug.cgi?id=2126085 https://www.cve.org/CVERecord?id=CVE-2022-3134 https://nvd.nist.gov/vuln/detail/CVE-2022-3134 https://huntr.dev/bounties/6ec79e49-c7ab-4cd6-a517-e7934c2eb9dc https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-3134.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "vim", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "BTToHfvg0weSXCH9D0acFA==": { "id": "BTToHfvg0weSXCH9D0acFA==", "updater": "rhel-vex", "name": "CVE-2026-28420", "description": "A flaw was found in Vim. A remote attacker could exploit a heap-based buffer overflow and an out-of-bounds read vulnerability in Vim's terminal emulator. This occurs when processing specially crafted Unicode supplementary plane characters, potentially leading to information disclosure and denial of service.", "issued": "2026-02-27T22:04:36Z", "links": "https://access.redhat.com/security/cve/CVE-2026-28420 https://bugzilla.redhat.com/show_bug.cgi?id=2443484 https://www.cve.org/CVERecord?id=CVE-2026-28420 https://nvd.nist.gov/vuln/detail/CVE-2026-28420 https://github.com/vim/vim/commit/bb6de2105b160e729c34063 https://github.com/vim/vim/releases/tag/v9.2.0076 https://github.com/vim/vim/security/advisories/GHSA-rvj2-jrf9-2phg https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-28420.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L", "normalized_severity": "Medium", "package": { "id": "", "name": "vim", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "BXYBFOm74zXwzmdOdyNhzA==": { "id": "BXYBFOm74zXwzmdOdyNhzA==", "updater": "rhel-vex", "name": "CVE-2026-7383", "description": "A flaw was found in OpenSSL. A signed integer overflow vulnerability exists when sizing the destination buffer for Unicode output. This can lead to a heap buffer overflow, which may result in a crash or potentially allow an attacker to execute arbitrary code. Exploitation requires an application to directly call specific functions with a large amount of attacker-controlled input.", "issued": "2026-06-09T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-7383 https://bugzilla.redhat.com/show_bug.cgi?id=2481879 https://www.cve.org/CVERecord?id=CVE-2026-7383 https://nvd.nist.gov/vuln/detail/CVE-2026-7383 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-7383.json https://access.redhat.com/errata/RHSA-2026:25239", "severity": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "openssl", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "1:3.5.5-4.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "BaEDBo8YJd5pwSQNkGzAFg==": { "id": "BaEDBo8YJd5pwSQNkGzAFg==", "updater": "rhel-vex", "name": "CVE-2026-56405", "description": "A flaw was found in libexpat. An integer overflow vulnerability exists within the `getAttributeId` function. This flaw could allow an attacker to potentially disclose sensitive information or execute arbitrary code, leading to a compromise of the system's integrity and confidentiality.", "issued": "2026-06-21T15:47:13Z", "links": "https://access.redhat.com/security/cve/CVE-2026-56405 https://bugzilla.redhat.com/show_bug.cgi?id=2491188 https://www.cve.org/CVERecord?id=CVE-2026-56405 https://nvd.nist.gov/vuln/detail/CVE-2026-56405 https://github.com/libexpat/libexpat/pull/1251 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-56405.json", "severity": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L", "normalized_severity": "Medium", "package": { "id": "", "name": "expat", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "BfDjqoaYrd0NKCGGxtokTg==": { "id": "BfDjqoaYrd0NKCGGxtokTg==", "updater": "rhel-vex", "name": "CVE-2023-48231", "description": "A heap use-after-free flaw was found in the vim package. When executing a `:s` command for the first time and using a sub-replace-special atom inside the substitution, it is possible that the recursive `:s` call causes memory to be freed, which may later then be accessed by the initial `:s` command. This issue may result in Vim crashing.", "issued": "2023-11-16T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2023-48231 https://bugzilla.redhat.com/show_bug.cgi?id=2250268 https://www.cve.org/CVERecord?id=CVE-2023-48231 https://nvd.nist.gov/vuln/detail/CVE-2023-48231 http://www.openwall.com/lists/oss-security/2023/11/16/1 https://github.com/vim/vim/commit/25aabc2b8ee1e19ced6f4da9d866cf9378fc4c5a https://github.com/vim/vim/security/advisories/GHSA-8g46-v9ff-c765 https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-48231.json", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "normalized_severity": "Low", "package": { "id": "", "name": "vim", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "Bh96oSV9q0619slTJCaM0Q==": { "id": "Bh96oSV9q0619slTJCaM0Q==", "updater": "rhel-vex", "name": "CVE-2023-40403", "description": "A flaw was found in libxslt package. Processing web content may disclose sensitive information. This issue was addressed with improved memory handling.", "issued": "2023-09-26T20:14:54Z", "links": "https://access.redhat.com/security/cve/CVE-2023-40403 https://bugzilla.redhat.com/show_bug.cgi?id=2349766 https://www.cve.org/CVERecord?id=CVE-2023-40403 https://nvd.nist.gov/vuln/detail/CVE-2023-40403 http://seclists.org/fulldisclosure/2023/Oct/10 http://seclists.org/fulldisclosure/2023/Oct/3 http://seclists.org/fulldisclosure/2023/Oct/4 http://seclists.org/fulldisclosure/2023/Oct/5 http://seclists.org/fulldisclosure/2023/Oct/6 http://seclists.org/fulldisclosure/2023/Oct/8 http://seclists.org/fulldisclosure/2023/Oct/9 https://bugs.chromium.org/p/chromium/issues/detail?id=1356211 https://bugzilla.gnome.org/show_bug.cgi?id=751621 https://gitlab.gnome.org/GNOME/libxslt/-/issues/94 https://support.apple.com/en-us/HT213927 https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-40403.json https://access.redhat.com/errata/RHSA-2026:6266", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "normalized_severity": "Medium", "package": { "id": "", "name": "libxslt-devel", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "0:1.1.34-14.el9_7.1", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "Bl8VfXimE6raefu05cOS8w==": { "id": "Bl8VfXimE6raefu05cOS8w==", "updater": "rhel-vex", "name": "CVE-2026-48933", "description": "A flaw was found in the Node.js WebCrypto implementation. A remote attacker could exploit this vulnerability by providing an input to the `subtle.encrypt()` function that is a multiple of 2 gigabytes (GiB). This could lead to a denial of service (DoS) by crashing the Node.js process.", "issued": "2026-06-26T01:14:36Z", "links": "https://access.redhat.com/security/cve/CVE-2026-48933 https://bugzilla.redhat.com/show_bug.cgi?id=2493331 https://www.cve.org/CVERecord?id=CVE-2026-48933 https://nvd.nist.gov/vuln/detail/CVE-2026-48933 https://nodejs.org/en/blog/vulnerability/june-2026-security-releases https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-48933.json https://access.redhat.com/errata/RHSA-2026:35892", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "High", "package": { "id": "", "name": "npm", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:10.9.8-1.22.23.1.1.module+el9.8.0+24457+996af7aa", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "BrupyHHgUisGe91mdtTkog==": { "id": "BrupyHHgUisGe91mdtTkog==", "updater": "rhel-vex", "name": "CVE-2026-59871", "description": "A flaw was found in node-tar, a library for manipulating tar archives in Node.js. This vulnerability occurs when the library incorrectly converts specific archive path values into numbers, leading to an error during subsequent path processing. An attacker could exploit this to cause the application using node-tar to crash, resulting in a denial of service.", "issued": "2026-07-08T15:25:09Z", "links": "https://access.redhat.com/security/cve/CVE-2026-59871 https://bugzilla.redhat.com/show_bug.cgi?id=2498126 https://www.cve.org/CVERecord?id=CVE-2026-59871 https://nvd.nist.gov/vuln/detail/CVE-2026-59871 https://github.com/isaacs/node-tar/commit/e02a4e9e013c4be95302e2eb2047a942b883c27b https://github.com/isaacs/node-tar/releases/tag/v7.5.18 https://github.com/isaacs/node-tar/security/advisories/GHSA-w8wr-v893-vjvp https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59871.json", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "normalized_severity": "Medium", "package": { "id": "", "name": "tar", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "BtU7U8JaAB8UA19RIrHuHQ==": { "id": "BtU7U8JaAB8UA19RIrHuHQ==", "updater": "rhel-vex", "name": "CVE-2026-35387", "description": "A flaw was found in OpenSSH. This vulnerability allows the system to use unintended Elliptic Curve Digital Signature Algorithm (ECDSA) algorithms. This occurs because the configuration for accepted public key algorithms is misinterpreted, leading to the use of weaker cryptographic methods than intended. This could potentially allow an attacker to compromise the confidentiality of data.", "issued": "2026-04-02T16:52:53Z", "links": "https://access.redhat.com/security/cve/CVE-2026-35387 https://bugzilla.redhat.com/show_bug.cgi?id=2454494 https://www.cve.org/CVERecord?id=CVE-2026-35387 https://nvd.nist.gov/vuln/detail/CVE-2026-35387 https://marc.info/?l=openssh-unix-dev\u0026m=177513443901484\u0026w=2 https://www.openssh.org/releasenotes.html#10.3p1 https://www.openwall.com/lists/oss-security/2026/04/02/3 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-35387.json https://access.redhat.com/errata/RHSA-2026:19219", "severity": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N", "normalized_severity": "Low", "package": { "id": "", "name": "openssh", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:9.9p1-7.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "Bu9dxnhmsLXDd3x0oRPHfA==": { "id": "Bu9dxnhmsLXDd3x0oRPHfA==", "updater": "rhel-vex", "name": "CVE-2025-11413", "description": "A flaw was found in binutils. Processing a specially crafted object file with the ld linker can trigger an out-of-bounds write in the bfd_putl64 function in the bfd/libbfd.c file due to an improper check, causing a crash and resulting in a denial of service.", "issued": "2025-10-07T22:02:12Z", "links": "https://access.redhat.com/security/cve/CVE-2025-11413 https://bugzilla.redhat.com/show_bug.cgi?id=2402423 https://www.cve.org/CVERecord?id=CVE-2025-11413 https://nvd.nist.gov/vuln/detail/CVE-2025-11413 https://sourceware.org/bugzilla/show_bug.cgi?id=33456 https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=72efdf166aa0ed72ecc69fc2349af6591a7a19c0 https://vuldb.com/?id.327349 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-11413.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L", "normalized_severity": "Low", "package": { "id": "", "name": "binutils", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "C5z0AxIvQN3JdMLvMYB+qg==": { "id": "C5z0AxIvQN3JdMLvMYB+qg==", "updater": "rhel-vex", "name": "CVE-2025-14087", "description": "A flaw was found in GLib (Gnome Lib). This vulnerability allows a remote attacker to cause heap corruption, leading to a denial of service or potential code execution via a buffer-underflow in the GVariant parser when processing maliciously crafted input strings.", "issued": "2025-12-05T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2025-14087 https://bugzilla.redhat.com/show_bug.cgi?id=2419093 https://www.cve.org/CVERecord?id=CVE-2025-14087 https://nvd.nist.gov/vuln/detail/CVE-2025-14087 https://gitlab.gnome.org/GNOME/glib/-/issues/3834 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-14087.json https://access.redhat.com/errata/RHSA-2026:15971", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L", "normalized_severity": "Medium", "package": { "id": "", "name": "glib2", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:2.68.4-18.el9_7.2", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "CKAla6xchD1gy0q9ML/2xg==": { "id": "CKAla6xchD1gy0q9ML/2xg==", "updater": "rhel-vex", "name": "CVE-2026-42258", "description": "A flaw was found in Net::IMAP, a Ruby library that provides Internet Message Access Protocol (IMAP) client functionality. This vulnerability allows a remote attacker to inject arbitrary IMAP commands. This is achieved by passing specially crafted symbol arguments to IMAP commands. Successful exploitation could lead to unauthorized actions on the IMAP server or client, potentially resulting in information disclosure or other integrity impacts.", "issued": "2026-05-09T19:40:49Z", "links": "https://access.redhat.com/security/cve/CVE-2026-42258 https://bugzilla.redhat.com/show_bug.cgi?id=2468498 https://www.cve.org/CVERecord?id=CVE-2026-42258 https://nvd.nist.gov/vuln/detail/CVE-2026-42258 https://github.com/ruby/net-imap/releases/tag/v0.4.24 https://github.com/ruby/net-imap/releases/tag/v0.5.14 https://github.com/ruby/net-imap/releases/tag/v0.6.4 https://github.com/ruby/net-imap/security/advisories/GHSA-75xq-5h9v-w6px https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42258.json https://access.redhat.com/errata/RHSA-2026:33576", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:N", "normalized_severity": "High", "package": { "id": "", "name": "rubygem-bundler", "version": "", "kind": "binary", "normalized_version": "", "module": "ruby:3.3", "arch": "noarch", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "0:2.5.22-7.module+el9.8.0+24406+8975e57f", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "CO6FDlFyRSUjPhv7/gdAAA==": { "id": "CO6FDlFyRSUjPhv7/gdAAA==", "updater": "rhel-vex", "name": "CVE-2026-42258", "description": "A flaw was found in Net::IMAP, a Ruby library that provides Internet Message Access Protocol (IMAP) client functionality. This vulnerability allows a remote attacker to inject arbitrary IMAP commands. This is achieved by passing specially crafted symbol arguments to IMAP commands. Successful exploitation could lead to unauthorized actions on the IMAP server or client, potentially resulting in information disclosure or other integrity impacts.", "issued": "2026-05-09T19:40:49Z", "links": "https://access.redhat.com/security/cve/CVE-2026-42258 https://bugzilla.redhat.com/show_bug.cgi?id=2468498 https://www.cve.org/CVERecord?id=CVE-2026-42258 https://nvd.nist.gov/vuln/detail/CVE-2026-42258 https://github.com/ruby/net-imap/releases/tag/v0.4.24 https://github.com/ruby/net-imap/releases/tag/v0.5.14 https://github.com/ruby/net-imap/releases/tag/v0.6.4 https://github.com/ruby/net-imap/security/advisories/GHSA-75xq-5h9v-w6px https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42258.json https://access.redhat.com/errata/RHSA-2026:33576", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:N", "normalized_severity": "High", "package": { "id": "", "name": "ruby-default-gems", "version": "", "kind": "binary", "normalized_version": "", "module": "ruby:3.3", "arch": "noarch", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "0:3.3.10-7.module+el9.8.0+24406+8975e57f", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "CQNzMQJa1wEomWRr1m5WUQ==": { "id": "CQNzMQJa1wEomWRr1m5WUQ==", "updater": "rhel-vex", "name": "CVE-2026-34982", "description": "A flaw was found in Vim. A modeline is used to set specific editor options directly from a text file. However, the `complete`, `guitabtooltip`, `printheader` options and the `mapset` function lack proper security checks, allowing an attacker to bypass restrictions and cause arbitrary OS command execution.", "issued": "2026-04-06T15:16:48Z", "links": "https://access.redhat.com/security/cve/CVE-2026-34982 https://bugzilla.redhat.com/show_bug.cgi?id=2455400 https://www.cve.org/CVERecord?id=CVE-2026-34982 https://nvd.nist.gov/vuln/detail/CVE-2026-34982 http://www.openwall.com/lists/oss-security/2026/04/01/1 https://github.com/vim/vim/commit/75661a66a1db1e1f3f1245c615 https://github.com/vim/vim/releases/tag/v9.2.0276 https://github.com/vim/vim/security/advisories/GHSA-8h6p-m6gr-mpw9 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-34982.json https://access.redhat.com/errata/RHSA-2026:11510", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N", "normalized_severity": "High", "package": { "id": "", "name": "vim-minimal", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "2:8.2.2637-23.el9_7.3", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "CQPV/OxtJ+DwYc6C4gniNQ==": { "id": "CQPV/OxtJ+DwYc6C4gniNQ==", "updater": "rhel-vex", "name": "CVE-2022-47008", "description": "A memory leak was found in binutils in the make_tempdir and make_tempname functions. This flaw allows an attacker to use a set of steps to trigger a memory leak and perform a denial of service, resulting in a loss of the system's availability.", "issued": "2022-06-16T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2022-47008 https://bugzilla.redhat.com/show_bug.cgi?id=2233984 https://www.cve.org/CVERecord?id=CVE-2022-47008 https://nvd.nist.gov/vuln/detail/CVE-2022-47008 https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-47008.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "binutils", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "CfMK+8nnfjDlpiJ86nDqnQ==": { "id": "CfMK+8nnfjDlpiJ86nDqnQ==", "updater": "rhel-vex", "name": "CVE-2026-48619", "description": "A flaw was found in Node.js. A malicious server can exploit the HTTP/2 client by sending an unlimited number of ORIGIN frames. This can lead to an Out of Memory error on the client, resulting in a denial of service.", "issued": "2026-06-26T01:14:36Z", "links": "https://access.redhat.com/security/cve/CVE-2026-48619 https://bugzilla.redhat.com/show_bug.cgi?id=2493325 https://www.cve.org/CVERecord?id=CVE-2026-48619 https://nvd.nist.gov/vuln/detail/CVE-2026-48619 https://nodejs.org/en/blog/vulnerability/june-2026-security-releases https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-48619.json https://access.redhat.com/errata/RHSA-2026:35892", "severity": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "normalized_severity": "Medium", "package": { "id": "", "name": "nodejs-full-i18n", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:22.23.1-1.module+el9.8.0+24457+996af7aa", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "ChVC4WOnGJkEsPC5QHmS4Q==": { "id": "ChVC4WOnGJkEsPC5QHmS4Q==", "updater": "rhel-vex", "name": "CVE-2026-13757", "description": "A flaw was found in p11-kit. The RPC message attribute parsing functions p11_rpc_message_get_attribute() and p11_rpc_message_get_attribute_array_value() form a mutually-recursive call chain with no recursion depth limit when processing nested CKA_WRAP_TEMPLATE, CKA_UNWRAP_TEMPLATE, and CKA_DERIVE_TEMPLATE attributes. An unauthenticated attacker with local access to the p11-kit RPC Unix domain socket can send a specially crafted request with deeply nested template attributes, causing stack exhaustion and crashing the p11-kit server process and its dependent services.", "issued": "2026-06-23T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-13757 https://bugzilla.redhat.com/show_bug.cgi?id=2494556 https://www.cve.org/CVERecord?id=CVE-2026-13757 https://nvd.nist.gov/vuln/detail/CVE-2026-13757 https://github.com/advisories/GHSA-p2wm-69qx-x25w https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-13757.json https://access.redhat.com/errata/RHSA-2026:49667", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "p11-kit", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:0.26.4-1.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "Cpn7PI6CgTg1FJ1Ijp4TIQ==": { "id": "Cpn7PI6CgTg1FJ1Ijp4TIQ==", "updater": "rhel-vex", "name": "CVE-2026-8458", "description": "A flaw was found in libcurl. A logical error in the connection pooling mechanism may cause libcurl to reuse an authenticated connection for an unintended service. This could allow an application to wrongfully reuse an existing connection to the same server that was authenticated for a different service, potentially leading to unauthorized access or information disclosure.", "issued": "2026-07-03T06:14:42Z", "links": "https://access.redhat.com/security/cve/CVE-2026-8458 https://bugzilla.redhat.com/show_bug.cgi?id=2496764 https://www.cve.org/CVERecord?id=CVE-2026-8458 https://nvd.nist.gov/vuln/detail/CVE-2026-8458 https://curl.se/docs/CVE-2026-8458.html https://curl.se/docs/CVE-2026-8458.json https://hackerone.com/reports/3721183 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-8458.json", "severity": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "normalized_severity": "High", "package": { "id": "", "name": "curl", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "D/8pir/aXD8E2iIv4dA/Pg==": { "id": "D/8pir/aXD8E2iIv4dA/Pg==", "updater": "rhel-vex", "name": "CVE-2026-56131", "description": "A use-after-free vulnerability in libexpat occurs because handler call depth isn't properly tracked when XML_ResumeParser is invoked during policy violations. This flaw can lead to information disclosure, data corruption, or denial of service.", "issued": "2026-06-19T02:56:36Z", "links": "https://access.redhat.com/security/cve/CVE-2026-56131 https://bugzilla.redhat.com/show_bug.cgi?id=2490668 https://www.cve.org/CVERecord?id=CVE-2026-56131 https://nvd.nist.gov/vuln/detail/CVE-2026-56131 https://github.com/libexpat/libexpat/pull/1267 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-56131.json", "severity": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L", "normalized_severity": "Medium", "package": { "id": "", "name": "expat", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "D17rv5OxhiqZrK+otc1Xcg==": { "id": "D17rv5OxhiqZrK+otc1Xcg==", "updater": "rhel-vex", "name": "CVE-2026-35386", "description": "A flaw was found in OpenSSH. This vulnerability allows a remote attacker to achieve arbitrary command execution by injecting shell metacharacters into a username provided on the command line. Exploitation requires an untrusted username and a non-default configuration of the '%' character in `ssh_config`.", "issued": "2026-04-02T16:44:27Z", "links": "https://access.redhat.com/security/cve/CVE-2026-35386 https://bugzilla.redhat.com/show_bug.cgi?id=2454506 https://www.cve.org/CVERecord?id=CVE-2026-35386 https://nvd.nist.gov/vuln/detail/CVE-2026-35386 https://marc.info/?l=openssh-unix-dev\u0026m=177513443901484\u0026w=2 https://www.openssh.org/releasenotes.html#10.3p1 https://www.openwall.com/lists/oss-security/2026/04/02/3 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-35386.json https://access.redhat.com/errata/RHSA-2026:13381", "severity": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N", "normalized_severity": "Low", "package": { "id": "", "name": "openssh-clients", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:8.7p1-49.el9_7", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "D4G1BWjcvupPxJokCdnHGA==": { "id": "D4G1BWjcvupPxJokCdnHGA==", "updater": "rhel-vex", "name": "CVE-2026-9076", "description": "A flaw was found in OpenSSL. When processing attacker-supplied Cryptographic Message Syntax (CMS) data using password-based decryption, an attacker can choose a stream-mode Key Encryption Key (KEK) cipher. This can trigger a heap out-of-bounds read, potentially causing an application crash and leading to a Denial of Service (DoS). This vulnerability does not require password knowledge and can be exploited before authentication.", "issued": "2026-06-09T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-9076 https://bugzilla.redhat.com/show_bug.cgi?id=2481880 https://www.cve.org/CVERecord?id=CVE-2026-9076 https://nvd.nist.gov/vuln/detail/CVE-2026-9076 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-9076.json https://access.redhat.com/errata/RHSA-2026:25239", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "openssl-libs", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "1:3.5.5-4.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "D7U85Qc3CYAscEzhSfT76A==": { "id": "D7U85Qc3CYAscEzhSfT76A==", "updater": "rhel-vex", "name": "CVE-2025-15467", "description": "A flaw was found in OpenSSL. A remote attacker can exploit a stack buffer overflow vulnerability by supplying a crafted Cryptographic Message Syntax (CMS) message with an oversized Initialization Vector (IV) when parsing AuthEnvelopedData structures that use Authenticated Encryption with Associated Data (AEAD) ciphers such as AES-GCM. This can lead to a crash, causing a Denial of Service (DoS), or potentially allow for remote code execution.", "issued": "2026-01-27T14:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2025-15467 https://bugzilla.redhat.com/show_bug.cgi?id=2430376 https://www.cve.org/CVERecord?id=CVE-2025-15467 https://nvd.nist.gov/vuln/detail/CVE-2025-15467 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-15467.json https://access.redhat.com/errata/RHSA-2026:1473", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "normalized_severity": "High", "package": { "id": "", "name": "openssl-libs", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "1:3.5.1-7.el9_7", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "DAEgBJ6jpEvrKn3TAPAfVQ==": { "id": "DAEgBJ6jpEvrKn3TAPAfVQ==", "updater": "rhel-vex", "name": "CVE-2026-42770", "description": "A flaw was found in OpenSSL. A malicious peer can exploit this vulnerability by presenting a specially crafted DHX (X9.42) peer key. Due to improper validation of the peer key's subgroup membership, an attacker can recover the victim's private key after a small number of key exchange attempts. This information disclosure can lead to unauthorized access or further compromise of affected systems.", "issued": "2026-06-09T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-42770 https://bugzilla.redhat.com/show_bug.cgi?id=2481894 https://www.cve.org/CVERecord?id=CVE-2026-42770 https://nvd.nist.gov/vuln/detail/CVE-2026-42770 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42770.json https://access.redhat.com/errata/RHSA-2026:25239", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "normalized_severity": "Low", "package": { "id": "", "name": "openssl-devel", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:3.5.5-4.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "DDxCHnX+kCqcRQj9b90/cg==": { "id": "DDxCHnX+kCqcRQj9b90/cg==", "updater": "rhel-vex", "name": "CVE-2023-4156", "description": "A heap out-of-bounds read flaw was found in builtin.c in the gawk package. This issue may lead to a crash and could be used to read sensitive information.", "issued": "2023-06-19T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2023-4156 https://bugzilla.redhat.com/show_bug.cgi?id=2215930 https://www.cve.org/CVERecord?id=CVE-2023-4156 https://nvd.nist.gov/vuln/detail/CVE-2023-4156 https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-4156.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "gawk", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "DNT7Ncyac0R7hltidKFOsA==": { "id": "DNT7Ncyac0R7hltidKFOsA==", "updater": "rhel-vex", "name": "CVE-2025-65018", "description": "A buffer overflow flaw has been discovered in libpng. There is a heap buffer overflow vulnerability in the libpng simplified API function png_image_finish_read when processing 16-bit interlaced PNGs with 8-bit output format. Attacker-crafted interlaced PNG files cause heap writes beyond allocated buffer bounds.", "issued": "2025-11-24T23:50:18Z", "links": "https://access.redhat.com/security/cve/CVE-2025-65018 https://bugzilla.redhat.com/show_bug.cgi?id=2416907 https://www.cve.org/CVERecord?id=CVE-2025-65018 https://nvd.nist.gov/vuln/detail/CVE-2025-65018 https://github.com/pnggroup/libpng/commit/16b5e3823918840aae65c0a6da57c78a5a496a4d https://github.com/pnggroup/libpng/commit/218612ddd6b17944e21eda56caf8b4bf7779d1ea https://github.com/pnggroup/libpng/issues/755 https://github.com/pnggroup/libpng/pull/757 https://github.com/pnggroup/libpng/security/advisories/GHSA-7wv6-48j4-hj3g https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-65018.json https://access.redhat.com/errata/RHSA-2026:0238", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H", "normalized_severity": "High", "package": { "id": "", "name": "libpng", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "2:1.6.37-12.el9_7.1", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "DNd0sdbW83acQbIl3FDaPw==": { "id": "DNd0sdbW83acQbIl3FDaPw==", "updater": "rhel-vex", "name": "CVE-2023-0054", "description": "An out-of-bounds write flaw was found in Vim, in the do_string_sub function in the eval.c file. The issue occurs because of an invalid memory access due to a missing check of the return value of the vim_regsub function when a specially crafted input is processed. This flaw allows an attacker who can trick a user into opening a specially crafted file to trigger the out-of-bounds write, causing the application to crash.", "issued": "2023-01-03T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2023-0054 https://bugzilla.redhat.com/show_bug.cgi?id=2161349 https://www.cve.org/CVERecord?id=CVE-2023-0054 https://nvd.nist.gov/vuln/detail/CVE-2023-0054 https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-0054.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "vim", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "DSX8U+5pHixx0pf+XijnCw==": { "id": "DSX8U+5pHixx0pf+XijnCw==", "updater": "rhel-vex", "name": "CVE-2026-5435", "description": "A flaw was found in glibc, the GNU C Library. Specifically, deprecated functions responsible for printing TSIG (Transaction Signature) records fail to properly manage memory buffers. This oversight can lead to an out-of-bounds write when processing specially crafted TSIG records. An attacker could exploit this to cause a denial of service or potentially execute arbitrary code.", "issued": "2026-04-28T11:58:54Z", "links": "https://access.redhat.com/security/cve/CVE-2026-5435 https://bugzilla.redhat.com/show_bug.cgi?id=2463465 https://www.cve.org/CVERecord?id=CVE-2026-5435 https://nvd.nist.gov/vuln/detail/CVE-2026-5435 https://inbox.sourceware.org/libc-announce/7a655d55-276f-41fe-b550-feb3ebb2ce91@redhat.com/T/#u https://sourceware.org/bugzilla/show_bug.cgi?id=34033 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-5435.json https://access.redhat.com/errata/RHSA-2026:42952", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "glibc-devel", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "0:2.34-274.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "DTApvRZh1HJD5XbbpU3ahw==": { "id": "DTApvRZh1HJD5XbbpU3ahw==", "updater": "rhel-vex", "name": "CVE-2026-1757", "description": "A flaw was identified in the interactive shell of the xmllint utility, part of the libxml2 project, where memory allocated for user input is not properly released under certain conditions. When a user submits input consisting only of whitespace, the program skips command execution but fails to free the allocated buffer. Repeating this action causes memory to continuously accumulate. Over time, this can exhaust system memory and terminate the xmllint process, creating a denial-of-service condition on the local system.", "issued": "2026-02-02T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-1757 https://bugzilla.redhat.com/show_bug.cgi?id=2435940 https://www.cve.org/CVERecord?id=CVE-2026-1757 https://nvd.nist.gov/vuln/detail/CVE-2026-1757 https://gitlab.gnome.org/GNOME/libxml2/-/issues/1009 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-1757.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "libxml2", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "DVhbZtpHlSM2ukk3QurV1w==": { "id": "DVhbZtpHlSM2ukk3QurV1w==", "updater": "rhel-vex", "name": "CVE-2025-58767", "description": "A denial of service flaw has been discovered in the rubygem REXML. Certain input can cause excess cpu usage and given sufficiently large input this can affect program performance.", "issued": "2025-09-17T17:45:58Z", "links": "https://access.redhat.com/security/cve/CVE-2025-58767 https://bugzilla.redhat.com/show_bug.cgi?id=2396186 https://www.cve.org/CVERecord?id=CVE-2025-58767 https://nvd.nist.gov/vuln/detail/CVE-2025-58767 https://github.com/ruby/rexml/commit/5859bdeac792687eaf93d8e8f0b7e3c1e2ed5c23 https://github.com/ruby/rexml/security/advisories/GHSA-c2f4-jgmc-q2r5 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-58767.json https://access.redhat.com/errata/RHSA-2025:23063", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "normalized_severity": "Medium", "package": { "id": "", "name": "rubygem-psych", "version": "", "kind": "binary", "normalized_version": "", "module": "ruby:3.3", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "0:5.1.2-5.module+el9.7.0+23651+15dc1615", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "DW2DUdu8ljrldYoM7Mprtg==": { "id": "DW2DUdu8ljrldYoM7Mprtg==", "updater": "rhel-vex", "name": "CVE-2026-42769", "description": "A flaw was found in the Certificate Management Protocol (CMP) implementation within OpenSSL. An attacker with existing Registration Authority (RA) level credentials could exploit an error in the certificate verification process during a Root Certificate Authority (CA) key update. This vulnerability allows the attacker to replace the root CA certificate for CMP clients with a fraudulent one. The primary consequence is an escalation of privileges, enabling the attacker to gain control equivalent to the root CA.", "issued": "2026-06-09T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-42769 https://bugzilla.redhat.com/show_bug.cgi?id=2481893 https://www.cve.org/CVERecord?id=CVE-2026-42769 https://nvd.nist.gov/vuln/detail/CVE-2026-42769 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42769.json https://access.redhat.com/errata/RHSA-2026:25239", "severity": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N", "normalized_severity": "Low", "package": { "id": "", "name": "openssl", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "1:3.5.5-4.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "DXoWfwXPN9ZCvCU/obObKQ==": { "id": "DXoWfwXPN9ZCvCU/obObKQ==", "updater": "rhel-vex", "name": "CVE-2026-4878", "description": "A flaw was found in libcap. A local unprivileged user can exploit a Time-of-check-to-time-of-use (TOCTOU) race condition in the `cap_set_file()` function. This allows an attacker with write access to a parent directory to redirect file capability updates to an attacker-controlled file. By doing so, capabilities can be injected into or stripped from unintended executables, leading to privilege escalation.", "issued": "2026-04-06T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-4878 https://bugzilla.redhat.com/show_bug.cgi?id=2451615 https://www.cve.org/CVERecord?id=CVE-2026-4878 https://nvd.nist.gov/vuln/detail/CVE-2026-4878 https://bugzilla.redhat.com/show_bug.cgi?id=2447554 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-4878.json https://access.redhat.com/errata/RHSA-2026:12441", "severity": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H", "normalized_severity": "High", "package": { "id": "", "name": "libcap", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:2.48-10.el9_7.1", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "DcyOxGZU+Qt6lxShaMXeig==": { "id": "DcyOxGZU+Qt6lxShaMXeig==", "updater": "rhel-vex", "name": "CVE-2026-43617", "description": "A flaw was found in rsync. When an rsync daemon is configured with \"daemon chroot = /X\" and uses hostname-based access control lists (ACLs), and the chrooted directory /X lacks necessary DNS resolution files, a remote attacker can bypass hostname-based deny rules. This occurs because the daemon performs reverse-DNS lookups after chrooting, causing the lookup to fail and the connecting hostname to be identified as \"UNKNOWN\". An attacker can exploit this by controlling their pointer (PTR) record, enabling unauthorized connections from hostnames that should have been denied.", "issued": "2026-05-20T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-43617 https://bugzilla.redhat.com/show_bug.cgi?id=2469060 https://www.cve.org/CVERecord?id=CVE-2026-43617 https://nvd.nist.gov/vuln/detail/CVE-2026-43617 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-43617.json", "severity": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N", "normalized_severity": "Medium", "package": { "id": "", "name": "rsync", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "Di0hwt0owko/VaT8i7ICOw==": { "id": "Di0hwt0owko/VaT8i7ICOw==", "updater": "rhel-vex", "name": "CVE-2026-45409", "description": "A flaw was found in the idna library, which handles Internationalized Domain Names in Python applications. A remote attacker could exploit this vulnerability by sending specially crafted, excessively long inputs to the library's encoding function. This could cause the system to consume significant resources, leading to a Denial of Service (DoS), where the affected application becomes unavailable to legitimate users. This issue stems from an incomplete fix for a previously identified vulnerability.", "issued": "2026-06-05T22:06:07Z", "links": "https://access.redhat.com/security/cve/CVE-2026-45409 https://bugzilla.redhat.com/show_bug.cgi?id=2485616 https://www.cve.org/CVERecord?id=CVE-2026-45409 https://nvd.nist.gov/vuln/detail/CVE-2026-45409 https://github.com/kjd/idna/security/advisories/GHSA-65pc-fj4g-8rjx https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-45409.json https://access.redhat.com/errata/RHSA-2026:54484", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "normalized_severity": "Medium", "package": { "id": "", "name": "python3-idna", "version": "", "kind": "binary", "normalized_version": "", "arch": "noarch", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:2.10-8.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "Dif/+rLLCWjJt5Bzau2zsA==": { "id": "Dif/+rLLCWjJt5Bzau2zsA==", "updater": "rhel-vex", "name": "CVE-2026-4519", "description": "A flaw was found in Python. The `webbrowser.open()` API, used to launch web browsers, does not properly sanitize input. This allows a remote attacker to craft a malicious URL containing leading dashes. When such a URL is opened, certain web browsers may interpret these dashes as command-line options, which could lead to unexpected behavior, information disclosure, or potentially arbitrary code execution, impacting the integrity of the system.", "issued": "2026-03-20T15:08:32Z", "links": "https://access.redhat.com/security/cve/CVE-2026-4519 https://bugzilla.redhat.com/show_bug.cgi?id=2449649 https://www.cve.org/CVERecord?id=CVE-2026-4519 https://nvd.nist.gov/vuln/detail/CVE-2026-4519 https://github.com/python/cpython/issues/143930 https://github.com/python/cpython/pull/143931 https://mail.python.org/archives/list/security-announce@python.org/thread/AY5NDSS433JK56Q7Q5IS7B37QFZVVOUS/ https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-4519.json https://access.redhat.com/errata/RHSA-2026:19216", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L", "normalized_severity": "High", "package": { "id": "", "name": "python3-libs", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:3.9.25-7.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "DjqCxCryg8LYvAZ67mAiSQ==": { "id": "DjqCxCryg8LYvAZ67mAiSQ==", "updater": "rhel-vex", "name": "CVE-2026-29111", "description": "A flaw was found in systemd, a system and service manager. An unprivileged user can exploit this vulnerability by making an Inter-Process Communication (IPC) API call with spurious data. In older versions (v249 and earlier), this can lead to stack overwriting with attacker-controlled content, potentially enabling arbitrary code execution or privilege escalation. In newer versions (v250 and later), the flaw causes systemd to assert and freeze, resulting in a Denial of Service (DoS).", "issued": "2026-03-23T21:03:56Z", "links": "https://access.redhat.com/security/cve/CVE-2026-29111 https://bugzilla.redhat.com/show_bug.cgi?id=2450505 https://www.cve.org/CVERecord?id=CVE-2026-29111 https://nvd.nist.gov/vuln/detail/CVE-2026-29111 https://github.com/systemd/systemd/commit/1d22f706bd04f45f8422e17fbde3f56ece17758a https://github.com/systemd/systemd/commit/20021e7686426052e3a7505425d7e12085feb2a6 https://github.com/systemd/systemd/commit/21167006574d6b83813c7596759b474f56562412 https://github.com/systemd/systemd/commit/3cee294fe8cf4fa0eff933ab21416d099942cabd https://github.com/systemd/systemd/commit/42aee39107fbdd7db1ccd402a2151822b2805e9f https://github.com/systemd/systemd/commit/54588d2dedff54bfb6036670820650e4ea74628f https://github.com/systemd/systemd/commit/7ac3220213690e8a8d6d2a6e81e43bd1dce01d69 https://github.com/systemd/systemd/commit/80acea4ef80a4bb78560ed970c34952299b890d6 https://github.com/systemd/systemd/commit/b5fd14693057e5f2c9b4a49603be64ec3608ff6c https://github.com/systemd/systemd/commit/efa6ba2ab625aaa160ac435a09e6482fc63bdbe8 https://github.com/systemd/systemd/security/advisories/GHSA-gx6q-6f99-m764 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-29111.json https://access.redhat.com/errata/RHSA-2026:13677", "severity": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "systemd-pam", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:252-55.el9_7.9", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "Dl7D7r3bnERvJ1K3e9T3bQ==": { "id": "Dl7D7r3bnERvJ1K3e9T3bQ==", "updater": "rhel-vex", "name": "CVE-2026-42245", "description": "A flaw was found in Net::IMAP, a Ruby library implementing the Internet Message Access Protocol (IMAP) client functionality. A hostile server can exploit a quadratic time complexity issue in the `Net::IMAP::ResponseReader` when processing large responses containing numerous string literals. This can lead to the client's CPU being exhausted, resulting in a denial of service (DoS) attack.", "issued": "2026-05-09T19:37:08Z", "links": "https://access.redhat.com/security/cve/CVE-2026-42245 https://bugzilla.redhat.com/show_bug.cgi?id=2468495 https://www.cve.org/CVERecord?id=CVE-2026-42245 https://nvd.nist.gov/vuln/detail/CVE-2026-42245 https://github.com/ruby/net-imap/commit/6091f7d6b1f3514cafbfe39c76f2b5d73de3ca96 https://github.com/ruby/net-imap/commit/88d95231fc8afef11c1f074453f7d75b68c9dfda https://github.com/ruby/net-imap/commit/de685f91a4a4cc75eb80da898c2bf8af08d34819 https://github.com/ruby/net-imap/releases/tag/v0.4.24 https://github.com/ruby/net-imap/releases/tag/v0.5.14 https://github.com/ruby/net-imap/releases/tag/v0.6.4 https://github.com/ruby/net-imap/security/advisories/GHSA-q2mw-fvj9-vvcw https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42245.json https://access.redhat.com/errata/RHSA-2026:33576", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "rubygem-rake", "version": "", "kind": "binary", "normalized_version": "", "module": "ruby:3.3", "arch": "noarch", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "0:13.1.0-7.module+el9.8.0+24406+8975e57f", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "DrIVK8+yvV91OzF2CS9o5A==": { "id": "DrIVK8+yvV91OzF2CS9o5A==", "updater": "rhel-vex", "name": "CVE-2025-4598", "description": "A vulnerability was found in systemd-coredump. This flaw allows an attacker to force a SUID process to crash and replace it with a non-SUID binary to access the original's privileged process coredump, allowing the attacker to read sensitive data, such as /etc/shadow content, loaded by the original process.\n\nA SUID binary or process has a special type of permission, which allows the process to run with the file owner's permissions, regardless of the user executing the binary. This allows the process to access more restricted data than unprivileged users or processes would be able to. An attacker can leverage this flaw by forcing a SUID process to crash and force the Linux kernel to recycle the process PID before systemd-coredump can analyze the /proc/pid/auxv file. If the attacker wins the race condition, they gain access to the original's SUID process coredump file. They can read sensitive content loaded into memory by the original binary, affecting data confidentiality.", "issued": "2025-05-29T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2025-4598 https://bugzilla.redhat.com/show_bug.cgi?id=2369242 https://www.cve.org/CVERecord?id=CVE-2025-4598 https://nvd.nist.gov/vuln/detail/CVE-2025-4598 https://www.openwall.com/lists/oss-security/2025/05/29/3 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-4598.json https://access.redhat.com/errata/RHSA-2025:22660", "severity": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N", "normalized_severity": "Medium", "package": { "id": "", "name": "systemd-libs", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:252-55.el9_7.7", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "Ds5dBDqvRggZONNskvuAwg==": { "id": "Ds5dBDqvRggZONNskvuAwg==", "updater": "rhel-vex", "name": "CVE-2026-6019", "description": "A flaw was found in Python's `http.cookies` module. The `Morsel.js_output()` function, responsible for generating JavaScript output for cookies, does not properly neutralize the `\u003c/script\u003e` HTML sequence. This oversight could allow a remote attacker to inject malicious script into a web page, potentially leading to Cross-Site Scripting (XSS) attacks. Such an attack could result in information disclosure or arbitrary code execution within the user's browser.", "issued": "2026-04-22T19:28:08Z", "links": "https://access.redhat.com/security/cve/CVE-2026-6019 https://bugzilla.redhat.com/show_bug.cgi?id=2460869 https://www.cve.org/CVERecord?id=CVE-2026-6019 https://nvd.nist.gov/vuln/detail/CVE-2026-6019 https://github.com/python/cpython/commit/76b3923d688c0efc580658476c5f525ec8735104 https://github.com/python/cpython/issues/90309 https://github.com/python/cpython/pull/148848 https://mail.python.org/archives/list/security-announce@python.org/thread/IVNWGV2BBNC3RHQAFS22UP4DY56SAXX3/ https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6019.json", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N", "normalized_severity": "Medium", "package": { "id": "", "name": "python3.9", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "DsZp+BRVz/OTV0jFXHylmA==": { "id": "DsZp+BRVz/OTV0jFXHylmA==", "updater": "rhel-vex", "name": "CVE-2026-28390", "description": "A flaw was found in OpenSSL. A remote attacker could exploit this vulnerability by sending a specially crafted Cryptographic Message Syntax (CMS) EnvelopedData message. During the processing of a KeyTransportRecipientInfo with RSA-OAEP encryption, the system attempts to access an optional parameter field without first verifying its presence. This leads to a NULL pointer dereference, which can cause applications processing the attacker-controlled CMS data to crash, resulting in a Denial of Service (DoS).", "issued": "2026-04-07T22:00:54Z", "links": "https://access.redhat.com/security/cve/CVE-2026-28390 https://bugzilla.redhat.com/show_bug.cgi?id=2456314 https://www.cve.org/CVERecord?id=CVE-2026-28390 https://nvd.nist.gov/vuln/detail/CVE-2026-28390 https://github.com/openssl/openssl/commit/01194a8f1941115cd0383bfa91c736dd3993c8bc https://github.com/openssl/openssl/commit/2e39b7a6993be445fddb9fbce316fa756e0397b6 https://github.com/openssl/openssl/commit/af2a5fecd3e71a29e7568f9c1453dec5cebbaff4 https://github.com/openssl/openssl/commit/ea7b4ea4f9f853521ba34830cbcadc970d2e0788 https://github.com/openssl/openssl/commit/fd2f1a6cf53b9ceeca723a001aa4b825d7c7ee75 https://openssl-library.org/news/secadv/20260407.txt https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-28390.json https://access.redhat.com/errata/RHSA-2026:22312", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "openssl", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "1:3.5.5-3.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "DtkRUkQTzcJrj8ZsC36kqQ==": { "id": "DtkRUkQTzcJrj8ZsC36kqQ==", "updater": "rhel-vex", "name": "CVE-2025-50181", "description": "A flaw was found in urllib3. The `PoolManager` class allows redirects to be disabled by configuring retries in a specific manner, effectively bypassing intended HTTP redirection behavior. A network attacker can leverage this configuration to manipulate request flows and disrupt service. This bypass occurs through improper handling of retry parameters during PoolManager instantiation. This issue can reult in a denial of service or unintended data exposure due to altered request destinations.", "issued": "2025-06-19T01:08:00Z", "links": "https://access.redhat.com/security/cve/CVE-2025-50181 https://bugzilla.redhat.com/show_bug.cgi?id=2373799 https://www.cve.org/CVERecord?id=CVE-2025-50181 https://nvd.nist.gov/vuln/detail/CVE-2025-50181 https://github.com/urllib3/urllib3/commit/f05b1329126d5be6de501f9d1e3e36738bc08857 https://github.com/urllib3/urllib3/security/advisories/GHSA-pq67-6m6q-mj2v https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-50181.json", "severity": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N", "normalized_severity": "Medium", "package": { "id": "", "name": "python-pip", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "DwTrtZS+niTc7qfIVCIZAQ==": { "id": "DwTrtZS+niTc7qfIVCIZAQ==", "updater": "rhel-vex", "name": "CVE-2025-59466", "description": "A stack overflow flaw has been discovered in Node.js error handling where \"Maximum call stack size exceeded\" errors become uncatchable when `async_hooks.createHook()` is enabled. Instead of reaching `process.on('uncaughtException')`, the process terminates, making the crash unrecoverable. Applications that rely on `AsyncLocalStorage` (v22, v20) or `async_hooks.createHook()` (v24, v22, v20) become vulnerable to denial-of-service crashes triggered by deep recursion under specific conditions.", "issued": "2026-01-20T20:41:55Z", "links": "https://access.redhat.com/security/cve/CVE-2025-59466 https://bugzilla.redhat.com/show_bug.cgi?id=2431343 https://www.cve.org/CVERecord?id=CVE-2025-59466 https://nvd.nist.gov/vuln/detail/CVE-2025-59466 https://nodejs.org/en/blog/vulnerability/december-2025-security-releases https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-59466.json https://access.redhat.com/errata/RHSA-2026:2782", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "nodejs-full-i18n", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:22.22.0-1.module+el9.7.0+23896+b5802de9", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "E69qsmSRl4PzNiueJkPUDw==": { "id": "E69qsmSRl4PzNiueJkPUDw==", "updater": "rhel-vex", "name": "CVE-2025-55130", "description": "A flaw in Node.js’s Permissions model allows attackers to bypass `--allow-fs-read` and `--allow-fs-write` restrictions using crafted relative symlink paths. By chaining directories and symlinks, a script granted access only to the current directory can escape the allowed path and read sensitive files. This breaks the expected isolation guarantees and enables arbitrary file read/write.", "issued": "2026-01-20T20:41:55Z", "links": "https://access.redhat.com/security/cve/CVE-2025-55130 https://bugzilla.redhat.com/show_bug.cgi?id=2431352 https://www.cve.org/CVERecord?id=CVE-2025-55130 https://nvd.nist.gov/vuln/detail/CVE-2025-55130 https://nodejs.org/en/blog/vulnerability/december-2025-security-releases https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-55130.json https://access.redhat.com/errata/RHSA-2026:2782", "severity": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "normalized_severity": "High", "package": { "id": "", "name": "nodejs-full-i18n", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:22.22.0-1.module+el9.7.0+23896+b5802de9", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "E9ztZ/MyJW/b90Qruzzb/A==": { "id": "E9ztZ/MyJW/b90Qruzzb/A==", "updater": "rhel-vex", "name": "CVE-2026-59875", "description": "A flaw was found in node-tar, a library for manipulating tar archives in Node.js. A remote attacker could craft a malicious archive containing null characters (NUL bytes) in its metadata. When this archive is processed, the unstripped null characters can cause the application to terminate unexpectedly, leading to a Denial of Service (DoS).", "issued": "2026-07-08T15:20:29Z", "links": "https://access.redhat.com/security/cve/CVE-2026-59875 https://bugzilla.redhat.com/show_bug.cgi?id=2498115 https://www.cve.org/CVERecord?id=CVE-2026-59875 https://nvd.nist.gov/vuln/detail/CVE-2026-59875 https://github.com/isaacs/node-tar/commit/7a635c29f5edbf083557374d43984273ecfed5b3 https://github.com/isaacs/node-tar/releases/tag/v7.5.17 https://github.com/isaacs/node-tar/security/advisories/GHSA-gvwx-54wh-qm9j https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59875.json", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "normalized_severity": "Medium", "package": { "id": "", "name": "tar", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "EFXoHkta9v8NXWXURLTCBw==": { "id": "EFXoHkta9v8NXWXURLTCBw==", "updater": "rhel-vex", "name": "CVE-2026-2297", "description": "A flaw was found in CPython. This vulnerability allows a local user with low privileges to bypass security auditing mechanisms. The issue occurs because the SourcelessFileLoader component, responsible for handling older Python compiled files (.pyc), does not properly trigger system audit events. This oversight could enable malicious activities to go undetected, compromising the integrity of the system.", "issued": "2026-03-04T22:10:43Z", "links": "https://access.redhat.com/security/cve/CVE-2026-2297 https://bugzilla.redhat.com/show_bug.cgi?id=2444691 https://www.cve.org/CVERecord?id=CVE-2026-2297 https://nvd.nist.gov/vuln/detail/CVE-2026-2297 https://github.com/python/cpython/commit/482d6f8bdba9da3725d272e8bb4a2d25fb6a603e https://github.com/python/cpython/commit/a51b1b512de1d56b3714b65628a2eae2b07e535e https://github.com/python/cpython/commit/e58e9802b9bec5cdbf48fc9bf1da5f4fda482e86 https://github.com/python/cpython/issues/145506 https://github.com/python/cpython/pull/145507 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-2297.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", "normalized_severity": "Low", "package": { "id": "", "name": "python3.9", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "EGiW9TUcKA6dU0wY//GJ7w==": { "id": "EGiW9TUcKA6dU0wY//GJ7w==", "updater": "rhel-vex", "name": "CVE-2025-68160", "description": "A flaw was found in OpenSSL. This vulnerability involves an out-of-bounds write in the line-buffering BIO filter, which can lead to memory corruption. While exploitation is unlikely to be under direct attacker control, a successful attack could cause an application to crash, resulting in a Denial of Service (DoS).", "issued": "2026-01-27T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2025-68160 https://bugzilla.redhat.com/show_bug.cgi?id=2430380 https://www.cve.org/CVERecord?id=CVE-2025-68160 https://nvd.nist.gov/vuln/detail/CVE-2025-68160 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-68160.json https://access.redhat.com/errata/RHSA-2026:1473", "severity": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "openssl", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "1:3.5.1-7.el9_7", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "EJqYggmJ1CPHdE/+zAY7WA==": { "id": "EJqYggmJ1CPHdE/+zAY7WA==", "updater": "rhel-vex", "name": "CVE-2026-33846", "description": "A heap buffer overflow vulnerability exists in the DTLS handshake fragment reassembly logic of GnuTLS. The issue arises in merge_handshake_packet() where incoming handshake fragments are matched and merged based solely on handshake type, without validating that the message_length field remains consistent across all fragments of the same logical message. An attacker can exploit this by sending crafted DTLS fragments with conflicting message_length values, causing the implementation to allocate a buffer based on a smaller initial fragment and subsequently write beyond its bounds using larger, inconsistent fragments. Because the merge operation does not enforce proper bounds checking against the allocated buffer size, this results in an out-of-bounds write on the heap. The vulnerability is remotely exploitable without authentication via the DTLS handshake path and can lead to application crashes or potential memory corruption.", "issued": "2026-05-04T08:53:59Z", "links": "https://access.redhat.com/security/cve/CVE-2026-33846 https://bugzilla.redhat.com/show_bug.cgi?id=2450625 https://www.cve.org/CVERecord?id=CVE-2026-33846 https://nvd.nist.gov/vuln/detail/CVE-2026-33846 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33846.json https://access.redhat.com/errata/RHSA-2026:20612", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "High", "package": { "id": "", "name": "gnutls", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:3.8.10-4.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "ENmG+VyULoyY7sa0jIk/uw==": { "id": "ENmG+VyULoyY7sa0jIk/uw==", "updater": "rhel-vex", "name": "CVE-2026-2229", "description": "A flaw was found in the undici WebSocket client. A remote malicious server can exploit this vulnerability by sending a WebSocket frame with an invalid `server_max_window_bits` parameter within the permessage-deflate extension. This improper validation causes the client's Node.js process to terminate, leading to a denial-of-service (DoS) condition for the client.", "issued": "2026-03-12T20:27:05Z", "links": "https://access.redhat.com/security/cve/CVE-2026-2229 https://bugzilla.redhat.com/show_bug.cgi?id=2447143 https://www.cve.org/CVERecord?id=CVE-2026-2229 https://nvd.nist.gov/vuln/detail/CVE-2026-2229 https://cna.openjsf.org/security-advisories.html https://datatracker.ietf.org/doc/html/rfc7692 https://github.com/nodejs/undici/security/advisories/GHSA-v9p9-hfj2-hcw8 https://hackerone.com/reports/3487486 https://nodejs.org/api/zlib.html#class-zlibinflateraw https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-2229.json https://access.redhat.com/errata/RHSA-2026:7302", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "High", "package": { "id": "", "name": "nodejs-docs", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "noarch", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:22.22.2-1.module+el9.7.0+24157+8ddb2461", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "EOFhzMVjLzNyQsRKP/y6ag==": { "id": "EOFhzMVjLzNyQsRKP/y6ag==", "updater": "rhel-vex", "name": "CVE-2026-59998", "description": "A flaw was found in OpenSSH. The sshd component has an undocumented security-relevant behavior where GSSAPIStrictAcceptorCheck has no value when the server is in a Windows Active Directory environment. This could lead to unintended information disclosure and impact data integrity.", "issued": "2026-07-08T00:11:05Z", "links": "https://access.redhat.com/security/cve/CVE-2026-59998 https://bugzilla.redhat.com/show_bug.cgi?id=2497935 https://www.cve.org/CVERecord?id=CVE-2026-59998 https://nvd.nist.gov/vuln/detail/CVE-2026-59998 https://marc.info/?l=openssh-unix-dev\u0026m=178333966933090\u0026w=2 https://www.openssh.org/releasenotes.html#10.4p1 https://www.openwall.com/lists/oss-security/2026/07/06/5 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59998.json", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "normalized_severity": "Medium", "package": { "id": "", "name": "openssh", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "EOZFP6ki76xUja7Br+mpEw==": { "id": "EOZFP6ki76xUja7Br+mpEw==", "updater": "rhel-vex", "name": "CVE-2026-9678", "description": "A flaw was found in Undici. The cache interceptor in shared-cache mode incorrectly classifies certain responses as cacheable due to improper handling of whitespace-padded Cache-Control header field names. This vulnerability allows an unauthenticated attacker to access authenticated user data from the cache, leading to information disclosure. This occurs when both authenticated and unauthenticated requests resolve to the same cache key.", "issued": "2026-06-17T17:04:09Z", "links": "https://access.redhat.com/security/cve/CVE-2026-9678 https://bugzilla.redhat.com/show_bug.cgi?id=2490000 https://www.cve.org/CVERecord?id=CVE-2026-9678 https://nvd.nist.gov/vuln/detail/CVE-2026-9678 https://cna.openjsf.org/security-advisories.html https://github.com/nodejs/undici/security/advisories/GHSA-pr7r-676h-xcf6 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-9678.json https://access.redhat.com/errata/RHSA-2026:35892", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "normalized_severity": "Medium", "package": { "id": "", "name": "nodejs", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "aarch64|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:22.23.1-1.module+el9.8.0+24457+996af7aa", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "EUdYVqG8WVFrguzTJcoB9w==": { "id": "EUdYVqG8WVFrguzTJcoB9w==", "updater": "rhel-vex", "name": "CVE-2026-6238", "description": "A flaw was found in glibc (GNU C Library). The deprecated functions ns_printrrf, ns_printrr, and fp_nquery do not properly validate the length of RDATA (Resource Record Data) in a DNS (Domain Name System) response when processing specific record types like LOC, CERT, TKEY, or TSIG. A remote attacker could craft a malicious DNS response, leading to a target application crashing or reading uninitialized memory. These functions are intended for application debugging and are not part of the standard DNS resolver path.", "issued": "2026-04-28T16:43:08Z", "links": "https://access.redhat.com/security/cve/CVE-2026-6238 https://bugzilla.redhat.com/show_bug.cgi?id=2463539 https://www.cve.org/CVERecord?id=CVE-2026-6238 https://nvd.nist.gov/vuln/detail/CVE-2026-6238 https://inbox.sourceware.org/libc-announce/7a655d55-276f-41fe-b550-feb3ebb2ce91@redhat.com/T/#u https://sourceware.org/bugzilla/show_bug.cgi?id=34069 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6238.json https://access.redhat.com/errata/RHSA-2026:42952", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "glibc-minimal-langpack", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:2.34-274.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "Eh3WlvVSpgyvj1kaA5So7g==": { "id": "Eh3WlvVSpgyvj1kaA5So7g==", "updater": "rhel-vex", "name": "CVE-2025-13601", "description": "A heap-based buffer overflow problem was found in glib through an incorrect calculation of buffer size in the g_escape_uri_string() function. If the string to escape contains a very large number of unacceptable characters (which would need escaping), the calculation of the length of the escaped string could overflow, leading to a potential write off the end of the newly allocated string.", "issued": "2025-11-24T13:00:15Z", "links": "https://access.redhat.com/security/cve/CVE-2025-13601 https://bugzilla.redhat.com/show_bug.cgi?id=2416741 https://www.cve.org/CVERecord?id=CVE-2025-13601 https://nvd.nist.gov/vuln/detail/CVE-2025-13601 https://gitlab.gnome.org/GNOME/glib/-/issues/3827 https://gitlab.gnome.org/GNOME/glib/-/merge_requests/4914 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-13601.json https://access.redhat.com/errata/RHSA-2026:0936", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "glib2", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:2.68.4-18.el9_7.1", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "ElE6r7xQZAfd5MScs95BXQ==": { "id": "ElE6r7xQZAfd5MScs95BXQ==", "updater": "rhel-vex", "name": "CVE-2025-3198", "description": "A flaw was found in GNU Binutils. Affected by this vulnerability is the function display_info of the file binutils/bucomm.c of the component objdump. The manipulation leads to memory leak. An attack has to be approached locally.", "issued": "2025-04-04T01:31:08Z", "links": "https://access.redhat.com/security/cve/CVE-2025-3198 https://bugzilla.redhat.com/show_bug.cgi?id=2357358 https://www.cve.org/CVERecord?id=CVE-2025-3198 https://nvd.nist.gov/vuln/detail/CVE-2025-3198 https://sourceware.org/bugzilla/show_bug.cgi?id=32716 https://sourceware.org/bugzilla/show_bug.cgi?id=32716#c0 https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=ba6ad3a18cb26b79e0e3b84c39f707535bbc344d https://vuldb.com/?ctiid.303151 https://vuldb.com/?id.303151 https://vuldb.com/?submit.545773 https://www.gnu.org/ https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-3198.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L", "normalized_severity": "Low", "package": { "id": "", "name": "binutils", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "EmYlXCkWzU0dM5AZphsDzw==": { "id": "EmYlXCkWzU0dM5AZphsDzw==", "updater": "rhel-vex", "name": "CVE-2026-42768", "description": "A flaw was found in OpenSSL's CMS_decrypt() and PKCS7_decrypt() functions. This vulnerability, a Bleichenbacher-style oracle, could allow a remote attacker to decrypt or sign messages using the victim's private RSA key. Exploitation requires the attacker to provide specially crafted CMS or S/MIME messages and observe the application's error codes or decryption output. While the attack is technically possible, the specific conditions required make it unlikely to be exploited in typical deployments.", "issued": "2026-06-09T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-42768 https://bugzilla.redhat.com/show_bug.cgi?id=2481892 https://www.cve.org/CVERecord?id=CVE-2026-42768 https://nvd.nist.gov/vuln/detail/CVE-2026-42768 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42768.json https://access.redhat.com/errata/RHSA-2026:25239", "severity": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N", "normalized_severity": "Low", "package": { "id": "", "name": "openssl", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "1:3.5.5-4.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "Ep1W9j+OJARAHSERuL7J7Q==": { "id": "Ep1W9j+OJARAHSERuL7J7Q==", "updater": "rhel-vex", "name": "CVE-2026-34182", "description": "A flaw was found in OpenSSL's Cryptographic Message Services (CMS) AuthEnvelopedData processing. An on-path attacker can exploit insufficient input validation on cipher and tag length fields by sending specially crafted CMS messages. This can lead to the forging of messages or bypassing integrity validation. Consequently, an attacker may achieve key-equivalent functionality for a given CMS recipient.", "issued": "2026-06-09T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-34182 https://bugzilla.redhat.com/show_bug.cgi?id=2481884 https://www.cve.org/CVERecord?id=CVE-2026-34182 https://nvd.nist.gov/vuln/detail/CVE-2026-34182 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-34182.json https://access.redhat.com/errata/RHSA-2026:25239", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "normalized_severity": "Medium", "package": { "id": "", "name": "openssl-libs", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "1:3.5.5-4.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "ExqOQ5ldBNUvCH4EdaOK5w==": { "id": "ExqOQ5ldBNUvCH4EdaOK5w==", "updater": "rhel-vex", "name": "CVE-2025-6170", "description": "A flaw was found in the interactive shell of the xmllint command-line tool, used for parsing XML files. When a user inputs an overly long command, the program does not check the input size properly, which can cause it to crash. This issue might allow attackers to run harmful code in rare configurations without modern protections.", "issued": "2025-06-16T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2025-6170 https://bugzilla.redhat.com/show_bug.cgi?id=2372952 https://www.cve.org/CVERecord?id=CVE-2025-6170 https://nvd.nist.gov/vuln/detail/CVE-2025-6170 https://gitlab.gnome.org/GNOME/libxml2/-/issues/941 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-6170.json https://access.redhat.com/errata/RHSA-2026:39317", "severity": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L", "normalized_severity": "Low", "package": { "id": "", "name": "libxml2-devel", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "0:2.9.13-14.el9_8.2", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "Ez8lHT2uV9Tf9vJC/T4WXg==": { "id": "Ez8lHT2uV9Tf9vJC/T4WXg==", "updater": "rhel-vex", "name": "CVE-2026-4426", "description": "A flaw was found in libarchive. An Undefined Behavior vulnerability exists in the zisofs decompression logic, caused by improper validation of a field (`pz_log2_bs`) read from ISO9660 Rock Ridge extensions. A remote attacker can exploit this by supplying a specially crafted ISO file. This can lead to incorrect memory allocation and potential application crashes, resulting in a denial-of-service (DoS) condition.", "issued": "2026-03-19T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-4426 https://bugzilla.redhat.com/show_bug.cgi?id=2449010 https://www.cve.org/CVERecord?id=CVE-2026-4426 https://nvd.nist.gov/vuln/detail/CVE-2026-4426 https://github.com/libarchive/libarchive/pull/2897 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-4426.json", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "libarchive", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "F2zbkAiOFT3iZ5Dx0+MHfA==": { "id": "F2zbkAiOFT3iZ5Dx0+MHfA==", "updater": "rhel-vex", "name": "CVE-2026-25547", "description": "A flaw was found in the brace-expansion component. This denial of service (DoS) vulnerability allows a remote attacker to provide specially crafted input containing repeated numeric brace ranges. This input causes the library to attempt an unbounded expansion, consuming excessive CPU and memory resources. This can lead to a system crash, impacting the availability of the service.", "issued": "2026-02-04T21:51:17Z", "links": "https://access.redhat.com/security/cve/CVE-2026-25547 https://bugzilla.redhat.com/show_bug.cgi?id=2436942 https://www.cve.org/CVERecord?id=CVE-2026-25547 https://nvd.nist.gov/vuln/detail/CVE-2026-25547 https://github.com/isaacs/brace-expansion/security/advisories/GHSA-7h2j-956f-4vf2 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-25547.json https://access.redhat.com/errata/RHSA-2026:7302", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "nodejs-docs", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "noarch", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:22.22.2-1.module+el9.7.0+24157+8ddb2461", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "F8lGQFeTGfg63gSPRvjBBA==": { "id": "F8lGQFeTGfg63gSPRvjBBA==", "updater": "rhel-vex", "name": "CVE-2026-48935", "description": "A flaw was found in Node.js. The Permission API allows a local user to modify file metadata on paths that have been explicitly set as read-only. This can lead to unauthorized changes in file properties, impacting the integrity of the file system.", "issued": "2026-06-26T01:14:36Z", "links": "https://access.redhat.com/security/cve/CVE-2026-48935 https://bugzilla.redhat.com/show_bug.cgi?id=2493329 https://www.cve.org/CVERecord?id=CVE-2026-48935 https://nvd.nist.gov/vuln/detail/CVE-2026-48935 https://nodejs.org/en/blog/vulnerability/june-2026-security-releases https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-48935.json https://access.redhat.com/errata/RHSA-2026:35892", "severity": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", "normalized_severity": "Low", "package": { "id": "", "name": "npm", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:10.9.8-1.22.23.1.1.module+el9.8.0+24457+996af7aa", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "FAhn0w8CyRA5pQLzx0KOLg==": { "id": "FAhn0w8CyRA5pQLzx0KOLg==", "updater": "rhel-vex", "name": "CVE-2026-42258", "description": "A flaw was found in Net::IMAP, a Ruby library that provides Internet Message Access Protocol (IMAP) client functionality. This vulnerability allows a remote attacker to inject arbitrary IMAP commands. This is achieved by passing specially crafted symbol arguments to IMAP commands. Successful exploitation could lead to unauthorized actions on the IMAP server or client, potentially resulting in information disclosure or other integrity impacts.", "issued": "2026-05-09T19:40:49Z", "links": "https://access.redhat.com/security/cve/CVE-2026-42258 https://bugzilla.redhat.com/show_bug.cgi?id=2468498 https://www.cve.org/CVERecord?id=CVE-2026-42258 https://nvd.nist.gov/vuln/detail/CVE-2026-42258 https://github.com/ruby/net-imap/releases/tag/v0.4.24 https://github.com/ruby/net-imap/releases/tag/v0.5.14 https://github.com/ruby/net-imap/releases/tag/v0.6.4 https://github.com/ruby/net-imap/security/advisories/GHSA-75xq-5h9v-w6px https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42258.json https://access.redhat.com/errata/RHSA-2026:33576", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:N", "normalized_severity": "High", "package": { "id": "", "name": "ruby-devel", "version": "", "kind": "binary", "normalized_version": "", "module": "ruby:3.3", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "0:3.3.10-7.module+el9.8.0+24406+8975e57f", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "FFVNPAck6QPQFhxf4KhO3g==": { "id": "FFVNPAck6QPQFhxf4KhO3g==", "updater": "rhel-vex", "name": "CVE-2026-41316", "description": "A flaw was found in ERB, a templating system for Ruby. An attacker who can trigger deserialization of untrusted data in a Ruby application can bypass existing protections. This vulnerability allows for arbitrary code execution by exploiting specific public methods that evaluate template source code, which were not properly guarded against deserialization attacks.", "issued": "2026-04-24T02:35:41Z", "links": "https://access.redhat.com/security/cve/CVE-2026-41316 https://bugzilla.redhat.com/show_bug.cgi?id=2461369 https://www.cve.org/CVERecord?id=CVE-2026-41316 https://nvd.nist.gov/vuln/detail/CVE-2026-41316 https://github.com/ruby/erb/security/advisories/GHSA-q339-8rmv-2mhv https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-41316.json https://access.redhat.com/errata/RHSA-2026:18030", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "normalized_severity": "High", "package": { "id": "", "name": "ruby", "version": "", "kind": "binary", "normalized_version": "", "module": "ruby:3.3", "arch": "aarch64|i686|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "0:3.3.10-6.module+el9.7.0+24248+66578cbb", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "FInGJTEa3gToUzpaoDNNQw==": { "id": "FInGJTEa3gToUzpaoDNNQw==", "updater": "rhel-vex", "name": "CVE-2026-35388", "description": "A flaw was found in OpenSSH. This vulnerability allows for a low integrity impact due to the omission of connection multiplexing confirmation for proxy-mode multiplexing sessions. A local user, under specific and complex conditions requiring user interaction, could potentially establish a multiplexed session without explicit confirmation, leading to unintended data handling.", "issued": "2026-04-02T16:57:31Z", "links": "https://access.redhat.com/security/cve/CVE-2026-35388 https://bugzilla.redhat.com/show_bug.cgi?id=2454500 https://www.cve.org/CVERecord?id=CVE-2026-35388 https://nvd.nist.gov/vuln/detail/CVE-2026-35388 https://marc.info/?l=openssh-unix-dev\u0026m=177513443901484\u0026w=2 https://www.openssh.org/releasenotes.html#10.3p1 https://www.openwall.com/lists/oss-security/2026/04/02/3 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-35388.json https://access.redhat.com/errata/RHSA-2026:13381", "severity": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:N", "normalized_severity": "Low", "package": { "id": "", "name": "openssh-clients", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:8.7p1-49.el9_7", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "FMWVyBjC/IhzfdU57RFV5A==": { "id": "FMWVyBjC/IhzfdU57RFV5A==", "updater": "rhel-vex", "name": "CVE-2026-42246", "description": "A flaw was found in the Ruby net-imap library. When upgrading a cleartext IMAP connection to TLS using the Net::IMAP#starttls method, the library improperly handles certain responses received during STARTTLS negotiation. A man-in-the-middle (MITM) attacker can inject a predicted tagged OK response before the client completes the STARTTLS command, causing the operation to appear successful without establishing a TLS session. As a result, the connection may continue to transmit sensitive information in cleartext and enable modification of data exchanged over the affected connection, while the application incorrectly believes that encryption has been enabled.", "issued": "2026-05-09T19:33:17Z", "links": "https://access.redhat.com/security/cve/CVE-2026-42246 https://bugzilla.redhat.com/show_bug.cgi?id=2468499 https://www.cve.org/CVERecord?id=CVE-2026-42246 https://nvd.nist.gov/vuln/detail/CVE-2026-42246 https://github.com/ruby/net-imap/commit/0ede4c40b1523dfeaf95777b2678e54cc0fd9618 https://github.com/ruby/net-imap/commit/24a4e770b43230286a05aa2a9746cdbb3eb8485e https://github.com/ruby/net-imap/commit/97e2488fb5401a1783bddd959dde007d9fbce42c https://github.com/ruby/net-imap/commit/f79d35bf5833f186e81044c57c843eda30c873da https://github.com/ruby/net-imap/releases/tag/v0.3.10 https://github.com/ruby/net-imap/releases/tag/v0.4.24 https://github.com/ruby/net-imap/releases/tag/v0.5.14 https://github.com/ruby/net-imap/security/advisories/GHSA-vcgp-9326-pqcp https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42246.json https://access.redhat.com/errata/RHSA-2026:33576", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "normalized_severity": "High", "package": { "id": "", "name": "rubygems", "version": "", "kind": "binary", "normalized_version": "", "module": "ruby:3.3", "arch": "noarch", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "0:3.5.22-7.module+el9.8.0+24406+8975e57f", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "FQwXyPZ+oHyxQZ9RBQXbpw==": { "id": "FQwXyPZ+oHyxQZ9RBQXbpw==", "updater": "rhel-vex", "name": "CVE-2025-13034", "description": "A flaw was found in curl. When configured to use public key pinning with QUIC connections and GnuTLS, and with standard certificate verification explicitly disabled, curl could bypass the intended public key check. This oversight allows a malicious server to impersonate a legitimate one, potentially leading to unauthorized access or information disclosure due to a failure in verifying the server's identity.", "issued": "2026-01-07T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2025-13034 https://bugzilla.redhat.com/show_bug.cgi?id=2426406 https://www.cve.org/CVERecord?id=CVE-2025-13034 https://nvd.nist.gov/vuln/detail/CVE-2025-13034 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-13034.json", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N", "normalized_severity": "Medium", "package": { "id": "", "name": "curl", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "FW+E40XkknH5Jv24oip5Ow==": { "id": "FW+E40XkknH5Jv24oip5Ow==", "updater": "rhel-vex", "name": "CVE-2026-4360", "description": "A flaw was found in the Python `Tarfile.extract()` function. This vulnerability occurs when processing untrusted tar files containing hardlinks, as the `filter` parameter is not correctly enforced. An attacker could exploit this to write files with unintended user or group ownership, potentially leading to unauthorized modifications or privilege issues on the system.", "issued": "2026-06-30T14:45:35Z", "links": "https://access.redhat.com/security/cve/CVE-2026-4360 https://bugzilla.redhat.com/show_bug.cgi?id=2494987 https://www.cve.org/CVERecord?id=CVE-2026-4360 https://nvd.nist.gov/vuln/detail/CVE-2026-4360 https://github.com/python/cpython/issues/151987 https://github.com/python/cpython/pull/151988 https://mail.python.org/archives/list/security-announce@python.org/thread/TWZW2PC2AZOV6FENIHFSRC63OM7MBGSB/ https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-4360.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N", "normalized_severity": "Medium", "package": { "id": "", "name": "python3.9", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "FeNPPUXNvPHMFZ28E13Mog==": { "id": "FeNPPUXNvPHMFZ28E13Mog==", "updater": "rhel-vex", "name": "CVE-2026-48934", "description": "A flaw was found in Node.js. An attacker can exploit a vulnerability in the Transport Layer Security (TLS) host verification process to bypass certification validation. This bypass could allow an attacker to intercept or alter communications, potentially leading to information disclosure or integrity compromise.", "issued": "2026-06-26T01:14:36Z", "links": "https://access.redhat.com/security/cve/CVE-2026-48934 https://bugzilla.redhat.com/show_bug.cgi?id=2493332 https://www.cve.org/CVERecord?id=CVE-2026-48934 https://nvd.nist.gov/vuln/detail/CVE-2026-48934 https://nodejs.org/en/blog/vulnerability/june-2026-security-releases https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-48934.json https://access.redhat.com/errata/RHSA-2026:35892", "severity": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "normalized_severity": "Medium", "package": { "id": "", "name": "nodejs-full-i18n", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:22.23.1-1.module+el9.8.0+24457+996af7aa", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "FroZeKbNhNx69+bj8o0OqQ==": { "id": "FroZeKbNhNx69+bj8o0OqQ==", "updater": "rhel-vex", "name": "CVE-2025-11082", "description": "A head based buffer overflow flaw has been discovered in GNU bin utilities. Impacted is the function _bfd_elf_parse_eh_frame of the file bfd/elf-eh-frame.c of the component Linker. Executing manipulation can lead to heap-based buffer overflow. The attack is restricted to local execution.", "issued": "2025-09-27T22:32:09Z", "links": "https://access.redhat.com/security/cve/CVE-2025-11082 https://bugzilla.redhat.com/show_bug.cgi?id=2399943 https://www.cve.org/CVERecord?id=CVE-2025-11082 https://nvd.nist.gov/vuln/detail/CVE-2025-11082 https://sourceware.org/bugzilla/attachment.cgi?id=16358 https://sourceware.org/bugzilla/show_bug.cgi?id=33464 https://sourceware.org/bugzilla/show_bug.cgi?id=33464#c2 https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=ea1a0737c7692737a644af0486b71e4a392cbca8 https://vuldb.com/?ctiid.326123 https://vuldb.com/?id.326123 https://vuldb.com/?submit.661276 https://www.gnu.org/ https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-11082.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "normalized_severity": "Medium", "package": { "id": "", "name": "binutils", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "Fw+ArhlgBhD30C7D93vYhg==": { "id": "Fw+ArhlgBhD30C7D93vYhg==", "updater": "rhel-vex", "name": "CVE-2025-6069", "description": "A denial-of-service (DoS) vulnerability has been discovered in Python's html.parser.HTMLParser class. When processing specially malformed HTML input, the parsing runtime can become quadratic with respect to the input size. This significantly increased processing time can lead to excessive resource consumption, ultimately causing a denial-of-service condition in applications that rely on this parser.", "issued": "2025-06-17T13:39:46Z", "links": "https://access.redhat.com/security/cve/CVE-2025-6069 https://bugzilla.redhat.com/show_bug.cgi?id=2373234 https://www.cve.org/CVERecord?id=CVE-2025-6069 https://nvd.nist.gov/vuln/detail/CVE-2025-6069 https://github.com/python/cpython/commit/4455cbabf991e202185a25a631af206f60bbc949 https://github.com/python/cpython/commit/6eb6c5dbfb528bd07d77b60fd71fd05d81d45c41 https://github.com/python/cpython/commit/d851f8e258c7328814943e923a7df81bca15df4b https://github.com/python/cpython/issues/135462 https://github.com/python/cpython/pull/135464 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-6069.json https://access.redhat.com/errata/RHSA-2025:23342", "severity": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L", "normalized_severity": "Medium", "package": { "id": "", "name": "python3-libs", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:3.9.25-2.el9_7", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "FzTxCzGYtLmJVoQ1syBiUQ==": { "id": "FzTxCzGYtLmJVoQ1syBiUQ==", "updater": "rhel-vex", "name": "CVE-2026-4111", "description": "A flaw was identified in the RAR5 archive decompression logic of the libarchive library, specifically within the archive_read_data() processing path. When a specially crafted RAR5 archive is processed, the decompression routine may enter a state where internal logic prevents forward progress. This condition results in an infinite loop that continuously consumes CPU resources. Because the archive passes checksum validation and appears structurally valid, affected applications cannot detect the issue before processing. This can allow attackers to cause persistent denial-of-service conditions in services that automatically process archives.", "issued": "2026-03-11T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-4111 https://bugzilla.redhat.com/show_bug.cgi?id=2446453 https://www.cve.org/CVERecord?id=CVE-2026-4111 https://nvd.nist.gov/vuln/detail/CVE-2026-4111 https://github.com/libarchive/libarchive/pull/2877 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-4111.json https://access.redhat.com/errata/RHSA-2026:5080", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "High", "package": { "id": "", "name": "bsdtar", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "0:3.5.3-7.el9_7", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "G/nM9FqgWuICAFy4kMmJlA==": { "id": "G/nM9FqgWuICAFy4kMmJlA==", "updater": "rhel-vex", "name": "CVE-2026-59995", "description": "A flaw was found in OpenSSH. The `sftp` client, when used to download files from a malicious server with the 'sftp server:/path .' command, does not properly restrict where those files are saved. This allows an attacker to control the download location, potentially overwriting existing files or placing malicious files in sensitive directories on the client system, which could compromise system integrity.", "issued": "2026-07-08T00:04:49Z", "links": "https://access.redhat.com/security/cve/CVE-2026-59995 https://bugzilla.redhat.com/show_bug.cgi?id=2497927 https://www.cve.org/CVERecord?id=CVE-2026-59995 https://nvd.nist.gov/vuln/detail/CVE-2026-59995 https://marc.info/?l=openssh-unix-dev\u0026m=178333966933090\u0026w=2 https://www.openssh.org/releasenotes.html#10.4p1 https://www.openwall.com/lists/oss-security/2026/07/06/5 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59995.json", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L", "normalized_severity": "Medium", "package": { "id": "", "name": "openssh", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "G1BYG6YufGP4p88wdWeAgg==": { "id": "G1BYG6YufGP4p88wdWeAgg==", "updater": "rhel-vex", "name": "CVE-2026-42011", "description": "A flaw was found in gnutls. This vulnerability occurs because permitted name constraints were incorrectly ignored when previous Certificate Authorities (CAs) only had excluded name constraints. A remote attacker could exploit this to bypass critical name constraint checks during certificate validation. This bypass could lead to the acceptance of invalid certificates, potentially enabling spoofing or man-in-the-middle attacks against affected systems.", "issued": "2026-04-29T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-42011 https://bugzilla.redhat.com/show_bug.cgi?id=2467437 https://www.cve.org/CVERecord?id=CVE-2026-42011 https://nvd.nist.gov/vuln/detail/CVE-2026-42011 https://www.gnutls.org/security-new.html#GNUTLS-SA-2026-04-29-6 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42011.json https://access.redhat.com/errata/RHSA-2026:20612", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "normalized_severity": "Medium", "package": { "id": "", "name": "gnutls", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:3.8.10-4.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "GAn7gWUe2pFr7PbwechqxA==": { "id": "GAn7gWUe2pFr7PbwechqxA==", "updater": "rhel-vex", "name": "CVE-2025-30258", "description": "A flaw was found in GnuPG. In affected versions, if a user chooses to import a certificate with certain crafted subkey data that lacks a valid backsig or that has incorrect usage flags, the user loses the ability to verify signatures made from certain other signing keys, leading to a verification denial of service.", "issued": "2025-03-19T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2025-30258 https://bugzilla.redhat.com/show_bug.cgi?id=2353427 https://www.cve.org/CVERecord?id=CVE-2025-30258 https://nvd.nist.gov/vuln/detail/CVE-2025-30258 https://dev.gnupg.org/T7527 https://dev.gnupg.org/rG48978ccb4e20866472ef18436a32744350a65158 https://lists.gnupg.org/pipermail/gnupg-announce/2025q1/000491.html https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-30258.json", "severity": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:N/I:N/A:L", "normalized_severity": "Low", "package": { "id": "", "name": "gnupg2", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "GKtRNrhu6jQDTa3SPO81Kg==": { "id": "GKtRNrhu6jQDTa3SPO81Kg==", "updater": "rhel-vex", "name": "CVE-2026-4046", "description": "A flaw was found in glibc, the GNU C Library. A remote attacker could exploit this vulnerability by providing specially crafted inputs using the IBM1390 or IBM1399 character sets to the `iconv()` function. This could lead to an assertion failure, causing the application to crash and resulting in a Denial of Service (DoS).", "issued": "2026-03-30T17:16:11Z", "links": "https://access.redhat.com/security/cve/CVE-2026-4046 https://bugzilla.redhat.com/show_bug.cgi?id=2453117 https://www.cve.org/CVERecord?id=CVE-2026-4046 https://nvd.nist.gov/vuln/detail/CVE-2026-4046 https://packages.fedoraproject.org/pkgs/glibc/glibc-gconv-extra/ https://sourceware.org/bugzilla/show_bug.cgi?id=33980 https://sourceware.org/git/?p=glibc.git;a=blob_plain;f=advisories/GLIBC-SA-2026-0007;hb=HEAD https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-4046.json https://access.redhat.com/errata/RHSA-2026:20597", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "normalized_severity": "Medium", "package": { "id": "", "name": "glibc-headers", "version": "", "kind": "binary", "normalized_version": "", "arch": "s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "0:2.34-270.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "GMnASWjZHihDlhJdlv57Iw==": { "id": "GMnASWjZHihDlhJdlv57Iw==", "updater": "rhel-vex", "name": "CVE-2025-64505", "description": "A heap buffer over-read vulnerability exists in libpng's png_do_quantize function when processing PNG files with malformed palette indices. The vulnerability occurs when palette_lookup array bounds are not validated against externally-supplied image data, allowing an attacker to craft a PNG file with out-of-range palette indices that trigger out-of-bounds memory access.", "issued": "2025-11-24T23:38:40Z", "links": "https://access.redhat.com/security/cve/CVE-2025-64505 https://bugzilla.redhat.com/show_bug.cgi?id=2416905 https://www.cve.org/CVERecord?id=CVE-2025-64505 https://nvd.nist.gov/vuln/detail/CVE-2025-64505 https://github.com/pnggroup/libpng/commit/6a528eb5fd0dd7f6de1c39d30de0e41473431c37 https://github.com/pnggroup/libpng/pull/748 https://github.com/pnggroup/libpng/security/advisories/GHSA-4952-h5wq-4m42 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-64505.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L", "normalized_severity": "Medium", "package": { "id": "", "name": "libpng", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "GW37uYQxwwgJBIDtA/dT2g==": { "id": "GW37uYQxwwgJBIDtA/dT2g==", "updater": "rhel-vex", "name": "CVE-2025-1795", "description": "A flaw was found in Python. When a separating comma ends up on a folded line during an address list folding of email headers, the comma is unintentionally unicode encoded. The expected behavior is that the separating comma remains unencoded. This can result in the address header being misinterpreted by some mail servers.", "issued": "2025-02-28T18:59:31Z", "links": "https://access.redhat.com/security/cve/CVE-2025-1795 https://bugzilla.redhat.com/show_bug.cgi?id=2349061 https://www.cve.org/CVERecord?id=CVE-2025-1795 https://nvd.nist.gov/vuln/detail/CVE-2025-1795 https://github.com/python/cpython/commit/09fab93c3d857496c0bd162797fab816c311ee48 https://github.com/python/cpython/commit/70754d21c288535e86070ca7a6e90dcb670b8593 https://github.com/python/cpython/commit/9148b77e0af91cdacaa7fe3dfac09635c3fe9a74 https://github.com/python/cpython/issues/100884 https://github.com/python/cpython/pull/100885 https://github.com/python/cpython/pull/119099 https://mail.python.org/archives/list/security-announce@python.org/thread/MB62IZMEC3UM6SGHP5LET5JX2Y7H4ZUR/ https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-1795.json", "severity": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N", "normalized_severity": "Low", "package": { "id": "", "name": "python3.9", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "GWKQvGJTKzyU9GiQECoFhg==": { "id": "GWKQvGJTKzyU9GiQECoFhg==", "updater": "rhel-vex", "name": "CVE-2025-69420", "description": "A flaw was found in OpenSSL. A type confusion vulnerability exists in the TimeStamp Response verification code, where an ASN1_TYPE union member is accessed without proper type validation. A remote attacker can exploit this by providing a malformed TimeStamp Response to an application that verifies timestamp responses. This can lead to an invalid or NULL pointer dereference, resulting in a Denial of Service (DoS) due to an application crash.", "issued": "2026-01-27T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2025-69420 https://bugzilla.redhat.com/show_bug.cgi?id=2430388 https://www.cve.org/CVERecord?id=CVE-2025-69420 https://nvd.nist.gov/vuln/detail/CVE-2025-69420 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-69420.json https://access.redhat.com/errata/RHSA-2026:1473", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "openssl-libs", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "1:3.5.1-7.el9_7", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "GXMpRf2go/wGEbwpp9BPPQ==": { "id": "GXMpRf2go/wGEbwpp9BPPQ==", "updater": "rhel-vex", "name": "CVE-2023-1175", "description": "A flaw was found in Vim. There is an incorrect calculation of buffer size issue found in Vim's yank_copy_line() function of the register.c file. This flaw allows illegal memory access when using virtual editing as \"startspaces\" goes negative. An attacker can trick a user into opening a specially crafted file, triggering an issue that causes an application to crash leading to a denial of service, corrupting memory, and possibly executing code.", "issued": "2023-03-04T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2023-1175 https://bugzilla.redhat.com/show_bug.cgi?id=2176457 https://www.cve.org/CVERecord?id=CVE-2023-1175 https://nvd.nist.gov/vuln/detail/CVE-2023-1175 https://huntr.dev/bounties/7e93fc17-92eb-4ae7-b01a-93bb460b643e https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-1175.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L", "normalized_severity": "Low", "package": { "id": "", "name": "vim", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "GdB2cJ8S1OqnHKM7G6grQA==": { "id": "GdB2cJ8S1OqnHKM7G6grQA==", "updater": "rhel-vex", "name": "CVE-2025-55131", "description": "A memory exposure flaw has been discovered in Node.js. A flaw in Node.js's buffer allocation logic can expose uninitialized memory when allocations are interrupted, when using the `vm` module with the timeout option. Under specific timing conditions, buffers allocated with `Buffer.alloc` and other `TypedArray` instances like `Uint8Array` may contain leftover data from previous operations, allowing in-process secrets like tokens or passwords to leak or causing data corruption.", "issued": "2026-01-20T20:41:55Z", "links": "https://access.redhat.com/security/cve/CVE-2025-55131 https://bugzilla.redhat.com/show_bug.cgi?id=2431350 https://www.cve.org/CVERecord?id=CVE-2025-55131 https://nvd.nist.gov/vuln/detail/CVE-2025-55131 https://nodejs.org/en/blog/vulnerability/december-2025-security-releases https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-55131.json https://access.redhat.com/errata/RHSA-2026:2782", "severity": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L", "normalized_severity": "High", "package": { "id": "", "name": "nodejs-docs", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "noarch", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:22.22.0-1.module+el9.7.0+23896+b5802de9", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "GfPY5zBbHJQI4ZGaDcJj2A==": { "id": "GfPY5zBbHJQI4ZGaDcJj2A==", "updater": "rhel-vex", "name": "CVE-2022-3278", "description": "A NULL pointer dereference vulnerability was found in Vim's eval_next_non_blank() function of the src/eval.c file. The flaw occurs when using NUL in buffer uses :source. This flaw allows an attacker to trick a user into opening a specially crafted file, triggering a NULL pointer dereference that causes a denial of service.", "issued": "2022-09-24T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2022-3278 https://bugzilla.redhat.com/show_bug.cgi?id=2129831 https://www.cve.org/CVERecord?id=CVE-2022-3278 https://nvd.nist.gov/vuln/detail/CVE-2022-3278 https://huntr.dev/bounties/a9fad77e-f245-4ce9-ba15-c7d4c86c4612 https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-3278.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "vim", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "GnBCRP9H+R6do428z3nOkQ==": { "id": "GnBCRP9H+R6do428z3nOkQ==", "updater": "rhel-vex", "name": "CVE-2021-4173", "description": "A flaw was found in vim. A possible use after free vulnerability could allow an attacker to input a specially crafted file leading to a crash or code execution.", "issued": "2021-12-27T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2021-4173 https://bugzilla.redhat.com/show_bug.cgi?id=2035930 https://www.cve.org/CVERecord?id=CVE-2021-4173 https://nvd.nist.gov/vuln/detail/CVE-2021-4173 https://security.access.redhat.com/data/csaf/v2/vex/2021/cve-2021-4173.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "vim", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "Go9bB5Mq4W4FHPvmZKBhCg==": { "id": "Go9bB5Mq4W4FHPvmZKBhCg==", "updater": "rhel-vex", "name": "CVE-2026-42010", "description": "A flaw was found in gnutls. Servers configured with RSA-PSK (Rivest–Shamir–Adleman – Pre-Shared Key) wrongfully matched usernames containing a NUL character with truncated usernames. A remote attacker could exploit this by sending a specially crafted username, leading to an authentication bypass. This vulnerability allows an attacker to gain unauthorized access by circumventing the authentication process.", "issued": "2026-04-29T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-42010 https://bugzilla.redhat.com/show_bug.cgi?id=2467289 https://www.cve.org/CVERecord?id=CVE-2026-42010 https://nvd.nist.gov/vuln/detail/CVE-2026-42010 https://www.gnutls.org/security-new.html#GNUTLS-SA-2026-04-29-4 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42010.json https://access.redhat.com/errata/RHSA-2026:20612", "severity": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N", "normalized_severity": "High", "package": { "id": "", "name": "gnutls", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:3.8.10-4.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "GoTAJ6nke0a3zoxJ8lkaAg==": { "id": "GoTAJ6nke0a3zoxJ8lkaAg==", "updater": "rhel-vex", "name": "CVE-2026-45446", "description": "A flaw was found in OpenSSL. The implementations of AES-SIV (Advanced Encryption Standard - SIV) and AES-GCM-SIV (Advanced Encryption Standard - Galois/Counter Mode - SIV) incorrectly process authentication tags for empty messages. This vulnerability allows a remote attacker to forge empty messages with arbitrary Additional Authenticated Data (AAD) in applications that utilize these specific cipher modes within custom protocols and do not properly handle zero-length ciphertexts. This could lead to unauthorized data manipulation.", "issued": "2026-06-09T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-45446 https://bugzilla.redhat.com/show_bug.cgi?id=2481897 https://www.cve.org/CVERecord?id=CVE-2026-45446 https://nvd.nist.gov/vuln/detail/CVE-2026-45446 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-45446.json https://access.redhat.com/errata/RHSA-2026:25239", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N", "normalized_severity": "Low", "package": { "id": "", "name": "openssl-libs", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "1:3.5.5-4.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "Gv9SmnUKqHUi+G3vQah9BA==": { "id": "Gv9SmnUKqHUi+G3vQah9BA==", "updater": "rhel-vex", "name": "CVE-2025-55130", "description": "A flaw in Node.js’s Permissions model allows attackers to bypass `--allow-fs-read` and `--allow-fs-write` restrictions using crafted relative symlink paths. By chaining directories and symlinks, a script granted access only to the current directory can escape the allowed path and read sensitive files. This breaks the expected isolation guarantees and enables arbitrary file read/write.", "issued": "2026-01-20T20:41:55Z", "links": "https://access.redhat.com/security/cve/CVE-2025-55130 https://bugzilla.redhat.com/show_bug.cgi?id=2431352 https://www.cve.org/CVERecord?id=CVE-2025-55130 https://nvd.nist.gov/vuln/detail/CVE-2025-55130 https://nodejs.org/en/blog/vulnerability/december-2025-security-releases https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-55130.json https://access.redhat.com/errata/RHSA-2026:2782", "severity": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "normalized_severity": "High", "package": { "id": "", "name": "nodejs-docs", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "noarch", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:22.22.0-1.module+el9.7.0+23896+b5802de9", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "H1wshPoazj8pmzsnWAztZA==": { "id": "H1wshPoazj8pmzsnWAztZA==", "updater": "rhel-vex", "name": "CVE-2026-6276", "description": "A flaw was found in libcurl. This vulnerability allows for information disclosure when a custom `Host:` header is used in an initial HTTP request, and a subsequent request reuses the same connection without specifying a new `Host:` header. This can lead to libcurl incorrectly sending cookies intended for the first host to the second host, resulting in a cookie leak. This issue is categorized as an Origin Validation Error (CWE-346). Exploitation typically requires specific debugging configurations.", "issued": "2026-04-29T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-6276 https://bugzilla.redhat.com/show_bug.cgi?id=2461203 https://www.cve.org/CVERecord?id=CVE-2026-6276 https://nvd.nist.gov/vuln/detail/CVE-2026-6276 https://curl.se/docs/CVE-2026-6276.html https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6276.json", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N", "normalized_severity": "Low", "package": { "id": "", "name": "curl", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "H6ZekKRHFt5pG1Ua5PfWzw==": { "id": "H6ZekKRHFt5pG1Ua5PfWzw==", "updater": "rhel-vex", "name": "CVE-2026-6100", "description": "A flaw was found in Python's decompression modules, including `lzma.LZMADecompressor`, `bz2.BZ2Decompressor`, and `gzip.GzipFile`. This vulnerability, a use-after-free, can occur if a program attempts to re-use a decompression object after a memory allocation error, especially when the system is experiencing high memory usage. Exploitation of this flaw could potentially allow an attacker to execute arbitrary code or access sensitive data. The vulnerability is only present if the program re-uses decompressor instances across multiple decompression calls even after a `MemoryError` is raised during decompression. Using the helper functions to one-shot decompress data such as `lzma.decompress()`, `bz2.decompress()`, `gzip.decompress()`, and `zlib.decompress()` are not affected as a new decompressor instance is used per call. If the decompressor instance is not re-used after an error condition, this usage is similarly not vulnerable.", "issued": "2026-04-13T17:15:47Z", "links": "https://access.redhat.com/security/cve/CVE-2026-6100 https://bugzilla.redhat.com/show_bug.cgi?id=2457932 https://www.cve.org/CVERecord?id=CVE-2026-6100 https://nvd.nist.gov/vuln/detail/CVE-2026-6100 https://github.com/python/cpython/commit/6a5f79c8d7bbf22b083b240910c7a8781a59437d https://github.com/python/cpython/commit/8fc66aef6d7b3ae58f43f5c66f9366cc8cbbfcd2 https://github.com/python/cpython/commit/c3cf71c3366fe49acb776a639405c0eea6169c20 https://github.com/python/cpython/issues/148395 https://github.com/python/cpython/pull/148396 https://mail.python.org/archives/list/security-announce@python.org/thread/HTWB2Z6KT5QQX4RYEZAFININDHNOSIF3/ https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6100.json https://access.redhat.com/errata/RHSA-2026:10949", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "normalized_severity": "High", "package": { "id": "", "name": "python3", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:3.9.25-3.el9_7.3", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "HHBOKYlzeD2Busv7btyBAA==": { "id": "HHBOKYlzeD2Busv7btyBAA==", "updater": "rhel-vex", "name": "CVE-2023-48232", "description": "A flaw was found in Vim, an open source command line text editor. A floating point exception may occur when calculating the line offset for overlong lines when smooth scrolling is enabled and the cpo-settings include the 'n' flag. This issue may occur when a window border is present and when the wrapped line continues on the next physical line directly in the window border because the 'cpo' setting includes the 'n' flag. Only users with non-default settings are affected and the exception should only result in a crash.", "issued": "2023-11-16T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2023-48232 https://bugzilla.redhat.com/show_bug.cgi?id=2250269 https://www.cve.org/CVERecord?id=CVE-2023-48232 https://nvd.nist.gov/vuln/detail/CVE-2023-48232 http://www.openwall.com/lists/oss-security/2023/11/16/1 https://github.com/vim/vim/commit/cb0b99f0672d8446585d26e998343dceca17d1ce https://github.com/vim/vim/security/advisories/GHSA-f6cx-x634-hqpw https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-48232.json", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "normalized_severity": "Low", "package": { "id": "", "name": "vim", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "HSaKorahiaNwGqqE2DJSaw==": { "id": "HSaKorahiaNwGqqE2DJSaw==", "updater": "rhel-vex", "name": "CVE-2022-3235", "description": "A use after free vulnerability has been found in the vim package of the linux kernals such that Referencing memory after it has been freed can cause a program to crash, use unexpected values, or execute code.", "issued": "2022-09-18T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2022-3235 https://bugzilla.redhat.com/show_bug.cgi?id=2129371 https://www.cve.org/CVERecord?id=CVE-2022-3235 https://nvd.nist.gov/vuln/detail/CVE-2022-3235 https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-3235.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "vim", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "HVxGZgwvlrVpgAxKx4gRlA==": { "id": "HVxGZgwvlrVpgAxKx4gRlA==", "updater": "rhel-vex", "name": "CVE-2026-13149", "description": "A flaw was found in brace-expansion. An attacker can exploit a vulnerability in the `expand()` function by providing a specially crafted string. This string, containing consecutive non-expanding brace groups, can trigger exponential-time complexity, leading to significant CPU consumption and event-loop blocking. This can result in a Denial of Service (DoS) for the affected system.", "issued": "2026-06-30T08:30:34Z", "links": "https://access.redhat.com/security/cve/CVE-2026-13149 https://bugzilla.redhat.com/show_bug.cgi?id=2494813 https://www.cve.org/CVERecord?id=CVE-2026-13149 https://nvd.nist.gov/vuln/detail/CVE-2026-13149 https://github.com/juliangruber/brace-expansion/commit/c7e33ec13ac1a684c116720843ce24e208611754 https://www.npmjs.com/package/brace-expansion https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-13149.json https://access.redhat.com/errata/RHSA-2026:47058", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "High", "package": { "id": "", "name": "npm", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:10.9.8-1.22.23.1.2.module+el9.8.0+24538+3f176d52", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "HZ0OAEgNf1utcoh9whd4EA==": { "id": "HZ0OAEgNf1utcoh9whd4EA==", "updater": "rhel-vex", "name": "CVE-2025-14512", "description": "A flaw was found in glib. This vulnerability allows a heap buffer overflow and denial-of-service (DoS) via an integer overflow in GLib's GIO (GLib Input/Output) escape_byte_string() function when processing malicious file or remote filesystem attribute values.", "issued": "2025-12-11T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2025-14512 https://bugzilla.redhat.com/show_bug.cgi?id=2421339 https://www.cve.org/CVERecord?id=CVE-2025-14512 https://nvd.nist.gov/vuln/detail/CVE-2025-14512 https://gitlab.gnome.org/GNOME/glib/-/issues/3845 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-14512.json https://access.redhat.com/errata/RHSA-2026:19361", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "glib2", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:2.68.4-19.el9_8.1", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "Hd38sct1pK5WIzmx83J/eA==": { "id": "Hd38sct1pK5WIzmx83J/eA==", "updater": "rhel-vex", "name": "CVE-2026-27135", "description": "A flaw was found in nghttp2. Due to missing internal state validation, the library continues to process incoming data even after a session has been terminated. A remote attacker could exploit this by sending a specially crafted HTTP/2 frame, leading to an assertion failure and a denial of service (DoS).", "issued": "2026-03-18T17:59:02Z", "links": "https://access.redhat.com/security/cve/CVE-2026-27135 https://bugzilla.redhat.com/show_bug.cgi?id=2448754 https://www.cve.org/CVERecord?id=CVE-2026-27135 https://nvd.nist.gov/vuln/detail/CVE-2026-27135 https://github.com/nghttp2/nghttp2/commit/5c7df8fa815ac1004d9ecb9d1f7595c4d37f46e1 https://github.com/nghttp2/nghttp2/security/advisories/GHSA-6933-cjhr-5qg6 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-27135.json https://access.redhat.com/errata/RHSA-2026:7302", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "High", "package": { "id": "", "name": "nodejs-libs", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:22.22.2-1.module+el9.7.0+24157+8ddb2461", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "Hg9hK3dp3A/kFUiUwl8AoQ==": { "id": "Hg9hK3dp3A/kFUiUwl8AoQ==", "updater": "rhel-vex", "name": "CVE-2026-56406", "description": "A flaw was found in libexpat. An integer overflow vulnerability exists in the `XML_ParseBuffer` function due to a missing check. This flaw could allow an attacker to cause memory corruption, potentially leading to arbitrary code execution, information disclosure, or a denial of service.", "issued": "2026-06-21T15:48:21Z", "links": "https://access.redhat.com/security/cve/CVE-2026-56406 https://bugzilla.redhat.com/show_bug.cgi?id=2491187 https://www.cve.org/CVERecord?id=CVE-2026-56406 https://nvd.nist.gov/vuln/detail/CVE-2026-56406 https://github.com/libexpat/libexpat/pull/1255 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-56406.json", "severity": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L", "normalized_severity": "Medium", "package": { "id": "", "name": "expat", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "Hk8k4qPIhaJI1mipqA9iiw==": { "id": "Hk8k4qPIhaJI1mipqA9iiw==", "updater": "rhel-vex", "name": "CVE-2026-41080", "description": "A flaw was found in libexpat. A remote attacker could exploit this vulnerability by providing a specially crafted XML document that leverages insufficient entropy in the hash function. This can lead to hash flooding, a type of Denial of Service (DoS) attack, where the system becomes unresponsive or crashes due to excessive resource consumption.", "issued": "2026-04-16T16:52:01Z", "links": "https://access.redhat.com/security/cve/CVE-2026-41080 https://bugzilla.redhat.com/show_bug.cgi?id=2458967 https://www.cve.org/CVERecord?id=CVE-2026-41080 https://nvd.nist.gov/vuln/detail/CVE-2026-41080 https://github.com/libexpat/libexpat/issues/47 https://github.com/libexpat/libexpat/pull/1183 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-41080.json", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L", "normalized_severity": "Low", "package": { "id": "", "name": "expat", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "HlOu0EmTxHkjzmJeJEuJmw==": { "id": "HlOu0EmTxHkjzmJeJEuJmw==", "updater": "rhel-vex", "name": "CVE-2023-4735", "description": "Out-of-bounds Write in GitHub repository vim/vim prior to 9.0.1847.", "issued": "2023-09-02T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2023-4735 https://bugzilla.redhat.com/show_bug.cgi?id=2237165 https://www.cve.org/CVERecord?id=CVE-2023-4735 https://nvd.nist.gov/vuln/detail/CVE-2023-4735 https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-4735.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "vim", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "Hoba3nMTEuYEZMkGsuPdgg==": { "id": "Hoba3nMTEuYEZMkGsuPdgg==", "updater": "rhel-vex", "name": "CVE-2026-50219", "description": "A flaw was found in libexpat. This vulnerability occurs because the library, in versions before 2.8.2, does not properly track handler call depth when certain XML parsing functions are invoked from within handlers during a policy violation. This oversight can lead to a use-after-free condition, which may result in information disclosure, integrity loss, or denial of service.", "issued": "2026-06-04T04:20:32Z", "links": "https://access.redhat.com/security/cve/CVE-2026-50219 https://bugzilla.redhat.com/show_bug.cgi?id=2484620 https://www.cve.org/CVERecord?id=CVE-2026-50219 https://nvd.nist.gov/vuln/detail/CVE-2026-50219 https://github.com/libexpat/libexpat/pull/1246 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-50219.json", "severity": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L", "normalized_severity": "Medium", "package": { "id": "", "name": "expat", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "HveCNT+j0lknlUOFTaqgtg==": { "id": "HveCNT+j0lknlUOFTaqgtg==", "updater": "rhel-vex", "name": "CVE-2026-22693", "description": "A null pointer dereference vector has been discovered in the harfbuzz package. A null pointer dereference vulnerability exists in the SubtableUnicodesCache::create function located in src/hb-ot-cmap-table.hh:1672-1673. The function fails to check if hb_malloc returns NULL before using placement new to construct an object at the returned pointer address. When hb_malloc fails to allocate memory (which can occur in low-memory conditions or when using custom allocators that simulate allocation failures), it returns NULL. The code then attempts to call the constructor on this null pointer using placement new syntax, resulting in undefined behavior and a Segmentation Fault.", "issued": "2026-01-10T05:53:21Z", "links": "https://access.redhat.com/security/cve/CVE-2026-22693 https://bugzilla.redhat.com/show_bug.cgi?id=2428439 https://www.cve.org/CVERecord?id=CVE-2026-22693 https://nvd.nist.gov/vuln/detail/CVE-2026-22693 https://github.com/harfbuzz/harfbuzz/commit/1265ff8d990284f04d8768f35b0e20ae5f60daae https://github.com/harfbuzz/harfbuzz/security/advisories/GHSA-xvjr-f2r9-c7ww https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-22693.json", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "normalized_severity": "Medium", "package": { "id": "", "name": "harfbuzz", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "HwrQV7Eq97lmWod0H+Mywg==": { "id": "HwrQV7Eq97lmWod0H+Mywg==", "updater": "rhel-vex", "name": "CVE-2026-42769", "description": "A flaw was found in the Certificate Management Protocol (CMP) implementation within OpenSSL. An attacker with existing Registration Authority (RA) level credentials could exploit an error in the certificate verification process during a Root Certificate Authority (CA) key update. This vulnerability allows the attacker to replace the root CA certificate for CMP clients with a fraudulent one. The primary consequence is an escalation of privileges, enabling the attacker to gain control equivalent to the root CA.", "issued": "2026-06-09T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-42769 https://bugzilla.redhat.com/show_bug.cgi?id=2481893 https://www.cve.org/CVERecord?id=CVE-2026-42769 https://nvd.nist.gov/vuln/detail/CVE-2026-42769 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42769.json https://access.redhat.com/errata/RHSA-2026:25239", "severity": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N", "normalized_severity": "Low", "package": { "id": "", "name": "openssl-libs", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "1:3.5.5-4.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "HxI42iSjURjRki+uV6q/9w==": { "id": "HxI42iSjURjRki+uV6q/9w==", "updater": "rhel-vex", "name": "CVE-2024-0232", "description": "A heap use-after-free issue has been identified in SQLite in the jsonParseAddNodeArray() function in sqlite3.c. This flaw allows a local attacker to leverage a victim to pass specially crafted malicious input to the application, potentially causing a crash and leading to a denial of service.", "issued": "2023-10-12T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2024-0232 https://bugzilla.redhat.com/show_bug.cgi?id=2243754 https://www.cve.org/CVERecord?id=CVE-2024-0232 https://nvd.nist.gov/vuln/detail/CVE-2024-0232 https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-0232.json", "severity": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "sqlite", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "I3+uP7bb+nPtzRYHH2UUgw==": { "id": "I3+uP7bb+nPtzRYHH2UUgw==", "updater": "rhel-vex", "name": "CVE-2021-3826", "description": "A vulnerability was found in Libiberty. A heap and stack buffer overflow found in the dlang_lname function in d-demangle.c leads to a denial of service.", "issued": "2021-09-22T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2021-3826 https://bugzilla.redhat.com/show_bug.cgi?id=2122627 https://www.cve.org/CVERecord?id=CVE-2021-3826 https://nvd.nist.gov/vuln/detail/CVE-2021-3826 https://security.access.redhat.com/data/csaf/v2/vex/2021/cve-2021-3826.json", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "binutils", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "I3vwwgMxzxWo15otCOgvAw==": { "id": "I3vwwgMxzxWo15otCOgvAw==", "updater": "rhel-vex", "name": "CVE-2021-3928", "description": "A flaw was found in vim. A possible stack-based buffer overflow could allow an attacker to input a specially crafted file leading to a crash or code execution. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.", "issued": "2021-10-29T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2021-3928 https://bugzilla.redhat.com/show_bug.cgi?id=2021292 https://www.cve.org/CVERecord?id=CVE-2021-3928 https://nvd.nist.gov/vuln/detail/CVE-2021-3928 https://security.access.redhat.com/data/csaf/v2/vex/2021/cve-2021-3928.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "vim", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "IDIT7Gfu8E9A+NfUxEcAbQ==": { "id": "IDIT7Gfu8E9A+NfUxEcAbQ==", "updater": "rhel-vex", "name": "CVE-2026-42768", "description": "A flaw was found in OpenSSL's CMS_decrypt() and PKCS7_decrypt() functions. This vulnerability, a Bleichenbacher-style oracle, could allow a remote attacker to decrypt or sign messages using the victim's private RSA key. Exploitation requires the attacker to provide specially crafted CMS or S/MIME messages and observe the application's error codes or decryption output. While the attack is technically possible, the specific conditions required make it unlikely to be exploited in typical deployments.", "issued": "2026-06-09T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-42768 https://bugzilla.redhat.com/show_bug.cgi?id=2481892 https://www.cve.org/CVERecord?id=CVE-2026-42768 https://nvd.nist.gov/vuln/detail/CVE-2026-42768 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42768.json https://access.redhat.com/errata/RHSA-2026:25239", "severity": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N", "normalized_severity": "Low", "package": { "id": "", "name": "openssl-libs", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "1:3.5.5-4.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "IF/pusRwq2cM2AL083HZhw==": { "id": "IF/pusRwq2cM2AL083HZhw==", "updater": "rhel-vex", "name": "CVE-2026-42338", "description": "A flaw was found in ip-address, a JavaScript library for parsing and manipulating IPv4 and IPv6 addresses. This vulnerability allows a remote attacker to perform cross-site scripting (XSS) by providing untrusted input to the Address6 constructor. When an application renders the output of Address6.group(), Address6.link(), or the AddressError.parseMessage as HTML without proper escaping, the attacker-controlled content can be executed in the user's browser.", "issued": "2026-05-12T19:43:16Z", "links": "https://access.redhat.com/security/cve/CVE-2026-42338 https://bugzilla.redhat.com/show_bug.cgi?id=2476810 https://www.cve.org/CVERecord?id=CVE-2026-42338 https://nvd.nist.gov/vuln/detail/CVE-2026-42338 https://github.com/beaugunderson/ip-address/security/advisories/GHSA-v2v4-37r5-5v8g https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42338.json https://access.redhat.com/errata/RHSA-2026:35892", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N", "normalized_severity": "High", "package": { "id": "", "name": "nodejs-docs", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "noarch", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:22.23.1-1.module+el9.8.0+24457+996af7aa", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "IFUwSX5dX69QHRHfvOeQDg==": { "id": "IFUwSX5dX69QHRHfvOeQDg==", "updater": "rhel-vex", "name": "CVE-2026-6429", "description": "A flaw was found in libcurl. When configured to use a .netrc file for credentials and follow HTTP redirects, libcurl can inadvertently send the password from the initial connection to the redirected host. This sensitive information disclosure occurs when both the original and redirect URLs use clear text HTTP, are performed over the same HTTP proxy, and the same connection is reused. This vulnerability, categorized as an Exposure of Sensitive Information to an Unauthorized Actor (CWE-200), could allow an attacker to obtain user credentials.", "issued": "2026-04-29T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-6429 https://bugzilla.redhat.com/show_bug.cgi?id=2461205 https://www.cve.org/CVERecord?id=CVE-2026-6429 https://nvd.nist.gov/vuln/detail/CVE-2026-6429 https://curl.se/docs/CVE-2026-6429.html https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6429.json", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "normalized_severity": "Medium", "package": { "id": "", "name": "curl", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "IGF/2G1+7Y+pT7nmmFHvPw==": { "id": "IGF/2G1+7Y+pT7nmmFHvPw==", "updater": "rhel-vex", "name": "CVE-2026-40355", "description": "A flaw was found in MIT Kerberos 5 (krb5). An unauthenticated remote attacker can exploit a NULL pointer dereference vulnerability by calling `gss_accept_sec_context()` on a system with a NegoEx mechanism registered. This can lead to the termination of the process, resulting in a Denial of Service (DoS).", "issued": "2026-04-28T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-40355 https://bugzilla.redhat.com/show_bug.cgi?id=2463370 https://www.cve.org/CVERecord?id=CVE-2026-40355 https://nvd.nist.gov/vuln/detail/CVE-2026-40355 https://cems.fun/2026/04/27/krb5-two-unauthenticated-network-vulnerabilities.html https://github.com/krb5/krb5/commit/2e75f0d9362fb979f5fc92829431a590a130929f https://web.mit.edu/kerberos/advisories/ https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-40355.json https://access.redhat.com/errata/RHSA-2026:19357", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "krb5-libs", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:1.21.1-10.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "IPiVFeI45MBrWEz4KZcdQQ==": { "id": "IPiVFeI45MBrWEz4KZcdQQ==", "updater": "rhel-vex", "name": "CVE-2026-42308", "description": "A flaw was found in Pillow, a Python imaging library. If a font advances for each glyph by an exceeding large amount, an integer overflow can occur when Pillow tracks the current position. This could lead to a denial of service (DoS) condition, making the application unavailable.", "issued": "2026-05-09T04:09:01Z", "links": "https://access.redhat.com/security/cve/CVE-2026-42308 https://bugzilla.redhat.com/show_bug.cgi?id=2468457 https://www.cve.org/CVERecord?id=CVE-2026-42308 https://nvd.nist.gov/vuln/detail/CVE-2026-42308 https://github.com/python-pillow/Pillow/releases/tag/12.2.0 https://github.com/python-pillow/Pillow/security/advisories/GHSA-wjx4-4jcj-g98j https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42308.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "python3.9", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "IeTK1HBLKpS1+gfVSPrpvg==": { "id": "IeTK1HBLKpS1+gfVSPrpvg==", "updater": "rhel-vex", "name": "CVE-2022-47007", "description": "A memory leak was found in function stab_demangle_v3_arg in stabs.c in Binutils, allows local attacker to exploit the vulnerability using specially crafted file to cause Denial of Service.", "issued": "2022-06-16T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2022-47007 https://bugzilla.redhat.com/show_bug.cgi?id=2233980 https://www.cve.org/CVERecord?id=CVE-2022-47007 https://nvd.nist.gov/vuln/detail/CVE-2022-47007 https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-47007.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "binutils", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "IrRjtVOpf04EO7iAKFAznQ==": { "id": "IrRjtVOpf04EO7iAKFAznQ==", "updater": "rhel-vex", "name": "CVE-2026-0915", "description": "A flaw was found in glibc, the GNU C Library. When an application calls the `getnetbyaddr` or `getnetbyaddr_r` functions to resolve a network address, and the system's `nsswitch.conf` file is configured to use a DNS (Domain Name System) backend for network lookups, a query for a zero-valued network can lead to the disclosure of stack memory contents. This information is leaked to the configured DNS resolver, potentially allowing an attacker who controls the resolver to gain sensitive data from the affected system.", "issued": "2026-01-15T22:08:41Z", "links": "https://access.redhat.com/security/cve/CVE-2026-0915 https://bugzilla.redhat.com/show_bug.cgi?id=2430201 https://www.cve.org/CVERecord?id=CVE-2026-0915 https://nvd.nist.gov/vuln/detail/CVE-2026-0915 https://sourceware.org/bugzilla/show_bug.cgi?id=33802 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-0915.json https://access.redhat.com/errata/RHSA-2026:2786", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "normalized_severity": "Medium", "package": { "id": "", "name": "glibc", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:2.34-231.el9_7.10", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "Iv6wxIYqSLEjaMJTKmJ+Pw==": { "id": "Iv6wxIYqSLEjaMJTKmJ+Pw==", "updater": "rhel-vex", "name": "CVE-2026-4437", "description": "A flaw was found in glibc (the GNU C Library). When an application uses the `gethostbyaddr` or `gethostbyaddr_r` functions with a `nsswitch.conf` configuration that specifies glibc's DNS backend, a remote attacker can send a specially crafted DNS (Domain Name System) response. This crafted response can cause the application to incorrectly interpret a non-answer section of the DNS response as a valid answer, leading to potential misbehavior or incorrect information processing.", "issued": "2026-03-20T19:59:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-4437 https://bugzilla.redhat.com/show_bug.cgi?id=2449777 https://www.cve.org/CVERecord?id=CVE-2026-4437 https://nvd.nist.gov/vuln/detail/CVE-2026-4437 https://sourceware.org/bugzilla/show_bug.cgi?id=34014 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-4437.json https://access.redhat.com/errata/RHSA-2026:20597", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L", "normalized_severity": "Medium", "package": { "id": "", "name": "glibc", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:2.34-270.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "J/9bEF16NjSRIAmmzZMBkQ==": { "id": "J/9bEF16NjSRIAmmzZMBkQ==", "updater": "rhel-vex", "name": "CVE-2026-5928", "description": "A flaw was found in glibc (GNU C Library). When the `ungetwc` function is called on a file stream using wide characters with specific overlapping single-byte and multi-byte encodings, it may attempt to read data outside of its allocated buffer. This can lead to the unintentional disclosure of sensitive information from memory or cause the program to crash, resulting in a denial of service.", "issued": "2026-04-20T20:37:31Z", "links": "https://access.redhat.com/security/cve/CVE-2026-5928 https://bugzilla.redhat.com/show_bug.cgi?id=2459854 https://www.cve.org/CVERecord?id=CVE-2026-5928 https://nvd.nist.gov/vuln/detail/CVE-2026-5928 https://sourceware.org/bugzilla/show_bug.cgi?id=33998 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-5928.json https://access.redhat.com/errata/RHSA-2026:42952", "severity": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "glibc-gconv-extra", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:2.34-274.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "J/M93jueASHywmph2g+HMg==": { "id": "J/M93jueASHywmph2g+HMg==", "updater": "rhel-vex", "name": "CVE-2026-48619", "description": "A flaw was found in Node.js. A malicious server can exploit the HTTP/2 client by sending an unlimited number of ORIGIN frames. This can lead to an Out of Memory error on the client, resulting in a denial of service.", "issued": "2026-06-26T01:14:36Z", "links": "https://access.redhat.com/security/cve/CVE-2026-48619 https://bugzilla.redhat.com/show_bug.cgi?id=2493325 https://www.cve.org/CVERecord?id=CVE-2026-48619 https://nvd.nist.gov/vuln/detail/CVE-2026-48619 https://nodejs.org/en/blog/vulnerability/june-2026-security-releases https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-48619.json https://access.redhat.com/errata/RHSA-2026:35892", "severity": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "normalized_severity": "Medium", "package": { "id": "", "name": "nodejs", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "aarch64|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:22.23.1-1.module+el9.8.0+24457+996af7aa", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "J1e16b0P6Tp2x5sVgsqutQ==": { "id": "J1e16b0P6Tp2x5sVgsqutQ==", "updater": "rhel-vex", "name": "CVE-2026-48615", "description": "A flaw was found in Node.js. When proxy credentials are embedded in a proxy URL, an issue in the proxy tunnel error handling can lead to the exposure of these credentials. This information disclosure vulnerability allows an attacker to potentially capture sensitive proxy credentials through logs, diagnostics, or other error-consuming mechanisms.", "issued": "2026-06-26T01:14:36Z", "links": "https://access.redhat.com/security/cve/CVE-2026-48615 https://bugzilla.redhat.com/show_bug.cgi?id=2493335 https://www.cve.org/CVERecord?id=CVE-2026-48615 https://nvd.nist.gov/vuln/detail/CVE-2026-48615 https://nodejs.org/en/blog/vulnerability/june-2026-security-releases https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-48615.json https://access.redhat.com/errata/RHSA-2026:35892", "severity": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "normalized_severity": "Medium", "package": { "id": "", "name": "nodejs-libs", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:22.23.1-1.module+el9.8.0+24457+996af7aa", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "J7eLc/Mh7BobYrDH+tpguA==": { "id": "J7eLc/Mh7BobYrDH+tpguA==", "updater": "rhel-vex", "name": "CVE-2025-10911", "description": "A use-after-free vulnerability was found in libxslt while parsing xsl nodes that may lead to the dereference of expired pointers and application crash.", "issued": "2025-08-04T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2025-10911 https://bugzilla.redhat.com/show_bug.cgi?id=2397838 https://www.cve.org/CVERecord?id=CVE-2025-10911 https://nvd.nist.gov/vuln/detail/CVE-2025-10911 https://gitlab.gnome.org/GNOME/libxslt/-/issues/144 https://gitlab.gnome.org/GNOME/libxslt/-/merge_requests/77 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-10911.json https://access.redhat.com/errata/RHSA-2026:28243", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "libxslt-devel", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "0:1.1.34-14.el9_8.1", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "J9gq9t3ASg6Sp5n2QRemEA==": { "id": "J9gq9t3ASg6Sp5n2QRemEA==", "updater": "rhel-vex", "name": "CVE-2025-6075", "description": "A vulnerability in Python’s os.path.expandvars() function that can cause performance degradation. When processing specially crafted, user-controlled input with nested environment variable patterns, the function exhibits quadratic time complexity, potentially leading to excessive CPU usage and denial of service (DoS) conditions. No code execution or data exposure occurs, so the impact is limited to performance slowdown.", "issued": "2025-10-31T16:41:34Z", "links": "https://access.redhat.com/security/cve/CVE-2025-6075 https://bugzilla.redhat.com/show_bug.cgi?id=2408891 https://www.cve.org/CVERecord?id=CVE-2025-6075 https://nvd.nist.gov/vuln/detail/CVE-2025-6075 https://github.com/python/cpython/issues/136065 https://mail.python.org/archives/list/security-announce@python.org/thread/IUP5QJ6D4KK6ULHOMPC7DPNKRYQTQNLA/ https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-6075.json https://access.redhat.com/errata/RHSA-2025:23342", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "normalized_severity": "Low", "package": { "id": "", "name": "python3", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:3.9.25-2.el9_7", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "JAlZO0sgdy1FBW5F7Zj+Pg==": { "id": "JAlZO0sgdy1FBW5F7Zj+Pg==", "updater": "rhel-vex", "name": "CVE-2026-35388", "description": "A flaw was found in OpenSSH. This vulnerability allows for a low integrity impact due to the omission of connection multiplexing confirmation for proxy-mode multiplexing sessions. A local user, under specific and complex conditions requiring user interaction, could potentially establish a multiplexed session without explicit confirmation, leading to unintended data handling.", "issued": "2026-04-02T16:57:31Z", "links": "https://access.redhat.com/security/cve/CVE-2026-35388 https://bugzilla.redhat.com/show_bug.cgi?id=2454500 https://www.cve.org/CVERecord?id=CVE-2026-35388 https://nvd.nist.gov/vuln/detail/CVE-2026-35388 https://marc.info/?l=openssh-unix-dev\u0026m=177513443901484\u0026w=2 https://www.openssh.org/releasenotes.html#10.3p1 https://www.openwall.com/lists/oss-security/2026/04/02/3 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-35388.json https://access.redhat.com/errata/RHSA-2026:13381", "severity": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:N", "normalized_severity": "Low", "package": { "id": "", "name": "openssh", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:8.7p1-49.el9_7", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "JD0llI0bGUOG/VBz+9LeVQ==": { "id": "JD0llI0bGUOG/VBz+9LeVQ==", "updater": "rhel-vex", "name": "CVE-2023-48235", "description": "A flaw as found in Vim, an open source command line text editor. When parsing relative ex addresses, one may unintentionally cause an overflow. Ironically, this happens in the existing overflow check because the line number becomes negative and LONG_MAX - lnum will cause the overflow. The impact is low because user interaction is required and a crash may not happen in all situations.", "issued": "2023-11-16T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2023-48235 https://bugzilla.redhat.com/show_bug.cgi?id=2250272 https://www.cve.org/CVERecord?id=CVE-2023-48235 https://nvd.nist.gov/vuln/detail/CVE-2023-48235 http://www.openwall.com/lists/oss-security/2023/11/16/1 https://github.com/vim/vim/commit/060623e4a3bc72b011e7cd92bedb3bfb64e06200 https://github.com/vim/vim/security/advisories/GHSA-6g74-hr6q-pr8g https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-48235.json", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "normalized_severity": "Low", "package": { "id": "", "name": "vim", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "JLoYxSe6sUCueA3LPfbTLA==": { "id": "JLoYxSe6sUCueA3LPfbTLA==", "updater": "rhel-vex", "name": "CVE-2026-41316", "description": "A flaw was found in ERB, a templating system for Ruby. An attacker who can trigger deserialization of untrusted data in a Ruby application can bypass existing protections. This vulnerability allows for arbitrary code execution by exploiting specific public methods that evaluate template source code, which were not properly guarded against deserialization attacks.", "issued": "2026-04-24T02:35:41Z", "links": "https://access.redhat.com/security/cve/CVE-2026-41316 https://bugzilla.redhat.com/show_bug.cgi?id=2461369 https://www.cve.org/CVERecord?id=CVE-2026-41316 https://nvd.nist.gov/vuln/detail/CVE-2026-41316 https://github.com/ruby/erb/security/advisories/GHSA-q339-8rmv-2mhv https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-41316.json https://access.redhat.com/errata/RHSA-2026:18030", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "normalized_severity": "High", "package": { "id": "", "name": "ruby-default-gems", "version": "", "kind": "binary", "normalized_version": "", "module": "ruby:3.3", "arch": "noarch", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "0:3.3.10-6.module+el9.7.0+24248+66578cbb", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "JPakAMrmBlullQ47gJ/fkw==": { "id": "JPakAMrmBlullQ47gJ/fkw==", "updater": "rhel-vex", "name": "CVE-2026-33416", "description": "A flaw was found in libpng, a library used for processing PNG (Portable Network Graphics) image files. This vulnerability arises from improper memory management where a heap-allocated buffer is aliased between internal data structures. When specific functions are called, a freed memory region can still be referenced, leading to a use-after-free condition. An attacker could potentially exploit this to achieve arbitrary code execution or cause a denial of service.", "issued": "2026-03-26T16:48:54Z", "links": "https://access.redhat.com/security/cve/CVE-2026-33416 https://bugzilla.redhat.com/show_bug.cgi?id=2451805 https://www.cve.org/CVERecord?id=CVE-2026-33416 https://nvd.nist.gov/vuln/detail/CVE-2026-33416 https://github.com/pnggroup/libpng/commit/23019269764e35ed8458e517f1897bd3c54820eb https://github.com/pnggroup/libpng/commit/7ea9eea884a2328cc7fdcb3c0c00246a50d90667 https://github.com/pnggroup/libpng/commit/a3a21443ed12bfa1ef46fa0d4fb2b74a0fa34a25 https://github.com/pnggroup/libpng/commit/c1b0318b393c90679e6fa5bc1d329fd5d5012ec1 https://github.com/pnggroup/libpng/pull/824 https://github.com/pnggroup/libpng/security/advisories/GHSA-m4pc-p4q3-4c7j https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33416.json https://access.redhat.com/errata/RHSA-2026:28255", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "libpng-devel", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "2:1.6.37-15.el9_8.2", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "JYnbFl5uln18531ZOk6t8g==": { "id": "JYnbFl5uln18531ZOk6t8g==", "updater": "rhel-vex", "name": "CVE-2026-45446", "description": "A flaw was found in OpenSSL. The implementations of AES-SIV (Advanced Encryption Standard - SIV) and AES-GCM-SIV (Advanced Encryption Standard - Galois/Counter Mode - SIV) incorrectly process authentication tags for empty messages. This vulnerability allows a remote attacker to forge empty messages with arbitrary Additional Authenticated Data (AAD) in applications that utilize these specific cipher modes within custom protocols and do not properly handle zero-length ciphertexts. This could lead to unauthorized data manipulation.", "issued": "2026-06-09T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-45446 https://bugzilla.redhat.com/show_bug.cgi?id=2481897 https://www.cve.org/CVERecord?id=CVE-2026-45446 https://nvd.nist.gov/vuln/detail/CVE-2026-45446 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-45446.json https://access.redhat.com/errata/RHSA-2026:25239", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N", "normalized_severity": "Low", "package": { "id": "", "name": "openssl", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "1:3.5.5-4.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "JknhMYFxtGMAisBMILMboQ==": { "id": "JknhMYFxtGMAisBMILMboQ==", "updater": "rhel-vex", "name": "CVE-2025-6176", "description": "Scrapy are vulnerable to a denial of service (DoS) attack due to a flaw in its brotli decompression implementation. The protection mechanism against decompression bombs fails to mitigate the brotli variant, allowing remote servers to crash clients with less than 80GB of available memory. This occurs because brotli can achieve extremely high compression ratios for zero-filled data, leading to excessive memory consumption during decompression.", "issued": "2025-10-31T00:00:21Z", "links": "https://access.redhat.com/security/cve/CVE-2025-6176 https://bugzilla.redhat.com/show_bug.cgi?id=2408762 https://www.cve.org/CVERecord?id=CVE-2025-6176 https://nvd.nist.gov/vuln/detail/CVE-2025-6176 https://huntr.com/bounties/2c26a886-5984-47ee-a421-0d5fe1344eb0 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-6176.json https://access.redhat.com/errata/RHSA-2026:2042", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "High", "package": { "id": "", "name": "brotli", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "0:1.0.9-9.el9_7", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "JmKf//IQj2eMVJFTB1Feyw==": { "id": "JmKf//IQj2eMVJFTB1Feyw==", "updater": "rhel-vex", "name": "CVE-2023-48234", "description": "A flaw was found in Vim, an open source command line text editor. When getting the count for a normal mode z command, it may overflow if large counts are given. The impact is low because user interaction is required and a crash may not happen in all situations.", "issued": "2023-11-16T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2023-48234 https://bugzilla.redhat.com/show_bug.cgi?id=2250271 https://www.cve.org/CVERecord?id=CVE-2023-48234 https://nvd.nist.gov/vuln/detail/CVE-2023-48234 http://www.openwall.com/lists/oss-security/2023/11/16/1 https://github.com/vim/vim/commit/58f9befca1fa172068effad7f2ea5a9d6a7b0cca https://github.com/vim/vim/security/advisories/GHSA-59gw-c949-6phq https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-48234.json", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "normalized_severity": "Low", "package": { "id": "", "name": "vim", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "JpVSLeyNGU9aXWuvL1lvmw==": { "id": "JpVSLeyNGU9aXWuvL1lvmw==", "updater": "rhel-vex", "name": "CVE-2026-42258", "description": "A flaw was found in Net::IMAP, a Ruby library that provides Internet Message Access Protocol (IMAP) client functionality. This vulnerability allows a remote attacker to inject arbitrary IMAP commands. This is achieved by passing specially crafted symbol arguments to IMAP commands. Successful exploitation could lead to unauthorized actions on the IMAP server or client, potentially resulting in information disclosure or other integrity impacts.", "issued": "2026-05-09T19:40:49Z", "links": "https://access.redhat.com/security/cve/CVE-2026-42258 https://bugzilla.redhat.com/show_bug.cgi?id=2468498 https://www.cve.org/CVERecord?id=CVE-2026-42258 https://nvd.nist.gov/vuln/detail/CVE-2026-42258 https://github.com/ruby/net-imap/releases/tag/v0.4.24 https://github.com/ruby/net-imap/releases/tag/v0.5.14 https://github.com/ruby/net-imap/releases/tag/v0.6.4 https://github.com/ruby/net-imap/security/advisories/GHSA-75xq-5h9v-w6px https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42258.json https://access.redhat.com/errata/RHSA-2026:33576", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:N", "normalized_severity": "High", "package": { "id": "", "name": "rubygem-irb", "version": "", "kind": "binary", "normalized_version": "", "module": "ruby:3.3", "arch": "noarch", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "0:1.13.1-7.module+el9.8.0+24406+8975e57f", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "Jrkns8qeStFRPhcitcuZ4w==": { "id": "Jrkns8qeStFRPhcitcuZ4w==", "updater": "rhel-vex", "name": "CVE-2026-22796", "description": "A flaw was found in OpenSSL. This type confusion vulnerability allows a remote attacker to cause a denial of service (DoS) by providing specially crafted PKCS#7 data to an application that performs signature verification. The vulnerability occurs because the application accesses an ASN1_TYPE union member without proper type validation, leading to an invalid or NULL pointer dereference and a crash.", "issued": "2026-01-27T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-22796 https://bugzilla.redhat.com/show_bug.cgi?id=2430390 https://www.cve.org/CVERecord?id=CVE-2026-22796 https://nvd.nist.gov/vuln/detail/CVE-2026-22796 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-22796.json https://access.redhat.com/errata/RHSA-2026:1473", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "openssl-libs", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "1:3.5.1-7.el9_7", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "JtGggrfMckWn0xvfWBMJJQ==": { "id": "JtGggrfMckWn0xvfWBMJJQ==", "updater": "rhel-vex", "name": "CVE-2022-2210", "description": "Out-of-bounds Write in GitHub repository vim/vim prior to 8.2.", "issued": "2022-06-27T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2022-2210 https://bugzilla.redhat.com/show_bug.cgi?id=2102177 https://www.cve.org/CVERecord?id=CVE-2022-2210 https://nvd.nist.gov/vuln/detail/CVE-2022-2210 https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-2210.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "vim", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "K2GE6n8fwvl9qlLu7U38Fg==": { "id": "K2GE6n8fwvl9qlLu7U38Fg==", "updater": "rhel-vex", "name": "CVE-2025-55131", "description": "A memory exposure flaw has been discovered in Node.js. A flaw in Node.js's buffer allocation logic can expose uninitialized memory when allocations are interrupted, when using the `vm` module with the timeout option. Under specific timing conditions, buffers allocated with `Buffer.alloc` and other `TypedArray` instances like `Uint8Array` may contain leftover data from previous operations, allowing in-process secrets like tokens or passwords to leak or causing data corruption.", "issued": "2026-01-20T20:41:55Z", "links": "https://access.redhat.com/security/cve/CVE-2025-55131 https://bugzilla.redhat.com/show_bug.cgi?id=2431350 https://www.cve.org/CVERecord?id=CVE-2025-55131 https://nvd.nist.gov/vuln/detail/CVE-2025-55131 https://nodejs.org/en/blog/vulnerability/december-2025-security-releases https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-55131.json https://access.redhat.com/errata/RHSA-2026:2782", "severity": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L", "normalized_severity": "High", "package": { "id": "", "name": "npm", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:10.9.4-1.22.22.0.1.module+el9.7.0+23896+b5802de9", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "K3SBN066vVckR2wFFfybNw==": { "id": "K3SBN066vVckR2wFFfybNw==", "updater": "rhel-vex", "name": "CVE-2026-41035", "description": "A flaw was found in rsync. When rsync is configured to handle extended attributes (using the -X or --xattrs option), a remote attacker can exploit a use-after-free vulnerability. This occurs because the receive_xattr function incorrectly processes an untrusted length value during a sorting operation, leading to memory corruption. Successful exploitation can result in a denial of service, causing the rsync process to crash, and may potentially allow for arbitrary code execution.", "issued": "2026-04-16T06:53:05Z", "links": "https://access.redhat.com/security/cve/CVE-2026-41035 https://bugzilla.redhat.com/show_bug.cgi?id=2458898 https://www.cve.org/CVERecord?id=CVE-2026-41035 https://nvd.nist.gov/vuln/detail/CVE-2026-41035 https://github.com/RsyncProject/rsync/issues/871 https://github.com/RsyncProject/rsync/releases https://www.openwall.com/lists/oss-security/2026/04/16/2 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-41035.json https://access.redhat.com/errata/RHSA-2026:19368", "severity": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L", "normalized_severity": "High", "package": { "id": "", "name": "rsync", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:3.2.5-7.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "KB8w2g8b8sP5A8+iqhqw8A==": { "id": "KB8w2g8b8sP5A8+iqhqw8A==", "updater": "rhel-vex", "name": "CVE-2026-28418", "description": "A flaw was found in Vim. When processing a specially crafted Emacs-style tags file, a heap-based buffer overflow out-of-bounds read vulnerability allows an attacker to trick Vim into reading up to 7 bytes beyond its allocated memory boundary. This could lead to information disclosure or potentially affect the integrity of the application.", "issued": "2026-02-27T21:58:37Z", "links": "https://access.redhat.com/security/cve/CVE-2026-28418 https://bugzilla.redhat.com/show_bug.cgi?id=2443481 https://www.cve.org/CVERecord?id=CVE-2026-28418 https://nvd.nist.gov/vuln/detail/CVE-2026-28418 https://github.com/vim/vim/commit/f6a7f469a9c0d09e84cd6cb https://github.com/vim/vim/releases/tag/v9.2.0074 https://github.com/vim/vim/security/advisories/GHSA-h4mf-vg97-hj8j https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-28418.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L", "normalized_severity": "Medium", "package": { "id": "", "name": "vim", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "KFwkHKkJGVyJAn2RsW13sw==": { "id": "KFwkHKkJGVyJAn2RsW13sw==", "updater": "rhel-vex", "name": "CVE-2025-66199", "description": "A flaw was found in OpenSSL. A remote attacker can exploit this vulnerability by sending a specially crafted CompressedCertificate message during the TLS 1.3 handshake. This can cause excessive per-connection memory allocations, leading to resource exhaustion and a Denial of Service (DoS) for affected clients and servers. This issue occurs when TLS 1.3 certificate compression is enabled and negotiated.", "issued": "2026-01-27T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2025-66199 https://bugzilla.redhat.com/show_bug.cgi?id=2430379 https://www.cve.org/CVERecord?id=CVE-2025-66199 https://nvd.nist.gov/vuln/detail/CVE-2025-66199 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-66199.json https://access.redhat.com/errata/RHSA-2026:1473", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "openssl-devel", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:3.5.1-7.el9_7", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "KHHIjt6Egtc7csaIbQ3mbw==": { "id": "KHHIjt6Egtc7csaIbQ3mbw==", "updater": "rhel-vex", "name": "CVE-2026-32778", "description": "A flaw was found in libexpat. This vulnerability allows an attacker to trigger a NULL pointer dereference in the `setContext` function. This occurs when the system attempts to retry an operation after an out-of-memory condition, which can lead to a Denial of Service (DoS) for the affected application.", "issued": "2026-03-16T07:02:34Z", "links": "https://access.redhat.com/security/cve/CVE-2026-32778 https://bugzilla.redhat.com/show_bug.cgi?id=2447885 https://www.cve.org/CVERecord?id=CVE-2026-32778 https://nvd.nist.gov/vuln/detail/CVE-2026-32778 https://github.com/libexpat/libexpat/pull/1159 https://github.com/libexpat/libexpat/pull/1163 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-32778.json", "severity": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "expat", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "KMGV9rbVZ/vVUNSX6f+JqA==": { "id": "KMGV9rbVZ/vVUNSX6f+JqA==", "updater": "rhel-vex", "name": "CVE-2026-4111", "description": "A flaw was identified in the RAR5 archive decompression logic of the libarchive library, specifically within the archive_read_data() processing path. When a specially crafted RAR5 archive is processed, the decompression routine may enter a state where internal logic prevents forward progress. This condition results in an infinite loop that continuously consumes CPU resources. Because the archive passes checksum validation and appears structurally valid, affected applications cannot detect the issue before processing. This can allow attackers to cause persistent denial-of-service conditions in services that automatically process archives.", "issued": "2026-03-11T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-4111 https://bugzilla.redhat.com/show_bug.cgi?id=2446453 https://www.cve.org/CVERecord?id=CVE-2026-4111 https://nvd.nist.gov/vuln/detail/CVE-2026-4111 https://github.com/libarchive/libarchive/pull/2877 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-4111.json https://access.redhat.com/errata/RHSA-2026:5080", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "High", "package": { "id": "", "name": "libarchive", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:3.5.3-7.el9_7", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "KRZBmtp/oO0gwwF8PmGh2g==": { "id": "KRZBmtp/oO0gwwF8PmGh2g==", "updater": "rhel-vex", "name": "CVE-2026-1528", "description": "A flaw was found in undici. A remote attacker could exploit this vulnerability by sending a specially crafted WebSocket frame with an extremely large 64-bit length. This causes undici's ByteParser to overflow its internal calculations, leading to an invalid state and a fatal TypeError. The primary consequence is a Denial of Service (DoS), which terminates the process.", "issued": "2026-03-12T20:21:57Z", "links": "https://access.redhat.com/security/cve/CVE-2026-1528 https://bugzilla.redhat.com/show_bug.cgi?id=2447145 https://www.cve.org/CVERecord?id=CVE-2026-1528 https://nvd.nist.gov/vuln/detail/CVE-2026-1528 https://cna.openjsf.org/security-advisories.html https://github.com/nodejs/undici/security/advisories/GHSA-f269-vfmq-vjvj https://hackerone.com/reports/3537648 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-1528.json https://access.redhat.com/errata/RHSA-2026:7302", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "High", "package": { "id": "", "name": "npm", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:10.9.7-1.22.22.2.1.module+el9.7.0+24157+8ddb2461", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "KWRSi8vxblrZIdlqIEG3zA==": { "id": "KWRSi8vxblrZIdlqIEG3zA==", "updater": "rhel-vex", "name": "CVE-2026-59873", "description": "A flaw was found in node-tar, a tar archive manipulation library for Node.js. This vulnerability allows a remote attacker to craft a small gzip bomb, which, when processed, can lead to the exhaustion of disk space and CPU resources. This occurs because node-tar does not enforce strict limits on the total decompressed data, the number of entries, or the decompression ratio during extraction and parsing. The primary impact is a Denial of Service (DoS), making the affected system or application unavailable.", "issued": "2026-07-08T15:22:40Z", "links": "https://access.redhat.com/security/cve/CVE-2026-59873 https://bugzilla.redhat.com/show_bug.cgi?id=2498120 https://www.cve.org/CVERecord?id=CVE-2026-59873 https://nvd.nist.gov/vuln/detail/CVE-2026-59873 https://github.com/isaacs/node-tar/commit/2812e9338665659b183aa7226518c307044957d3 https://github.com/isaacs/node-tar/releases/tag/v7.5.19 https://github.com/isaacs/node-tar/security/advisories/GHSA-23hp-3jrh-7fpw https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59873.json https://access.redhat.com/errata/RHSA-2026:47058", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "High", "package": { "id": "", "name": "nodejs-docs", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "noarch", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:22.23.1-2.module+el9.8.0+24538+3f176d52", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "KYv6PwzjV6/5I33cZ9LUmQ==": { "id": "KYv6PwzjV6/5I33cZ9LUmQ==", "updater": "rhel-vex", "name": "CVE-2022-2817", "description": "A use-after-free vulnerability was found in Vim in the string_quote function in the strings.c file. This issue occurs because an already freed memory is used when a specially crafted input is processed. This flaw allows an attacker who can trick a user into opening a specially crafted file into triggering the use-after-free, causing the application to crash, possibly executing code and corrupting memory.", "issued": "2022-08-12T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2022-2817 https://bugzilla.redhat.com/show_bug.cgi?id=2119043 https://www.cve.org/CVERecord?id=CVE-2022-2817 https://nvd.nist.gov/vuln/detail/CVE-2022-2817 https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-2817.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "vim", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "Kpg8AKRn9eUVlQlRye20Tg==": { "id": "Kpg8AKRn9eUVlQlRye20Tg==", "updater": "rhel-vex", "name": "CVE-2026-42258", "description": "A flaw was found in Net::IMAP, a Ruby library that provides Internet Message Access Protocol (IMAP) client functionality. This vulnerability allows a remote attacker to inject arbitrary IMAP commands. This is achieved by passing specially crafted symbol arguments to IMAP commands. Successful exploitation could lead to unauthorized actions on the IMAP server or client, potentially resulting in information disclosure or other integrity impacts.", "issued": "2026-05-09T19:40:49Z", "links": "https://access.redhat.com/security/cve/CVE-2026-42258 https://bugzilla.redhat.com/show_bug.cgi?id=2468498 https://www.cve.org/CVERecord?id=CVE-2026-42258 https://nvd.nist.gov/vuln/detail/CVE-2026-42258 https://github.com/ruby/net-imap/releases/tag/v0.4.24 https://github.com/ruby/net-imap/releases/tag/v0.5.14 https://github.com/ruby/net-imap/releases/tag/v0.6.4 https://github.com/ruby/net-imap/security/advisories/GHSA-75xq-5h9v-w6px https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42258.json https://access.redhat.com/errata/RHSA-2026:33576", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:N", "normalized_severity": "High", "package": { "id": "", "name": "rubygem-psych", "version": "", "kind": "binary", "normalized_version": "", "module": "ruby:3.3", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "0:5.1.2-7.module+el9.8.0+24406+8975e57f", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "Kqq2xlybjD/tOLmQWu2xPw==": { "id": "Kqq2xlybjD/tOLmQWu2xPw==", "updater": "rhel-vex", "name": "CVE-2025-5918", "description": "A vulnerability has been identified in the libarchive library. This flaw can be triggered when file streams are piped into bsdtar, potentially allowing for reading past the end of the file. This out-of-bounds read can lead to unintended consequences, including unpredictable program behavior, memory corruption, or a denial-of-service condition.", "issued": "2025-05-20T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2025-5918 https://bugzilla.redhat.com/show_bug.cgi?id=2370877 https://www.cve.org/CVERecord?id=CVE-2025-5918 https://nvd.nist.gov/vuln/detail/CVE-2025-5918 https://github.com/libarchive/libarchive/pull/2584 https://github.com/libarchive/libarchive/releases/tag/v3.8.0 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-5918.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:L", "normalized_severity": "Low", "package": { "id": "", "name": "libarchive", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "KqyZJW2L6JQ2vf0yVMm6jg==": { "id": "KqyZJW2L6JQ2vf0yVMm6jg==", "updater": "rhel-vex", "name": "CVE-2026-33416", "description": "A flaw was found in libpng, a library used for processing PNG (Portable Network Graphics) image files. This vulnerability arises from improper memory management where a heap-allocated buffer is aliased between internal data structures. When specific functions are called, a freed memory region can still be referenced, leading to a use-after-free condition. An attacker could potentially exploit this to achieve arbitrary code execution or cause a denial of service.", "issued": "2026-03-26T16:48:54Z", "links": "https://access.redhat.com/security/cve/CVE-2026-33416 https://bugzilla.redhat.com/show_bug.cgi?id=2451805 https://www.cve.org/CVERecord?id=CVE-2026-33416 https://nvd.nist.gov/vuln/detail/CVE-2026-33416 https://github.com/pnggroup/libpng/commit/23019269764e35ed8458e517f1897bd3c54820eb https://github.com/pnggroup/libpng/commit/7ea9eea884a2328cc7fdcb3c0c00246a50d90667 https://github.com/pnggroup/libpng/commit/a3a21443ed12bfa1ef46fa0d4fb2b74a0fa34a25 https://github.com/pnggroup/libpng/commit/c1b0318b393c90679e6fa5bc1d329fd5d5012ec1 https://github.com/pnggroup/libpng/pull/824 https://github.com/pnggroup/libpng/security/advisories/GHSA-m4pc-p4q3-4c7j https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33416.json https://access.redhat.com/errata/RHSA-2026:28255", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "libpng", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "2:1.6.37-15.el9_8.2", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "Kr2KcyJfYQ8J1RDorzTofQ==": { "id": "Kr2KcyJfYQ8J1RDorzTofQ==", "updater": "rhel-vex", "name": "CVE-2025-69651", "description": "A flaw was found in binutils. An attacker could exploit this vulnerability by providing a crafted Executable and Linkable Format (ELF) binary with malformed relocation or symbol data. Processing this malicious binary leads to an invalid pointer free, which triggers memory corruption checks and causes the program to terminate.", "issued": "2026-03-06T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2025-69651 https://bugzilla.redhat.com/show_bug.cgi?id=2445299 https://www.cve.org/CVERecord?id=CVE-2025-69651 https://nvd.nist.gov/vuln/detail/CVE-2025-69651 https://sourceware.org/bugzilla/show_bug.cgi?id=33700 https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=ea4bc025abdba85a90e26e13f551c16a44bfa921 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-69651.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L", "normalized_severity": "Low", "package": { "id": "", "name": "binutils", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "KsboTEAsiwsdLEKIDivkyA==": { "id": "KsboTEAsiwsdLEKIDivkyA==", "updater": "rhel-vex", "name": "CVE-2022-2175", "description": "A heap buffer over-read vulnerability was found in Vim's put_on_cmdline() function of the src/ex_getln.c file. This issue occurs due to invalid memory access when using an expression on the command line. This flaw allows an attacker to trick a user into opening a specially crafted file, triggering a heap buffer overflow that causes an application to crash and corrupt memory.", "issued": "2022-06-23T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2022-2175 https://bugzilla.redhat.com/show_bug.cgi?id=2101293 https://www.cve.org/CVERecord?id=CVE-2022-2175 https://nvd.nist.gov/vuln/detail/CVE-2022-2175 https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-2175.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "vim", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "Kso3mzUHoYi+5+CqbHmG2w==": { "id": "Kso3mzUHoYi+5+CqbHmG2w==", "updater": "rhel-vex", "name": "CVE-2026-11940", "description": "A flaw was found in the `tarfile.extractall()` function within Python. A remote attacker could exploit this vulnerability by providing a specially crafted archive. This archive could bypass security filters by using a hardlink that references a symlink, allowing the symlink to be recreated outside the intended destination directory. This could lead to out-of-destination file reads or writes, potentially resulting in information disclosure or arbitrary file modification.", "issued": "2026-06-23T16:04:17Z", "links": "https://access.redhat.com/security/cve/CVE-2026-11940 https://bugzilla.redhat.com/show_bug.cgi?id=2491848 https://www.cve.org/CVERecord?id=CVE-2026-11940 https://nvd.nist.gov/vuln/detail/CVE-2026-11940 https://github.com/python/cpython/issues/151558 https://github.com/python/cpython/pull/151559 https://mail.python.org/archives/list/security-announce@python.org/thread/LD6QIISNQFQYOIEPJNEUIPV7S3V76FZH/ https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-11940.json https://access.redhat.com/errata/RHSA-2026:54268", "severity": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N", "normalized_severity": "High", "package": { "id": "", "name": "python3", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:3.9.25-7.el9_8.3", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "L1NHjBKVcGa4hqzsfSCCQg==": { "id": "L1NHjBKVcGa4hqzsfSCCQg==", "updater": "rhel-vex", "name": "CVE-2026-34180", "description": "A flaw was found in OpenSSL. An integer truncation vulnerability in the ASN.1 decoder can occur when processing a crafted DER-encoded ASN.1 structure with a primitive element exceeding 2 gigabytes. A remote attacker could exploit this to cause a heap buffer over-read. This may lead to an application crash, resulting in a Denial of Service (DoS), or potentially disclose sensitive information by loading memory contents beyond the input buffer. This issue primarily affects 64-bit Unix and Unix-like platforms.", "issued": "2026-06-09T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-34180 https://bugzilla.redhat.com/show_bug.cgi?id=2481881 https://www.cve.org/CVERecord?id=CVE-2026-34180 https://nvd.nist.gov/vuln/detail/CVE-2026-34180 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-34180.json https://access.redhat.com/errata/RHSA-2026:25239", "severity": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "openssl-libs", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "1:3.5.5-4.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "LI6QdIyga6/I93JFZfZG6g==": { "id": "LI6QdIyga6/I93JFZfZG6g==", "updater": "rhel-vex", "name": "CVE-2026-5435", "description": "A flaw was found in glibc, the GNU C Library. Specifically, deprecated functions responsible for printing TSIG (Transaction Signature) records fail to properly manage memory buffers. This oversight can lead to an out-of-bounds write when processing specially crafted TSIG records. An attacker could exploit this to cause a denial of service or potentially execute arbitrary code.", "issued": "2026-04-28T11:58:54Z", "links": "https://access.redhat.com/security/cve/CVE-2026-5435 https://bugzilla.redhat.com/show_bug.cgi?id=2463465 https://www.cve.org/CVERecord?id=CVE-2026-5435 https://nvd.nist.gov/vuln/detail/CVE-2026-5435 https://inbox.sourceware.org/libc-announce/7a655d55-276f-41fe-b550-feb3ebb2ce91@redhat.com/T/#u https://sourceware.org/bugzilla/show_bug.cgi?id=34033 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-5435.json https://access.redhat.com/errata/RHSA-2026:42952", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "glibc-locale-source", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "0:2.34-274.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "LIhAM4tPNTZzvy57RdTFgQ==": { "id": "LIhAM4tPNTZzvy57RdTFgQ==", "updater": "rhel-vex", "name": "CVE-2026-6733", "description": "A flaw was found in undici. An attacker-controlled upstream server can exploit a vulnerability in Undici's HTTP/1.1 client, specifically related to response queue poisoning on reused keep-alive sockets. This allows the attacker to inject an unsolicited HTTP/1.1 response onto an idle socket. Consequently, when the client dispatches a new request on that socket, it may associate the injected response with the new request, leading to responses being delivered to unintended recipients or requests. This could result in a low impact on data integrity.", "issued": "2026-06-17T17:14:50Z", "links": "https://access.redhat.com/security/cve/CVE-2026-6733 https://bugzilla.redhat.com/show_bug.cgi?id=2490006 https://www.cve.org/CVERecord?id=CVE-2026-6733 https://nvd.nist.gov/vuln/detail/CVE-2026-6733 https://cna.openjsf.org/security-advisories.html https://github.com/nodejs/undici/security/advisories/GHSA-35p6-xmwp-9g52 https://hackerone.com/reports/3582376 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6733.json https://access.redhat.com/errata/RHSA-2026:35892", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N", "normalized_severity": "Low", "package": { "id": "", "name": "nodejs-docs", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "noarch", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:22.23.1-1.module+el9.8.0+24457+996af7aa", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "LUQxjpYcQwxSDC7CX78VUw==": { "id": "LUQxjpYcQwxSDC7CX78VUw==", "updater": "rhel-vex", "name": "CVE-2026-60000", "description": "A flaw was found in OpenSSH's Secure Shell Daemon (sshd). This vulnerability allows a remote attacker to cause a denial of service by initiating an excessive number of authentication attempts. The issue arises from the mishandling of the MaxAuthTries setting specifically when using GSSAPIAuthentication, leading to resource exhaustion.", "issued": "2026-07-08T00:14:31Z", "links": "https://access.redhat.com/security/cve/CVE-2026-60000 https://bugzilla.redhat.com/show_bug.cgi?id=2497946 https://www.cve.org/CVERecord?id=CVE-2026-60000 https://nvd.nist.gov/vuln/detail/CVE-2026-60000 https://marc.info/?l=openssh-unix-dev\u0026m=178333966933090\u0026w=2 https://www.openssh.org/releasenotes.html#10.4p1 https://www.openwall.com/lists/oss-security/2026/07/06/5 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-60000.json", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "openssh", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "LXM9CbBE9eK3grkTD73h+g==": { "id": "LXM9CbBE9eK3grkTD73h+g==", "updater": "rhel-vex", "name": "CVE-2026-3832", "description": "A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a specially crafted Online Certificate Status Protocol (OCSP) response during a TLS handshake. Due to a logic error in how gnutls processes multi-record OCSP responses, a client with OCSP verification enabled may incorrectly accept a revoked server certificate, potentially leading to a compromise of trust.", "issued": "2026-04-30T17:29:25Z", "links": "https://access.redhat.com/security/cve/CVE-2026-3832 https://bugzilla.redhat.com/show_bug.cgi?id=2445762 https://www.cve.org/CVERecord?id=CVE-2026-3832 https://nvd.nist.gov/vuln/detail/CVE-2026-3832 https://gitlab.com/gnutls/gnutls/-/issues/1801 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-3832.json https://access.redhat.com/errata/RHSA-2026:20612", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N", "normalized_severity": "Low", "package": { "id": "", "name": "gnutls", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:3.8.10-4.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "LdeUngez6mnzZ7ugJzuAmQ==": { "id": "LdeUngez6mnzZ7ugJzuAmQ==", "updater": "rhel-vex", "name": "CVE-2025-59466", "description": "A stack overflow flaw has been discovered in Node.js error handling where \"Maximum call stack size exceeded\" errors become uncatchable when `async_hooks.createHook()` is enabled. Instead of reaching `process.on('uncaughtException')`, the process terminates, making the crash unrecoverable. Applications that rely on `AsyncLocalStorage` (v22, v20) or `async_hooks.createHook()` (v24, v22, v20) become vulnerable to denial-of-service crashes triggered by deep recursion under specific conditions.", "issued": "2026-01-20T20:41:55Z", "links": "https://access.redhat.com/security/cve/CVE-2025-59466 https://bugzilla.redhat.com/show_bug.cgi?id=2431343 https://www.cve.org/CVERecord?id=CVE-2025-59466 https://nvd.nist.gov/vuln/detail/CVE-2025-59466 https://nodejs.org/en/blog/vulnerability/december-2025-security-releases https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-59466.json https://access.redhat.com/errata/RHSA-2026:2782", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "nodejs-libs", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:22.22.0-1.module+el9.7.0+23896+b5802de9", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "Lhc4n2a9ma6eRDB/RCRmLQ==": { "id": "Lhc4n2a9ma6eRDB/RCRmLQ==", "updater": "rhel-vex", "name": "CVE-2025-9086", "description": "An out of bounds read flaw has been discovered in the curl project. Under specific conditions the path comparison logic makes curl read outside a heap buffer boundary. This bug either causes a crash or it potentially makes the comparison come to the wrong conclusion and lets the clear-text site override the contents of the secure cookie, contrary to expectations and depending on the memory contents immediately following the single-byte allocation that holds the path.", "issued": "2025-09-12T05:10:03Z", "links": "https://access.redhat.com/security/cve/CVE-2025-9086 https://bugzilla.redhat.com/show_bug.cgi?id=2394750 https://www.cve.org/CVERecord?id=CVE-2025-9086 https://nvd.nist.gov/vuln/detail/CVE-2025-9086 https://curl.se/docs/CVE-2025-9086.html https://curl.se/docs/CVE-2025-9086.json https://github.com/curl/curl/commit/c6ae07c6a541e0e96d0040afb6 https://hackerone.com/reports/3294999 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-9086.json https://access.redhat.com/errata/RHSA-2026:1350", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "normalized_severity": "Medium", "package": { "id": "", "name": "curl-minimal", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:7.76.1-35.el9_7.3", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "LiIvRwi7+1nAVErMH0hoaQ==": { "id": "LiIvRwi7+1nAVErMH0hoaQ==", "updater": "rhel-vex", "name": "CVE-2025-5278", "description": "A flaw was found in GNU Coreutils. The sort utility's begfield() function is vulnerable to a heap buffer under-read. The program may access memory outside the allocated buffer if a user runs a crafted command using the traditional key format. A malicious input could lead to a crash or leak sensitive data.", "issued": "2025-05-27T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2025-5278 https://bugzilla.redhat.com/show_bug.cgi?id=2368764 https://www.cve.org/CVERecord?id=CVE-2025-5278 https://nvd.nist.gov/vuln/detail/CVE-2025-5278 https://cgit.git.savannah.gnu.org/cgit/coreutils.git/commit/?id=8c9602e3a145e9596dc1a63c6ed67865814b6633 https://debbugs.gnu.org/cgi/bugreport.cgi?bug=78507 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-5278.json https://access.redhat.com/errata/RHSA-2026:28911", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L", "normalized_severity": "Medium", "package": { "id": "", "name": "coreutils-single", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:8.32-41.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "LkJjju2s50oKpBRyBT8s0A==": { "id": "LkJjju2s50oKpBRyBT8s0A==", "updater": "rhel-vex", "name": "CVE-2024-41965", "description": "A vulnerability was found in Vim versions before 9.1.0648 that can cause the program to crash. This issue happens when a user abandons a modified file, and Vim tries to save it as an Untitled file. Due to a mistake in handling this process, Vim accidentally tries to free up memory twice, which can lead to problems, causing the program to crash. This issue can be exploited by someone with local access to the system.", "issued": "2024-08-01T22:21:00Z", "links": "https://access.redhat.com/security/cve/CVE-2024-41965 https://bugzilla.redhat.com/show_bug.cgi?id=2302419 https://www.cve.org/CVERecord?id=CVE-2024-41965 https://nvd.nist.gov/vuln/detail/CVE-2024-41965 https://github.com/vim/vim/commit/b29f4abcd4b3382fa746edd1d0562b7b48c https://github.com/vim/vim/security/advisories/GHSA-46pw-v7qw-xc2f https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-41965.json", "severity": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L", "normalized_severity": "Low", "package": { "id": "", "name": "vim", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "Lr5d+BjmGHyC+AWnFQJRTA==": { "id": "Lr5d+BjmGHyC+AWnFQJRTA==", "updater": "rhel-vex", "name": "CVE-2025-8291", "description": "A zip file handling flaw has been discovered in the python standard library `zipfile` module. The 'zipfile' module would not check the validity of the ZIP64 End of Central Directory (EOCD) Locator record offset value would not be used to locate the ZIP64 EOCD record, instead the ZIP64 EOCD record would be assumed to be the previous record in the ZIP archive. This could be abused to create ZIP archives that are handled differently by the 'zipfile' module compared to other ZIP implementations.", "issued": "2025-10-07T18:10:05Z", "links": "https://access.redhat.com/security/cve/CVE-2025-8291 https://bugzilla.redhat.com/show_bug.cgi?id=2402342 https://www.cve.org/CVERecord?id=CVE-2025-8291 https://nvd.nist.gov/vuln/detail/CVE-2025-8291 https://github.com/python/cpython/commit/162997bb70e067668c039700141770687bc8f267 https://github.com/python/cpython/commit/333d4a6f4967d3ace91492a39ededbcf3faa76a6 https://github.com/python/cpython/issues/139700 https://github.com/python/cpython/pull/139702 https://mail.python.org/archives/list/security-announce@python.org/thread/QECOPWMTH4VPPJAXAH2BGTA4XADOP62G/ https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-8291.json https://access.redhat.com/errata/RHSA-2025:23342", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "normalized_severity": "Medium", "package": { "id": "", "name": "python3-libs", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:3.9.25-2.el9_7", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "LxYgcRll4fEnbCHHZWt4BA==": { "id": "LxYgcRll4fEnbCHHZWt4BA==", "updater": "rhel-vex", "name": "CVE-2026-5121", "description": "A flaw was found in libarchive. On 32-bit systems, an integer overflow vulnerability exists in the zisofs block pointer allocation logic. A remote attacker can exploit this by providing a specially crafted ISO9660 image, which can lead to a heap buffer overflow. This could potentially allow for arbitrary code execution on the affected system.", "issued": "2026-03-30T07:44:15Z", "links": "https://access.redhat.com/security/cve/CVE-2026-5121 https://bugzilla.redhat.com/show_bug.cgi?id=2452945 https://www.cve.org/CVERecord?id=CVE-2026-5121 https://nvd.nist.gov/vuln/detail/CVE-2026-5121 https://github.com/advisories/GHSA-2vwv-vqpv-v8vc https://github.com/libarchive/libarchive/pull/2934 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-5121.json https://access.redhat.com/errata/RHSA-2026:8510", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "normalized_severity": "Medium", "package": { "id": "", "name": "libarchive", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:3.5.3-9.el9_7", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "Ly8YGlWm8+S4CYtF8Y/Htw==": { "id": "Ly8YGlWm8+S4CYtF8Y/Htw==", "updater": "rhel-vex", "name": "CVE-2026-42245", "description": "A flaw was found in Net::IMAP, a Ruby library implementing the Internet Message Access Protocol (IMAP) client functionality. A hostile server can exploit a quadratic time complexity issue in the `Net::IMAP::ResponseReader` when processing large responses containing numerous string literals. This can lead to the client's CPU being exhausted, resulting in a denial of service (DoS) attack.", "issued": "2026-05-09T19:37:08Z", "links": "https://access.redhat.com/security/cve/CVE-2026-42245 https://bugzilla.redhat.com/show_bug.cgi?id=2468495 https://www.cve.org/CVERecord?id=CVE-2026-42245 https://nvd.nist.gov/vuln/detail/CVE-2026-42245 https://github.com/ruby/net-imap/commit/6091f7d6b1f3514cafbfe39c76f2b5d73de3ca96 https://github.com/ruby/net-imap/commit/88d95231fc8afef11c1f074453f7d75b68c9dfda https://github.com/ruby/net-imap/commit/de685f91a4a4cc75eb80da898c2bf8af08d34819 https://github.com/ruby/net-imap/releases/tag/v0.4.24 https://github.com/ruby/net-imap/releases/tag/v0.5.14 https://github.com/ruby/net-imap/releases/tag/v0.6.4 https://github.com/ruby/net-imap/security/advisories/GHSA-q2mw-fvj9-vvcw https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42245.json https://access.redhat.com/errata/RHSA-2026:33576", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "rubygem-bigdecimal", "version": "", "kind": "binary", "normalized_version": "", "module": "ruby:3.3", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "0:3.1.5-7.module+el9.8.0+24406+8975e57f", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "M293c+QguJ/aaYP3cMwfyQ==": { "id": "M293c+QguJ/aaYP3cMwfyQ==", "updater": "rhel-vex", "name": "CVE-2026-28388", "description": "A flaw was found in OpenSSL. When processing a malformed delta Certificate Revocation List (CRL) that lacks a required CRL Number extension, a NULL pointer dereference can occur. This vulnerability can be exploited by a remote attacker who provides a specially crafted delta CRL to an application that has delta CRL processing enabled, leading to a Denial of Service (DoS) for the application.", "issued": "2026-04-07T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-28388 https://bugzilla.redhat.com/show_bug.cgi?id=2451097 https://www.cve.org/CVERecord?id=CVE-2026-28388 https://nvd.nist.gov/vuln/detail/CVE-2026-28388 https://openssl-library.org/news/secadv/20260407.txt https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-28388.json", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "openssl", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "M29Ot9TqS/JJH7ICJCbCog==": { "id": "M29Ot9TqS/JJH7ICJCbCog==", "updater": "rhel-vex", "name": "CVE-2026-22801", "description": "A flaw was found in libpng, a reference library for PNG (Portable Network Graphics) raster image files. An integer truncation vulnerability exists in the png_write_image_16bit and png_write_image_8bit simplified write API functions. A local attacker could exploit this flaw by providing a negative row stride (for bottom-up image layouts) or a stride exceeding 65535 bytes, leading to a heap buffer over-read. This can result in information disclosure or a denial of service (DoS) to the system.", "issued": "2026-01-12T22:57:58Z", "links": "https://access.redhat.com/security/cve/CVE-2026-22801 https://bugzilla.redhat.com/show_bug.cgi?id=2428824 https://www.cve.org/CVERecord?id=CVE-2026-22801 https://nvd.nist.gov/vuln/detail/CVE-2026-22801 https://github.com/pnggroup/libpng/security/advisories/GHSA-vgjq-8cw5-ggw8 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-22801.json https://access.redhat.com/errata/RHSA-2026:3405", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "libpng", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "2:1.6.37-12.el9_7.2", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "MDVosfib/bnNAm4m647vLA==": { "id": "MDVosfib/bnNAm4m647vLA==", "updater": "rhel-vex", "name": "CVE-2026-48934", "description": "A flaw was found in Node.js. An attacker can exploit a vulnerability in the Transport Layer Security (TLS) host verification process to bypass certification validation. This bypass could allow an attacker to intercept or alter communications, potentially leading to information disclosure or integrity compromise.", "issued": "2026-06-26T01:14:36Z", "links": "https://access.redhat.com/security/cve/CVE-2026-48934 https://bugzilla.redhat.com/show_bug.cgi?id=2493332 https://www.cve.org/CVERecord?id=CVE-2026-48934 https://nvd.nist.gov/vuln/detail/CVE-2026-48934 https://nodejs.org/en/blog/vulnerability/june-2026-security-releases https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-48934.json https://access.redhat.com/errata/RHSA-2026:35892", "severity": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "normalized_severity": "Medium", "package": { "id": "", "name": "nodejs-libs", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:22.23.1-1.module+el9.8.0+24457+996af7aa", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "MEeKHFVdv0EwpaMPKCy3Sw==": { "id": "MEeKHFVdv0EwpaMPKCy3Sw==", "updater": "rhel-vex", "name": "CVE-2026-48619", "description": "A flaw was found in Node.js. A malicious server can exploit the HTTP/2 client by sending an unlimited number of ORIGIN frames. This can lead to an Out of Memory error on the client, resulting in a denial of service.", "issued": "2026-06-26T01:14:36Z", "links": "https://access.redhat.com/security/cve/CVE-2026-48619 https://bugzilla.redhat.com/show_bug.cgi?id=2493325 https://www.cve.org/CVERecord?id=CVE-2026-48619 https://nvd.nist.gov/vuln/detail/CVE-2026-48619 https://nodejs.org/en/blog/vulnerability/june-2026-security-releases https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-48619.json https://access.redhat.com/errata/RHSA-2026:35892", "severity": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "normalized_severity": "Medium", "package": { "id": "", "name": "npm", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:10.9.8-1.22.23.1.1.module+el9.8.0+24457+996af7aa", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "MIaYLvbJRWXm7UR3+CJ1PA==": { "id": "MIaYLvbJRWXm7UR3+CJ1PA==", "updater": "rhel-vex", "name": "CVE-2025-66864", "description": "A flaw was found in binutils. Processing a specially crafted PE file with cxxfilt can trigger a NULL pointer dereference in the d_print_comp_inner function in the cp-demangle.c file, causing a crash and resulting in a denial of service.", "issued": "2025-12-29T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2025-66864 https://bugzilla.redhat.com/show_bug.cgi?id=2425827 https://www.cve.org/CVERecord?id=CVE-2025-66864 https://nvd.nist.gov/vuln/detail/CVE-2025-66864 https://github.com/caozhzh/CRGF-Vul/blob/main/cxxfilt/crash5.md https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-66864.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "normalized_severity": "Low", "package": { "id": "", "name": "binutils", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "MLyBE3p9/9+LMOMl2JBi6w==": { "id": "MLyBE3p9/9+LMOMl2JBi6w==", "updater": "rhel-vex", "name": "CVE-2022-2343", "description": "A heap-based buffer overflow was found in Vim in the ins_compl_add function in the insexpand.c file. This issue occurs due to a read past the end of a buffer when a specially crafted input is processed. This flaw allows an attacker who can trick a user into opening a specially crafted file into triggering the heap-based buffer overflow, causing the application to crash, possibly executing code and corrupting memory.", "issued": "2022-07-06T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2022-2343 https://bugzilla.redhat.com/show_bug.cgi?id=2106779 https://www.cve.org/CVERecord?id=CVE-2022-2343 https://nvd.nist.gov/vuln/detail/CVE-2022-2343 https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-2343.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "vim", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "MMLwOzBcCET4jaa3dPuTwQ==": { "id": "MMLwOzBcCET4jaa3dPuTwQ==", "updater": "rhel-vex", "name": "CVE-2022-38533", "description": "A vulnerability was found in the strip utility of binutils. An attacker able to convince a victim to process a specially crafted COFF file by the strip utility can lead to a heap-based buffer overflow, causing the utility to crash.", "issued": "2022-08-13T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2022-38533 https://bugzilla.redhat.com/show_bug.cgi?id=2124569 https://www.cve.org/CVERecord?id=CVE-2022-38533 https://nvd.nist.gov/vuln/detail/CVE-2022-38533 https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-38533.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "binutils", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "MS/0MdicPKEzcrADakYBYA==": { "id": "MS/0MdicPKEzcrADakYBYA==", "updater": "rhel-vex", "name": "CVE-2026-4437", "description": "A flaw was found in glibc (the GNU C Library). When an application uses the `gethostbyaddr` or `gethostbyaddr_r` functions with a `nsswitch.conf` configuration that specifies glibc's DNS backend, a remote attacker can send a specially crafted DNS (Domain Name System) response. This crafted response can cause the application to incorrectly interpret a non-answer section of the DNS response as a valid answer, leading to potential misbehavior or incorrect information processing.", "issued": "2026-03-20T19:59:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-4437 https://bugzilla.redhat.com/show_bug.cgi?id=2449777 https://www.cve.org/CVERecord?id=CVE-2026-4437 https://nvd.nist.gov/vuln/detail/CVE-2026-4437 https://sourceware.org/bugzilla/show_bug.cgi?id=34014 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-4437.json https://access.redhat.com/errata/RHSA-2026:20597", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L", "normalized_severity": "Medium", "package": { "id": "", "name": "glibc-devel", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "0:2.34-270.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "MZUC9kv5PI1Xlt1QOYz1SQ==": { "id": "MZUC9kv5PI1Xlt1QOYz1SQ==", "updater": "rhel-vex", "name": "CVE-2026-34180", "description": "A flaw was found in OpenSSL. An integer truncation vulnerability in the ASN.1 decoder can occur when processing a crafted DER-encoded ASN.1 structure with a primitive element exceeding 2 gigabytes. A remote attacker could exploit this to cause a heap buffer over-read. This may lead to an application crash, resulting in a Denial of Service (DoS), or potentially disclose sensitive information by loading memory contents beyond the input buffer. This issue primarily affects 64-bit Unix and Unix-like platforms.", "issued": "2026-06-09T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-34180 https://bugzilla.redhat.com/show_bug.cgi?id=2481881 https://www.cve.org/CVERecord?id=CVE-2026-34180 https://nvd.nist.gov/vuln/detail/CVE-2026-34180 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-34180.json https://access.redhat.com/errata/RHSA-2026:25239", "severity": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "openssl-devel", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:3.5.5-4.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "MciappbjqbiRE2dg7PbMSg==": { "id": "MciappbjqbiRE2dg7PbMSg==", "updater": "rhel-vex", "name": "CVE-2026-48933", "description": "A flaw was found in the Node.js WebCrypto implementation. A remote attacker could exploit this vulnerability by providing an input to the `subtle.encrypt()` function that is a multiple of 2 gigabytes (GiB). This could lead to a denial of service (DoS) by crashing the Node.js process.", "issued": "2026-06-26T01:14:36Z", "links": "https://access.redhat.com/security/cve/CVE-2026-48933 https://bugzilla.redhat.com/show_bug.cgi?id=2493331 https://www.cve.org/CVERecord?id=CVE-2026-48933 https://nvd.nist.gov/vuln/detail/CVE-2026-48933 https://nodejs.org/en/blog/vulnerability/june-2026-security-releases https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-48933.json https://access.redhat.com/errata/RHSA-2026:35892", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "High", "package": { "id": "", "name": "nodejs-libs", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:22.23.1-1.module+el9.8.0+24457+996af7aa", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "MdEybCUhVKCoyI/dXRvNlA==": { "id": "MdEybCUhVKCoyI/dXRvNlA==", "updater": "rhel-vex", "name": "CVE-2025-14104", "description": "A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the `setpwnam()` function, affecting SUID (Set User ID) login-utils utilities writing to the password database.", "issued": "2025-12-05T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2025-14104 https://bugzilla.redhat.com/show_bug.cgi?id=2419369 https://www.cve.org/CVERecord?id=CVE-2025-14104 https://nvd.nist.gov/vuln/detail/CVE-2025-14104 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-14104.json https://access.redhat.com/errata/RHSA-2026:1913", "severity": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "libfdisk", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:2.37.4-21.el9_7", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "MqEiWiJF+vNoM9tbeG6KSw==": { "id": "MqEiWiJF+vNoM9tbeG6KSw==", "updater": "rhel-vex", "name": "CVE-2026-42245", "description": "A flaw was found in Net::IMAP, a Ruby library implementing the Internet Message Access Protocol (IMAP) client functionality. A hostile server can exploit a quadratic time complexity issue in the `Net::IMAP::ResponseReader` when processing large responses containing numerous string literals. This can lead to the client's CPU being exhausted, resulting in a denial of service (DoS) attack.", "issued": "2026-05-09T19:37:08Z", "links": "https://access.redhat.com/security/cve/CVE-2026-42245 https://bugzilla.redhat.com/show_bug.cgi?id=2468495 https://www.cve.org/CVERecord?id=CVE-2026-42245 https://nvd.nist.gov/vuln/detail/CVE-2026-42245 https://github.com/ruby/net-imap/commit/6091f7d6b1f3514cafbfe39c76f2b5d73de3ca96 https://github.com/ruby/net-imap/commit/88d95231fc8afef11c1f074453f7d75b68c9dfda https://github.com/ruby/net-imap/commit/de685f91a4a4cc75eb80da898c2bf8af08d34819 https://github.com/ruby/net-imap/releases/tag/v0.4.24 https://github.com/ruby/net-imap/releases/tag/v0.5.14 https://github.com/ruby/net-imap/releases/tag/v0.6.4 https://github.com/ruby/net-imap/security/advisories/GHSA-q2mw-fvj9-vvcw https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42245.json https://access.redhat.com/errata/RHSA-2026:33576", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "ruby-devel", "version": "", "kind": "binary", "normalized_version": "", "module": "ruby:3.3", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "0:3.3.10-7.module+el9.8.0+24406+8975e57f", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "MrkZWekwMOpCZnSllV83tw==": { "id": "MrkZWekwMOpCZnSllV83tw==", "updater": "rhel-vex", "name": "CVE-2026-5928", "description": "A flaw was found in glibc (GNU C Library). When the `ungetwc` function is called on a file stream using wide characters with specific overlapping single-byte and multi-byte encodings, it may attempt to read data outside of its allocated buffer. This can lead to the unintentional disclosure of sensitive information from memory or cause the program to crash, resulting in a denial of service.", "issued": "2026-04-20T20:37:31Z", "links": "https://access.redhat.com/security/cve/CVE-2026-5928 https://bugzilla.redhat.com/show_bug.cgi?id=2459854 https://www.cve.org/CVERecord?id=CVE-2026-5928 https://nvd.nist.gov/vuln/detail/CVE-2026-5928 https://sourceware.org/bugzilla/show_bug.cgi?id=33998 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-5928.json https://access.redhat.com/errata/RHSA-2026:42952", "severity": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "glibc-devel", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "0:2.34-274.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "MtOwgWyogkVoNGuQavHN8g==": { "id": "MtOwgWyogkVoNGuQavHN8g==", "updater": "rhel-vex", "name": "CVE-2026-22801", "description": "A flaw was found in libpng, a reference library for PNG (Portable Network Graphics) raster image files. An integer truncation vulnerability exists in the png_write_image_16bit and png_write_image_8bit simplified write API functions. A local attacker could exploit this flaw by providing a negative row stride (for bottom-up image layouts) or a stride exceeding 65535 bytes, leading to a heap buffer over-read. This can result in information disclosure or a denial of service (DoS) to the system.", "issued": "2026-01-12T22:57:58Z", "links": "https://access.redhat.com/security/cve/CVE-2026-22801 https://bugzilla.redhat.com/show_bug.cgi?id=2428824 https://www.cve.org/CVERecord?id=CVE-2026-22801 https://nvd.nist.gov/vuln/detail/CVE-2026-22801 https://github.com/pnggroup/libpng/security/advisories/GHSA-vgjq-8cw5-ggw8 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-22801.json https://access.redhat.com/errata/RHSA-2026:3405", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "libpng-devel", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "2:1.6.37-12.el9_7.2", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "N5EbMRV7FNySo/Sn3CmU+w==": { "id": "N5EbMRV7FNySo/Sn3CmU+w==", "updater": "rhel-vex", "name": "CVE-2026-11525", "description": "A flaw was found in undici. When undici processes Set-Cookie headers, it incorrectly interprets the SameSite attribute, accepting partial matches instead of exact ones. This allows a malicious server to downgrade a cookie's SameSite policy to a less secure setting, potentially leading to unintended information disclosure or a weakening of security protections for the user.", "issued": "2026-06-17T17:31:03Z", "links": "https://access.redhat.com/security/cve/CVE-2026-11525 https://bugzilla.redhat.com/show_bug.cgi?id=2490008 https://www.cve.org/CVERecord?id=CVE-2026-11525 https://nvd.nist.gov/vuln/detail/CVE-2026-11525 https://cna.openjsf.org/security-advisories.html https://github.com/nodejs/undici/security/advisories/GHSA-g8m3-5g58-fq7m https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-11525.json https://access.redhat.com/errata/RHSA-2026:35892", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N", "normalized_severity": "Low", "package": { "id": "", "name": "nodejs", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "aarch64|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:22.23.1-1.module+el9.8.0+24457+996af7aa", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "N6nQdxnBzns6IrsJM+Xsuw==": { "id": "N6nQdxnBzns6IrsJM+Xsuw==", "updater": "rhel-vex", "name": "CVE-2025-58767", "description": "A denial of service flaw has been discovered in the rubygem REXML. Certain input can cause excess cpu usage and given sufficiently large input this can affect program performance.", "issued": "2025-09-17T17:45:58Z", "links": "https://access.redhat.com/security/cve/CVE-2025-58767 https://bugzilla.redhat.com/show_bug.cgi?id=2396186 https://www.cve.org/CVERecord?id=CVE-2025-58767 https://nvd.nist.gov/vuln/detail/CVE-2025-58767 https://github.com/ruby/rexml/commit/5859bdeac792687eaf93d8e8f0b7e3c1e2ed5c23 https://github.com/ruby/rexml/security/advisories/GHSA-c2f4-jgmc-q2r5 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-58767.json https://access.redhat.com/errata/RHSA-2025:23063", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "normalized_severity": "Medium", "package": { "id": "", "name": "rubygem-json", "version": "", "kind": "binary", "normalized_version": "", "module": "ruby:3.3", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "0:2.7.2-5.module+el9.7.0+23651+15dc1615", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "N6zpVUumTTQTvmCVOXvHPQ==": { "id": "N6zpVUumTTQTvmCVOXvHPQ==", "updater": "rhel-vex", "name": "CVE-2026-21710", "description": "A flaw was found in Node.js. A remote attacker can exploit this vulnerability by sending a specially crafted HTTP request that includes a header named `__proto__`. When a Node.js application processes this request and attempts to access distinct headers, it encounters an unhandled error, leading to an application crash. This can result in a Denial of Service (DoS), making the affected service unavailable to users.", "issued": "2026-03-30T19:07:28Z", "links": "https://access.redhat.com/security/cve/CVE-2026-21710 https://bugzilla.redhat.com/show_bug.cgi?id=2453151 https://www.cve.org/CVERecord?id=CVE-2026-21710 https://nvd.nist.gov/vuln/detail/CVE-2026-21710 https://nodejs.org/en/blog/vulnerability/march-2026-security-releases https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-21710.json https://access.redhat.com/errata/RHSA-2026:7302", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "High", "package": { "id": "", "name": "nodejs", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "aarch64|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:22.22.2-1.module+el9.7.0+24157+8ddb2461", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "N9dwh+Df2etJCiT3zY4CJw==": { "id": "N9dwh+Df2etJCiT3zY4CJw==", "updater": "rhel-vex", "name": "CVE-2025-10911", "description": "A use-after-free vulnerability was found in libxslt while parsing xsl nodes that may lead to the dereference of expired pointers and application crash.", "issued": "2025-08-04T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2025-10911 https://bugzilla.redhat.com/show_bug.cgi?id=2397838 https://www.cve.org/CVERecord?id=CVE-2025-10911 https://nvd.nist.gov/vuln/detail/CVE-2025-10911 https://gitlab.gnome.org/GNOME/libxslt/-/issues/144 https://gitlab.gnome.org/GNOME/libxslt/-/merge_requests/77 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-10911.json https://access.redhat.com/errata/RHSA-2026:28243", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "libxslt", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "0:1.1.34-14.el9_8.1", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "NF/ewEROjeKYjnb1lHH2iw==": { "id": "NF/ewEROjeKYjnb1lHH2iw==", "updater": "rhel-vex", "name": "CVE-2026-34183", "description": "A flaw was found in OpenSSL's QUIC PATH_CHALLENGE handler. A remote attacker can exploit this vulnerability by flooding a QUIC client or server with specially crafted PATH_CHALLENGE frames. This leads to unbounded memory allocation within the local QUIC stack, as the system continuously allocates PATH_RESPONSE frames without them being acknowledged. The primary consequence is a Denial of Service (DoS), causing the affected application to terminate abnormally due to memory exhaustion.", "issued": "2026-06-09T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-34183 https://bugzilla.redhat.com/show_bug.cgi?id=2481885 https://www.cve.org/CVERecord?id=CVE-2026-34183 https://nvd.nist.gov/vuln/detail/CVE-2026-34183 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-34183.json https://access.redhat.com/errata/RHSA-2026:25239", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "openssl-libs", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "1:3.5.5-4.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "NHJdq5G883S5W8foR85U2A==": { "id": "NHJdq5G883S5W8foR85U2A==", "updater": "rhel-vex", "name": "CVE-2025-61726", "description": "A flaw was found in the net/url package in the Go standard library. The package does not enforce a limit on the number of unique query parameters it parses. A Go application using the net/http.Request.ParseForm method will try to process all parameters provided in the request. A specially crafted HTTP request containing a massive number of query parameters will cause the application to consume an excessive amount of memory, eventually causing the application to crash or become unresponsive, resulting in a denial of service.", "issued": "2026-01-28T19:30:31Z", "links": "https://access.redhat.com/security/cve/CVE-2025-61726 https://bugzilla.redhat.com/show_bug.cgi?id=2434432 https://www.cve.org/CVERecord?id=CVE-2025-61726 https://nvd.nist.gov/vuln/detail/CVE-2025-61726 https://go.dev/cl/736712 https://go.dev/issue/77101 https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc https://pkg.go.dev/vuln/GO-2026-4341 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-61726.json https://access.redhat.com/errata/RHSA-2026:3668", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "High", "package": { "id": "", "name": "go-srpm-macros", "version": "", "kind": "binary", "normalized_version": "", "arch": "noarch", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "0:3.6.0-13.el9_7", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "NKSXZUie8BGH5nwjKc1B6A==": { "id": "NKSXZUie8BGH5nwjKc1B6A==", "updater": "rhel-vex", "name": "CVE-2025-55132", "description": "A file access flaw has been discovered in NodeJS. A file's access and modification timestamps to be changed via `futimes()` even when the process has only read permissions. Unlike `utimes()`, `futimes()` does not apply the expected write-permission checks, which means file metadata can be modified in read-only directories. This behavior could be used to alter timestamps in ways that obscure activity, reducing the reliability of logs.", "issued": "2026-01-20T20:41:55Z", "links": "https://access.redhat.com/security/cve/CVE-2025-55132 https://bugzilla.redhat.com/show_bug.cgi?id=2431338 https://www.cve.org/CVERecord?id=CVE-2025-55132 https://nvd.nist.gov/vuln/detail/CVE-2025-55132 https://nodejs.org/en/blog/vulnerability/december-2025-security-releases https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-55132.json https://access.redhat.com/errata/RHSA-2026:2782", "severity": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "normalized_severity": "Medium", "package": { "id": "", "name": "npm", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:10.9.4-1.22.22.0.1.module+el9.7.0+23896+b5802de9", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "NXO5f9Vv38zu/sOzuqBB9Q==": { "id": "NXO5f9Vv38zu/sOzuqBB9Q==", "updater": "rhel-vex", "name": "CVE-2026-1525", "description": "A flaw was found in undici, a Node.js HTTP/1.1 client. A remote attacker could exploit this vulnerability by sending HTTP/1.1 requests that include duplicate Content-Length headers with different casing (e.g., \"Content-Length\" and \"content-length\"). This can lead to HTTP Request Smuggling, a technique where an attacker sends an ambiguous request that is interpreted differently by a proxy and a backend server. Successful exploitation could result in unauthorized access, cache poisoning, or credential hijacking. It may also cause a Denial of Service (DoS) if strict HTTP parsers reject the malformed requests.", "issued": "2026-03-12T19:56:55Z", "links": "https://access.redhat.com/security/cve/CVE-2026-1525 https://bugzilla.redhat.com/show_bug.cgi?id=2447144 https://www.cve.org/CVERecord?id=CVE-2026-1525 https://nvd.nist.gov/vuln/detail/CVE-2026-1525 https://cna.openjsf.org/security-advisories.html https://cwe.mitre.org/data/definitions/444.html https://github.com/nodejs/undici/security/advisories/GHSA-2mjp-6q6p-2qxm https://hackerone.com/reports/3556037 https://www.rfc-editor.org/rfc/rfc9110.html#section-8.6 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-1525.json https://access.redhat.com/errata/RHSA-2026:7302", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "normalized_severity": "Medium", "package": { "id": "", "name": "nodejs-libs", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:22.22.2-1.module+el9.7.0+24157+8ddb2461", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "NeZAaBfGrzLvaMKrJL7WlA==": { "id": "NeZAaBfGrzLvaMKrJL7WlA==", "updater": "rhel-vex", "name": "CVE-2024-45306", "description": "A heap-buffer overflow was found in Vim. Patch v9.1.0038 optimized how the cursor position is calculated and removed a loop, that verified that the cursor position always points inside a line and does not become invalid by pointing beyond the end of a line. It was assumed that this loop was unnecessary. However, this change made it possible for the cursor position to stay invalid and point beyond the end of a line, which would eventually cause a heap-buffer-overflow when trying to access the line pointer at the specified cursor position.", "issued": "2024-09-02T18:15:36Z", "links": "https://access.redhat.com/security/cve/CVE-2024-45306 https://bugzilla.redhat.com/show_bug.cgi?id=2309275 https://www.cve.org/CVERecord?id=CVE-2024-45306 https://nvd.nist.gov/vuln/detail/CVE-2024-45306 https://github.com/vim/vim/commit/396fd1ec2956307755392a1 https://github.com/vim/vim/releases/tag/v9.1.0038 https://github.com/vim/vim/security/advisories/GHSA-wxf9-c5gx-qrwr https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-45306.json", "severity": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L", "normalized_severity": "Low", "package": { "id": "", "name": "vim", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "NfiEOtFyxMslIq3QwoTtjQ==": { "id": "NfiEOtFyxMslIq3QwoTtjQ==", "updater": "rhel-vex", "name": "CVE-2026-59874", "description": "A flaw was found in node-tar, a tar archive manipulation library for Node.js. A remote attacker could exploit this vulnerability by providing a specially crafted tar archive with a negative entry size in its header. This malformed header causes the archive scanner to enter an infinite loop, repeatedly parsing the same header and preventing further processing. This can lead to a denial of service (DoS) condition, making the affected system or application unresponsive.", "issued": "2026-07-08T15:23:47Z", "links": "https://access.redhat.com/security/cve/CVE-2026-59874 https://bugzilla.redhat.com/show_bug.cgi?id=2498116 https://www.cve.org/CVERecord?id=CVE-2026-59874 https://nvd.nist.gov/vuln/detail/CVE-2026-59874 https://github.com/isaacs/node-tar/commit/9e78bf058b2c22dd4d52e00d8922d5c06fc2f7b5 https://github.com/isaacs/node-tar/releases/tag/v7.5.18 https://github.com/isaacs/node-tar/security/advisories/GHSA-8x88-c5mf-7j5w https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59874.json https://access.redhat.com/errata/RHSA-2026:47058", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "High", "package": { "id": "", "name": "nodejs", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "aarch64|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:22.23.1-2.module+el9.8.0+24538+3f176d52", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "Nh6DgKTo1EEcTUg+VgZK9Q==": { "id": "Nh6DgKTo1EEcTUg+VgZK9Q==", "updater": "rhel-vex", "name": "CVE-2026-48934", "description": "A flaw was found in Node.js. An attacker can exploit a vulnerability in the Transport Layer Security (TLS) host verification process to bypass certification validation. This bypass could allow an attacker to intercept or alter communications, potentially leading to information disclosure or integrity compromise.", "issued": "2026-06-26T01:14:36Z", "links": "https://access.redhat.com/security/cve/CVE-2026-48934 https://bugzilla.redhat.com/show_bug.cgi?id=2493332 https://www.cve.org/CVERecord?id=CVE-2026-48934 https://nvd.nist.gov/vuln/detail/CVE-2026-48934 https://nodejs.org/en/blog/vulnerability/june-2026-security-releases https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-48934.json https://access.redhat.com/errata/RHSA-2026:35892", "severity": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "normalized_severity": "Medium", "package": { "id": "", "name": "npm", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:10.9.8-1.22.23.1.1.module+el9.8.0+24457+996af7aa", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "NrATYvL+2i2gY4ol+szT+g==": { "id": "NrATYvL+2i2gY4ol+szT+g==", "updater": "rhel-vex", "name": "CVE-2026-48934", "description": "A flaw was found in Node.js. An attacker can exploit a vulnerability in the Transport Layer Security (TLS) host verification process to bypass certification validation. This bypass could allow an attacker to intercept or alter communications, potentially leading to information disclosure or integrity compromise.", "issued": "2026-06-26T01:14:36Z", "links": "https://access.redhat.com/security/cve/CVE-2026-48934 https://bugzilla.redhat.com/show_bug.cgi?id=2493332 https://www.cve.org/CVERecord?id=CVE-2026-48934 https://nvd.nist.gov/vuln/detail/CVE-2026-48934 https://nodejs.org/en/blog/vulnerability/june-2026-security-releases https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-48934.json https://access.redhat.com/errata/RHSA-2026:35892", "severity": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "normalized_severity": "Medium", "package": { "id": "", "name": "nodejs", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "aarch64|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:22.23.1-1.module+el9.8.0+24457+996af7aa", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "NrNei+pIM0R36v4Js8XxAg==": { "id": "NrNei+pIM0R36v4Js8XxAg==", "updater": "rhel-vex", "name": "CVE-2026-35387", "description": "A flaw was found in OpenSSH. This vulnerability allows the system to use unintended Elliptic Curve Digital Signature Algorithm (ECDSA) algorithms. This occurs because the configuration for accepted public key algorithms is misinterpreted, leading to the use of weaker cryptographic methods than intended. This could potentially allow an attacker to compromise the confidentiality of data.", "issued": "2026-04-02T16:52:53Z", "links": "https://access.redhat.com/security/cve/CVE-2026-35387 https://bugzilla.redhat.com/show_bug.cgi?id=2454494 https://www.cve.org/CVERecord?id=CVE-2026-35387 https://nvd.nist.gov/vuln/detail/CVE-2026-35387 https://marc.info/?l=openssh-unix-dev\u0026m=177513443901484\u0026w=2 https://www.openssh.org/releasenotes.html#10.3p1 https://www.openwall.com/lists/oss-security/2026/04/02/3 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-35387.json https://access.redhat.com/errata/RHSA-2026:13381", "severity": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N", "normalized_severity": "Low", "package": { "id": "", "name": "openssh-clients", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:8.7p1-49.el9_7", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "NrTzMmbWyM5UeSvnQVNLOg==": { "id": "NrTzMmbWyM5UeSvnQVNLOg==", "updater": "rhel-vex", "name": "CVE-2026-0988", "description": "A flaw was found in glib. Missing validation of offset and count parameters in the g_buffered_input_stream_peek() function can lead to an integer overflow during length calculation. When specially crafted values are provided, this overflow results in an incorrect size being passed to memcpy(), triggering a buffer overflow. This can cause application crashes, leading to a Denial of Service (DoS).", "issued": "2026-01-15T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-0988 https://bugzilla.redhat.com/show_bug.cgi?id=2429886 https://www.cve.org/CVERecord?id=CVE-2026-0988 https://nvd.nist.gov/vuln/detail/CVE-2026-0988 https://gitlab.gnome.org/GNOME/glib/-/issues/3851 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-0988.json", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L", "normalized_severity": "Low", "package": { "id": "", "name": "glib2", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "NxJdA8sdmOpi2KE8EaPazA==": { "id": "NxJdA8sdmOpi2KE8EaPazA==", "updater": "rhel-vex", "name": "CVE-2025-58767", "description": "A denial of service flaw has been discovered in the rubygem REXML. Certain input can cause excess cpu usage and given sufficiently large input this can affect program performance.", "issued": "2025-09-17T17:45:58Z", "links": "https://access.redhat.com/security/cve/CVE-2025-58767 https://bugzilla.redhat.com/show_bug.cgi?id=2396186 https://www.cve.org/CVERecord?id=CVE-2025-58767 https://nvd.nist.gov/vuln/detail/CVE-2025-58767 https://github.com/ruby/rexml/commit/5859bdeac792687eaf93d8e8f0b7e3c1e2ed5c23 https://github.com/ruby/rexml/security/advisories/GHSA-c2f4-jgmc-q2r5 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-58767.json https://access.redhat.com/errata/RHSA-2025:23063", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "normalized_severity": "Medium", "package": { "id": "", "name": "ruby-default-gems", "version": "", "kind": "binary", "normalized_version": "", "module": "ruby:3.3", "arch": "noarch", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "0:3.3.10-5.module+el9.7.0+23651+15dc1615", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "O+92Gg/bs8C9EjretuiP8A==": { "id": "O+92Gg/bs8C9EjretuiP8A==", "updater": "rhel-vex", "name": "CVE-2026-55653", "description": "A flaw was found in OpenSSH. A malicious SSH server can exploit a double free vulnerability in the Diffie-Hellman Group Exchange (DH-GEX) client path. This occurs during FIPS (Federal Information Processing Standards) mode known-group validation when the client processes attacker-controlled DH-GEX group parameters. Successful exploitation leads to client-side process termination, resulting in a Denial of Service (DoS).", "issued": "2026-06-22T23:17:43Z", "links": "https://access.redhat.com/security/cve/CVE-2026-55653 https://bugzilla.redhat.com/show_bug.cgi?id=2462351 https://www.cve.org/CVERecord?id=CVE-2026-55653 https://nvd.nist.gov/vuln/detail/CVE-2026-55653 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-55653.json https://access.redhat.com/errata/RHSA-2026:47756", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "normalized_severity": "Medium", "package": { "id": "", "name": "openssh-clients", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:9.9p1-9.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "O3XylFvGObsPmzTrCuhV8A==": { "id": "O3XylFvGObsPmzTrCuhV8A==", "updater": "rhel-vex", "name": "CVE-2026-14164", "description": "A double free issue has been identified in libarchive's RAR5 reader. During parsing of a specially crafted RAR5 archive, the filtered_buf pointer may remain stale after being freed during unpacking state reinitialization. Subsequent processing of another archive entry can trigger a second free of the same memory region, resulting in a double-free condition. Successful exploitation may cause applications using the vulnerable libarchive API to terminate unexpectedly, leading to a denial of service.", "issued": "2026-05-24T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-14164 https://bugzilla.redhat.com/show_bug.cgi?id=2493411 https://www.cve.org/CVERecord?id=CVE-2026-14164 https://nvd.nist.gov/vuln/detail/CVE-2026-14164 https://github.com/libarchive/libarchive/issues/3069 https://github.com/libarchive/libarchive/pull/3071 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-14164.json https://access.redhat.com/errata/RHSA-2026:52674", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "libarchive", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:3.5.3-11.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "O912x64ev1faikrIaaOp6w==": { "id": "O912x64ev1faikrIaaOp6w==", "updater": "rhel-vex", "name": "CVE-2026-9678", "description": "A flaw was found in Undici. The cache interceptor in shared-cache mode incorrectly classifies certain responses as cacheable due to improper handling of whitespace-padded Cache-Control header field names. This vulnerability allows an unauthenticated attacker to access authenticated user data from the cache, leading to information disclosure. This occurs when both authenticated and unauthenticated requests resolve to the same cache key.", "issued": "2026-06-17T17:04:09Z", "links": "https://access.redhat.com/security/cve/CVE-2026-9678 https://bugzilla.redhat.com/show_bug.cgi?id=2490000 https://www.cve.org/CVERecord?id=CVE-2026-9678 https://nvd.nist.gov/vuln/detail/CVE-2026-9678 https://cna.openjsf.org/security-advisories.html https://github.com/nodejs/undici/security/advisories/GHSA-pr7r-676h-xcf6 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-9678.json https://access.redhat.com/errata/RHSA-2026:35892", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "normalized_severity": "Medium", "package": { "id": "", "name": "nodejs-libs", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:22.23.1-1.module+el9.8.0+24457+996af7aa", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "OB+gdUis8HhIN+YuJZ0d3w==": { "id": "OB+gdUis8HhIN+YuJZ0d3w==", "updater": "rhel-vex", "name": "CVE-2026-6733", "description": "A flaw was found in undici. An attacker-controlled upstream server can exploit a vulnerability in Undici's HTTP/1.1 client, specifically related to response queue poisoning on reused keep-alive sockets. This allows the attacker to inject an unsolicited HTTP/1.1 response onto an idle socket. Consequently, when the client dispatches a new request on that socket, it may associate the injected response with the new request, leading to responses being delivered to unintended recipients or requests. This could result in a low impact on data integrity.", "issued": "2026-06-17T17:14:50Z", "links": "https://access.redhat.com/security/cve/CVE-2026-6733 https://bugzilla.redhat.com/show_bug.cgi?id=2490006 https://www.cve.org/CVERecord?id=CVE-2026-6733 https://nvd.nist.gov/vuln/detail/CVE-2026-6733 https://cna.openjsf.org/security-advisories.html https://github.com/nodejs/undici/security/advisories/GHSA-35p6-xmwp-9g52 https://hackerone.com/reports/3582376 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6733.json https://access.redhat.com/errata/RHSA-2026:35892", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N", "normalized_severity": "Low", "package": { "id": "", "name": "nodejs-full-i18n", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:22.23.1-1.module+el9.8.0+24457+996af7aa", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "OXJFeTFLsi8lSYgzBz58BA==": { "id": "OXJFeTFLsi8lSYgzBz58BA==", "updater": "rhel-vex", "name": "CVE-2026-12151", "description": "A flaw was found in undici. A malicious WebSocket server can exploit this by streaming numerous small or empty continuation frames. This can bypass per-frame and cumulative-size validation, leading to unbounded memory growth in the client process. The primary consequence is memory exhaustion, resulting in a denial of service (DoS) for affected applications using the undici WebSocket client or WebSocketStream API.", "issued": "2026-06-17T16:05:38Z", "links": "https://access.redhat.com/security/cve/CVE-2026-12151 https://bugzilla.redhat.com/show_bug.cgi?id=2489980 https://www.cve.org/CVERecord?id=CVE-2026-12151 https://nvd.nist.gov/vuln/detail/CVE-2026-12151 https://cna.openjsf.org/security-advisories.html https://github.com/nodejs/undici/security/advisories/GHSA-vxpw-j846-p89q https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-12151.json https://access.redhat.com/errata/RHSA-2026:35892", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "High", "package": { "id": "", "name": "nodejs", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "aarch64|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:22.23.1-1.module+el9.8.0+24457+996af7aa", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "OXr+UvfSDAQbLGP4xOBSMw==": { "id": "OXr+UvfSDAQbLGP4xOBSMw==", "updater": "rhel-vex", "name": "CVE-2023-1127", "description": "A flaw was found in Vim. A division by zero in the scrolldown function may lead to a denial of service, modified memory, and possibly remote execution.", "issued": "2023-03-01T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2023-1127 https://bugzilla.redhat.com/show_bug.cgi?id=2174662 https://www.cve.org/CVERecord?id=CVE-2023-1127 https://nvd.nist.gov/vuln/detail/CVE-2023-1127 https://huntr.dev/bounties/2d4d309e-4c96-415f-9070-36d0815f1beb https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-1127.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "vim", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "OZs5l4RWFkhsw7PWdRXzZg==": { "id": "OZs5l4RWFkhsw7PWdRXzZg==", "updater": "rhel-vex", "name": "CVE-2026-5928", "description": "A flaw was found in glibc (GNU C Library). When the `ungetwc` function is called on a file stream using wide characters with specific overlapping single-byte and multi-byte encodings, it may attempt to read data outside of its allocated buffer. This can lead to the unintentional disclosure of sensitive information from memory or cause the program to crash, resulting in a denial of service.", "issued": "2026-04-20T20:37:31Z", "links": "https://access.redhat.com/security/cve/CVE-2026-5928 https://bugzilla.redhat.com/show_bug.cgi?id=2459854 https://www.cve.org/CVERecord?id=CVE-2026-5928 https://nvd.nist.gov/vuln/detail/CVE-2026-5928 https://sourceware.org/bugzilla/show_bug.cgi?id=33998 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-5928.json https://access.redhat.com/errata/RHSA-2026:42952", "severity": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "glibc-locale-source", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "0:2.34-274.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "OaLF1hM9BwMPMfYWn9kNEA==": { "id": "OaLF1hM9BwMPMfYWn9kNEA==", "updater": "rhel-vex", "name": "CVE-2026-3479", "description": "A flaw was found in Python's `pkgutil.get_data()` function, which is used to retrieve data from packages. This function did not properly validate the `resource` argument, allowing a local attacker to perform path traversal attacks. Path traversal enables an attacker to access files and directories stored outside the intended root directory, potentially leading to information disclosure or unintended file access.", "issued": "2026-03-18T18:13:42Z", "links": "https://access.redhat.com/security/cve/CVE-2026-3479 https://bugzilla.redhat.com/show_bug.cgi?id=2448746 https://www.cve.org/CVERecord?id=CVE-2026-3479 https://nvd.nist.gov/vuln/detail/CVE-2026-3479 https://github.com/python/cpython/issues/146121 https://github.com/python/cpython/pull/146122 https://mail.python.org/archives/list/security-announce@python.org/thread/WYLLVQOOCKGK73JM7Z7ZSNOJC4N7BAWY/ https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-3479.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", "normalized_severity": "Low", "package": { "id": "", "name": "python3.9", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "Ob+LJ5zYHnbjt14Yf8W7UA==": { "id": "Ob+LJ5zYHnbjt14Yf8W7UA==", "updater": "rhel-vex", "name": "CVE-2022-3016", "description": "A heap use-after-free vulnerability was found in vim's get_next_valid_entry() function of the src/quickfix.c file. The issue occurs because vim is using freed memory when the location list is changed in autocmd. This flaw allows an attacker to trick a user into opening a specially crafted file, triggering a heap use-after-free that causes an application to crash, possibly executing code and corrupting memory.", "issued": "2022-08-28T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2022-3016 https://bugzilla.redhat.com/show_bug.cgi?id=2124208 https://www.cve.org/CVERecord?id=CVE-2022-3016 https://nvd.nist.gov/vuln/detail/CVE-2022-3016 https://huntr.dev/bounties/260516c2-5c4a-4b7f-a01c-04b1aeeea371 https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-3016.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "vim", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "OwBRDeukhCJw3hE9ZsCdCg==": { "id": "OwBRDeukhCJw3hE9ZsCdCg==", "updater": "rhel-vex", "name": "CVE-2026-35386", "description": "A flaw was found in OpenSSH. This vulnerability allows a remote attacker to achieve arbitrary command execution by injecting shell metacharacters into a username provided on the command line. Exploitation requires an untrusted username and a non-default configuration of the '%' character in `ssh_config`.", "issued": "2026-04-02T16:44:27Z", "links": "https://access.redhat.com/security/cve/CVE-2026-35386 https://bugzilla.redhat.com/show_bug.cgi?id=2454506 https://www.cve.org/CVERecord?id=CVE-2026-35386 https://nvd.nist.gov/vuln/detail/CVE-2026-35386 https://marc.info/?l=openssh-unix-dev\u0026m=177513443901484\u0026w=2 https://www.openssh.org/releasenotes.html#10.3p1 https://www.openwall.com/lists/oss-security/2026/04/02/3 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-35386.json https://access.redhat.com/errata/RHSA-2026:19219", "severity": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N", "normalized_severity": "Low", "package": { "id": "", "name": "openssh", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:9.9p1-7.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "P0gqeMXeqGecgv5yzB/trQ==": { "id": "P0gqeMXeqGecgv5yzB/trQ==", "updater": "rhel-vex", "name": "CVE-2026-27904", "description": "A flaw was found in minimatch. A remote attacker could exploit this vulnerability by providing a specially crafted glob expression with nested unbounded quantifiers. This could lead to catastrophic backtracking in the V8 JavaScript engine, causing the application to become unresponsive and resulting in a Denial of Service (DoS).", "issued": "2026-02-26T01:07:42Z", "links": "https://access.redhat.com/security/cve/CVE-2026-27904 https://bugzilla.redhat.com/show_bug.cgi?id=2442922 https://www.cve.org/CVERecord?id=CVE-2026-27904 https://nvd.nist.gov/vuln/detail/CVE-2026-27904 https://github.com/isaacs/minimatch/security/advisories/GHSA-23c5-xmqv-rm74 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-27904.json https://access.redhat.com/errata/RHSA-2026:7302", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "nodejs-full-i18n", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:22.22.2-1.module+el9.7.0+24157+8ddb2461", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "P8nRZINGxkoETGXvn0vWdQ==": { "id": "P8nRZINGxkoETGXvn0vWdQ==", "updater": "rhel-vex", "name": "CVE-2026-1528", "description": "A flaw was found in undici. A remote attacker could exploit this vulnerability by sending a specially crafted WebSocket frame with an extremely large 64-bit length. This causes undici's ByteParser to overflow its internal calculations, leading to an invalid state and a fatal TypeError. The primary consequence is a Denial of Service (DoS), which terminates the process.", "issued": "2026-03-12T20:21:57Z", "links": "https://access.redhat.com/security/cve/CVE-2026-1528 https://bugzilla.redhat.com/show_bug.cgi?id=2447145 https://www.cve.org/CVERecord?id=CVE-2026-1528 https://nvd.nist.gov/vuln/detail/CVE-2026-1528 https://cna.openjsf.org/security-advisories.html https://github.com/nodejs/undici/security/advisories/GHSA-f269-vfmq-vjvj https://hackerone.com/reports/3537648 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-1528.json https://access.redhat.com/errata/RHSA-2026:7302", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "High", "package": { "id": "", "name": "nodejs-docs", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "noarch", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:22.22.2-1.module+el9.7.0+24157+8ddb2461", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "PAKBAYCAtIg8PKEYWQkTzQ==": { "id": "PAKBAYCAtIg8PKEYWQkTzQ==", "updater": "rhel-vex", "name": "CVE-2025-59465", "description": "A denial of service flaw has been discovered in NodeJS. A malformed `HTTP/2 HEADERS` frame with oversized, invalid `HPACK` data can cause Node.js to crash by triggering an unhandled `TLSSocket` error `ECONNRESET`. Instead of safely closing the connection, the process crashes, enabling a remote denial of service. This primarily affects applications that do not attach explicit error handlers to secure sockets", "issued": "2026-01-20T20:41:55Z", "links": "https://access.redhat.com/security/cve/CVE-2025-59465 https://bugzilla.redhat.com/show_bug.cgi?id=2431349 https://www.cve.org/CVERecord?id=CVE-2025-59465 https://nvd.nist.gov/vuln/detail/CVE-2025-59465 https://nodejs.org/en/blog/vulnerability/december-2025-security-releases https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-59465.json https://access.redhat.com/errata/RHSA-2026:2782", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "High", "package": { "id": "", "name": "npm", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:10.9.4-1.22.22.0.1.module+el9.7.0+23896+b5802de9", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "PAegHDN7lb4f5q+9sjv8sQ==": { "id": "PAegHDN7lb4f5q+9sjv8sQ==", "updater": "rhel-vex", "name": "CVE-2026-12610", "description": "A flaw was found in sssd. When authenticating with a YubiKey, the SSSD PAM responder can crash due to a use-after-free vulnerability, where a memory pointer is incorrectly handled. A local attacker could exploit this flaw by manipulating smartcard or YubiKey contents, leading to a denial of service that disrupts authentication. This vulnerability also presents a potential for privilege escalation, although it is difficult to exploit.", "issued": "2026-06-09T12:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-12610 https://bugzilla.redhat.com/show_bug.cgi?id=2490288 https://www.cve.org/CVERecord?id=CVE-2026-12610 https://nvd.nist.gov/vuln/detail/CVE-2026-12610 https://github.com/SSSD/sssd/issues/8796 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-12610.json", "severity": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "pam", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "PD08BQc1tUldC8QSScd1aA==": { "id": "PD08BQc1tUldC8QSScd1aA==", "updater": "rhel-vex", "name": "CVE-2026-60002", "description": "A flaw was found in OpenSSH. A remote attacker could exploit a use-after-free vulnerability on the client side when a server changes its host key during a key re-exchange. This could lead to high impact on confidentiality and integrity, and low impact on availability.", "issued": "2026-07-08T00:17:33Z", "links": "https://access.redhat.com/security/cve/CVE-2026-60002 https://bugzilla.redhat.com/show_bug.cgi?id=2497936 https://www.cve.org/CVERecord?id=CVE-2026-60002 https://nvd.nist.gov/vuln/detail/CVE-2026-60002 https://marc.info/?l=openssh-unix-dev\u0026m=178333966933090\u0026w=2 https://www.openssh.org/releasenotes.html#10.4p1 https://www.openwall.com/lists/oss-security/2026/07/06/5 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-60002.json https://access.redhat.com/errata/RHSA-2026:47756", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L", "normalized_severity": "High", "package": { "id": "", "name": "openssh-clients", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:9.9p1-9.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "PInmzCd2elAZed8XII2H3A==": { "id": "PInmzCd2elAZed8XII2H3A==", "updater": "rhel-vex", "name": "CVE-2026-48619", "description": "A flaw was found in Node.js. A malicious server can exploit the HTTP/2 client by sending an unlimited number of ORIGIN frames. This can lead to an Out of Memory error on the client, resulting in a denial of service.", "issued": "2026-06-26T01:14:36Z", "links": "https://access.redhat.com/security/cve/CVE-2026-48619 https://bugzilla.redhat.com/show_bug.cgi?id=2493325 https://www.cve.org/CVERecord?id=CVE-2026-48619 https://nvd.nist.gov/vuln/detail/CVE-2026-48619 https://nodejs.org/en/blog/vulnerability/june-2026-security-releases https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-48619.json https://access.redhat.com/errata/RHSA-2026:35892", "severity": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "normalized_severity": "Medium", "package": { "id": "", "name": "nodejs-docs", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "noarch", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:22.23.1-1.module+el9.8.0+24457+996af7aa", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "PX5l1wv6H6/jl5nGaxFp+w==": { "id": "PX5l1wv6H6/jl5nGaxFp+w==", "updater": "rhel-vex", "name": "CVE-2025-24294", "description": "A denial of service flaw was found in resolv ruby gem. This flaw allows an attacker to craft a malicious DNS packet containing a highly compressed domain name. When the resolv library parses this packet, the name decompression process consumes a large amount of CPU resources, as the library does not limit the resulting length of the name.", "issued": "2025-07-12T03:30:40Z", "links": "https://access.redhat.com/security/cve/CVE-2025-24294 https://bugzilla.redhat.com/show_bug.cgi?id=2379684 https://www.cve.org/CVERecord?id=CVE-2025-24294 https://nvd.nist.gov/vuln/detail/CVE-2025-24294 https://www.ruby-lang.org/en/news/2025/07/08/dos-resolv-cve-2025-24294/ https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-24294.json https://access.redhat.com/errata/RHSA-2025:23063", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "normalized_severity": "Medium", "package": { "id": "", "name": "rubygem-bigdecimal", "version": "", "kind": "binary", "normalized_version": "", "module": "ruby:3.3", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "0:3.1.5-5.module+el9.7.0+23651+15dc1615", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "Pi9su0FguY3j1GBpXhwKIA==": { "id": "Pi9su0FguY3j1GBpXhwKIA==", "updater": "rhel-vex", "name": "CVE-2026-9678", "description": "A flaw was found in Undici. The cache interceptor in shared-cache mode incorrectly classifies certain responses as cacheable due to improper handling of whitespace-padded Cache-Control header field names. This vulnerability allows an unauthenticated attacker to access authenticated user data from the cache, leading to information disclosure. This occurs when both authenticated and unauthenticated requests resolve to the same cache key.", "issued": "2026-06-17T17:04:09Z", "links": "https://access.redhat.com/security/cve/CVE-2026-9678 https://bugzilla.redhat.com/show_bug.cgi?id=2490000 https://www.cve.org/CVERecord?id=CVE-2026-9678 https://nvd.nist.gov/vuln/detail/CVE-2026-9678 https://cna.openjsf.org/security-advisories.html https://github.com/nodejs/undici/security/advisories/GHSA-pr7r-676h-xcf6 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-9678.json https://access.redhat.com/errata/RHSA-2026:35892", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "normalized_severity": "Medium", "package": { "id": "", "name": "nodejs-full-i18n", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:22.23.1-1.module+el9.8.0+24457+996af7aa", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "Pml3cIw2PYIOjBurBs3LFQ==": { "id": "Pml3cIw2PYIOjBurBs3LFQ==", "updater": "rhel-vex", "name": "CVE-2026-42245", "description": "A flaw was found in Net::IMAP, a Ruby library implementing the Internet Message Access Protocol (IMAP) client functionality. A hostile server can exploit a quadratic time complexity issue in the `Net::IMAP::ResponseReader` when processing large responses containing numerous string literals. This can lead to the client's CPU being exhausted, resulting in a denial of service (DoS) attack.", "issued": "2026-05-09T19:37:08Z", "links": "https://access.redhat.com/security/cve/CVE-2026-42245 https://bugzilla.redhat.com/show_bug.cgi?id=2468495 https://www.cve.org/CVERecord?id=CVE-2026-42245 https://nvd.nist.gov/vuln/detail/CVE-2026-42245 https://github.com/ruby/net-imap/commit/6091f7d6b1f3514cafbfe39c76f2b5d73de3ca96 https://github.com/ruby/net-imap/commit/88d95231fc8afef11c1f074453f7d75b68c9dfda https://github.com/ruby/net-imap/commit/de685f91a4a4cc75eb80da898c2bf8af08d34819 https://github.com/ruby/net-imap/releases/tag/v0.4.24 https://github.com/ruby/net-imap/releases/tag/v0.5.14 https://github.com/ruby/net-imap/releases/tag/v0.6.4 https://github.com/ruby/net-imap/security/advisories/GHSA-q2mw-fvj9-vvcw https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42245.json https://access.redhat.com/errata/RHSA-2026:33576", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "ruby-libs", "version": "", "kind": "binary", "normalized_version": "", "module": "ruby:3.3", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "0:3.3.10-7.module+el9.8.0+24406+8975e57f", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "PqOWZHQu7W9hh0UlnMkHAQ==": { "id": "PqOWZHQu7W9hh0UlnMkHAQ==", "updater": "rhel-vex", "name": "CVE-2025-69646", "description": "A flaw was found in binutils. A local attacker can exploit this vulnerability by supplying a malicious input file containing malformed DWARF debug_rnglists data. This can cause the objdump tool to enter an unbounded logging loop, leading to excessive CPU and I/O usage and preventing analysis completion. This issue results in a Denial of Service (DoS).", "issued": "2026-03-06T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2025-69646 https://bugzilla.redhat.com/show_bug.cgi?id=2445264 https://www.cve.org/CVERecord?id=CVE-2025-69646 https://nvd.nist.gov/vuln/detail/CVE-2025-69646 https://sourceware.org/bugzilla/show_bug.cgi?id=33638 https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=598704a00cbac5e85c2bedd363357b5bf6fcee33 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-69646.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L", "normalized_severity": "Low", "package": { "id": "", "name": "binutils", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "PvgbBaq86gnOp8hffKEHhQ==": { "id": "PvgbBaq86gnOp8hffKEHhQ==", "updater": "rhel-vex", "name": "CVE-2026-35385", "description": "A flaw was found in OpenSSH. When the `scp` command is used by a root user to download a file with the legacy protocol option (`-O`) and without preserving original file permissions (`-p`), the downloaded file can be installed with elevated privileges (setuid or setgid). This unexpected behavior could allow a malicious file to execute with higher permissions than intended, posing a security risk through potential privilege escalation.", "issued": "2026-04-02T16:30:59Z", "links": "https://access.redhat.com/security/cve/CVE-2026-35385 https://bugzilla.redhat.com/show_bug.cgi?id=2454469 https://www.cve.org/CVERecord?id=CVE-2026-35385 https://nvd.nist.gov/vuln/detail/CVE-2026-35385 https://marc.info/?l=openssh-unix-dev\u0026m=177513443901484\u0026w=2 https://www.openssh.org/releasenotes.html#10.3p1 https://www.openwall.com/lists/oss-security/2026/04/02/3 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-35385.json https://access.redhat.com/errata/RHSA-2026:13381", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "normalized_severity": "High", "package": { "id": "", "name": "openssh", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:8.7p1-49.el9_7", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "Py++HyN8+aNZZa9dPe2rDQ==": { "id": "Py++HyN8+aNZZa9dPe2rDQ==", "updater": "rhel-vex", "name": "CVE-2025-69420", "description": "A flaw was found in OpenSSL. A type confusion vulnerability exists in the TimeStamp Response verification code, where an ASN1_TYPE union member is accessed without proper type validation. A remote attacker can exploit this by providing a malformed TimeStamp Response to an application that verifies timestamp responses. This can lead to an invalid or NULL pointer dereference, resulting in a Denial of Service (DoS) due to an application crash.", "issued": "2026-01-27T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2025-69420 https://bugzilla.redhat.com/show_bug.cgi?id=2430388 https://www.cve.org/CVERecord?id=CVE-2025-69420 https://nvd.nist.gov/vuln/detail/CVE-2025-69420 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-69420.json https://access.redhat.com/errata/RHSA-2026:1473", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "openssl-devel", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:3.5.1-7.el9_7", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "Pza9Y2xtH9MChVMkZwgw2A==": { "id": "Pza9Y2xtH9MChVMkZwgw2A==", "updater": "rhel-vex", "name": "CVE-2024-7264", "description": "A flaw was found in libcurl, where libcurl's ASN1 parser code has the `GTime2str()` function, used for parsing an ASN.1 Generalized Time field. If a syntactically incorrect field is given, the parser can use -1 for the length of the *time fraction*, leading to a `strlen()` performed on a pointer to a heap buffer area that is not purposely NULL terminated.", "issued": "2024-07-31T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2024-7264 https://bugzilla.redhat.com/show_bug.cgi?id=2301888 https://www.cve.org/CVERecord?id=CVE-2024-7264 https://nvd.nist.gov/vuln/detail/CVE-2024-7264 https://www.oracle.com/security-alerts/cpuoct2024.html#AppendixMSQL https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-7264.json", "severity": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "curl", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "Q0D37bmhhLGtYILIAMgFXg==": { "id": "Q0D37bmhhLGtYILIAMgFXg==", "updater": "rhel-vex", "name": "CVE-2022-2207", "description": "Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.", "issued": "2022-06-27T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2022-2207 https://bugzilla.redhat.com/show_bug.cgi?id=2102185 https://www.cve.org/CVERecord?id=CVE-2022-2207 https://nvd.nist.gov/vuln/detail/CVE-2022-2207 https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-2207.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "vim", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "Q2616MMrHflQbREkbaxMFg==": { "id": "Q2616MMrHflQbREkbaxMFg==", "updater": "rhel-vex", "name": "CVE-2026-44656", "description": "A flaw was found in Vim, an open-source command-line text editor. An attacker who controls the contents of a file can exploit an OS command injection vulnerability in Vim's `:find` command-line completion. This occurs when the `path` option, which can be set from a modeline, contains backtick-enclosed shell commands. These commands are then executed when a user opens the malicious file and triggers `:find` completion, leading to arbitrary command execution.", "issued": "2026-05-08T22:40:49Z", "links": "https://access.redhat.com/security/cve/CVE-2026-44656 https://bugzilla.redhat.com/show_bug.cgi?id=2468420 https://www.cve.org/CVERecord?id=CVE-2026-44656 https://nvd.nist.gov/vuln/detail/CVE-2026-44656 https://github.com/vim/vim/commit/190cb3c2b9c769a3972bcfd991a7b5b6cb771ef0 https://github.com/vim/vim/releases/tag/v9.2.0435 https://github.com/vim/vim/security/advisories/GHSA-hwg5-3cxw-wvvg https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-44656.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L", "normalized_severity": "Medium", "package": { "id": "", "name": "vim", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "Q2JaEcNprQzczHwEGMbXgA==": { "id": "Q2JaEcNprQzczHwEGMbXgA==", "updater": "rhel-vex", "name": "CVE-2026-12151", "description": "A flaw was found in undici. A malicious WebSocket server can exploit this by streaming numerous small or empty continuation frames. This can bypass per-frame and cumulative-size validation, leading to unbounded memory growth in the client process. The primary consequence is memory exhaustion, resulting in a denial of service (DoS) for affected applications using the undici WebSocket client or WebSocketStream API.", "issued": "2026-06-17T16:05:38Z", "links": "https://access.redhat.com/security/cve/CVE-2026-12151 https://bugzilla.redhat.com/show_bug.cgi?id=2489980 https://www.cve.org/CVERecord?id=CVE-2026-12151 https://nvd.nist.gov/vuln/detail/CVE-2026-12151 https://cna.openjsf.org/security-advisories.html https://github.com/nodejs/undici/security/advisories/GHSA-vxpw-j846-p89q https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-12151.json https://access.redhat.com/errata/RHSA-2026:35892", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "High", "package": { "id": "", "name": "nodejs-docs", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "noarch", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:22.23.1-1.module+el9.8.0+24457+996af7aa", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "Q6H4f5u2pbj98wlSQQLoGg==": { "id": "Q6H4f5u2pbj98wlSQQLoGg==", "updater": "rhel-vex", "name": "CVE-2026-57451", "description": "A flaw in Vim allows an attacker to cause a Denial of Service (DoS) via an application crash. If a user opens a maliciously crafted undo file, an out-of-bounds read is triggered in the get_text_props() function due to missing length validation on property counts.", "issued": "2026-06-25T15:28:50Z", "links": "https://access.redhat.com/security/cve/CVE-2026-57451 https://bugzilla.redhat.com/show_bug.cgi?id=2492978 https://www.cve.org/CVERecord?id=CVE-2026-57451 https://nvd.nist.gov/vuln/detail/CVE-2026-57451 https://github.com/vim/vim/commit/b2338ca90643e2f01ecb6547c1172716aaec4f79 https://github.com/vim/vim/releases/tag/v9.2.0670 https://github.com/vim/vim/security/advisories/GHSA-f36c-2qcp-7gpw https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-57451.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "vim", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "QG/MLFKQxQOk84kYcs5X4A==": { "id": "QG/MLFKQxQOk84kYcs5X4A==", "updater": "rhel-vex", "name": "CVE-2026-22695", "description": "A flaw was found in libpng, a reference library for processing PNG (Portable Network Graphics) image files. A local attacker could exploit a heap buffer over-read vulnerability in the `png_image_finish_read` function by tricking a user into processing a specially crafted interlaced 16-bit PNG file with an 8-bit output format and non-minimal row stride. This could lead to a denial of service (DoS) and potentially information disclosure.", "issued": "2026-01-12T22:55:40Z", "links": "https://access.redhat.com/security/cve/CVE-2026-22695 https://bugzilla.redhat.com/show_bug.cgi?id=2428825 https://www.cve.org/CVERecord?id=CVE-2026-22695 https://nvd.nist.gov/vuln/detail/CVE-2026-22695 https://github.com/pnggroup/libpng/commit/218612ddd6b17944e21eda56caf8b4bf7779d1ea https://github.com/pnggroup/libpng/commit/e4f7ad4ea2 https://github.com/pnggroup/libpng/issues/778 https://github.com/pnggroup/libpng/security/advisories/GHSA-mmq5-27w3-rxpp https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-22695.json https://access.redhat.com/errata/RHSA-2026:3405", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "libpng", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "2:1.6.37-12.el9_7.2", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "QNrS4atSfp1tFVuWE/Cnqg==": { "id": "QNrS4atSfp1tFVuWE/Cnqg==", "updater": "rhel-vex", "name": "CVE-2026-4775", "description": "A flaw was found in the libtiff library. A remote attacker could exploit a signed integer overflow vulnerability in the putcontig8bitYCbCr44tile function by providing a specially crafted TIFF file. This flaw can lead to an out-of-bounds heap write due to incorrect memory pointer calculations, potentially causing a denial of service (application crash) or arbitrary code execution.", "issued": "2026-03-24T14:33:35Z", "links": "https://access.redhat.com/security/cve/CVE-2026-4775 https://bugzilla.redhat.com/show_bug.cgi?id=2450768 https://www.cve.org/CVERecord?id=CVE-2026-4775 https://nvd.nist.gov/vuln/detail/CVE-2026-4775 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-4775.json https://access.redhat.com/errata/RHSA-2026:12271", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "normalized_severity": "High", "package": { "id": "", "name": "libtiff", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "0:4.4.0-15.el9_7.3", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "QOF3F7DIkILMx0gIrkLxgw==": { "id": "QOF3F7DIkILMx0gIrkLxgw==", "updater": "rhel-vex", "name": "CVE-2026-21710", "description": "A flaw was found in Node.js. A remote attacker can exploit this vulnerability by sending a specially crafted HTTP request that includes a header named `__proto__`. When a Node.js application processes this request and attempts to access distinct headers, it encounters an unhandled error, leading to an application crash. This can result in a Denial of Service (DoS), making the affected service unavailable to users.", "issued": "2026-03-30T19:07:28Z", "links": "https://access.redhat.com/security/cve/CVE-2026-21710 https://bugzilla.redhat.com/show_bug.cgi?id=2453151 https://www.cve.org/CVERecord?id=CVE-2026-21710 https://nvd.nist.gov/vuln/detail/CVE-2026-21710 https://nodejs.org/en/blog/vulnerability/march-2026-security-releases https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-21710.json https://access.redhat.com/errata/RHSA-2026:7302", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "High", "package": { "id": "", "name": "npm", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:10.9.7-1.22.22.2.1.module+el9.7.0+24157+8ddb2461", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "QX9gQ7esz1e73iQHmwojXA==": { "id": "QX9gQ7esz1e73iQHmwojXA==", "updater": "rhel-vex", "name": "CVE-2021-3973", "description": "A flaw was found in vim. A possible heap-based buffer overflow could allow an attacker to input a specially crafted file leading to a crash or code execution. The highest threat from this vulnerability is to system availability.", "issued": "2021-11-19T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2021-3973 https://bugzilla.redhat.com/show_bug.cgi?id=2025059 https://www.cve.org/CVERecord?id=CVE-2021-3973 https://nvd.nist.gov/vuln/detail/CVE-2021-3973 https://security.access.redhat.com/data/csaf/v2/vex/2021/cve-2021-3973.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "vim", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "QZ+YDQI7XEpbDFIIv4hUIw==": { "id": "QZ+YDQI7XEpbDFIIv4hUIw==", "updater": "rhel-vex", "name": "CVE-2026-29111", "description": "A flaw was found in systemd, a system and service manager. An unprivileged user can exploit this vulnerability by making an Inter-Process Communication (IPC) API call with spurious data. In older versions (v249 and earlier), this can lead to stack overwriting with attacker-controlled content, potentially enabling arbitrary code execution or privilege escalation. In newer versions (v250 and later), the flaw causes systemd to assert and freeze, resulting in a Denial of Service (DoS).", "issued": "2026-03-23T21:03:56Z", "links": "https://access.redhat.com/security/cve/CVE-2026-29111 https://bugzilla.redhat.com/show_bug.cgi?id=2450505 https://www.cve.org/CVERecord?id=CVE-2026-29111 https://nvd.nist.gov/vuln/detail/CVE-2026-29111 https://github.com/systemd/systemd/commit/1d22f706bd04f45f8422e17fbde3f56ece17758a https://github.com/systemd/systemd/commit/20021e7686426052e3a7505425d7e12085feb2a6 https://github.com/systemd/systemd/commit/21167006574d6b83813c7596759b474f56562412 https://github.com/systemd/systemd/commit/3cee294fe8cf4fa0eff933ab21416d099942cabd https://github.com/systemd/systemd/commit/42aee39107fbdd7db1ccd402a2151822b2805e9f https://github.com/systemd/systemd/commit/54588d2dedff54bfb6036670820650e4ea74628f https://github.com/systemd/systemd/commit/7ac3220213690e8a8d6d2a6e81e43bd1dce01d69 https://github.com/systemd/systemd/commit/80acea4ef80a4bb78560ed970c34952299b890d6 https://github.com/systemd/systemd/commit/b5fd14693057e5f2c9b4a49603be64ec3608ff6c https://github.com/systemd/systemd/commit/efa6ba2ab625aaa160ac435a09e6482fc63bdbe8 https://github.com/systemd/systemd/security/advisories/GHSA-gx6q-6f99-m764 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-29111.json https://access.redhat.com/errata/RHSA-2026:19213", "severity": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "systemd", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:252-67.el9_8.2", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "QZ8ts+eZBnwTfp8wZbfpwg==": { "id": "QZ8ts+eZBnwTfp8wZbfpwg==", "updater": "rhel-vex", "name": "CVE-2026-42014", "description": "A flaw was found in GnuTLS. The `gnutls_pkcs11_token_set_pin` function, used for changing the Security Officer PIN, can lead to a use-after-free vulnerability. This occurs when an attacker attempts to change the PIN with a NULL old PIN for a token that lacks a protected authentication path.", "issued": "2026-04-29T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-42014 https://bugzilla.redhat.com/show_bug.cgi?id=2467451 https://www.cve.org/CVERecord?id=CVE-2026-42014 https://nvd.nist.gov/vuln/detail/CVE-2026-42014 https://gitlab.com/gnutls/gnutls/-/issues/1766 https://www.gnutls.org/security-new.html#GNUTLS-SA-2026-04-29-9 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42014.json https://access.redhat.com/errata/RHSA-2026:20612", "severity": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "gnutls", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:3.8.10-4.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "QaKFgrY/cUPl6Ls/xAwlFQ==": { "id": "QaKFgrY/cUPl6Ls/xAwlFQ==", "updater": "rhel-vex", "name": "CVE-2025-11495", "description": "A heap based buffer overflow flaw has been discovered in the GNU Binutils package. The affected element is the function elf_x86_64_relocate_section of the file elf64-x86-64.c of the component Linker. This manipulation causes heap-based buffer overflow. The attack can only be executed locally.", "issued": "2025-10-08T20:02:07Z", "links": "https://access.redhat.com/security/cve/CVE-2025-11495 https://bugzilla.redhat.com/show_bug.cgi?id=2402584 https://www.cve.org/CVERecord?id=CVE-2025-11495 https://nvd.nist.gov/vuln/detail/CVE-2025-11495 https://sourceware.org/bugzilla/attachment.cgi?id=16393 https://sourceware.org/bugzilla/show_bug.cgi?id=33502 https://sourceware.org/bugzilla/show_bug.cgi?id=33502#c3 https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=6b21c8b2ecfef5c95142cbc2c32f185cb1c26ab0 https://vuldb.com/?ctiid.327620 https://vuldb.com/?id.327620 https://vuldb.com/?submit.668290 https://www.gnu.org/ https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-11495.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L", "normalized_severity": "Low", "package": { "id": "", "name": "binutils", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "QbgvVzhz2dr5BDvAUM6wFQ==": { "id": "QbgvVzhz2dr5BDvAUM6wFQ==", "updater": "rhel-vex", "name": "CVE-2022-2304", "description": "A stack-based buffer overflow vulnerability was found in Vim's spell_dump_compl() function of the src/spell.c file. This issue occurs because the spell dump goes beyond the end of an array when crafted input is processed. This flaw allows an attacker to trick a user into opening a specially crafted file, triggering an out-of-bounds write that causes an application to crash, possibly executing code and corrupting memory.", "issued": "2022-07-05T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2022-2304 https://bugzilla.redhat.com/show_bug.cgi?id=2104416 https://www.cve.org/CVERecord?id=CVE-2022-2304 https://nvd.nist.gov/vuln/detail/CVE-2022-2304 https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-2304.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "vim", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "Qe1reyLPtQVZ5wKqKa9jQA==": { "id": "Qe1reyLPtQVZ5wKqKa9jQA==", "updater": "rhel-vex", "name": "CVE-2022-0213", "description": "A flaw was found in vim. The vulnerability occurs due to not checking the length for the NameBuff function, which can lead to a heap buffer overflow. This flaw allows an attacker to input a specially crafted file, leading to a crash or code execution.", "issued": "2022-01-12T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2022-0213 https://bugzilla.redhat.com/show_bug.cgi?id=2043779 https://www.cve.org/CVERecord?id=CVE-2022-0213 https://nvd.nist.gov/vuln/detail/CVE-2022-0213 https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-0213.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "vim", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "QgRg8usqYLpC2SzTmhUKsQ==": { "id": "QgRg8usqYLpC2SzTmhUKsQ==", "updater": "rhel-vex", "name": "CVE-2025-22134", "description": "A flaw was found in Vim. Due to Vim not properly terminating visual mode, a heap buffer overflow condition may be triggered when a user switches buffers using the `:all` command. This issue may lead to unexpected behavior, such as an application crash or memory corruption.", "issued": "2025-01-13T20:41:08Z", "links": "https://access.redhat.com/security/cve/CVE-2025-22134 https://bugzilla.redhat.com/show_bug.cgi?id=2337437 https://www.cve.org/CVERecord?id=CVE-2025-22134 https://nvd.nist.gov/vuln/detail/CVE-2025-22134 https://github.com/vim/vim/commit/c9a1e257f1630a0866447e53a564f7ff96a80ead https://github.com/vim/vim/security/advisories/GHSA-5rgf-26wj-48v8 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-22134.json", "severity": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L", "normalized_severity": "Low", "package": { "id": "", "name": "vim", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "Qi/s8gqjz2kgI+pAtQ5t9w==": { "id": "Qi/s8gqjz2kgI+pAtQ5t9w==", "updater": "rhel-vex", "name": "CVE-2026-6733", "description": "A flaw was found in undici. An attacker-controlled upstream server can exploit a vulnerability in Undici's HTTP/1.1 client, specifically related to response queue poisoning on reused keep-alive sockets. This allows the attacker to inject an unsolicited HTTP/1.1 response onto an idle socket. Consequently, when the client dispatches a new request on that socket, it may associate the injected response with the new request, leading to responses being delivered to unintended recipients or requests. This could result in a low impact on data integrity.", "issued": "2026-06-17T17:14:50Z", "links": "https://access.redhat.com/security/cve/CVE-2026-6733 https://bugzilla.redhat.com/show_bug.cgi?id=2490006 https://www.cve.org/CVERecord?id=CVE-2026-6733 https://nvd.nist.gov/vuln/detail/CVE-2026-6733 https://cna.openjsf.org/security-advisories.html https://github.com/nodejs/undici/security/advisories/GHSA-35p6-xmwp-9g52 https://hackerone.com/reports/3582376 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6733.json https://access.redhat.com/errata/RHSA-2026:35892", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N", "normalized_severity": "Low", "package": { "id": "", "name": "nodejs-libs", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:22.23.1-1.module+el9.8.0+24457+996af7aa", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "QmXO38HGjUD9lc3XwducGg==": { "id": "QmXO38HGjUD9lc3XwducGg==", "updater": "rhel-vex", "name": "CVE-2026-42338", "description": "A flaw was found in ip-address, a JavaScript library for parsing and manipulating IPv4 and IPv6 addresses. This vulnerability allows a remote attacker to perform cross-site scripting (XSS) by providing untrusted input to the Address6 constructor. When an application renders the output of Address6.group(), Address6.link(), or the AddressError.parseMessage as HTML without proper escaping, the attacker-controlled content can be executed in the user's browser.", "issued": "2026-05-12T19:43:16Z", "links": "https://access.redhat.com/security/cve/CVE-2026-42338 https://bugzilla.redhat.com/show_bug.cgi?id=2476810 https://www.cve.org/CVERecord?id=CVE-2026-42338 https://nvd.nist.gov/vuln/detail/CVE-2026-42338 https://github.com/beaugunderson/ip-address/security/advisories/GHSA-v2v4-37r5-5v8g https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42338.json https://access.redhat.com/errata/RHSA-2026:35892", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N", "normalized_severity": "High", "package": { "id": "", "name": "nodejs-libs", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:22.23.1-1.module+el9.8.0+24457+996af7aa", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "Qmv/HFfBCKuu6eMPjatnfw==": { "id": "Qmv/HFfBCKuu6eMPjatnfw==", "updater": "rhel-vex", "name": "CVE-2025-14104", "description": "A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the `setpwnam()` function, affecting SUID (Set User ID) login-utils utilities writing to the password database.", "issued": "2025-12-05T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2025-14104 https://bugzilla.redhat.com/show_bug.cgi?id=2419369 https://www.cve.org/CVERecord?id=CVE-2025-14104 https://nvd.nist.gov/vuln/detail/CVE-2025-14104 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-14104.json https://access.redhat.com/errata/RHSA-2026:1913", "severity": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "util-linux-core", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:2.37.4-21.el9_7", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "QpRZEOKvwJh9R+ZiKkkeqQ==": { "id": "QpRZEOKvwJh9R+ZiKkkeqQ==", "updater": "rhel-vex", "name": "CVE-2025-66293", "description": "An out of bounds read vulnerability has been discovered in libpng. This vulnerability is in libpng's simplified API allows reading up to 1012 bytes beyond the png_sRGB_base[512] array when processing valid palette PNG images with partial transparency and gamma correction. The PNG files that trigger this vulnerability are valid per the PNG specification; the bug is in libpng's internal state management.", "issued": "2025-12-03T20:33:57Z", "links": "https://access.redhat.com/security/cve/CVE-2025-66293 https://bugzilla.redhat.com/show_bug.cgi?id=2418711 https://www.cve.org/CVERecord?id=CVE-2025-66293 https://nvd.nist.gov/vuln/detail/CVE-2025-66293 https://github.com/pnggroup/libpng/commit/788a624d7387a758ffd5c7ab010f1870dea753a1 https://github.com/pnggroup/libpng/commit/a05a48b756de63e3234ea6b3b938b8f5f862484a https://github.com/pnggroup/libpng/issues/764 https://github.com/pnggroup/libpng/security/advisories/GHSA-9mpm-9pxh-mg4f https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-66293.json https://access.redhat.com/errata/RHSA-2026:0238", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H", "normalized_severity": "High", "package": { "id": "", "name": "libpng", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "2:1.6.37-12.el9_7.1", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "QskDoDnTSvrQeDXklM4YOw==": { "id": "QskDoDnTSvrQeDXklM4YOw==", "updater": "rhel-vex", "name": "CVE-2026-4105", "description": "A flaw was found in systemd. The systemd-machined service contains an Improper Access Control vulnerability due to insufficient validation of the class parameter in the RegisterMachine D-Bus (Desktop Bus) method. A local unprivileged user can exploit this by attempting to register a machine with a specific class value, which may leave behind a usable, attacker-controlled machine object. This allows the attacker to invoke methods on the privileged object, leading to the execution of arbitrary commands with root privileges on the host system.", "issued": "2026-03-13T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-4105 https://bugzilla.redhat.com/show_bug.cgi?id=2447262 https://www.cve.org/CVERecord?id=CVE-2026-4105 https://nvd.nist.gov/vuln/detail/CVE-2026-4105 https://github.com/systemd/systemd/security/advisories/GHSA-4h6x-r8vx-3862 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-4105.json", "severity": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "systemd", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "Qvh4esOhPMDkhhNZaEzAtg==": { "id": "Qvh4esOhPMDkhhNZaEzAtg==", "updater": "rhel-vex", "name": "CVE-2026-1526", "description": "A flaw was found in undici. A remote attacker can exploit this vulnerability by sending a specially crafted compressed frame, known as a \"decompression bomb,\" during permessage-deflate decompression. The undici WebSocket client does not properly limit the size of decompressed data, leading to unbounded memory consumption. This can cause the Node.js process to exhaust available memory, resulting in a denial of service (DoS) where the process crashes or becomes unresponsive.", "issued": "2026-03-12T20:08:05Z", "links": "https://access.redhat.com/security/cve/CVE-2026-1526 https://bugzilla.redhat.com/show_bug.cgi?id=2447142 https://www.cve.org/CVERecord?id=CVE-2026-1526 https://nvd.nist.gov/vuln/detail/CVE-2026-1526 https://cna.openjsf.org/security-advisories.html https://datatracker.ietf.org/doc/html/rfc7692 https://github.com/nodejs/undici/security/advisories/GHSA-vrm6-8vpv-qv8q https://hackerone.com/reports/3481206 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-1526.json https://access.redhat.com/errata/RHSA-2026:7302", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "High", "package": { "id": "", "name": "npm", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:10.9.7-1.22.22.2.1.module+el9.7.0+24157+8ddb2461", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "Qvw0/zOlMy3n6XUCrN6SmQ==": { "id": "Qvw0/zOlMy3n6XUCrN6SmQ==", "updater": "rhel-vex", "name": "CVE-2026-42338", "description": "A flaw was found in ip-address, a JavaScript library for parsing and manipulating IPv4 and IPv6 addresses. This vulnerability allows a remote attacker to perform cross-site scripting (XSS) by providing untrusted input to the Address6 constructor. When an application renders the output of Address6.group(), Address6.link(), or the AddressError.parseMessage as HTML without proper escaping, the attacker-controlled content can be executed in the user's browser.", "issued": "2026-05-12T19:43:16Z", "links": "https://access.redhat.com/security/cve/CVE-2026-42338 https://bugzilla.redhat.com/show_bug.cgi?id=2476810 https://www.cve.org/CVERecord?id=CVE-2026-42338 https://nvd.nist.gov/vuln/detail/CVE-2026-42338 https://github.com/beaugunderson/ip-address/security/advisories/GHSA-v2v4-37r5-5v8g https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42338.json https://access.redhat.com/errata/RHSA-2026:35892", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N", "normalized_severity": "High", "package": { "id": "", "name": "nodejs-full-i18n", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:22.23.1-1.module+el9.8.0+24457+996af7aa", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "R1x4adkbkgVhxc9hzgUZcA==": { "id": "R1x4adkbkgVhxc9hzgUZcA==", "updater": "rhel-vex", "name": "CVE-2024-25260", "description": "A NULL pointer dereference vulnerability in the elfutils library has been discovered. This vulnerability occurs within the handle_verdef() function in the readelf.c source file. A NULL pointer dereference typically happens when a program attempts to access memory using a pointer that is not pointing anywhere (i.e., it's NULL), leading to a crash or potentially exploitable behavior.", "issued": "2024-02-20T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2024-25260 https://bugzilla.redhat.com/show_bug.cgi?id=2265194 https://www.cve.org/CVERecord?id=CVE-2024-25260 https://nvd.nist.gov/vuln/detail/CVE-2024-25260 https://github.com/schsiung/fuzzer_issues/issues/1 https://sourceware.org/bugzilla/show_bug.cgi?id=31058 https://sourceware.org/elfutils/ https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-25260.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "normalized_severity": "Low", "package": { "id": "", "name": "elfutils", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "R5XnexvMFgBiw/v8sY0BOA==": { "id": "R5XnexvMFgBiw/v8sY0BOA==", "updater": "rhel-vex", "name": "CVE-2026-40553", "description": "A flaw was found in gawk. A buffer overflow vulnerability exists in the `ftype()` routine, located in the `extension/readdir.c` program file. This vulnerability could allow an attacker to crash the program, resulting in a denial of service. It may also potentially lead to arbitrary code execution, though this has not been definitively confirmed.", "issued": "2026-07-13T12:07:56Z", "links": "https://access.redhat.com/security/cve/CVE-2026-40553 https://bugzilla.redhat.com/show_bug.cgi?id=2499657 https://www.cve.org/CVERecord?id=CVE-2026-40553 https://nvd.nist.gov/vuln/detail/CVE-2026-40553 https://cert.pl/en/posts/2026/07/CVE-2026-40467 https://cgit.git.savannah.gnu.org/cgit/gawk.git/commit/?id=cca0366144336b49aaa7d5d949966ce8e2c70843 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-40553.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "gawk", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "R7olSy1x/HelcHgr9AjG7A==": { "id": "R7olSy1x/HelcHgr9AjG7A==", "updater": "rhel-vex", "name": "CVE-2026-26996", "description": "A flaw was found in minimatch. A remote attacker could exploit this Regular Expression Denial of Service (ReDoS) vulnerability by providing a specially crafted glob pattern. This pattern, containing numerous consecutive wildcard characters, causes excessive processing and exponential backtracking in the regular expression engine. Successful exploitation leads to a Denial of Service (DoS), making the application unresponsive.", "issued": "2026-02-20T03:05:21Z", "links": "https://access.redhat.com/security/cve/CVE-2026-26996 https://bugzilla.redhat.com/show_bug.cgi?id=2441268 https://www.cve.org/CVERecord?id=CVE-2026-26996 https://nvd.nist.gov/vuln/detail/CVE-2026-26996 https://github.com/isaacs/minimatch/commit/2e111f3a79abc00fa73110195de2c0f2351904f5 https://github.com/isaacs/minimatch/security/advisories/GHSA-3ppc-4f35-3m26 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-26996.json https://access.redhat.com/errata/RHSA-2026:7302", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "nodejs-full-i18n", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:22.22.2-1.module+el9.7.0+24157+8ddb2461", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "RARCK1i4HMZsevzlwavFtw==": { "id": "RARCK1i4HMZsevzlwavFtw==", "updater": "rhel-vex", "name": "CVE-2026-42015", "description": "A flaw was found in gnutls. An off-by-one error exists in the PKCS#12 bag element bounds check. This vulnerability allows an remote attacker to write past the internal array of a PKCS#12 bag when appending to a bag that already contains 32 elements. This memory corruption could lead to a denial of service (DoS) or potentially other unspecified impacts.", "issued": "2026-04-29T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-42015 https://bugzilla.redhat.com/show_bug.cgi?id=2467678 https://www.cve.org/CVERecord?id=CVE-2026-42015 https://nvd.nist.gov/vuln/detail/CVE-2026-42015 https://www.gnutls.org/security-new.html#GNUTLS-SA-2026-04-29-11 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42015.json https://access.redhat.com/errata/RHSA-2026:20612", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "normalized_severity": "Medium", "package": { "id": "", "name": "gnutls", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:3.8.10-4.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "RATpPhLUqjEbe+XxyYxOOw==": { "id": "RATpPhLUqjEbe+XxyYxOOw==", "updater": "rhel-vex", "name": "CVE-2022-2257", "description": "A flaw was found in vim, which is vulnerable to an out-of-bounds read in the msg_outtrans_special function. This flaw allows a specially crafted file to crash software or execute code when opened in vim.", "issued": "2022-06-30T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2022-2257 https://bugzilla.redhat.com/show_bug.cgi?id=2103133 https://www.cve.org/CVERecord?id=CVE-2022-2257 https://nvd.nist.gov/vuln/detail/CVE-2022-2257 https://huntr.dev/bounties/ca581f80-03ba-472a-b820-78f7fd05fe89/ https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-2257.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "vim", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "RBuf8b62KyhEUrkIKRG/3A==": { "id": "RBuf8b62KyhEUrkIKRG/3A==", "updater": "rhel-vex", "name": "CVE-2026-41316", "description": "A flaw was found in ERB, a templating system for Ruby. An attacker who can trigger deserialization of untrusted data in a Ruby application can bypass existing protections. This vulnerability allows for arbitrary code execution by exploiting specific public methods that evaluate template source code, which were not properly guarded against deserialization attacks.", "issued": "2026-04-24T02:35:41Z", "links": "https://access.redhat.com/security/cve/CVE-2026-41316 https://bugzilla.redhat.com/show_bug.cgi?id=2461369 https://www.cve.org/CVERecord?id=CVE-2026-41316 https://nvd.nist.gov/vuln/detail/CVE-2026-41316 https://github.com/ruby/erb/security/advisories/GHSA-q339-8rmv-2mhv https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-41316.json https://access.redhat.com/errata/RHSA-2026:18030", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "normalized_severity": "High", "package": { "id": "", "name": "ruby-libs", "version": "", "kind": "binary", "normalized_version": "", "module": "ruby:3.3", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "0:3.3.10-6.module+el9.7.0+24248+66578cbb", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "RCLRHWzoL8kWcamW6v1E6w==": { "id": "RCLRHWzoL8kWcamW6v1E6w==", "updater": "rhel-vex", "name": "CVE-2026-57452", "description": "A flaw was found in Vim, an open source command-line text editor. When opening a specially crafted encrypted file using the VimCrypt~04! or VimCrypt~05! methods, an attacker could trigger an unsigned length calculation error. This issue leads to an out-of-bounds read, causing Vim to crash and resulting in a denial of service.", "issued": "2026-06-25T15:27:50Z", "links": "https://access.redhat.com/security/cve/CVE-2026-57452 https://bugzilla.redhat.com/show_bug.cgi?id=2492979 https://www.cve.org/CVERecord?id=CVE-2026-57452 https://nvd.nist.gov/vuln/detail/CVE-2026-57452 https://github.com/vim/vim/commit/c8777cec25dcfae89c42e9aff51af61f71c5745f https://github.com/vim/vim/releases/tag/v9.2.0671 https://github.com/vim/vim/security/advisories/GHSA-c4j9-wr9j-4486 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-57452.json", "severity": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "vim", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "RHShqbO2hqcBNPYbKDg/3A==": { "id": "RHShqbO2hqcBNPYbKDg/3A==", "updater": "rhel-vex", "name": "CVE-2026-6732", "description": "A flaw was found in libxml2. This vulnerability occurs when the library processes a specially crafted XML Schema Definition (XSD) validated document that includes an internal entity reference. An attacker could exploit this by providing a malicious document, leading to a type confusion error that causes the application to crash. This results in a denial of service (DoS), making the affected system or application unavailable.", "issued": "2026-04-16T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-6732 https://bugzilla.redhat.com/show_bug.cgi?id=2461300 https://www.cve.org/CVERecord?id=CVE-2026-6732 https://nvd.nist.gov/vuln/detail/CVE-2026-6732 https://gitlab.gnome.org/GNOME/libxml2/-/issues/1097 https://gitlab.gnome.org/GNOME/libxml2/-/merge_requests/411 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6732.json", "severity": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "libxml2", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "RI2wKrfD1EyE3/UfHBEmcA==": { "id": "RI2wKrfD1EyE3/UfHBEmcA==", "updater": "rhel-vex", "name": "CVE-2026-42338", "description": "A flaw was found in ip-address, a JavaScript library for parsing and manipulating IPv4 and IPv6 addresses. This vulnerability allows a remote attacker to perform cross-site scripting (XSS) by providing untrusted input to the Address6 constructor. When an application renders the output of Address6.group(), Address6.link(), or the AddressError.parseMessage as HTML without proper escaping, the attacker-controlled content can be executed in the user's browser.", "issued": "2026-05-12T19:43:16Z", "links": "https://access.redhat.com/security/cve/CVE-2026-42338 https://bugzilla.redhat.com/show_bug.cgi?id=2476810 https://www.cve.org/CVERecord?id=CVE-2026-42338 https://nvd.nist.gov/vuln/detail/CVE-2026-42338 https://github.com/beaugunderson/ip-address/security/advisories/GHSA-v2v4-37r5-5v8g https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42338.json https://access.redhat.com/errata/RHSA-2026:35892", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N", "normalized_severity": "High", "package": { "id": "", "name": "npm", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:10.9.8-1.22.23.1.1.module+el9.8.0+24457+996af7aa", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "RNhf6Q4lLrEWcaxYFUvj7A==": { "id": "RNhf6Q4lLrEWcaxYFUvj7A==", "updater": "rhel-vex", "name": "CVE-2026-43618", "description": "A flaw was found in rsync. An authenticated daemon peer can exploit an integer overflow vulnerability in the compressed-token decoder. By carefully manipulating the compressed-token, a malicious sender can trigger an overflow, leading to remote memory disclosure. This allows an attacker to leak sensitive process memory contents, including environment variables, passwords, and memory pointers, which significantly weakens Address Space Layout Randomization (ASLR) and can facilitate further exploitation.", "issued": "2026-05-20T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-43618 https://bugzilla.redhat.com/show_bug.cgi?id=2469054 https://www.cve.org/CVERecord?id=CVE-2026-43618 https://nvd.nist.gov/vuln/detail/CVE-2026-43618 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-43618.json https://access.redhat.com/errata/RHSA-2026:26410", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "normalized_severity": "High", "package": { "id": "", "name": "rsync", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:3.2.5-7.el9_8.2", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "RPAl+kgiy/xyZ/LXXbemyw==": { "id": "RPAl+kgiy/xyZ/LXXbemyw==", "updater": "rhel-vex", "name": "CVE-2026-4438", "description": "A flaw was found in the GNU C library (glibc). When applications use the `gethostbyaddr` or `gethostbyaddr_r` functions with a `nsswitch.conf` configuration that specifies glibc's DNS backend, the library may return an invalid DNS hostname. This violates the DNS specification and could lead to applications receiving incorrect hostname information, potentially impacting network operations or security decisions.", "issued": "2026-03-20T19:59:06Z", "links": "https://access.redhat.com/security/cve/CVE-2026-4438 https://bugzilla.redhat.com/show_bug.cgi?id=2449783 https://www.cve.org/CVERecord?id=CVE-2026-4438 https://nvd.nist.gov/vuln/detail/CVE-2026-4438 https://sourceware.org/bugzilla/show_bug.cgi?id=34015 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-4438.json https://access.redhat.com/errata/RHSA-2026:20597", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "normalized_severity": "Low", "package": { "id": "", "name": "glibc-locale-source", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "0:2.34-270.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "RRtBD+EuTLmzasgAaBJyZw==": { "id": "RRtBD+EuTLmzasgAaBJyZw==", "updater": "rhel-vex", "name": "CVE-2025-11081", "description": "An out of bounds read flaw has been discovered in GNU bin utilities. This issue affects the function dump_dwarf_section of the file binutils/objdump.c. Performing manipulation results in out-of-bounds read. The attack is only possible with local access.", "issued": "2025-09-27T22:02:08Z", "links": "https://access.redhat.com/security/cve/CVE-2025-11081 https://bugzilla.redhat.com/show_bug.cgi?id=2399944 https://www.cve.org/CVERecord?id=CVE-2025-11081 https://nvd.nist.gov/vuln/detail/CVE-2025-11081 https://github.com/user-attachments/files/20623354/hdf5_crash_3.txt https://sourceware.org/bugzilla/show_bug.cgi?id=33406 https://sourceware.org/bugzilla/show_bug.cgi?id=33406#c2 https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=f87a66db645caf8cc0e6fc87b0c28c78a38af59b https://vuldb.com/?ctiid.326122 https://vuldb.com/?id.326122 https://vuldb.com/?submit.661275 https://www.gnu.org/ https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-11081.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "normalized_severity": "Medium", "package": { "id": "", "name": "binutils", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "RbYTnX5KpMQtsQJE/xjcFA==": { "id": "RbYTnX5KpMQtsQJE/xjcFA==", "updater": "rhel-vex", "name": "CVE-2026-41316", "description": "A flaw was found in ERB, a templating system for Ruby. An attacker who can trigger deserialization of untrusted data in a Ruby application can bypass existing protections. This vulnerability allows for arbitrary code execution by exploiting specific public methods that evaluate template source code, which were not properly guarded against deserialization attacks.", "issued": "2026-04-24T02:35:41Z", "links": "https://access.redhat.com/security/cve/CVE-2026-41316 https://bugzilla.redhat.com/show_bug.cgi?id=2461369 https://www.cve.org/CVERecord?id=CVE-2026-41316 https://nvd.nist.gov/vuln/detail/CVE-2026-41316 https://github.com/ruby/erb/security/advisories/GHSA-q339-8rmv-2mhv https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-41316.json https://access.redhat.com/errata/RHSA-2026:18030", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "normalized_severity": "High", "package": { "id": "", "name": "ruby-devel", "version": "", "kind": "binary", "normalized_version": "", "module": "ruby:3.3", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "0:3.3.10-6.module+el9.7.0+24248+66578cbb", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "Rd2hVVbUws+mcvoC7DaoiQ==": { "id": "Rd2hVVbUws+mcvoC7DaoiQ==", "updater": "rhel-vex", "name": "CVE-2022-4292", "description": "A heap use-after-free flaw was found in Vim's did_set_spelllang() function of the spell.c file. This issue occurs because vim uses freed memory after SpellFileMissing autocmd uses bwipe. This could allows an attacker to trick a user into opening a specially crafted file, triggering a heap use-after-free issue that causes an application to crash, possibly executing code and corrupting memory.", "issued": "2022-12-02T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2022-4292 https://bugzilla.redhat.com/show_bug.cgi?id=2151558 https://www.cve.org/CVERecord?id=CVE-2022-4292 https://nvd.nist.gov/vuln/detail/CVE-2022-4292 https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-4292.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "vim", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "Rd6dUUcujScJTEeiIRkyqw==": { "id": "Rd6dUUcujScJTEeiIRkyqw==", "updater": "rhel-vex", "name": "CVE-2026-4519", "description": "A flaw was found in Python. The `webbrowser.open()` API, used to launch web browsers, does not properly sanitize input. This allows a remote attacker to craft a malicious URL containing leading dashes. When such a URL is opened, certain web browsers may interpret these dashes as command-line options, which could lead to unexpected behavior, information disclosure, or potentially arbitrary code execution, impacting the integrity of the system.", "issued": "2026-03-20T15:08:32Z", "links": "https://access.redhat.com/security/cve/CVE-2026-4519 https://bugzilla.redhat.com/show_bug.cgi?id=2449649 https://www.cve.org/CVERecord?id=CVE-2026-4519 https://nvd.nist.gov/vuln/detail/CVE-2026-4519 https://github.com/python/cpython/issues/143930 https://github.com/python/cpython/pull/143931 https://mail.python.org/archives/list/security-announce@python.org/thread/AY5NDSS433JK56Q7Q5IS7B37QFZVVOUS/ https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-4519.json https://access.redhat.com/errata/RHSA-2026:6766", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L", "normalized_severity": "High", "package": { "id": "", "name": "python3", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:3.9.25-3.el9_7.2", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "RiAwHTFYpWhzZETb+CSE0Q==": { "id": "RiAwHTFYpWhzZETb+CSE0Q==", "updater": "rhel-vex", "name": "CVE-2026-21710", "description": "A flaw was found in Node.js. A remote attacker can exploit this vulnerability by sending a specially crafted HTTP request that includes a header named `__proto__`. When a Node.js application processes this request and attempts to access distinct headers, it encounters an unhandled error, leading to an application crash. This can result in a Denial of Service (DoS), making the affected service unavailable to users.", "issued": "2026-03-30T19:07:28Z", "links": "https://access.redhat.com/security/cve/CVE-2026-21710 https://bugzilla.redhat.com/show_bug.cgi?id=2453151 https://www.cve.org/CVERecord?id=CVE-2026-21710 https://nvd.nist.gov/vuln/detail/CVE-2026-21710 https://nodejs.org/en/blog/vulnerability/march-2026-security-releases https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-21710.json https://access.redhat.com/errata/RHSA-2026:7302", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "High", "package": { "id": "", "name": "nodejs-docs", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "noarch", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:22.22.2-1.module+el9.7.0+24157+8ddb2461", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "Rk5ia3x816rxtSUtbpOMnw==": { "id": "Rk5ia3x816rxtSUtbpOMnw==", "updater": "rhel-vex", "name": "CVE-2026-18839", "description": "An integer underflow was found in the popt library when formatting help text for option tables that exceed the terminal width. A local user who can cause an application to print help under those conditions may cause that application to crash or fail to display help, resulting in a denial of service of the affected application.", "issued": "2026-08-05T18:56:50Z", "links": "https://access.redhat.com/security/cve/CVE-2026-18839 https://bugzilla.redhat.com/show_bug.cgi?id=2511010 https://www.cve.org/CVERecord?id=CVE-2026-18839 https://nvd.nist.gov/vuln/detail/CVE-2026-18839 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-18839.json", "severity": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:L", "normalized_severity": "Low", "package": { "id": "", "name": "popt", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "RoQvxPrgcpXyTej834bT2Q==": { "id": "RoQvxPrgcpXyTej834bT2Q==", "updater": "rhel-vex", "name": "CVE-2024-57360", "description": "A flaw was found in the nm utility of binutils. A local user who specifies the `--without-symbol-versions` option on a specially crafted ELF file can trigger a segmentation fault condition. This may lead to an application crash or other undefined behavior.", "issued": "2025-01-21T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2024-57360 https://bugzilla.redhat.com/show_bug.cgi?id=2339263 https://www.cve.org/CVERecord?id=CVE-2024-57360 https://nvd.nist.gov/vuln/detail/CVE-2024-57360 https://sourceware.org/bugzilla/show_bug.cgi?id=32467 https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-57360.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "binutils", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "Rrms4yDDctk9MqbL4wHXYA==": { "id": "Rrms4yDDctk9MqbL4wHXYA==", "updater": "rhel-vex", "name": "CVE-2026-11972", "description": "A flaw was found in the Python `tarfile` module. When processing a specially crafted tar archive opened in 'streaming mode' (mode='r|'), the module does not properly handle the end-of-file (EOF) condition. This can cause the `tarfile` module to enter an infinite loop, leading to a Denial of Service (DoS) for applications processing such archives.", "issued": "2026-06-23T22:02:45Z", "links": "https://access.redhat.com/security/cve/CVE-2026-11972 https://bugzilla.redhat.com/show_bug.cgi?id=2492050 https://www.cve.org/CVERecord?id=CVE-2026-11972 https://nvd.nist.gov/vuln/detail/CVE-2026-11972 https://github.com/python/cpython/issues/151981 https://github.com/python/cpython/pull/151982 https://mail.python.org/archives/list/security-announce@python.org/thread/AXPSKKTSRKXTTJULW3XSIC74WZNAAPPB/ https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-11972.json", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "python3.9", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "RxiYxX3H5lL8cc7k0ac/mQ==": { "id": "RxiYxX3H5lL8cc7k0ac/mQ==", "updater": "rhel-vex", "name": "CVE-2025-4516", "description": "A vulnerability has been identified in CPython's bytes.decode() function when used with the \"unicode_escape\" encoding and the \"ignore\" or \"replace\" error handling modes. This flaw can result in the incorrect decoding of byte strings. While this may not directly lead to traditional security breaches like data exfiltration, the resulting unexpected program behavior could introduce instability, logic errors, or unintended side effects within applications that rely on this specific decoding functionality.", "issued": "2025-05-15T13:29:20Z", "links": "https://access.redhat.com/security/cve/CVE-2025-4516 https://bugzilla.redhat.com/show_bug.cgi?id=2366509 https://www.cve.org/CVERecord?id=CVE-2025-4516 https://nvd.nist.gov/vuln/detail/CVE-2025-4516 https://github.com/python/cpython/commit/69b4387f78f413e8c47572a85b3478c47eba8142 https://github.com/python/cpython/commit/9f69a58623bd01349a18ba0c7a9cb1dad6a51e8e https://github.com/python/cpython/issues/133767 https://github.com/python/cpython/pull/129648 https://mail.python.org/archives/list/security-announce@python.org/thread/L75IPBBTSCYEF56I2M4KIW353BB3AY74/ https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-4516.json", "severity": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "python3.9", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "RzrQmVvfhyaExSlpoLqDzg==": { "id": "RzrQmVvfhyaExSlpoLqDzg==", "updater": "rhel-vex", "name": "CVE-2025-55130", "description": "A flaw in Node.js’s Permissions model allows attackers to bypass `--allow-fs-read` and `--allow-fs-write` restrictions using crafted relative symlink paths. By chaining directories and symlinks, a script granted access only to the current directory can escape the allowed path and read sensitive files. This breaks the expected isolation guarantees and enables arbitrary file read/write.", "issued": "2026-01-20T20:41:55Z", "links": "https://access.redhat.com/security/cve/CVE-2025-55130 https://bugzilla.redhat.com/show_bug.cgi?id=2431352 https://www.cve.org/CVERecord?id=CVE-2025-55130 https://nvd.nist.gov/vuln/detail/CVE-2025-55130 https://nodejs.org/en/blog/vulnerability/december-2025-security-releases https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-55130.json https://access.redhat.com/errata/RHSA-2026:2782", "severity": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "normalized_severity": "High", "package": { "id": "", "name": "nodejs-libs", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:22.22.0-1.module+el9.7.0+23896+b5802de9", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "S0PFhlHzk3DOoPuq+7jmPA==": { "id": "S0PFhlHzk3DOoPuq+7jmPA==", "updater": "rhel-vex", "name": "CVE-2026-8932", "description": "A flaw was found in curl. The libcurl library, used for transferring data with URLs, could improperly reuse existing network connections. This occurred even when changes to mutual Transport Layer Security (mTLS) settings, particularly those for client certificates, should have prevented such reuse. This issue could lead to a security feature bypass, where a client might use a connection with an unintended or weaker security configuration, potentially compromising the integrity or confidentiality of data.", "issued": "2026-07-03T06:16:30Z", "links": "https://access.redhat.com/security/cve/CVE-2026-8932 https://bugzilla.redhat.com/show_bug.cgi?id=2496759 https://www.cve.org/CVERecord?id=CVE-2026-8932 https://nvd.nist.gov/vuln/detail/CVE-2026-8932 https://curl.se/docs/CVE-2026-8932.html https://curl.se/docs/CVE-2026-8932.json https://hackerone.com/reports/3733910 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-8932.json", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "normalized_severity": "Medium", "package": { "id": "", "name": "curl", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "S1vpC2/S8eBK717462wBrQ==": { "id": "S1vpC2/S8eBK717462wBrQ==", "updater": "rhel-vex", "name": "CVE-2025-24294", "description": "A denial of service flaw was found in resolv ruby gem. This flaw allows an attacker to craft a malicious DNS packet containing a highly compressed domain name. When the resolv library parses this packet, the name decompression process consumes a large amount of CPU resources, as the library does not limit the resulting length of the name.", "issued": "2025-07-12T03:30:40Z", "links": "https://access.redhat.com/security/cve/CVE-2025-24294 https://bugzilla.redhat.com/show_bug.cgi?id=2379684 https://www.cve.org/CVERecord?id=CVE-2025-24294 https://nvd.nist.gov/vuln/detail/CVE-2025-24294 https://www.ruby-lang.org/en/news/2025/07/08/dos-resolv-cve-2025-24294/ https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-24294.json https://access.redhat.com/errata/RHSA-2025:23063", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "normalized_severity": "Medium", "package": { "id": "", "name": "rubygem-bundler", "version": "", "kind": "binary", "normalized_version": "", "module": "ruby:3.3", "arch": "noarch", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "0:2.5.22-5.module+el9.7.0+23651+15dc1615", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "S5Dzz9cigoJDCj8s5UcT0g==": { "id": "S5Dzz9cigoJDCj8s5UcT0g==", "updater": "rhel-vex", "name": "CVE-2022-41409", "description": "A flaw was found in PCRE2, where it is susceptible to an integer overflow vulnerability triggered by a negative repeat value in the pcre2test subject line that causes infinite looping. This flaw allows a remote attacker to pass specially crafted data to the application, initiating an integer overflow and executing a denial of service (DoS) attack.", "issued": "2023-07-18T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2022-41409 https://bugzilla.redhat.com/show_bug.cgi?id=2260814 https://www.cve.org/CVERecord?id=CVE-2022-41409 https://nvd.nist.gov/vuln/detail/CVE-2022-41409 https://github.com/PCRE2Project/pcre2/commit/94e1c001761373b7d9450768aa15d04c25547a35 https://github.com/PCRE2Project/pcre2/issues/141 https://github.com/advisories/GHSA-4qfx-v7wh-3q4j https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-41409.json", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "normalized_severity": "Low", "package": { "id": "", "name": "pcre2", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "SC1Dy3taETcbAxJ5m5vXqQ==": { "id": "SC1Dy3taETcbAxJ5m5vXqQ==", "updater": "rhel-vex", "name": "CVE-2026-27904", "description": "A flaw was found in minimatch. A remote attacker could exploit this vulnerability by providing a specially crafted glob expression with nested unbounded quantifiers. This could lead to catastrophic backtracking in the V8 JavaScript engine, causing the application to become unresponsive and resulting in a Denial of Service (DoS).", "issued": "2026-02-26T01:07:42Z", "links": "https://access.redhat.com/security/cve/CVE-2026-27904 https://bugzilla.redhat.com/show_bug.cgi?id=2442922 https://www.cve.org/CVERecord?id=CVE-2026-27904 https://nvd.nist.gov/vuln/detail/CVE-2026-27904 https://github.com/isaacs/minimatch/security/advisories/GHSA-23c5-xmqv-rm74 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-27904.json https://access.redhat.com/errata/RHSA-2026:7302", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "nodejs", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "aarch64|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:22.22.2-1.module+el9.7.0+24157+8ddb2461", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "SGI/AkdUGrhS5bQBrDpzJg==": { "id": "SGI/AkdUGrhS5bQBrDpzJg==", "updater": "rhel-vex", "name": "CVE-2026-42307", "description": "A flaw was found in Vim’s netrw plugin. Improper sanitization of specially crafted filenames or URLs could allow shell metacharacters to be included in temporary filenames passed to external commands. A local attacker could exploit this issue to trigger unintended shell command execution when a user opens malicious content using affected netrw functionality.", "issued": "2026-05-08T22:38:53Z", "links": "https://access.redhat.com/security/cve/CVE-2026-42307 https://bugzilla.redhat.com/show_bug.cgi?id=2468403 https://www.cve.org/CVERecord?id=CVE-2026-42307 https://nvd.nist.gov/vuln/detail/CVE-2026-42307 https://github.com/vim/vim/commit/405e2fb6d54d5653523809e2853d99d1c000a5fc https://github.com/vim/vim/releases/tag/v9.2.0383 https://github.com/vim/vim/security/advisories/GHSA-85ch-p2qr-m5gx https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42307.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N", "normalized_severity": "Medium", "package": { "id": "", "name": "vim", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "SGRK/IsCkjX097oRuDhiEQ==": { "id": "SGRK/IsCkjX097oRuDhiEQ==", "updater": "rhel-vex", "name": "CVE-2025-6170", "description": "A flaw was found in the interactive shell of the xmllint command-line tool, used for parsing XML files. When a user inputs an overly long command, the program does not check the input size properly, which can cause it to crash. This issue might allow attackers to run harmful code in rare configurations without modern protections.", "issued": "2025-06-16T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2025-6170 https://bugzilla.redhat.com/show_bug.cgi?id=2372952 https://www.cve.org/CVERecord?id=CVE-2025-6170 https://nvd.nist.gov/vuln/detail/CVE-2025-6170 https://gitlab.gnome.org/GNOME/libxml2/-/issues/941 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-6170.json https://access.redhat.com/errata/RHSA-2026:39317", "severity": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L", "normalized_severity": "Low", "package": { "id": "", "name": "libxml2", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:2.9.13-14.el9_8.2", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "SH2AP7i0ZzGmFbD1kuJsew==": { "id": "SH2AP7i0ZzGmFbD1kuJsew==", "updater": "rhel-vex", "name": "CVE-2026-73281", "description": "A flaw was found in OpenSSH's `ssh-agent` component. A misinteraction between agent locking and the `session-bind@openssh.com` extension allows operations intended for local execution to be performed remotely. This could enable a remote attacker to add PKCS#11 tokens or utilize keys with destination restrictions, bypassing intended security controls.", "issued": "2026-08-11T19:10:33Z", "links": "https://access.redhat.com/security/cve/CVE-2026-73281 https://bugzilla.redhat.com/show_bug.cgi?id=2514327 https://www.cve.org/CVERecord?id=CVE-2026-73281 https://nvd.nist.gov/vuln/detail/CVE-2026-73281 https://www.openssh.org/releasenotes.html#10.5 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-73281.json", "severity": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:N", "normalized_severity": "Low", "package": { "id": "", "name": "openssh", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "SIuaHC7QSLhT9Coo7Xm2hA==": { "id": "SIuaHC7QSLhT9Coo7Xm2hA==", "updater": "rhel-vex", "name": "CVE-2026-48928", "description": "A flaw was found in Node.js. An inconsistency in how Node.js matches hostnames can be exploited by a remote attacker in multi-context mTLS (mutual Transport Layer Security) setups. This vulnerability allows for a trust-policy bypass, potentially leading to unauthorized access to sensitive information or integrity compromise within the affected system.", "issued": "2026-06-26T01:14:36Z", "links": "https://access.redhat.com/security/cve/CVE-2026-48928 https://bugzilla.redhat.com/show_bug.cgi?id=2493333 https://www.cve.org/CVERecord?id=CVE-2026-48928 https://nvd.nist.gov/vuln/detail/CVE-2026-48928 https://nodejs.org/en/blog/vulnerability/june-2026-security-releases https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-48928.json https://access.redhat.com/errata/RHSA-2026:35892", "severity": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N", "normalized_severity": "Medium", "package": { "id": "", "name": "nodejs", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "aarch64|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:22.23.1-1.module+el9.8.0+24457+996af7aa", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "SJA+1v6mehbGh4JXJ2n5jA==": { "id": "SJA+1v6mehbGh4JXJ2n5jA==", "updater": "rhel-vex", "name": "CVE-2026-22695", "description": "A flaw was found in libpng, a reference library for processing PNG (Portable Network Graphics) image files. A local attacker could exploit a heap buffer over-read vulnerability in the `png_image_finish_read` function by tricking a user into processing a specially crafted interlaced 16-bit PNG file with an 8-bit output format and non-minimal row stride. This could lead to a denial of service (DoS) and potentially information disclosure.", "issued": "2026-01-12T22:55:40Z", "links": "https://access.redhat.com/security/cve/CVE-2026-22695 https://bugzilla.redhat.com/show_bug.cgi?id=2428825 https://www.cve.org/CVERecord?id=CVE-2026-22695 https://nvd.nist.gov/vuln/detail/CVE-2026-22695 https://github.com/pnggroup/libpng/commit/218612ddd6b17944e21eda56caf8b4bf7779d1ea https://github.com/pnggroup/libpng/commit/e4f7ad4ea2 https://github.com/pnggroup/libpng/issues/778 https://github.com/pnggroup/libpng/security/advisories/GHSA-mmq5-27w3-rxpp https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-22695.json https://access.redhat.com/errata/RHSA-2026:3405", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "libpng-devel", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "2:1.6.37-12.el9_7.2", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "SQcVquEPU3fE4fDQPb3bLQ==": { "id": "SQcVquEPU3fE4fDQPb3bLQ==", "updater": "rhel-vex", "name": "CVE-2026-24515", "description": "A null pointer dereference flaw has been discovered in libexpat. The function `XML_ExternalEntityParserCreate` failed to copy the encoding handler data passed to XML_SetUnknownEncodingHandler from the parent to the new subparser. This can cause a NULL dereference from external entities that declare use of an unknown encoding. The expected impact is denial of service. It takes use of both functions `XML_ExternalEntityParserCreate` and `XML_SetUnknownEncodingHandler` for an application to be vulnerable.", "issued": "2026-01-23T07:46:36Z", "links": "https://access.redhat.com/security/cve/CVE-2026-24515 https://bugzilla.redhat.com/show_bug.cgi?id=2432312 https://www.cve.org/CVERecord?id=CVE-2026-24515 https://nvd.nist.gov/vuln/detail/CVE-2026-24515 https://github.com/libexpat/libexpat/pull/1131 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-24515.json", "severity": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L", "normalized_severity": "Low", "package": { "id": "", "name": "expat", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "ST+HmAso4vf4Hnu6TuBXXQ==": { "id": "ST+HmAso4vf4Hnu6TuBXXQ==", "updater": "rhel-vex", "name": "CVE-2025-12818", "description": "A vulnerability has been identified in PostgreSQL’s libpq client library, where integer wraparound in several allocation-size calculations allows a peer or input provider to cause an undersized buffer and then write out-of-bounds by hundreds of megabytes. This can lead to a client application segmentation fault or crash when using libpq to connect to a PostgreSQL server.", "issued": "2025-11-13T13:00:12Z", "links": "https://access.redhat.com/security/cve/CVE-2025-12818 https://bugzilla.redhat.com/show_bug.cgi?id=2414826 https://www.cve.org/CVERecord?id=CVE-2025-12818 https://nvd.nist.gov/vuln/detail/CVE-2025-12818 https://www.postgresql.org/support/security/CVE-2025-12818/ https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-12818.json https://access.redhat.com/errata/RHSA-2026:0458", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "libpq", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "0:13.23-1.el9_7", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "ScOp6HuJxBp54FxFpTVDnA==": { "id": "ScOp6HuJxBp54FxFpTVDnA==", "updater": "rhel-vex", "name": "CVE-2026-25645", "description": "A flaw was found in the `requests` HTTP library, specifically in the `requests.utils.extract_zipped_paths()` function, which is used to load Certificate Authority (CA) bundles. A local attacker can exploit this vulnerability by pre-creating a malicious CA bundle file in the system's temporary directory. When a vulnerable application initializes the `requests` library, it may load this malicious file instead of the legitimate CA bundle, leading to a bypass of security controls and potential integrity compromise.", "issued": "2026-03-25T17:02:48Z", "links": "https://access.redhat.com/security/cve/CVE-2026-25645 https://bugzilla.redhat.com/show_bug.cgi?id=2451408 https://www.cve.org/CVERecord?id=CVE-2026-25645 https://nvd.nist.gov/vuln/detail/CVE-2026-25645 https://github.com/psf/requests/commit/66d21cb07bd6255b1280291c4fafb71803cdb3b7 https://github.com/psf/requests/releases/tag/v2.33.0 https://github.com/psf/requests/security/advisories/GHSA-gc5v-m9x4-r6x2 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-25645.json", "severity": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N", "normalized_severity": "Medium", "package": { "id": "", "name": "python-pip", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "SdlHZBjfHlAbNa/I1YXwQA==": { "id": "SdlHZBjfHlAbNa/I1YXwQA==", "updater": "rhel-vex", "name": "CVE-2025-10158", "description": "An out of bounds read flaw has been discovered in rsync. A malicious client acting as the receiver of an rsync file transfer can trigger an OOB read via a negative array index. The rsync client requires at least read access to the remote rsync module to trigger the issue.", "issued": "2025-11-18T14:24:19Z", "links": "https://access.redhat.com/security/cve/CVE-2025-10158 https://bugzilla.redhat.com/show_bug.cgi?id=2415637 https://www.cve.org/CVERecord?id=CVE-2025-10158 https://nvd.nist.gov/vuln/detail/CVE-2025-10158 https://attackerkb.com/assessments/fbacb2a6-d1cd-4011-bb3a-f06b1c8306b1 https://github.com/RsyncProject/rsync/commit/797e17fc4a6f15e3b1756538a9f812b63942686f https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-10158.json https://access.redhat.com/errata/RHSA-2026:6390", "severity": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", "normalized_severity": "Medium", "package": { "id": "", "name": "rsync", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:3.2.5-3.el9_7.2", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "SfJy5i/9nh3s5fpZxZDQCg==": { "id": "SfJy5i/9nh3s5fpZxZDQCg==", "updater": "rhel-vex", "name": "CVE-2026-4786", "description": "A flaw was found in the Python webbrowser.open() API. If a specially crafted URL containing \"%action\" is processed, an attacker could bypass a previous mitigation for CVE-2026-4519. This bypass allows for command injection into the underlying shell, potentially leading to arbitrary code execution.", "issued": "2026-04-13T21:52:19Z", "links": "https://access.redhat.com/security/cve/CVE-2026-4786 https://bugzilla.redhat.com/show_bug.cgi?id=2458049 https://www.cve.org/CVERecord?id=CVE-2026-4786 https://nvd.nist.gov/vuln/detail/CVE-2026-4786 https://github.com/python/cpython/issues/148169 https://github.com/python/cpython/pull/148170 https://mail.python.org/archives/list/security-announce@python.org/thread/JQDUNJVB4AQNTJECSUKOBDU3XCJIPSE5/ https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-4786.json https://access.redhat.com/errata/RHSA-2026:10949", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L", "normalized_severity": "High", "package": { "id": "", "name": "python3-libs", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:3.9.25-3.el9_7.3", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "SvhQ7tNvl6ANrVnaJ4cBNw==": { "id": "SvhQ7tNvl6ANrVnaJ4cBNw==", "updater": "rhel-vex", "name": "CVE-2022-3099", "description": "A use-after-free vulnerability was found in vim's do_cmdline() function of the src/ex_docmd.c file. The issue triggers when an invalid line number on :for is ignored. This flaw allows an attacker to trick a user into opening a specially crafted file, triggering use-after-free that causes an application to crash, possibly executing code and corrupting memory.", "issued": "2022-09-03T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2022-3099 https://bugzilla.redhat.com/show_bug.cgi?id=2124157 https://www.cve.org/CVERecord?id=CVE-2022-3099 https://nvd.nist.gov/vuln/detail/CVE-2022-3099 https://huntr.dev/bounties/403210c7-6cc7-4874-8934-b57f88bd4f5e https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-3099.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "vim", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "Sygyk9+T2DbXETLWiB21dA==": { "id": "Sygyk9+T2DbXETLWiB21dA==", "updater": "rhel-vex", "name": "CVE-2025-58767", "description": "A denial of service flaw has been discovered in the rubygem REXML. Certain input can cause excess cpu usage and given sufficiently large input this can affect program performance.", "issued": "2025-09-17T17:45:58Z", "links": "https://access.redhat.com/security/cve/CVE-2025-58767 https://bugzilla.redhat.com/show_bug.cgi?id=2396186 https://www.cve.org/CVERecord?id=CVE-2025-58767 https://nvd.nist.gov/vuln/detail/CVE-2025-58767 https://github.com/ruby/rexml/commit/5859bdeac792687eaf93d8e8f0b7e3c1e2ed5c23 https://github.com/ruby/rexml/security/advisories/GHSA-c2f4-jgmc-q2r5 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-58767.json https://access.redhat.com/errata/RHSA-2025:23063", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "normalized_severity": "Medium", "package": { "id": "", "name": "rubygem-rdoc", "version": "", "kind": "binary", "normalized_version": "", "module": "ruby:3.3", "arch": "noarch", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "0:6.6.3.1-5.module+el9.7.0+23651+15dc1615", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "T+jfDhqJcXwVQ38oWEz/6g==": { "id": "T+jfDhqJcXwVQ38oWEz/6g==", "updater": "rhel-vex", "name": "CVE-2025-14104", "description": "A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the `setpwnam()` function, affecting SUID (Set User ID) login-utils utilities writing to the password database.", "issued": "2025-12-05T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2025-14104 https://bugzilla.redhat.com/show_bug.cgi?id=2419369 https://www.cve.org/CVERecord?id=CVE-2025-14104 https://nvd.nist.gov/vuln/detail/CVE-2025-14104 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-14104.json https://access.redhat.com/errata/RHSA-2026:1913", "severity": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "libsmartcols", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:2.37.4-21.el9_7", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "T1g7X8ESyY5xnqSayytC4w==": { "id": "T1g7X8ESyY5xnqSayytC4w==", "updater": "rhel-vex", "name": "CVE-2026-56391", "description": "A flaw was found in GNU coreutils uniq. When processing specially crafted multibyte input with the --check-chars option, an attacker can trigger an out-of-bounds read. This vulnerability can lead to a denial of service (DoS) due to an application crash and potentially expose sensitive information from adjacent memory.", "issued": "2026-07-24T07:44:45Z", "links": "https://access.redhat.com/security/cve/CVE-2026-56391 https://bugzilla.redhat.com/show_bug.cgi?id=2506691 https://www.cve.org/CVERecord?id=CVE-2026-56391 https://nvd.nist.gov/vuln/detail/CVE-2026-56391 https://cert.pl/en/posts/2026/07/CVE-2026-56391 https://git.savannah.gnu.org/cgit/coreutils.git/ https://git.savannah.gnu.org/cgit/coreutils.git/commit/?id=d64e35a8a4c0e4608321433e0d84d917e4e36371 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-56391.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "coreutils", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "T5Nghm4crNWWnUrYvZZItg==": { "id": "T5Nghm4crNWWnUrYvZZItg==", "updater": "rhel-vex", "name": "CVE-2022-2124", "description": "Buffer Over-read in GitHub repository vim/vim prior to 8.2.", "issued": "2022-06-19T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2022-2124 https://bugzilla.redhat.com/show_bug.cgi?id=2099558 https://www.cve.org/CVERecord?id=CVE-2022-2124 https://nvd.nist.gov/vuln/detail/CVE-2022-2124 https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-2124.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "vim", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "T76LK9MUa3lwsxSAw540ZA==": { "id": "T76LK9MUa3lwsxSAw540ZA==", "updater": "rhel-vex", "name": "CVE-2026-9678", "description": "A flaw was found in Undici. The cache interceptor in shared-cache mode incorrectly classifies certain responses as cacheable due to improper handling of whitespace-padded Cache-Control header field names. This vulnerability allows an unauthenticated attacker to access authenticated user data from the cache, leading to information disclosure. This occurs when both authenticated and unauthenticated requests resolve to the same cache key.", "issued": "2026-06-17T17:04:09Z", "links": "https://access.redhat.com/security/cve/CVE-2026-9678 https://bugzilla.redhat.com/show_bug.cgi?id=2490000 https://www.cve.org/CVERecord?id=CVE-2026-9678 https://nvd.nist.gov/vuln/detail/CVE-2026-9678 https://cna.openjsf.org/security-advisories.html https://github.com/nodejs/undici/security/advisories/GHSA-pr7r-676h-xcf6 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-9678.json https://access.redhat.com/errata/RHSA-2026:35892", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "normalized_severity": "Medium", "package": { "id": "", "name": "npm", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:10.9.8-1.22.23.1.1.module+el9.8.0+24457+996af7aa", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "T7eVCD5Gwe0DXPZP59mQUQ==": { "id": "T7eVCD5Gwe0DXPZP59mQUQ==", "updater": "rhel-vex", "name": "CVE-2026-48928", "description": "A flaw was found in Node.js. An inconsistency in how Node.js matches hostnames can be exploited by a remote attacker in multi-context mTLS (mutual Transport Layer Security) setups. This vulnerability allows for a trust-policy bypass, potentially leading to unauthorized access to sensitive information or integrity compromise within the affected system.", "issued": "2026-06-26T01:14:36Z", "links": "https://access.redhat.com/security/cve/CVE-2026-48928 https://bugzilla.redhat.com/show_bug.cgi?id=2493333 https://www.cve.org/CVERecord?id=CVE-2026-48928 https://nvd.nist.gov/vuln/detail/CVE-2026-48928 https://nodejs.org/en/blog/vulnerability/june-2026-security-releases https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-48928.json https://access.redhat.com/errata/RHSA-2026:35892", "severity": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N", "normalized_severity": "Medium", "package": { "id": "", "name": "nodejs-libs", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:22.23.1-1.module+el9.8.0+24457+996af7aa", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "TFhgbPsd17URo8rNJh9SWQ==": { "id": "TFhgbPsd17URo8rNJh9SWQ==", "updater": "rhel-vex", "name": "CVE-2026-42767", "description": "A flaw was found in OpenSSL. An attacker controlling a Certificate Management Protocol (CMP) server, or acting as a man-in-the-middle, could craft a malicious CMP response. This response, containing a Certificate Request Message Format (CRMF) CertRepMessage with a specific malformed EncryptedValue structure, would trigger a NULL pointer dereference in the OpenSSL CMP client. This vulnerability leads to a crash of the application, resulting in a Denial of Service (DoS).", "issued": "2026-06-09T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-42767 https://bugzilla.redhat.com/show_bug.cgi?id=2481891 https://www.cve.org/CVERecord?id=CVE-2026-42767 https://nvd.nist.gov/vuln/detail/CVE-2026-42767 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42767.json https://access.redhat.com/errata/RHSA-2026:25239", "severity": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "openssl", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "1:3.5.5-4.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "TIcWaTRsDD52irGN4xUQyA==": { "id": "TIcWaTRsDD52irGN4xUQyA==", "updater": "rhel-vex", "name": "CVE-2022-2125", "description": "Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.", "issued": "2022-06-19T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2022-2125 https://bugzilla.redhat.com/show_bug.cgi?id=2099590 https://www.cve.org/CVERecord?id=CVE-2022-2125 https://nvd.nist.gov/vuln/detail/CVE-2022-2125 https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-2125.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "vim", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "TL19l7Dr/wLwmp6malQ4FQ==": { "id": "TL19l7Dr/wLwmp6malQ4FQ==", "updater": "rhel-vex", "name": "CVE-2026-48619", "description": "A flaw was found in Node.js. A malicious server can exploit the HTTP/2 client by sending an unlimited number of ORIGIN frames. This can lead to an Out of Memory error on the client, resulting in a denial of service.", "issued": "2026-06-26T01:14:36Z", "links": "https://access.redhat.com/security/cve/CVE-2026-48619 https://bugzilla.redhat.com/show_bug.cgi?id=2493325 https://www.cve.org/CVERecord?id=CVE-2026-48619 https://nvd.nist.gov/vuln/detail/CVE-2026-48619 https://nodejs.org/en/blog/vulnerability/june-2026-security-releases https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-48619.json https://access.redhat.com/errata/RHSA-2026:35892", "severity": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "normalized_severity": "Medium", "package": { "id": "", "name": "nodejs-libs", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:22.23.1-1.module+el9.8.0+24457+996af7aa", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "TSYnGqVe9WLIg9cR9McW7A==": { "id": "TSYnGqVe9WLIg9cR9McW7A==", "updater": "rhel-vex", "name": "CVE-2026-59873", "description": "A flaw was found in node-tar, a tar archive manipulation library for Node.js. This vulnerability allows a remote attacker to craft a small gzip bomb, which, when processed, can lead to the exhaustion of disk space and CPU resources. This occurs because node-tar does not enforce strict limits on the total decompressed data, the number of entries, or the decompression ratio during extraction and parsing. The primary impact is a Denial of Service (DoS), making the affected system or application unavailable.", "issued": "2026-07-08T15:22:40Z", "links": "https://access.redhat.com/security/cve/CVE-2026-59873 https://bugzilla.redhat.com/show_bug.cgi?id=2498120 https://www.cve.org/CVERecord?id=CVE-2026-59873 https://nvd.nist.gov/vuln/detail/CVE-2026-59873 https://github.com/isaacs/node-tar/commit/2812e9338665659b183aa7226518c307044957d3 https://github.com/isaacs/node-tar/releases/tag/v7.5.19 https://github.com/isaacs/node-tar/security/advisories/GHSA-23hp-3jrh-7fpw https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59873.json https://access.redhat.com/errata/RHSA-2026:47058", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "High", "package": { "id": "", "name": "npm", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:10.9.8-1.22.23.1.2.module+el9.8.0+24538+3f176d52", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "TT6ujth4uzblGI4VcnKBOw==": { "id": "TT6ujth4uzblGI4VcnKBOw==", "updater": "rhel-vex", "name": "CVE-2025-12084", "description": "A flaw was found in cpython. This vulnerability allows impacted availability via a quadratic algorithm in `xml.dom.minidom` methods, such as `appendChild()`, when building excessively nested documents due to a dependency on `_clear_id_cache()`", "issued": "2025-12-03T18:55:32Z", "links": "https://access.redhat.com/security/cve/CVE-2025-12084 https://bugzilla.redhat.com/show_bug.cgi?id=2418655 https://www.cve.org/CVERecord?id=CVE-2025-12084 https://nvd.nist.gov/vuln/detail/CVE-2025-12084 https://github.com/python/cpython/issues/142145 https://github.com/python/cpython/pull/142146 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-12084.json https://access.redhat.com/errata/RHSA-2026:1478", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "python3-libs", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:3.9.25-3.el9_7", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "TZnGp6lc5MuTXKrvF6Ln8Q==": { "id": "TZnGp6lc5MuTXKrvF6Ln8Q==", "updater": "rhel-vex", "name": "CVE-2026-26996", "description": "A flaw was found in minimatch. A remote attacker could exploit this Regular Expression Denial of Service (ReDoS) vulnerability by providing a specially crafted glob pattern. This pattern, containing numerous consecutive wildcard characters, causes excessive processing and exponential backtracking in the regular expression engine. Successful exploitation leads to a Denial of Service (DoS), making the application unresponsive.", "issued": "2026-02-20T03:05:21Z", "links": "https://access.redhat.com/security/cve/CVE-2026-26996 https://bugzilla.redhat.com/show_bug.cgi?id=2441268 https://www.cve.org/CVERecord?id=CVE-2026-26996 https://nvd.nist.gov/vuln/detail/CVE-2026-26996 https://github.com/isaacs/minimatch/commit/2e111f3a79abc00fa73110195de2c0f2351904f5 https://github.com/isaacs/minimatch/security/advisories/GHSA-3ppc-4f35-3m26 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-26996.json https://access.redhat.com/errata/RHSA-2026:7302", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "nodejs-docs", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "noarch", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:22.22.2-1.module+el9.7.0+24157+8ddb2461", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "TccjTp2Y8sTyWrjrm24IKA==": { "id": "TccjTp2Y8sTyWrjrm24IKA==", "updater": "rhel-vex", "name": "CVE-2025-14104", "description": "A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the `setpwnam()` function, affecting SUID (Set User ID) login-utils utilities writing to the password database.", "issued": "2025-12-05T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2025-14104 https://bugzilla.redhat.com/show_bug.cgi?id=2419369 https://www.cve.org/CVERecord?id=CVE-2025-14104 https://nvd.nist.gov/vuln/detail/CVE-2025-14104 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-14104.json https://access.redhat.com/errata/RHSA-2026:1913", "severity": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "libmount", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:2.37.4-21.el9_7", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "Teb2ue8GsbLkJUoUyGyGsA==": { "id": "Teb2ue8GsbLkJUoUyGyGsA==", "updater": "rhel-vex", "name": "CVE-2026-34180", "description": "A flaw was found in OpenSSL. An integer truncation vulnerability in the ASN.1 decoder can occur when processing a crafted DER-encoded ASN.1 structure with a primitive element exceeding 2 gigabytes. A remote attacker could exploit this to cause a heap buffer over-read. This may lead to an application crash, resulting in a Denial of Service (DoS), or potentially disclose sensitive information by loading memory contents beyond the input buffer. This issue primarily affects 64-bit Unix and Unix-like platforms.", "issued": "2026-06-09T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-34180 https://bugzilla.redhat.com/show_bug.cgi?id=2481881 https://www.cve.org/CVERecord?id=CVE-2026-34180 https://nvd.nist.gov/vuln/detail/CVE-2026-34180 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-34180.json https://access.redhat.com/errata/RHSA-2026:25239", "severity": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "openssl", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "1:3.5.5-4.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "Tp2zZ0uvWY7vBbgviQPk7w==": { "id": "Tp2zZ0uvWY7vBbgviQPk7w==", "updater": "rhel-vex", "name": "CVE-2026-1526", "description": "A flaw was found in undici. A remote attacker can exploit this vulnerability by sending a specially crafted compressed frame, known as a \"decompression bomb,\" during permessage-deflate decompression. The undici WebSocket client does not properly limit the size of decompressed data, leading to unbounded memory consumption. This can cause the Node.js process to exhaust available memory, resulting in a denial of service (DoS) where the process crashes or becomes unresponsive.", "issued": "2026-03-12T20:08:05Z", "links": "https://access.redhat.com/security/cve/CVE-2026-1526 https://bugzilla.redhat.com/show_bug.cgi?id=2447142 https://www.cve.org/CVERecord?id=CVE-2026-1526 https://nvd.nist.gov/vuln/detail/CVE-2026-1526 https://cna.openjsf.org/security-advisories.html https://datatracker.ietf.org/doc/html/rfc7692 https://github.com/nodejs/undici/security/advisories/GHSA-vrm6-8vpv-qv8q https://hackerone.com/reports/3481206 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-1526.json https://access.redhat.com/errata/RHSA-2026:7302", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "High", "package": { "id": "", "name": "nodejs", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "aarch64|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:22.22.2-1.module+el9.7.0+24157+8ddb2461", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "TrnW8DIZgc2e/W4a1+ccJw==": { "id": "TrnW8DIZgc2e/W4a1+ccJw==", "updater": "rhel-vex", "name": "CVE-2026-4775", "description": "A flaw was found in the libtiff library. A remote attacker could exploit a signed integer overflow vulnerability in the putcontig8bitYCbCr44tile function by providing a specially crafted TIFF file. This flaw can lead to an out-of-bounds heap write due to incorrect memory pointer calculations, potentially causing a denial of service (application crash) or arbitrary code execution.", "issued": "2026-03-24T14:33:35Z", "links": "https://access.redhat.com/security/cve/CVE-2026-4775 https://bugzilla.redhat.com/show_bug.cgi?id=2450768 https://www.cve.org/CVERecord?id=CVE-2026-4775 https://nvd.nist.gov/vuln/detail/CVE-2026-4775 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-4775.json https://access.redhat.com/errata/RHSA-2026:19363", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "normalized_severity": "High", "package": { "id": "", "name": "libtiff-devel", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "0:4.4.0-18.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "TsVNXuAeF3PhiRZhIOjjtQ==": { "id": "TsVNXuAeF3PhiRZhIOjjtQ==", "updater": "rhel-vex", "name": "CVE-2025-50182", "description": "A flaw was found in urllib3. The library fails to properly validate redirect URLs, allowing an attacker to manipulate redirect chains when used in environments like Pyodide utilizing the JavaScript Fetch API. This lack of validation can enable a remote attacker to control the redirect destination, leading to arbitrary URL redirection. Consequently, an attacker can redirect users to malicious websites. This \nvulnerability stems from a failure to constrain the redirect target.", "issued": "2025-06-19T01:42:44Z", "links": "https://access.redhat.com/security/cve/CVE-2025-50182 https://bugzilla.redhat.com/show_bug.cgi?id=2373800 https://www.cve.org/CVERecord?id=CVE-2025-50182 https://nvd.nist.gov/vuln/detail/CVE-2025-50182 https://github.com/urllib3/urllib3/commit/7eb4a2aafe49a279c29b6d1f0ed0f42e9736194f https://github.com/urllib3/urllib3/security/advisories/GHSA-48p4-8xcf-vxj5 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-50182.json", "severity": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N", "normalized_severity": "Medium", "package": { "id": "", "name": "python-pip", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "TvusqX9NwPqfJWjNoF5ThA==": { "id": "TvusqX9NwPqfJWjNoF5ThA==", "updater": "rhel-vex", "name": "CVE-2026-42770", "description": "A flaw was found in OpenSSL. A malicious peer can exploit this vulnerability by presenting a specially crafted DHX (X9.42) peer key. Due to improper validation of the peer key's subgroup membership, an attacker can recover the victim's private key after a small number of key exchange attempts. This information disclosure can lead to unauthorized access or further compromise of affected systems.", "issued": "2026-06-09T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-42770 https://bugzilla.redhat.com/show_bug.cgi?id=2481894 https://www.cve.org/CVERecord?id=CVE-2026-42770 https://nvd.nist.gov/vuln/detail/CVE-2026-42770 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42770.json https://access.redhat.com/errata/RHSA-2026:25239", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "normalized_severity": "Low", "package": { "id": "", "name": "openssl", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "1:3.5.5-4.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "TwbA7fBttKRHAyCkVC4IDQ==": { "id": "TwbA7fBttKRHAyCkVC4IDQ==", "updater": "rhel-vex", "name": "CVE-2026-5450", "description": "A flaw was found in glibc (GNU C Library). This vulnerability occurs when an application uses the `scanf` family of functions with a `%mc` format specifier, which is used for dynamically allocating memory for character input, and provides an explicit width greater than 1024. This specific combination can lead to a one-byte heap buffer overflow, potentially allowing an attacker to corrupt memory.", "issued": "2026-04-20T20:55:41Z", "links": "https://access.redhat.com/security/cve/CVE-2026-5450 https://bugzilla.redhat.com/show_bug.cgi?id=2459853 https://www.cve.org/CVERecord?id=CVE-2026-5450 https://nvd.nist.gov/vuln/detail/CVE-2026-5450 https://inbox.sourceware.org/libc-announce/b11f0003-6ec1-4bd6-b9de-9e38a4efeca3@redhat.com/T/#u https://nvd.nist.gov/vuln/detail/CVE-2026-5450#range-21286997 https://sourceware.org/bugzilla/show_bug.cgi?id=CVE-2026-5450 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-5450.json https://access.redhat.com/errata/RHSA-2026:33226", "severity": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "glibc-minimal-langpack", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:2.34-272.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "U6rJ6LmaVlYRjI8Lq/aM/A==": { "id": "U6rJ6LmaVlYRjI8Lq/aM/A==", "updater": "rhel-vex", "name": "CVE-2026-58011", "description": "A flaw was found in GLib. An out-of-bounds read of only 2 bytes can occur in the g_date_time_get_ymd function in the glib/gdatetime.c file when an invalid GDateTime object produced by the g_date_time_add_full function is processed. This flaw can corrupt the date output and potentially cause logic errors that may lead to a denial of service.", "issued": "2026-03-27T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-58011 https://bugzilla.redhat.com/show_bug.cgi?id=2492245 https://www.cve.org/CVERecord?id=CVE-2026-58011 https://nvd.nist.gov/vuln/detail/CVE-2026-58011 https://gitlab.gnome.org/GNOME/glib/-/issues/3917 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-58011.json", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L", "normalized_severity": "Medium", "package": { "id": "", "name": "glib2", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "U8pdHlQlr/x1RsdiZ3YQOg==": { "id": "U8pdHlQlr/x1RsdiZ3YQOg==", "updater": "rhel-vex", "name": "CVE-2026-42258", "description": "A flaw was found in Net::IMAP, a Ruby library that provides Internet Message Access Protocol (IMAP) client functionality. This vulnerability allows a remote attacker to inject arbitrary IMAP commands. This is achieved by passing specially crafted symbol arguments to IMAP commands. Successful exploitation could lead to unauthorized actions on the IMAP server or client, potentially resulting in information disclosure or other integrity impacts.", "issued": "2026-05-09T19:40:49Z", "links": "https://access.redhat.com/security/cve/CVE-2026-42258 https://bugzilla.redhat.com/show_bug.cgi?id=2468498 https://www.cve.org/CVERecord?id=CVE-2026-42258 https://nvd.nist.gov/vuln/detail/CVE-2026-42258 https://github.com/ruby/net-imap/releases/tag/v0.4.24 https://github.com/ruby/net-imap/releases/tag/v0.5.14 https://github.com/ruby/net-imap/releases/tag/v0.6.4 https://github.com/ruby/net-imap/security/advisories/GHSA-75xq-5h9v-w6px https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42258.json https://access.redhat.com/errata/RHSA-2026:33576", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:N", "normalized_severity": "High", "package": { "id": "", "name": "ruby", "version": "", "kind": "binary", "normalized_version": "", "module": "ruby:3.3", "arch": "aarch64|i686|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "0:3.3.10-7.module+el9.8.0+24406+8975e57f", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "UBzPfwycyyJOBETwdSTG/w==": { "id": "UBzPfwycyyJOBETwdSTG/w==", "updater": "rhel-vex", "name": "CVE-2024-47814", "description": "A flaw was found in Vim. When closing a buffer visible in a window, a `BufWinLeave` auto command can trigger a use-after-free if this auto command happens to reopen the same buffer in a new split window. This issue can potentially cause Vim to crash, leading to a denial of service.", "issued": "2024-10-07T21:16:01Z", "links": "https://access.redhat.com/security/cve/CVE-2024-47814 https://bugzilla.redhat.com/show_bug.cgi?id=2317096 https://www.cve.org/CVERecord?id=CVE-2024-47814 https://nvd.nist.gov/vuln/detail/CVE-2024-47814 https://github.com/vim/vim/commit/51b62387be93c65fa56bbabe1c3 https://github.com/vim/vim/security/advisories/GHSA-rj48-v4mq-j4vg https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-47814.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L", "normalized_severity": "Low", "package": { "id": "", "name": "vim", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "UG+yX6nADJgJWegetH+HQg==": { "id": "UG+yX6nADJgJWegetH+HQg==", "updater": "rhel-vex", "name": "CVE-2026-59997", "description": "A flaw was found in OpenSSH. The internal-sftp component within sshd incorrectly processes command-line arguments, recognizing only the first nine. This limitation can prevent the application of intended security configurations for SFTP (SSH File Transfer Protocol) connections, potentially leading to a bypass of security properties.", "issued": "2026-07-08T00:09:04Z", "links": "https://access.redhat.com/security/cve/CVE-2026-59997 https://bugzilla.redhat.com/show_bug.cgi?id=2497929 https://www.cve.org/CVERecord?id=CVE-2026-59997 https://nvd.nist.gov/vuln/detail/CVE-2026-59997 https://marc.info/?l=openssh-unix-dev\u0026m=178333966933090\u0026w=2 https://www.openssh.org/releasenotes.html#10.4p1 https://www.openwall.com/lists/oss-security/2026/07/06/5 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59997.json", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N", "normalized_severity": "Medium", "package": { "id": "", "name": "openssh", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "UIYVfnZoS2Er3ahTNsELrg==": { "id": "UIYVfnZoS2Er3ahTNsELrg==", "updater": "rhel-vex", "name": "CVE-2026-48935", "description": "A flaw was found in Node.js. The Permission API allows a local user to modify file metadata on paths that have been explicitly set as read-only. This can lead to unauthorized changes in file properties, impacting the integrity of the file system.", "issued": "2026-06-26T01:14:36Z", "links": "https://access.redhat.com/security/cve/CVE-2026-48935 https://bugzilla.redhat.com/show_bug.cgi?id=2493329 https://www.cve.org/CVERecord?id=CVE-2026-48935 https://nvd.nist.gov/vuln/detail/CVE-2026-48935 https://nodejs.org/en/blog/vulnerability/june-2026-security-releases https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-48935.json https://access.redhat.com/errata/RHSA-2026:35892", "severity": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", "normalized_severity": "Low", "package": { "id": "", "name": "nodejs-docs", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "noarch", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:22.23.1-1.module+el9.8.0+24457+996af7aa", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "UL/j2Mi69IC+SfjF07J7rg==": { "id": "UL/j2Mi69IC+SfjF07J7rg==", "updater": "rhel-vex", "name": "CVE-2026-56407", "description": "An integer overflow exists in libexpat's doProlog function due to improper handling of entity value lengths. A local attacker could exploit this to execute arbitrary code or access sensitive system data.", "issued": "2026-06-21T15:49:35Z", "links": "https://access.redhat.com/security/cve/CVE-2026-56407 https://bugzilla.redhat.com/show_bug.cgi?id=2491184 https://www.cve.org/CVERecord?id=CVE-2026-56407 https://nvd.nist.gov/vuln/detail/CVE-2026-56407 https://github.com/libexpat/libexpat/pull/1262 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-56407.json", "severity": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L", "normalized_severity": "Medium", "package": { "id": "", "name": "expat", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "UUa5vuAfloHekZLBPCTvFQ==": { "id": "UUa5vuAfloHekZLBPCTvFQ==", "updater": "rhel-vex", "name": "CVE-2026-6238", "description": "A flaw was found in glibc (GNU C Library). The deprecated functions ns_printrrf, ns_printrr, and fp_nquery do not properly validate the length of RDATA (Resource Record Data) in a DNS (Domain Name System) response when processing specific record types like LOC, CERT, TKEY, or TSIG. A remote attacker could craft a malicious DNS response, leading to a target application crashing or reading uninitialized memory. These functions are intended for application debugging and are not part of the standard DNS resolver path.", "issued": "2026-04-28T16:43:08Z", "links": "https://access.redhat.com/security/cve/CVE-2026-6238 https://bugzilla.redhat.com/show_bug.cgi?id=2463539 https://www.cve.org/CVERecord?id=CVE-2026-6238 https://nvd.nist.gov/vuln/detail/CVE-2026-6238 https://inbox.sourceware.org/libc-announce/7a655d55-276f-41fe-b550-feb3ebb2ce91@redhat.com/T/#u https://sourceware.org/bugzilla/show_bug.cgi?id=34069 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6238.json https://access.redhat.com/errata/RHSA-2026:42952", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "glibc-gconv-extra", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:2.34-274.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "UivJsSMDjJ5Fv8zzjiEyGg==": { "id": "UivJsSMDjJ5Fv8zzjiEyGg==", "updater": "rhel-vex", "name": "CVE-2026-5450", "description": "A flaw was found in glibc (GNU C Library). This vulnerability occurs when an application uses the `scanf` family of functions with a `%mc` format specifier, which is used for dynamically allocating memory for character input, and provides an explicit width greater than 1024. This specific combination can lead to a one-byte heap buffer overflow, potentially allowing an attacker to corrupt memory.", "issued": "2026-04-20T20:55:41Z", "links": "https://access.redhat.com/security/cve/CVE-2026-5450 https://bugzilla.redhat.com/show_bug.cgi?id=2459853 https://www.cve.org/CVERecord?id=CVE-2026-5450 https://nvd.nist.gov/vuln/detail/CVE-2026-5450 https://inbox.sourceware.org/libc-announce/b11f0003-6ec1-4bd6-b9de-9e38a4efeca3@redhat.com/T/#u https://nvd.nist.gov/vuln/detail/CVE-2026-5450#range-21286997 https://sourceware.org/bugzilla/show_bug.cgi?id=CVE-2026-5450 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-5450.json https://access.redhat.com/errata/RHSA-2026:33226", "severity": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "glibc-locale-source", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "0:2.34-272.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "Uk5o/hpaP3fKN3OvrwIC+w==": { "id": "Uk5o/hpaP3fKN3OvrwIC+w==", "updater": "rhel-vex", "name": "CVE-2026-56412", "description": "A flaw was found in libexpat. This vulnerability, present in versions before 2.8.2, stems from improper handling of XML CDATA sections, where the library fails to adequately track the depth of handler calls. This can result in a 'use-after-free' error, a type of memory corruption that could allow an attacker to crash the application or potentially gain unauthorized control.", "issued": "2026-06-21T15:58:59Z", "links": "https://access.redhat.com/security/cve/CVE-2026-56412 https://bugzilla.redhat.com/show_bug.cgi?id=2491203 https://www.cve.org/CVERecord?id=CVE-2026-56412 https://nvd.nist.gov/vuln/detail/CVE-2026-56412 https://github.com/libexpat/libexpat/pull/1278 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-56412.json", "severity": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L", "normalized_severity": "Medium", "package": { "id": "", "name": "expat", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "Ur6VVwVyUIHSLLbySiZhfA==": { "id": "Ur6VVwVyUIHSLLbySiZhfA==", "updater": "rhel-vex", "name": "CVE-2026-59996", "description": "A flaw was found in OpenSSH, a widely used tool for secure remote access. When a user attempts to copy files between two different remote systems using the `scp` command, the file might be incorrectly placed in a directory above the intended destination. This unintended file placement could lead to data integrity issues or, in some cases, unauthorized access to sensitive information if files are stored in an exposed location.", "issued": "2026-07-08T00:07:07Z", "links": "https://access.redhat.com/security/cve/CVE-2026-59996 https://bugzilla.redhat.com/show_bug.cgi?id=2497944 https://www.cve.org/CVERecord?id=CVE-2026-59996 https://nvd.nist.gov/vuln/detail/CVE-2026-59996 https://marc.info/?l=openssh-unix-dev\u0026m=178333966933090\u0026w=2 https://www.openssh.org/releasenotes.html#10.4p1 https://www.openwall.com/lists/oss-security/2026/07/06/5 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59996.json https://access.redhat.com/errata/RHSA-2026:47756", "severity": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L", "normalized_severity": "Medium", "package": { "id": "", "name": "openssh", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:9.9p1-9.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "UsEuyAuS2VCokppecP9FXw==": { "id": "UsEuyAuS2VCokppecP9FXw==", "updater": "rhel-vex", "name": "CVE-2026-5435", "description": "A flaw was found in glibc, the GNU C Library. Specifically, deprecated functions responsible for printing TSIG (Transaction Signature) records fail to properly manage memory buffers. This oversight can lead to an out-of-bounds write when processing specially crafted TSIG records. An attacker could exploit this to cause a denial of service or potentially execute arbitrary code.", "issued": "2026-04-28T11:58:54Z", "links": "https://access.redhat.com/security/cve/CVE-2026-5435 https://bugzilla.redhat.com/show_bug.cgi?id=2463465 https://www.cve.org/CVERecord?id=CVE-2026-5435 https://nvd.nist.gov/vuln/detail/CVE-2026-5435 https://inbox.sourceware.org/libc-announce/7a655d55-276f-41fe-b550-feb3ebb2ce91@redhat.com/T/#u https://sourceware.org/bugzilla/show_bug.cgi?id=34033 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-5435.json https://access.redhat.com/errata/RHSA-2026:42952", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "glibc-headers", "version": "", "kind": "binary", "normalized_version": "", "arch": "s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "0:2.34-274.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "UwZunDPz4Z/GxKWN3p1+/Q==": { "id": "UwZunDPz4Z/GxKWN3p1+/Q==", "updater": "rhel-vex", "name": "CVE-2026-15588", "description": "A denial-of-service and resource exhaustion vulnerability exists within the `GDBus` component of GLib. The `gdbusauth` authentication mechanism fails to enforce proper length limitations on data lines read from a client. An unauthenticated local or remote attacker can exploit this lack of input validation by sending excessively long streams of data, causing the application to consume massive amounts of system memory and CPU, potentially leading to a crash or system hang.", "issued": "2026-07-12T10:10:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-15588 https://bugzilla.redhat.com/show_bug.cgi?id=2499675 https://www.cve.org/CVERecord?id=CVE-2026-15588 https://nvd.nist.gov/vuln/detail/CVE-2026-15588 https://gitlab.gnome.org/GNOME/glib/-/issues/3985 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-15588.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "normalized_severity": "Medium", "package": { "id": "", "name": "glib2", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "Uwj2IeJYZ6kg0JLABYAJ/Q==": { "id": "Uwj2IeJYZ6kg0JLABYAJ/Q==", "updater": "rhel-vex", "name": "CVE-2026-33416", "description": "A flaw was found in libpng, a library used for processing PNG (Portable Network Graphics) image files. This vulnerability arises from improper memory management where a heap-allocated buffer is aliased between internal data structures. When specific functions are called, a freed memory region can still be referenced, leading to a use-after-free condition. An attacker could potentially exploit this to achieve arbitrary code execution or cause a denial of service.", "issued": "2026-03-26T16:48:54Z", "links": "https://access.redhat.com/security/cve/CVE-2026-33416 https://bugzilla.redhat.com/show_bug.cgi?id=2451805 https://www.cve.org/CVERecord?id=CVE-2026-33416 https://nvd.nist.gov/vuln/detail/CVE-2026-33416 https://github.com/pnggroup/libpng/commit/23019269764e35ed8458e517f1897bd3c54820eb https://github.com/pnggroup/libpng/commit/7ea9eea884a2328cc7fdcb3c0c00246a50d90667 https://github.com/pnggroup/libpng/commit/a3a21443ed12bfa1ef46fa0d4fb2b74a0fa34a25 https://github.com/pnggroup/libpng/commit/c1b0318b393c90679e6fa5bc1d329fd5d5012ec1 https://github.com/pnggroup/libpng/pull/824 https://github.com/pnggroup/libpng/security/advisories/GHSA-m4pc-p4q3-4c7j https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33416.json https://access.redhat.com/errata/RHSA-2026:18028", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "libpng-devel", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "2:1.6.37-12.el9_7.4", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "V1rPWqhvOrQycOtSN8Ve9g==": { "id": "V1rPWqhvOrQycOtSN8Ve9g==", "updater": "rhel-vex", "name": "CVE-2026-42258", "description": "A flaw was found in Net::IMAP, a Ruby library that provides Internet Message Access Protocol (IMAP) client functionality. This vulnerability allows a remote attacker to inject arbitrary IMAP commands. This is achieved by passing specially crafted symbol arguments to IMAP commands. Successful exploitation could lead to unauthorized actions on the IMAP server or client, potentially resulting in information disclosure or other integrity impacts.", "issued": "2026-05-09T19:40:49Z", "links": "https://access.redhat.com/security/cve/CVE-2026-42258 https://bugzilla.redhat.com/show_bug.cgi?id=2468498 https://www.cve.org/CVERecord?id=CVE-2026-42258 https://nvd.nist.gov/vuln/detail/CVE-2026-42258 https://github.com/ruby/net-imap/releases/tag/v0.4.24 https://github.com/ruby/net-imap/releases/tag/v0.5.14 https://github.com/ruby/net-imap/releases/tag/v0.6.4 https://github.com/ruby/net-imap/security/advisories/GHSA-75xq-5h9v-w6px https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42258.json https://access.redhat.com/errata/RHSA-2026:33576", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:N", "normalized_severity": "High", "package": { "id": "", "name": "ruby-bundled-gems", "version": "", "kind": "binary", "normalized_version": "", "module": "ruby:3.3", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "0:3.3.10-7.module+el9.8.0+24406+8975e57f", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "V2/vsNJeH5BxrzuVis91/A==": { "id": "V2/vsNJeH5BxrzuVis91/A==", "updater": "rhel-vex", "name": "CVE-2025-15282", "description": "Missing newline filtering has been discovered in Python. User-controlled data URLs parsed by urllib.request.DataHandler allow injecting headers through newlines in the data URL mediatype.", "issued": "2026-01-20T21:35:13Z", "links": "https://access.redhat.com/security/cve/CVE-2025-15282 https://bugzilla.redhat.com/show_bug.cgi?id=2431366 https://www.cve.org/CVERecord?id=CVE-2025-15282 https://nvd.nist.gov/vuln/detail/CVE-2025-15282 https://github.com/python/cpython/issues/143925 https://github.com/python/cpython/pull/143926 https://mail.python.org/archives/list/security-announce@python.org/thread/X66HL7SISGJT33J53OHXMZT4DFLMHVKF/ https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-15282.json", "severity": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:N", "normalized_severity": "Medium", "package": { "id": "", "name": "python3.9", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "V8tjixCGBsaAWvQP5Hvn+A==": { "id": "V8tjixCGBsaAWvQP5Hvn+A==", "updater": "rhel-vex", "name": "CVE-2026-5713", "description": "A flaw was found in Python. A malicious Python process could exploit the \"profiling.sampling\" module and \"asyncio introspection capabilities\" to read and write memory addresses within a privileged process. This vulnerability occurs when the privileged process connects to the malicious process via its remote debugging feature, potentially leading to information disclosure and arbitrary code execution. Successful exploitation requires repeated connections, which may cause instability in the connecting process.", "issued": "2026-04-14T15:11:51Z", "links": "https://access.redhat.com/security/cve/CVE-2026-5713 https://bugzilla.redhat.com/show_bug.cgi?id=2458239 https://www.cve.org/CVERecord?id=CVE-2026-5713 https://nvd.nist.gov/vuln/detail/CVE-2026-5713 https://github.com/python/cpython/issues/148178 https://github.com/python/cpython/pull/148187 https://mail.python.org/archives/list/security-announce@python.org/thread/OG4RHARYSNIE22GGOMVMCRH76L5HKPLM/ https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-5713.json", "severity": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N", "normalized_severity": "Medium", "package": { "id": "", "name": "python3.9", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "VHPIyM/Zt8Ma4iUgT7UsMw==": { "id": "VHPIyM/Zt8Ma4iUgT7UsMw==", "updater": "rhel-vex", "name": "CVE-2026-45445", "description": "A flaw was found in OpenSSL. Applications that use the AES-OCB encryption method with a specific one-shot interface (EVP_Cipher()) will have their provided Initialization Vector (IV) silently discarded. This leads to the same internal cryptographic value being used repeatedly, which compromises the confidentiality of encrypted data. Additionally, this issue allows for the universal forgery of authentication tags, undermining the integrity of communications.", "issued": "2026-06-09T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-45445 https://bugzilla.redhat.com/show_bug.cgi?id=2481896 https://www.cve.org/CVERecord?id=CVE-2026-45445 https://nvd.nist.gov/vuln/detail/CVE-2026-45445 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-45445.json https://access.redhat.com/errata/RHSA-2026:25239", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "normalized_severity": "Medium", "package": { "id": "", "name": "openssl", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "1:3.5.5-4.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "VJENPcmZwV+YJWnk88f2ug==": { "id": "VJENPcmZwV+YJWnk88f2ug==", "updater": "rhel-vex", "name": "CVE-2026-9149", "description": "A flaw was found in libsolv. This heap buffer overflow vulnerability occurs when a victim processes a specially crafted `.solv` file containing negative size values in the `repo_add_solv` function. This leads to an undersized memory allocation and a subsequent out-of-bounds write. An attacker could exploit this to cause a denial of service (DoS).", "issued": "2026-05-20T22:19:32Z", "links": "https://access.redhat.com/security/cve/CVE-2026-9149 https://bugzilla.redhat.com/show_bug.cgi?id=2460380 https://www.cve.org/CVERecord?id=CVE-2026-9149 https://nvd.nist.gov/vuln/detail/CVE-2026-9149 https://github.com/openSUSE/libsolv/pull/617 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-9149.json", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "libsolv", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "VL0JOGDvBKQkxcjlKcpvoA==": { "id": "VL0JOGDvBKQkxcjlKcpvoA==", "updater": "rhel-vex", "name": "CVE-2026-13149", "description": "A flaw was found in brace-expansion. An attacker can exploit a vulnerability in the `expand()` function by providing a specially crafted string. This string, containing consecutive non-expanding brace groups, can trigger exponential-time complexity, leading to significant CPU consumption and event-loop blocking. This can result in a Denial of Service (DoS) for the affected system.", "issued": "2026-06-30T08:30:34Z", "links": "https://access.redhat.com/security/cve/CVE-2026-13149 https://bugzilla.redhat.com/show_bug.cgi?id=2494813 https://www.cve.org/CVERecord?id=CVE-2026-13149 https://nvd.nist.gov/vuln/detail/CVE-2026-13149 https://github.com/juliangruber/brace-expansion/commit/c7e33ec13ac1a684c116720843ce24e208611754 https://www.npmjs.com/package/brace-expansion https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-13149.json https://access.redhat.com/errata/RHSA-2026:47058", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "High", "package": { "id": "", "name": "nodejs-docs", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "noarch", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:22.23.1-2.module+el9.8.0+24538+3f176d52", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "VWEbeFnFOHy1IkG21b5a5g==": { "id": "VWEbeFnFOHy1IkG21b5a5g==", "updater": "rhel-vex", "name": "CVE-2023-30571", "description": "A vulnerability was found in libarchive. This issue can cause a race condition in a multi-threaded use of archive_write_disk_header() on posix based systems, which could allow implicit directory creation with permissions 777, without sticky bit, which means any low privileged user on the system can delete and rename files inside those directories.", "issued": "2023-05-29T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2023-30571 https://bugzilla.redhat.com/show_bug.cgi?id=2210921 https://www.cve.org/CVERecord?id=CVE-2023-30571 https://nvd.nist.gov/vuln/detail/CVE-2023-30571 https://access.redhat.com/solutions/7033331 https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-30571.json", "severity": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "libarchive", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "VYGbkY0i6P3tRJd9mM1wNg==": { "id": "VYGbkY0i6P3tRJd9mM1wNg==", "updater": "rhel-vex", "name": "CVE-2026-1489", "description": "A flaw was found in GLib. An integer overflow vulnerability in its Unicode case conversion implementation can lead to memory corruption. By processing specially crafted and extremely large Unicode strings, an attacker could trigger an undersized memory allocation, resulting in out-of-bounds writes. This could cause applications utilizing GLib for string conversion to crash or become unstable.", "issued": "2026-01-27T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-1489 https://bugzilla.redhat.com/show_bug.cgi?id=2433348 https://www.cve.org/CVERecord?id=CVE-2026-1489 https://nvd.nist.gov/vuln/detail/CVE-2026-1489 https://gitlab.gnome.org/GNOME/glib/-/issues/3872 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-1489.json", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L", "normalized_severity": "Medium", "package": { "id": "", "name": "glib2", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "VgtQ3XmdoIWt3qbuW7WZzQ==": { "id": "VgtQ3XmdoIWt3qbuW7WZzQ==", "updater": "rhel-vex", "name": "CVE-2025-55130", "description": "A flaw in Node.js’s Permissions model allows attackers to bypass `--allow-fs-read` and `--allow-fs-write` restrictions using crafted relative symlink paths. By chaining directories and symlinks, a script granted access only to the current directory can escape the allowed path and read sensitive files. This breaks the expected isolation guarantees and enables arbitrary file read/write.", "issued": "2026-01-20T20:41:55Z", "links": "https://access.redhat.com/security/cve/CVE-2025-55130 https://bugzilla.redhat.com/show_bug.cgi?id=2431352 https://www.cve.org/CVERecord?id=CVE-2025-55130 https://nvd.nist.gov/vuln/detail/CVE-2025-55130 https://nodejs.org/en/blog/vulnerability/december-2025-security-releases https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-55130.json https://access.redhat.com/errata/RHSA-2026:2782", "severity": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "normalized_severity": "High", "package": { "id": "", "name": "nodejs", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "aarch64|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:22.22.0-1.module+el9.7.0+23896+b5802de9", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "Vm1exr1mz0tcpwIoZQ3ySQ==": { "id": "Vm1exr1mz0tcpwIoZQ3ySQ==", "updater": "rhel-vex", "name": "CVE-2026-35387", "description": "A flaw was found in OpenSSH. This vulnerability allows the system to use unintended Elliptic Curve Digital Signature Algorithm (ECDSA) algorithms. This occurs because the configuration for accepted public key algorithms is misinterpreted, leading to the use of weaker cryptographic methods than intended. This could potentially allow an attacker to compromise the confidentiality of data.", "issued": "2026-04-02T16:52:53Z", "links": "https://access.redhat.com/security/cve/CVE-2026-35387 https://bugzilla.redhat.com/show_bug.cgi?id=2454494 https://www.cve.org/CVERecord?id=CVE-2026-35387 https://nvd.nist.gov/vuln/detail/CVE-2026-35387 https://marc.info/?l=openssh-unix-dev\u0026m=177513443901484\u0026w=2 https://www.openssh.org/releasenotes.html#10.3p1 https://www.openwall.com/lists/oss-security/2026/04/02/3 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-35387.json https://access.redhat.com/errata/RHSA-2026:13381", "severity": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N", "normalized_severity": "Low", "package": { "id": "", "name": "openssh", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:8.7p1-49.el9_7", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "VpM36keMJ87mG4yZ97wQdw==": { "id": "VpM36keMJ87mG4yZ97wQdw==", "updater": "rhel-vex", "name": "CVE-2026-48933", "description": "A flaw was found in the Node.js WebCrypto implementation. A remote attacker could exploit this vulnerability by providing an input to the `subtle.encrypt()` function that is a multiple of 2 gigabytes (GiB). This could lead to a denial of service (DoS) by crashing the Node.js process.", "issued": "2026-06-26T01:14:36Z", "links": "https://access.redhat.com/security/cve/CVE-2026-48933 https://bugzilla.redhat.com/show_bug.cgi?id=2493331 https://www.cve.org/CVERecord?id=CVE-2026-48933 https://nvd.nist.gov/vuln/detail/CVE-2026-48933 https://nodejs.org/en/blog/vulnerability/june-2026-security-releases https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-48933.json https://access.redhat.com/errata/RHSA-2026:35892", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "High", "package": { "id": "", "name": "nodejs-full-i18n", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:22.23.1-1.module+el9.8.0+24457+996af7aa", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "Vt9MtkEoE3rKa0ninTNTkg==": { "id": "Vt9MtkEoE3rKa0ninTNTkg==", "updater": "rhel-vex", "name": "CVE-2026-4786", "description": "A flaw was found in the Python webbrowser.open() API. If a specially crafted URL containing \"%action\" is processed, an attacker could bypass a previous mitigation for CVE-2026-4519. This bypass allows for command injection into the underlying shell, potentially leading to arbitrary code execution.", "issued": "2026-04-13T21:52:19Z", "links": "https://access.redhat.com/security/cve/CVE-2026-4786 https://bugzilla.redhat.com/show_bug.cgi?id=2458049 https://www.cve.org/CVERecord?id=CVE-2026-4786 https://nvd.nist.gov/vuln/detail/CVE-2026-4786 https://github.com/python/cpython/issues/148169 https://github.com/python/cpython/pull/148170 https://mail.python.org/archives/list/security-announce@python.org/thread/JQDUNJVB4AQNTJECSUKOBDU3XCJIPSE5/ https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-4786.json https://access.redhat.com/errata/RHSA-2026:19216", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L", "normalized_severity": "High", "package": { "id": "", "name": "python3-libs", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:3.9.25-7.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "VuDrFzex6yJBFISXUtfUGQ==": { "id": "VuDrFzex6yJBFISXUtfUGQ==", "updater": "rhel-vex", "name": "CVE-2025-13462", "description": "A flaw was found in the `tarfile` module of cpython. This vulnerability allows a remote attacker to craft a malicious tar archive that, when processed, could be misinterpreted by the `tarfile` module. This misinterpretation occurs because the module incorrectly applies normalization of `AREGTYPE` blocks to `DIRTYPE` during the processing of multi-block members, such as `GNUTYPE_LONGNAME` or `GNUTYPE_LONGLINK`. The consequence is that the `tarfile` module may process the archive differently than intended, potentially leading to unexpected file system changes or data integrity issues.", "issued": "2026-03-12T17:59:26Z", "links": "https://access.redhat.com/security/cve/CVE-2025-13462 https://bugzilla.redhat.com/show_bug.cgi?id=2447082 https://www.cve.org/CVERecord?id=CVE-2025-13462 https://nvd.nist.gov/vuln/detail/CVE-2025-13462 https://github.com/python/cpython/issues/141707 https://github.com/python/cpython/pull/143934 https://mail.python.org/archives/list/security-announce@python.org/thread/EOMI5I66ZMKQ2INNFT6T7IAIKUGPZYIE/ https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-13462.json", "severity": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N", "normalized_severity": "Low", "package": { "id": "", "name": "python3.9", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "VvaHtDrsl/vKtefhsm7IUA==": { "id": "VvaHtDrsl/vKtefhsm7IUA==", "updater": "rhel-vex", "name": "CVE-2025-58767", "description": "A denial of service flaw has been discovered in the rubygem REXML. Certain input can cause excess cpu usage and given sufficiently large input this can affect program performance.", "issued": "2025-09-17T17:45:58Z", "links": "https://access.redhat.com/security/cve/CVE-2025-58767 https://bugzilla.redhat.com/show_bug.cgi?id=2396186 https://www.cve.org/CVERecord?id=CVE-2025-58767 https://nvd.nist.gov/vuln/detail/CVE-2025-58767 https://github.com/ruby/rexml/commit/5859bdeac792687eaf93d8e8f0b7e3c1e2ed5c23 https://github.com/ruby/rexml/security/advisories/GHSA-c2f4-jgmc-q2r5 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-58767.json https://access.redhat.com/errata/RHSA-2025:23063", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "normalized_severity": "Medium", "package": { "id": "", "name": "rubygem-io-console", "version": "", "kind": "binary", "normalized_version": "", "module": "ruby:3.3", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "0:0.7.1-5.module+el9.7.0+23651+15dc1615", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "VwRZMkFc1pqkTIff/cjZtQ==": { "id": "VwRZMkFc1pqkTIff/cjZtQ==", "updater": "rhel-vex", "name": "CVE-2025-6075", "description": "A vulnerability in Python’s os.path.expandvars() function that can cause performance degradation. When processing specially crafted, user-controlled input with nested environment variable patterns, the function exhibits quadratic time complexity, potentially leading to excessive CPU usage and denial of service (DoS) conditions. No code execution or data exposure occurs, so the impact is limited to performance slowdown.", "issued": "2025-10-31T16:41:34Z", "links": "https://access.redhat.com/security/cve/CVE-2025-6075 https://bugzilla.redhat.com/show_bug.cgi?id=2408891 https://www.cve.org/CVERecord?id=CVE-2025-6075 https://nvd.nist.gov/vuln/detail/CVE-2025-6075 https://github.com/python/cpython/issues/136065 https://mail.python.org/archives/list/security-announce@python.org/thread/IUP5QJ6D4KK6ULHOMPC7DPNKRYQTQNLA/ https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-6075.json https://access.redhat.com/errata/RHSA-2025:23342", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "normalized_severity": "Low", "package": { "id": "", "name": "python3-libs", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:3.9.25-2.el9_7", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "W+GZex0uR6OUn0BnVKDRXQ==": { "id": "W+GZex0uR6OUn0BnVKDRXQ==", "updater": "rhel-vex", "name": "CVE-2026-5419", "description": "A flaw was found in gnutls. The PKCS#7 padding check, performed during decryption, was not constant-time. This timing side-channel could allow a remote attacker to potentially leak sensitive information about the padding bytes through observable timing differences. This vulnerability is a form of information disclosure.", "issued": "2026-04-29T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-5419 https://bugzilla.redhat.com/show_bug.cgi?id=2467686 https://www.cve.org/CVERecord?id=CVE-2026-5419 https://nvd.nist.gov/vuln/detail/CVE-2026-5419 https://www.gnutls.org/security-new.html#GNUTLS-SA-2026-04-29-13 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-5419.json https://access.redhat.com/errata/RHSA-2026:20612", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N", "normalized_severity": "Low", "package": { "id": "", "name": "gnutls", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:3.8.10-4.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "W/xTZXt8arFxTmTRnfh2+g==": { "id": "W/xTZXt8arFxTmTRnfh2+g==", "updater": "rhel-vex", "name": "CVE-2026-4046", "description": "A flaw was found in glibc, the GNU C Library. A remote attacker could exploit this vulnerability by providing specially crafted inputs using the IBM1390 or IBM1399 character sets to the `iconv()` function. This could lead to an assertion failure, causing the application to crash and resulting in a Denial of Service (DoS).", "issued": "2026-03-30T17:16:11Z", "links": "https://access.redhat.com/security/cve/CVE-2026-4046 https://bugzilla.redhat.com/show_bug.cgi?id=2453117 https://www.cve.org/CVERecord?id=CVE-2026-4046 https://nvd.nist.gov/vuln/detail/CVE-2026-4046 https://packages.fedoraproject.org/pkgs/glibc/glibc-gconv-extra/ https://sourceware.org/bugzilla/show_bug.cgi?id=33980 https://sourceware.org/git/?p=glibc.git;a=blob_plain;f=advisories/GLIBC-SA-2026-0007;hb=HEAD https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-4046.json https://access.redhat.com/errata/RHSA-2026:20597", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "normalized_severity": "Medium", "package": { "id": "", "name": "glibc-common", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:2.34-270.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "W0TAw6aTfwXOMlJwloDkZA==": { "id": "W0TAw6aTfwXOMlJwloDkZA==", "updater": "rhel-vex", "name": "CVE-2021-4136", "description": "A flaw was found in vim. A possible heap-based buffer overflow could allow an attacker to input a specially crafted file leading to a crash or code execution.", "issued": "2021-12-19T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2021-4136 https://bugzilla.redhat.com/show_bug.cgi?id=2034720 https://www.cve.org/CVERecord?id=CVE-2021-4136 https://nvd.nist.gov/vuln/detail/CVE-2021-4136 https://security.access.redhat.com/data/csaf/v2/vex/2021/cve-2021-4136.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L", "normalized_severity": "Low", "package": { "id": "", "name": "vim", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "W3SNJz91vyAPBvH2kz/itQ==": { "id": "W3SNJz91vyAPBvH2kz/itQ==", "updater": "rhel-vex", "name": "CVE-2026-42258", "description": "A flaw was found in Net::IMAP, a Ruby library that provides Internet Message Access Protocol (IMAP) client functionality. This vulnerability allows a remote attacker to inject arbitrary IMAP commands. This is achieved by passing specially crafted symbol arguments to IMAP commands. Successful exploitation could lead to unauthorized actions on the IMAP server or client, potentially resulting in information disclosure or other integrity impacts.", "issued": "2026-05-09T19:40:49Z", "links": "https://access.redhat.com/security/cve/CVE-2026-42258 https://bugzilla.redhat.com/show_bug.cgi?id=2468498 https://www.cve.org/CVERecord?id=CVE-2026-42258 https://nvd.nist.gov/vuln/detail/CVE-2026-42258 https://github.com/ruby/net-imap/releases/tag/v0.4.24 https://github.com/ruby/net-imap/releases/tag/v0.5.14 https://github.com/ruby/net-imap/releases/tag/v0.6.4 https://github.com/ruby/net-imap/security/advisories/GHSA-75xq-5h9v-w6px https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42258.json https://access.redhat.com/errata/RHSA-2026:33576", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:N", "normalized_severity": "High", "package": { "id": "", "name": "rubygems", "version": "", "kind": "binary", "normalized_version": "", "module": "ruby:3.3", "arch": "noarch", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "0:3.5.22-7.module+el9.8.0+24406+8975e57f", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "W9ATeYhnrC0UlelRIXFecQ==": { "id": "W9ATeYhnrC0UlelRIXFecQ==", "updater": "rhel-vex", "name": "CVE-2026-6238", "description": "A flaw was found in glibc (GNU C Library). The deprecated functions ns_printrrf, ns_printrr, and fp_nquery do not properly validate the length of RDATA (Resource Record Data) in a DNS (Domain Name System) response when processing specific record types like LOC, CERT, TKEY, or TSIG. A remote attacker could craft a malicious DNS response, leading to a target application crashing or reading uninitialized memory. These functions are intended for application debugging and are not part of the standard DNS resolver path.", "issued": "2026-04-28T16:43:08Z", "links": "https://access.redhat.com/security/cve/CVE-2026-6238 https://bugzilla.redhat.com/show_bug.cgi?id=2463539 https://www.cve.org/CVERecord?id=CVE-2026-6238 https://nvd.nist.gov/vuln/detail/CVE-2026-6238 https://inbox.sourceware.org/libc-announce/7a655d55-276f-41fe-b550-feb3ebb2ce91@redhat.com/T/#u https://sourceware.org/bugzilla/show_bug.cgi?id=34069 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6238.json https://access.redhat.com/errata/RHSA-2026:42952", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "glibc-headers", "version": "", "kind": "binary", "normalized_version": "", "arch": "s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "0:2.34-274.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "WHfk9C+FqONS5L1MuNtP+g==": { "id": "WHfk9C+FqONS5L1MuNtP+g==", "updater": "rhel-vex", "name": "CVE-2026-54411", "description": "A flaw was found in Linux-PAM's `pam_userdb` module. This vulnerability, categorized as an Observable Timing Discrepancy (CWE-208), allows a local or network-adjacent attacker to recover plaintext passwords. By repeatedly attempting authentication and measuring response-timing differences during plaintext password comparison, an attacker can deduce the password. This flaw is exploitable when the `pam_userdb` module is configured to store and compare credentials in plaintext, which is not a default setting.", "issued": "2026-06-14T17:21:43Z", "links": "https://access.redhat.com/security/cve/CVE-2026-54411 https://bugzilla.redhat.com/show_bug.cgi?id=2488766 https://www.cve.org/CVERecord?id=CVE-2026-54411 https://nvd.nist.gov/vuln/detail/CVE-2026-54411 https://cwe.mitre.org/data/definitions/208.html https://github.com/linux-pam/linux-pam https://github.com/linux-pam/linux-pam/blob/master/libpam/include/pam_inline.h https://github.com/linux-pam/linux-pam/blob/master/modules/pam_userdb/pam_userdb.c#L327 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-54411.json", "severity": "CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N", "normalized_severity": "Medium", "package": { "id": "", "name": "pam", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "WbtmlW8SfW38NUPRnGwbsA==": { "id": "WbtmlW8SfW38NUPRnGwbsA==", "updater": "rhel-vex", "name": "CVE-2025-58767", "description": "A denial of service flaw has been discovered in the rubygem REXML. Certain input can cause excess cpu usage and given sufficiently large input this can affect program performance.", "issued": "2025-09-17T17:45:58Z", "links": "https://access.redhat.com/security/cve/CVE-2025-58767 https://bugzilla.redhat.com/show_bug.cgi?id=2396186 https://www.cve.org/CVERecord?id=CVE-2025-58767 https://nvd.nist.gov/vuln/detail/CVE-2025-58767 https://github.com/ruby/rexml/commit/5859bdeac792687eaf93d8e8f0b7e3c1e2ed5c23 https://github.com/ruby/rexml/security/advisories/GHSA-c2f4-jgmc-q2r5 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-58767.json https://access.redhat.com/errata/RHSA-2025:23063", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "normalized_severity": "Medium", "package": { "id": "", "name": "ruby-bundled-gems", "version": "", "kind": "binary", "normalized_version": "", "module": "ruby:3.3", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "0:3.3.10-5.module+el9.7.0+23651+15dc1615", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "WhQSrxicq09HlEU8PxUQSQ==": { "id": "WhQSrxicq09HlEU8PxUQSQ==", "updater": "rhel-vex", "name": "CVE-2025-15468", "description": "A flaw was found in openssl. A remote attacker could trigger a NULL pointer dereference by sending an unknown or unsupported cipher ID during the client hello callback in applications using the QUIC (Quick UDP Internet Connections) protocol. This vulnerability, occurring when the SSL_CIPHER_find() function is called in this specific context, leads to an abnormal termination of the running process, causing a Denial of Service (DoS).", "issued": "2026-01-27T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2025-15468 https://bugzilla.redhat.com/show_bug.cgi?id=2430377 https://www.cve.org/CVERecord?id=CVE-2025-15468 https://nvd.nist.gov/vuln/detail/CVE-2025-15468 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-15468.json https://access.redhat.com/errata/RHSA-2026:1473", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "openssl-devel", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:3.5.1-7.el9_7", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "WhY0uvyUG/ImjnbaewZftw==": { "id": "WhY0uvyUG/ImjnbaewZftw==", "updater": "rhel-vex", "name": "CVE-2026-22796", "description": "A flaw was found in OpenSSL. This type confusion vulnerability allows a remote attacker to cause a denial of service (DoS) by providing specially crafted PKCS#7 data to an application that performs signature verification. The vulnerability occurs because the application accesses an ASN1_TYPE union member without proper type validation, leading to an invalid or NULL pointer dereference and a crash.", "issued": "2026-01-27T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-22796 https://bugzilla.redhat.com/show_bug.cgi?id=2430390 https://www.cve.org/CVERecord?id=CVE-2026-22796 https://nvd.nist.gov/vuln/detail/CVE-2026-22796 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-22796.json https://access.redhat.com/errata/RHSA-2026:1473", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "openssl-devel", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:3.5.1-7.el9_7", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "WiJ6DYPst5oap7CBdVnD1A==": { "id": "WiJ6DYPst5oap7CBdVnD1A==", "updater": "rhel-vex", "name": "CVE-2026-27135", "description": "A flaw was found in nghttp2. Due to missing internal state validation, the library continues to process incoming data even after a session has been terminated. A remote attacker could exploit this by sending a specially crafted HTTP/2 frame, leading to an assertion failure and a denial of service (DoS).", "issued": "2026-03-18T17:59:02Z", "links": "https://access.redhat.com/security/cve/CVE-2026-27135 https://bugzilla.redhat.com/show_bug.cgi?id=2448754 https://www.cve.org/CVERecord?id=CVE-2026-27135 https://nvd.nist.gov/vuln/detail/CVE-2026-27135 https://github.com/nghttp2/nghttp2/commit/5c7df8fa815ac1004d9ecb9d1f7595c4d37f46e1 https://github.com/nghttp2/nghttp2/security/advisories/GHSA-6933-cjhr-5qg6 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-27135.json https://access.redhat.com/errata/RHSA-2026:7302", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "High", "package": { "id": "", "name": "nodejs-docs", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "noarch", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:22.22.2-1.module+el9.7.0+24157+8ddb2461", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "WjQCog+GPmCa3VQIGXKhRg==": { "id": "WjQCog+GPmCa3VQIGXKhRg==", "updater": "rhel-vex", "name": "CVE-2026-58010", "description": "A flaw was found in GLib. An off-by-one error can occur in the gvs_tuple_is_normal function in the glib/gvariant-serialiser.c file when doing an alignment padding check because the bounds check uses \u003e instead of \u003e=, causing an out-of-bounds read of only 1 byte. This issue can cause a minor information disclosure of 1 byte and a denial of service when the out-of-bounds read crosses a page boundary.", "issued": "2026-03-26T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-58010 https://bugzilla.redhat.com/show_bug.cgi?id=2492243 https://www.cve.org/CVERecord?id=CVE-2026-58010 https://nvd.nist.gov/vuln/detail/CVE-2026-58010 https://gitlab.gnome.org/GNOME/glib/-/issues/3915 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-58010.json", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L", "normalized_severity": "Medium", "package": { "id": "", "name": "glib2", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "WwAqpmlCgSYKoG1knafv5A==": { "id": "WwAqpmlCgSYKoG1knafv5A==", "updater": "rhel-vex", "name": "CVE-2026-54370", "description": "A time-of-check to time-of-use (TOCTOU) race condition vulnerability was found in `acl`. By replacing a pathname component with a symbolic link between a security check and subsequent file operations, an attacker can redirect file access control list operations. This occurs when privileged processes invoke `getfacl` or `setfacl` over an attacker-controlled path, potentially leading to local privilege escalation.", "issued": "2026-06-29T13:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-54370 https://bugzilla.redhat.com/show_bug.cgi?id=2490279 https://www.cve.org/CVERecord?id=CVE-2026-54370 https://nvd.nist.gov/vuln/detail/CVE-2026-54370 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-54370.json https://access.redhat.com/errata/RHSA-2026:42736", "severity": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N", "normalized_severity": "Medium", "package": { "id": "", "name": "acl", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:2.4.0-1.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "WywM/OB6w5X8T3BuZ5B9Ow==": { "id": "WywM/OB6w5X8T3BuZ5B9Ow==", "updater": "rhel-vex", "name": "CVE-2026-5450", "description": "A flaw was found in glibc (GNU C Library). This vulnerability occurs when an application uses the `scanf` family of functions with a `%mc` format specifier, which is used for dynamically allocating memory for character input, and provides an explicit width greater than 1024. This specific combination can lead to a one-byte heap buffer overflow, potentially allowing an attacker to corrupt memory.", "issued": "2026-04-20T20:55:41Z", "links": "https://access.redhat.com/security/cve/CVE-2026-5450 https://bugzilla.redhat.com/show_bug.cgi?id=2459853 https://www.cve.org/CVERecord?id=CVE-2026-5450 https://nvd.nist.gov/vuln/detail/CVE-2026-5450 https://inbox.sourceware.org/libc-announce/b11f0003-6ec1-4bd6-b9de-9e38a4efeca3@redhat.com/T/#u https://nvd.nist.gov/vuln/detail/CVE-2026-5450#range-21286997 https://sourceware.org/bugzilla/show_bug.cgi?id=CVE-2026-5450 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-5450.json https://access.redhat.com/errata/RHSA-2026:33226", "severity": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "glibc-langpack-en", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:2.34-272.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "X10PEbhI2yv6KYFUPacecg==": { "id": "X10PEbhI2yv6KYFUPacecg==", "updater": "rhel-vex", "name": "CVE-2022-1619", "description": "A flaw was found in vim, which is vulnerable to a heap-buffer-overflow in cmdline_erase_chars of the ex_getln.c function. This flaw allows a specially crafted file to crash software, modify memory or execute code when opened in vim.", "issued": "2022-05-08T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2022-1619 https://bugzilla.redhat.com/show_bug.cgi?id=2083026 https://www.cve.org/CVERecord?id=CVE-2022-1619 https://nvd.nist.gov/vuln/detail/CVE-2022-1619 https://huntr.dev/bounties/b3200483-624e-4c76-a070-e246f62a7450/ https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-1619.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "vim", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "X4Ym25zfqcH7/samBN+yPw==": { "id": "X4Ym25zfqcH7/samBN+yPw==", "updater": "rhel-vex", "name": "CVE-2026-5545", "description": "A flaw was found in libcurl. An application using libcurl that performs an authenticated HTTP(S) request after a Negotiate-authenticated one to the same host may incorrectly reuse the previous connection. This authentication bypass vulnerability allows the second request to be sent over a connection authenticated with different credentials, potentially leading to unauthorized access or information disclosure.", "issued": "2026-04-29T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-5545 https://bugzilla.redhat.com/show_bug.cgi?id=2461204 https://www.cve.org/CVERecord?id=CVE-2026-5545 https://nvd.nist.gov/vuln/detail/CVE-2026-5545 https://curl.se/docs/CVE-2026-5545.html https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-5545.json", "severity": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N", "normalized_severity": "Medium", "package": { "id": "", "name": "curl", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "X7DmUVoCri5i6vdYVBBgXg==": { "id": "X7DmUVoCri5i6vdYVBBgXg==", "updater": "rhel-vex", "name": "CVE-2026-1965", "description": "A flaw was found in curl. When an application uses libcurl to make multiple Negotiate-authenticated HTTP or HTTPS requests to the same server with different credentials, libcurl may incorrectly reuse an existing connection. This logical error can cause a subsequent request to be sent using the authentication of a previous user, leading to an authentication bypass.", "issued": "2026-03-11T10:08:52Z", "links": "https://access.redhat.com/security/cve/CVE-2026-1965 https://bugzilla.redhat.com/show_bug.cgi?id=2446448 https://www.cve.org/CVERecord?id=CVE-2026-1965 https://nvd.nist.gov/vuln/detail/CVE-2026-1965 https://curl.se/docs/CVE-2026-1965.html https://curl.se/docs/CVE-2026-1965.json https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-1965.json", "severity": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N", "normalized_severity": "Medium", "package": { "id": "", "name": "curl", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "X8OJykaOJlN5EhVA7Y11uQ==": { "id": "X8OJykaOJlN5EhVA7Y11uQ==", "updater": "rhel-vex", "name": "CVE-2026-40467", "description": "A flaw was found in gawk. A Use After Free vulnerability exists in the do_getline_redir() routine within the io.c program file. This vulnerability can be triggered by an attacker, potentially leading to a system crash and causing a Denial of Service (DoS).", "issued": "2026-07-13T12:07:52Z", "links": "https://access.redhat.com/security/cve/CVE-2026-40467 https://bugzilla.redhat.com/show_bug.cgi?id=2499658 https://www.cve.org/CVERecord?id=CVE-2026-40467 https://nvd.nist.gov/vuln/detail/CVE-2026-40467 https://cert.pl/en/posts/2026/07/CVE-2026-40467 https://cgit.git.savannah.gnu.org/cgit/gawk.git/commit/?id=a2d18c74109e41bec29a23098eba2e00057286d8 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-40467.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "normalized_severity": "Medium", "package": { "id": "", "name": "gawk", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "XIh88yJoOK2Ff8cGZL7F+g==": { "id": "XIh88yJoOK2Ff8cGZL7F+g==", "updater": "rhel-vex", "name": "CVE-2026-1525", "description": "A flaw was found in undici, a Node.js HTTP/1.1 client. A remote attacker could exploit this vulnerability by sending HTTP/1.1 requests that include duplicate Content-Length headers with different casing (e.g., \"Content-Length\" and \"content-length\"). This can lead to HTTP Request Smuggling, a technique where an attacker sends an ambiguous request that is interpreted differently by a proxy and a backend server. Successful exploitation could result in unauthorized access, cache poisoning, or credential hijacking. It may also cause a Denial of Service (DoS) if strict HTTP parsers reject the malformed requests.", "issued": "2026-03-12T19:56:55Z", "links": "https://access.redhat.com/security/cve/CVE-2026-1525 https://bugzilla.redhat.com/show_bug.cgi?id=2447144 https://www.cve.org/CVERecord?id=CVE-2026-1525 https://nvd.nist.gov/vuln/detail/CVE-2026-1525 https://cna.openjsf.org/security-advisories.html https://cwe.mitre.org/data/definitions/444.html https://github.com/nodejs/undici/security/advisories/GHSA-2mjp-6q6p-2qxm https://hackerone.com/reports/3556037 https://www.rfc-editor.org/rfc/rfc9110.html#section-8.6 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-1525.json https://access.redhat.com/errata/RHSA-2026:7302", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "normalized_severity": "Medium", "package": { "id": "", "name": "nodejs-docs", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "noarch", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:22.22.2-1.module+el9.7.0+24157+8ddb2461", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "XKTHMaJwDxmLjk9FkUhg8Q==": { "id": "XKTHMaJwDxmLjk9FkUhg8Q==", "updater": "rhel-vex", "name": "CVE-2026-28390", "description": "A flaw was found in OpenSSL. A remote attacker could exploit this vulnerability by sending a specially crafted Cryptographic Message Syntax (CMS) EnvelopedData message. During the processing of a KeyTransportRecipientInfo with RSA-OAEP encryption, the system attempts to access an optional parameter field without first verifying its presence. This leads to a NULL pointer dereference, which can cause applications processing the attacker-controlled CMS data to crash, resulting in a Denial of Service (DoS).", "issued": "2026-04-07T22:00:54Z", "links": "https://access.redhat.com/security/cve/CVE-2026-28390 https://bugzilla.redhat.com/show_bug.cgi?id=2456314 https://www.cve.org/CVERecord?id=CVE-2026-28390 https://nvd.nist.gov/vuln/detail/CVE-2026-28390 https://github.com/openssl/openssl/commit/01194a8f1941115cd0383bfa91c736dd3993c8bc https://github.com/openssl/openssl/commit/2e39b7a6993be445fddb9fbce316fa756e0397b6 https://github.com/openssl/openssl/commit/af2a5fecd3e71a29e7568f9c1453dec5cebbaff4 https://github.com/openssl/openssl/commit/ea7b4ea4f9f853521ba34830cbcadc970d2e0788 https://github.com/openssl/openssl/commit/fd2f1a6cf53b9ceeca723a001aa4b825d7c7ee75 https://openssl-library.org/news/secadv/20260407.txt https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-28390.json https://access.redhat.com/errata/RHSA-2026:22312", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "openssl-devel", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:3.5.5-3.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "XKuZX/r+YD1eQ8+4f77NQQ==": { "id": "XKuZX/r+YD1eQ8+4f77NQQ==", "updater": "rhel-vex", "name": "CVE-2025-9086", "description": "An out of bounds read flaw has been discovered in the curl project. Under specific conditions the path comparison logic makes curl read outside a heap buffer boundary. This bug either causes a crash or it potentially makes the comparison come to the wrong conclusion and lets the clear-text site override the contents of the secure cookie, contrary to expectations and depending on the memory contents immediately following the single-byte allocation that holds the path.", "issued": "2025-09-12T05:10:03Z", "links": "https://access.redhat.com/security/cve/CVE-2025-9086 https://bugzilla.redhat.com/show_bug.cgi?id=2394750 https://www.cve.org/CVERecord?id=CVE-2025-9086 https://nvd.nist.gov/vuln/detail/CVE-2025-9086 https://curl.se/docs/CVE-2025-9086.html https://curl.se/docs/CVE-2025-9086.json https://github.com/curl/curl/commit/c6ae07c6a541e0e96d0040afb6 https://hackerone.com/reports/3294999 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-9086.json https://access.redhat.com/errata/RHSA-2026:1350", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "normalized_severity": "Medium", "package": { "id": "", "name": "libcurl-devel", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "0:7.76.1-35.el9_7.3", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "XL+Z1BeLmN8Pi7RZ6D6z/w==": { "id": "XL+Z1BeLmN8Pi7RZ6D6z/w==", "updater": "rhel-vex", "name": "CVE-2025-15366", "description": "A flaw was found in the imaplib module in the Python standard library. The imaplib module does not reject control characters, such as newlines, in user-controlled input passed to IMAP commands. This issue allows an attacker to inject additional commands to be executed in the IMAP server.", "issued": "2026-01-20T21:40:24Z", "links": "https://access.redhat.com/security/cve/CVE-2025-15366 https://bugzilla.redhat.com/show_bug.cgi?id=2431368 https://www.cve.org/CVERecord?id=CVE-2025-15366 https://nvd.nist.gov/vuln/detail/CVE-2025-15366 https://github.com/python/cpython/issues/143921 https://github.com/python/cpython/pull/143922 https://mail.python.org/archives/list/security-announce@python.org/thread/DD7C7JZJYTBXMDOWKCEIEBJLBRU64OMR/ https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-15366.json https://access.redhat.com/errata/RHSA-2026:4168", "severity": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N", "normalized_severity": "Medium", "package": { "id": "", "name": "python3", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:3.9.25-3.el9_7.1", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "XL1Nv8y45q8aiA92A99YyA==": { "id": "XL1Nv8y45q8aiA92A99YyA==", "updater": "rhel-vex", "name": "CVE-2023-0512", "description": "A divide-by-zero flaw was found in Vim's adjust_skipcol() function in the move.c file. This flaw allows an attacker to trick a user into opening a specially crafted file, triggering a floating point exception error and causing an application to crash, eventually leading to a denial of service.", "issued": "2023-01-30T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2023-0512 https://bugzilla.redhat.com/show_bug.cgi?id=2165798 https://www.cve.org/CVERecord?id=CVE-2023-0512 https://nvd.nist.gov/vuln/detail/CVE-2023-0512 https://huntr.dev/bounties/de83736a-1936-4872-830b-f1e9b0ad2a74 https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-0512.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "vim", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "XPUXyp+BOEJyEGOgXafi8Q==": { "id": "XPUXyp+BOEJyEGOgXafi8Q==", "updater": "rhel-vex", "name": "CVE-2022-27943", "description": "A flaw was found in binutils, where GNU GCC is vulnerable to a denial of service caused by a stack consumption in the demangle_const() function in libiberty/rust-demangle.c. The vulnerability exists due to the application not properly controlling the consumption of internal resources. By persuading a victim to open a specially-crafted file, an attacker could cause a denial of service.", "issued": "2022-03-26T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2022-27943 https://bugzilla.redhat.com/show_bug.cgi?id=2071728 https://www.cve.org/CVERecord?id=CVE-2022-27943 https://nvd.nist.gov/vuln/detail/CVE-2022-27943 https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-27943.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "gcc", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "XPfYdQhyLnN89+qpSA6LWg==": { "id": "XPfYdQhyLnN89+qpSA6LWg==", "updater": "rhel-vex", "name": "CVE-2026-45447", "description": "A flaw was found in OpenSSL. When processing a specially crafted PKCS#7 or S/MIME (Secure/Multipurpose Internet Mail Extensions) signed message, a heap use-after-free vulnerability in the PKCS7_verify() function can be triggered. This occurs if the SignedData digestAlgorithms field is present as an empty ASN.1 SET, leading to incorrect memory deallocation. A remote attacker could exploit this to cause application crashes, memory corruption, or potentially achieve remote code execution.", "issued": "2026-06-09T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-45447 https://bugzilla.redhat.com/show_bug.cgi?id=2481898 https://www.cve.org/CVERecord?id=CVE-2026-45447 https://nvd.nist.gov/vuln/detail/CVE-2026-45447 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-45447.json https://access.redhat.com/errata/RHSA-2026:25239", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "normalized_severity": "High", "package": { "id": "", "name": "openssl-libs", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "1:3.5.5-4.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "XQDeROSRzMSiFTbbLCST/A==": { "id": "XQDeROSRzMSiFTbbLCST/A==", "updater": "rhel-vex", "name": "CVE-2026-59857", "description": "An out-of-bounds write vulnerability in Vim's spell_soundfold_sal() function allows an attacker to corrupt memory and crash the editor (Denial of Service) by supplying a specially crafted word during spell sound-folding.", "issued": "2026-07-09T22:34:54Z", "links": "https://access.redhat.com/security/cve/CVE-2026-59857 https://bugzilla.redhat.com/show_bug.cgi?id=2498863 https://www.cve.org/CVERecord?id=CVE-2026-59857 https://nvd.nist.gov/vuln/detail/CVE-2026-59857 https://github.com/vim/vim/commit/d22ff1c955ff87e8273210eae125aab0e85b6c30 https://github.com/vim/vim/security/advisories/GHSA-m3hf-xcm3-xhm2 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59857.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "vim", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "XW4X9/W6MfETfE/VICA4Jw==": { "id": "XW4X9/W6MfETfE/VICA4Jw==", "updater": "rhel-vex", "name": "CVE-2025-1376", "description": "A flaw was found in GNU elfutils. This vulnerability allows denial of service via manipulation of the function elf_strptr in /libelf/elf_strptr.c.", "issued": "2025-02-17T04:31:08Z", "links": "https://access.redhat.com/security/cve/CVE-2025-1376 https://bugzilla.redhat.com/show_bug.cgi?id=2346061 https://www.cve.org/CVERecord?id=CVE-2025-1376 https://nvd.nist.gov/vuln/detail/CVE-2025-1376 https://sourceware.org/bugzilla/attachment.cgi?id=15940 https://sourceware.org/bugzilla/show_bug.cgi?id=32672 https://sourceware.org/bugzilla/show_bug.cgi?id=32672#c3 https://vuldb.com/?ctiid.295984 https://vuldb.com/?id.295984 https://vuldb.com/?submit.497538 https://www.gnu.org/ https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-1376.json", "severity": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L", "normalized_severity": "Low", "package": { "id": "", "name": "elfutils", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "XkiVaSOj/tcz5wNKnglN4w==": { "id": "XkiVaSOj/tcz5wNKnglN4w==", "updater": "rhel-vex", "name": "CVE-2026-33412", "description": "A flaw was found in Vim. By including a newline character in a pattern passed to Vim's glob() function, an attacker may be able to execute arbitrary shell commands. This command injection vulnerability allows for arbitrary code execution, depending on the user's shell settings.", "issued": "2026-03-24T19:43:07Z", "links": "https://access.redhat.com/security/cve/CVE-2026-33412 https://bugzilla.redhat.com/show_bug.cgi?id=2450907 https://www.cve.org/CVERecord?id=CVE-2026-33412 https://nvd.nist.gov/vuln/detail/CVE-2026-33412 https://github.com/vim/vim/commit/645ed6597d1ea896c712cd7ddbb6edee79577e9a https://github.com/vim/vim/releases/tag/v9.2.0202 https://github.com/vim/vim/security/advisories/GHSA-w5jw-f54h-x46c https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33412.json https://access.redhat.com/errata/RHSA-2026:8259", "severity": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H", "normalized_severity": "High", "package": { "id": "", "name": "vim-minimal", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "2:8.2.2637-23.el9_7.2", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "Xms/F5NRiyBcCNuPxw8aoA==": { "id": "Xms/F5NRiyBcCNuPxw8aoA==", "updater": "rhel-vex", "name": "CVE-2025-28164", "description": "A flaw was found in libpng. This buffer overflow vulnerability allows a local attacker to cause a denial of service (DoS) by exploiting the `png_create_read_struct()` function. This can lead to the affected system becoming unresponsive or crashing.", "issued": "2026-01-27T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2025-28164 https://bugzilla.redhat.com/show_bug.cgi?id=2433398 https://www.cve.org/CVERecord?id=CVE-2025-28164 https://nvd.nist.gov/vuln/detail/CVE-2025-28164 https://gist.github.com/kittener/506516f8c22178005b4379c8b2a7de20 https://github.com/pnggroup/libpng/issues/655 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-28164.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "libpng", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "Xnj4Kpl+tPifTh/+xOnglw==": { "id": "Xnj4Kpl+tPifTh/+xOnglw==", "updater": "rhel-vex", "name": "CVE-2025-11187", "description": "A flaw was found in OpenSSL. When an application processes a maliciously crafted PKCS#12 file, an attacker can exploit a stack buffer overflow or a NULL pointer dereference. This can lead to a denial of service (DoS) by crashing the application, and in some cases, may enable arbitrary code execution. The vulnerability arises from the lack of validation for PBKDF2 salt and keylength parameters within the PKCS#12 file.", "issued": "2026-01-27T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2025-11187 https://bugzilla.redhat.com/show_bug.cgi?id=2430375 https://www.cve.org/CVERecord?id=CVE-2025-11187 https://nvd.nist.gov/vuln/detail/CVE-2025-11187 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-11187.json https://access.redhat.com/errata/RHSA-2026:1473", "severity": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "openssl", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "1:3.5.1-7.el9_7", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "XuMP4XKeqFlYH9jgvFKXXw==": { "id": "XuMP4XKeqFlYH9jgvFKXXw==", "updater": "rhel-vex", "name": "CVE-2023-2609", "description": "NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.1531.", "issued": "2023-05-09T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2023-2609 https://bugzilla.redhat.com/show_bug.cgi?id=2209050 https://www.cve.org/CVERecord?id=CVE-2023-2609 https://nvd.nist.gov/vuln/detail/CVE-2023-2609 https://huntr.dev/bounties/1679be5a-565f-4a44-a430-836412a0b622 https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-2609.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "vim", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "Xvp9bEwIvwUrD61DySkWgA==": { "id": "Xvp9bEwIvwUrD61DySkWgA==", "updater": "rhel-vex", "name": "CVE-2026-42246", "description": "A flaw was found in the Ruby net-imap library. When upgrading a cleartext IMAP connection to TLS using the Net::IMAP#starttls method, the library improperly handles certain responses received during STARTTLS negotiation. A man-in-the-middle (MITM) attacker can inject a predicted tagged OK response before the client completes the STARTTLS command, causing the operation to appear successful without establishing a TLS session. As a result, the connection may continue to transmit sensitive information in cleartext and enable modification of data exchanged over the affected connection, while the application incorrectly believes that encryption has been enabled.", "issued": "2026-05-09T19:33:17Z", "links": "https://access.redhat.com/security/cve/CVE-2026-42246 https://bugzilla.redhat.com/show_bug.cgi?id=2468499 https://www.cve.org/CVERecord?id=CVE-2026-42246 https://nvd.nist.gov/vuln/detail/CVE-2026-42246 https://github.com/ruby/net-imap/commit/0ede4c40b1523dfeaf95777b2678e54cc0fd9618 https://github.com/ruby/net-imap/commit/24a4e770b43230286a05aa2a9746cdbb3eb8485e https://github.com/ruby/net-imap/commit/97e2488fb5401a1783bddd959dde007d9fbce42c https://github.com/ruby/net-imap/commit/f79d35bf5833f186e81044c57c843eda30c873da https://github.com/ruby/net-imap/releases/tag/v0.3.10 https://github.com/ruby/net-imap/releases/tag/v0.4.24 https://github.com/ruby/net-imap/releases/tag/v0.5.14 https://github.com/ruby/net-imap/security/advisories/GHSA-vcgp-9326-pqcp https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42246.json https://access.redhat.com/errata/RHSA-2026:33576", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "normalized_severity": "High", "package": { "id": "", "name": "rubygem-io-console", "version": "", "kind": "binary", "normalized_version": "", "module": "ruby:3.3", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "0:0.7.1-7.module+el9.8.0+24406+8975e57f", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "XwLJYEytIMCdc6/A4MTJHg==": { "id": "XwLJYEytIMCdc6/A4MTJHg==", "updater": "rhel-vex", "name": "CVE-2026-5958", "description": "A Time-of-Check Time-of-Use (TOCTOU) race condition was found in GNU sed. When the -i (in-place) and --follow-symlinks options are used together, sed resolves the symlink but reopens the path for writing. An attacker with write access to the directory containing the symlink can swap it between the check and the open operations. If a privileged user executes sed in this manner on a path influenced by the attacker, it can lead to arbitrary file overwrites and potential privilege escalation.", "issued": "2026-04-19T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-5958 https://bugzilla.redhat.com/show_bug.cgi?id=2458960 https://www.cve.org/CVERecord?id=CVE-2026-5958 https://nvd.nist.gov/vuln/detail/CVE-2026-5958 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-5958.json", "severity": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "sed", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "Y/6FiFNJ+h2jXNTlPOzrnQ==": { "id": "Y/6FiFNJ+h2jXNTlPOzrnQ==", "updater": "rhel-vex", "name": "CVE-2023-0051", "description": "A heap-based buffer overflow was found in Vim in the msg_puts_printf function in the message.c file. The issue occurs because of an invalid memory access when calculating the length of a string when a specially crafted input is processed. This flaw allows an attacker who can trick a user into opening a specially crafted file into triggering the heap-based buffer overflow, causing the application to crash.", "issued": "2023-01-03T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2023-0051 https://bugzilla.redhat.com/show_bug.cgi?id=2161348 https://www.cve.org/CVERecord?id=CVE-2023-0051 https://nvd.nist.gov/vuln/detail/CVE-2023-0051 https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-0051.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "vim", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "Y1YZsYV7ls1vsluhREpXlw==": { "id": "Y1YZsYV7ls1vsluhREpXlw==", "updater": "rhel-vex", "name": "CVE-2026-48618", "description": "A flaw was found in Node.js. This flaw involves a mismatch in how Node.js handles TLS (Transport Layer Security) hostnames and unicode dot separators during authentication. This mismatch can lead to a wildcard-depth authentication bypass. An attacker could exploit this to bypass intended security boundaries, potentially leading to unauthorized access and confidentiality impact.", "issued": "2026-06-26T01:14:36Z", "links": "https://access.redhat.com/security/cve/CVE-2026-48618 https://bugzilla.redhat.com/show_bug.cgi?id=2493337 https://www.cve.org/CVERecord?id=CVE-2026-48618 https://nvd.nist.gov/vuln/detail/CVE-2026-48618 https://nodejs.org/en/blog/vulnerability/june-2026-security-releases https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-48618.json https://access.redhat.com/errata/RHSA-2026:35892", "severity": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N", "normalized_severity": "High", "package": { "id": "", "name": "nodejs", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "aarch64|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:22.23.1-1.module+el9.8.0+24457+996af7aa", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "Y3fno6fRSl46BTZQlReNKg==": { "id": "Y3fno6fRSl46BTZQlReNKg==", "updater": "rhel-vex", "name": "CVE-2026-34181", "description": "A flaw was found in OpenSSL. This vulnerability allows a remote attacker to forge PKCS#12 (Public-Key Cryptography Standards #12) files that use Password-Based Message Authentication Code 1 (PBMAC1) with short HMAC (Hash-based Message Authentication Code) keys. This can lead to a service accepting attacker-controlled certificates and private keys with a 1 in 256 probability, potentially enabling impersonation.", "issued": "2026-06-09T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-34181 https://bugzilla.redhat.com/show_bug.cgi?id=2481882 https://www.cve.org/CVERecord?id=CVE-2026-34181 https://nvd.nist.gov/vuln/detail/CVE-2026-34181 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-34181.json https://access.redhat.com/errata/RHSA-2026:25239", "severity": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N", "normalized_severity": "Low", "package": { "id": "", "name": "openssl", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "1:3.5.5-4.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "Y6TEBwH0+CoZ50j5sQV23w==": { "id": "Y6TEBwH0+CoZ50j5sQV23w==", "updater": "rhel-vex", "name": "CVE-2021-3968", "description": "A flaw was found in vim. A possible heap use-after-free vulnerability could allow an attacker to input a specially crafted file leading to a crash or code execution. The highest threat from this vulnerability is to system availability.", "issued": "2021-11-19T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2021-3968 https://bugzilla.redhat.com/show_bug.cgi?id=2025056 https://www.cve.org/CVERecord?id=CVE-2021-3968 https://nvd.nist.gov/vuln/detail/CVE-2021-3968 https://security.access.redhat.com/data/csaf/v2/vex/2021/cve-2021-3968.json", "severity": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L", "normalized_severity": "Low", "package": { "id": "", "name": "vim", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "Y7j+Hhv6OMvu2cmEQkev4Q==": { "id": "Y7j+Hhv6OMvu2cmEQkev4Q==", "updater": "rhel-vex", "name": "CVE-2024-5642", "description": "A vulnerability was found in Python/CPython that does not disallow configuring an empty list (\"[]\") for SSLContext.set_npn_protocols(), which is an invalid value for the underlying OpenSSL API. This issue results in a buffer over-read when NPN is used. See CVE -2024-5535 for OpenSSL for more information.", "issued": "2024-06-27T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2024-5642 https://bugzilla.redhat.com/show_bug.cgi?id=2294682 https://www.cve.org/CVERecord?id=CVE-2024-5642 https://nvd.nist.gov/vuln/detail/CVE-2024-5642 https://mail.python.org/archives/list/security-announce@python.org/thread/PLP2JI3PJY33YG6P5BZYSSNU66HASXBQ/ https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-5642.json https://access.redhat.com/errata/RHSA-2025:23342", "severity": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L", "normalized_severity": "Low", "package": { "id": "", "name": "python3", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:3.9.25-2.el9_7", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "YKgthSAonF3epY42eqsMRw==": { "id": "YKgthSAonF3epY42eqsMRw==", "updater": "rhel-vex", "name": "CVE-2026-3497", "description": "A flaw was found in the OpenSSH GSSAPI (Generic Security Service Application Program Interface) delta patches, as included in various Linux distributions. A remote attacker could exploit this by sending an unexpected GSSAPI message type during the key exchange process. This occurs because the `sshpkt_disconnect()` function, when called on an error, does not properly terminate the process, leading to the continued execution of the program with uninitialized connection variables. Accessing these uninitialized variables can lead to undefined behavior, potentially resulting in information disclosure or a denial of service.", "issued": "2026-03-12T18:27:44Z", "links": "https://access.redhat.com/security/cve/CVE-2026-3497 https://bugzilla.redhat.com/show_bug.cgi?id=2447085 https://www.cve.org/CVERecord?id=CVE-2026-3497 https://nvd.nist.gov/vuln/detail/CVE-2026-3497 https://ubuntu.com/security/CVE-2026-3497 https://www.openwall.com/lists/oss-security/2026/03/12/3 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-3497.json https://access.redhat.com/errata/RHSA-2026:6462", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H", "normalized_severity": "High", "package": { "id": "", "name": "openssh-clients", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:8.7p1-48.el9_7", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "YQGeiQ1baJrwVuNrCjd79A==": { "id": "YQGeiQ1baJrwVuNrCjd79A==", "updater": "rhel-vex", "name": "CVE-2025-55132", "description": "A file access flaw has been discovered in NodeJS. A file's access and modification timestamps to be changed via `futimes()` even when the process has only read permissions. Unlike `utimes()`, `futimes()` does not apply the expected write-permission checks, which means file metadata can be modified in read-only directories. This behavior could be used to alter timestamps in ways that obscure activity, reducing the reliability of logs.", "issued": "2026-01-20T20:41:55Z", "links": "https://access.redhat.com/security/cve/CVE-2025-55132 https://bugzilla.redhat.com/show_bug.cgi?id=2431338 https://www.cve.org/CVERecord?id=CVE-2025-55132 https://nvd.nist.gov/vuln/detail/CVE-2025-55132 https://nodejs.org/en/blog/vulnerability/december-2025-security-releases https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-55132.json https://access.redhat.com/errata/RHSA-2026:2782", "severity": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "normalized_severity": "Medium", "package": { "id": "", "name": "nodejs", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "aarch64|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:22.22.0-1.module+el9.7.0+23896+b5802de9", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "YR9IlxlHBBSlj3ZLdc6/eQ==": { "id": "YR9IlxlHBBSlj3ZLdc6/eQ==", "updater": "rhel-vex", "name": "CVE-2026-42246", "description": "A flaw was found in the Ruby net-imap library. When upgrading a cleartext IMAP connection to TLS using the Net::IMAP#starttls method, the library improperly handles certain responses received during STARTTLS negotiation. A man-in-the-middle (MITM) attacker can inject a predicted tagged OK response before the client completes the STARTTLS command, causing the operation to appear successful without establishing a TLS session. As a result, the connection may continue to transmit sensitive information in cleartext and enable modification of data exchanged over the affected connection, while the application incorrectly believes that encryption has been enabled.", "issued": "2026-05-09T19:33:17Z", "links": "https://access.redhat.com/security/cve/CVE-2026-42246 https://bugzilla.redhat.com/show_bug.cgi?id=2468499 https://www.cve.org/CVERecord?id=CVE-2026-42246 https://nvd.nist.gov/vuln/detail/CVE-2026-42246 https://github.com/ruby/net-imap/commit/0ede4c40b1523dfeaf95777b2678e54cc0fd9618 https://github.com/ruby/net-imap/commit/24a4e770b43230286a05aa2a9746cdbb3eb8485e https://github.com/ruby/net-imap/commit/97e2488fb5401a1783bddd959dde007d9fbce42c https://github.com/ruby/net-imap/commit/f79d35bf5833f186e81044c57c843eda30c873da https://github.com/ruby/net-imap/releases/tag/v0.3.10 https://github.com/ruby/net-imap/releases/tag/v0.4.24 https://github.com/ruby/net-imap/releases/tag/v0.5.14 https://github.com/ruby/net-imap/security/advisories/GHSA-vcgp-9326-pqcp https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42246.json https://access.redhat.com/errata/RHSA-2026:33576", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "normalized_severity": "High", "package": { "id": "", "name": "ruby-libs", "version": "", "kind": "binary", "normalized_version": "", "module": "ruby:3.3", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "0:3.3.10-7.module+el9.8.0+24406+8975e57f", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "YSP3jWIJP4TspvpKDx/wvA==": { "id": "YSP3jWIJP4TspvpKDx/wvA==", "updater": "rhel-vex", "name": "CVE-2026-58016", "description": "A flaw was found in GLib. A state confusion issue exists in g_dbus_node_info_new_for_xml() in the gio/gdbusintrospection.c file when processing malformed D-Bus introspection XML, specifically with a `node` element nested within other elements like `method`, `signal`, `property` or `arg`. This issue can cause an unsigned integer overflow and lead to an out-of-bounds read, resulting in a denial of service.", "issued": "2026-04-08T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-58016 https://bugzilla.redhat.com/show_bug.cgi?id=2492257 https://www.cve.org/CVERecord?id=CVE-2026-58016 https://nvd.nist.gov/vuln/detail/CVE-2026-58016 https://gitlab.gnome.org/GNOME/glib/-/issues/3932 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-58016.json https://access.redhat.com/errata/RHSA-2026:42089", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "High", "package": { "id": "", "name": "glib2", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:2.68.4-19.el9_8.2", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "YUwZZ9Cg1FloxBZV60vOCg==": { "id": "YUwZZ9Cg1FloxBZV60vOCg==", "updater": "rhel-vex", "name": "CVE-2022-2522", "description": "A heap buffer overflow vulnerability was found in vim's ins_compl_infercase_gettext() function of the src/insexpand.c file. This flaw occurs when vim tries to access uninitialized memory when completing a long line. This flaw allows an attacker to trick a user into opening a specially crafted file, triggering a heap-based buffer overflow that causes an application to crash, possibly executing code and corrupting memory.", "issued": "2022-07-25T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2022-2522 https://bugzilla.redhat.com/show_bug.cgi?id=2112299 https://www.cve.org/CVERecord?id=CVE-2022-2522 https://nvd.nist.gov/vuln/detail/CVE-2022-2522 https://huntr.dev/bounties/3a2d83af-9542-4d93-8784-98b115135a22 https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-2522.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "vim", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "YX2rGofSXHBcNhTOGpNkAA==": { "id": "YX2rGofSXHBcNhTOGpNkAA==", "updater": "rhel-vex", "name": "CVE-2026-4424", "description": "A flaw was found in libarchive. This heap out-of-bounds read vulnerability exists in the RAR archive processing logic due to improper validation of the LZSS sliding window size after transitions between compression methods. A remote attacker can exploit this by providing a specially crafted RAR archive, leading to the disclosure of sensitive heap memory information without requiring authentication or user interaction.", "issued": "2026-03-19T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-4424 https://bugzilla.redhat.com/show_bug.cgi?id=2449006 https://www.cve.org/CVERecord?id=CVE-2026-4424 https://nvd.nist.gov/vuln/detail/CVE-2026-4424 https://github.com/libarchive/libarchive/pull/2898 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-4424.json https://access.redhat.com/errata/RHSA-2026:8510", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "normalized_severity": "High", "package": { "id": "", "name": "libarchive", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:3.5.3-9.el9_7", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "YXlS56JkLiuXwjbDNwkvdw==": { "id": "YXlS56JkLiuXwjbDNwkvdw==", "updater": "rhel-vex", "name": "CVE-2024-5642", "description": "A vulnerability was found in Python/CPython that does not disallow configuring an empty list (\"[]\") for SSLContext.set_npn_protocols(), which is an invalid value for the underlying OpenSSL API. This issue results in a buffer over-read when NPN is used. See CVE -2024-5535 for OpenSSL for more information.", "issued": "2024-06-27T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2024-5642 https://bugzilla.redhat.com/show_bug.cgi?id=2294682 https://www.cve.org/CVERecord?id=CVE-2024-5642 https://nvd.nist.gov/vuln/detail/CVE-2024-5642 https://mail.python.org/archives/list/security-announce@python.org/thread/PLP2JI3PJY33YG6P5BZYSSNU66HASXBQ/ https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-5642.json https://access.redhat.com/errata/RHSA-2025:23342", "severity": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L", "normalized_severity": "Low", "package": { "id": "", "name": "python3-libs", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:3.9.25-2.el9_7", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "YdpqbsRbo4xx71CiWUF39Q==": { "id": "YdpqbsRbo4xx71CiWUF39Q==", "updater": "rhel-vex", "name": "CVE-2026-21441", "description": "urllib3 is an HTTP client library for Python. urllib3's streaming API is designed for the efficient handling of large HTTP responses by reading the content in chunks, rather than loading the entire response body into memory at once. urllib3 can perform decoding or decompression based on the HTTP `Content-Encoding` header (e.g., `gzip`, `deflate`, `br`, or `zstd`). When using the streaming API, the library decompresses only the necessary bytes, enabling partial content consumption. Starting in version 1.22 and prior to version 2.6.3, for HTTP redirect responses, the library would read the entire response body to drain the connection and decompress the content unnecessarily. This decompression occurred even before any read methods were called, and configured read limits did not restrict the amount of decompressed data. As a result, there was no safeguard against decompression bombs. A malicious server could exploit this to trigger excessive resource consumption on the client. Applications and libraries are affected when they stream content from untrusted sources by setting `preload_content=False` when they do not disable redirects. Users should upgrade to at least urllib3 v2.6.3, in which the library does not decode content of redirect responses when `preload_content=False`. If upgrading is not immediately possible, disable redirects by setting `redirect=False` for requests to untrusted source.", "issued": "2026-01-07T22:09:01Z", "links": "https://access.redhat.com/security/cve/CVE-2026-21441 https://bugzilla.redhat.com/show_bug.cgi?id=2427726 https://www.cve.org/CVERecord?id=CVE-2026-21441 https://nvd.nist.gov/vuln/detail/CVE-2026-21441 https://github.com/urllib3/urllib3/commit/8864ac407bba8607950025e0979c4c69bc7abc7b https://github.com/urllib3/urllib3/security/advisories/GHSA-38jv-5279-wg99 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-21441.json https://access.redhat.com/errata/RHSA-2026:1087", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "High", "package": { "id": "", "name": "python3-urllib3", "version": "", "kind": "binary", "normalized_version": "", "arch": "noarch", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:1.26.5-6.el9_7.1", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "YfN4DMNLaz3lIsbsDdrsLA==": { "id": "YfN4DMNLaz3lIsbsDdrsLA==", "updater": "rhel-vex", "name": "CVE-2026-5450", "description": "A flaw was found in glibc (GNU C Library). This vulnerability occurs when an application uses the `scanf` family of functions with a `%mc` format specifier, which is used for dynamically allocating memory for character input, and provides an explicit width greater than 1024. This specific combination can lead to a one-byte heap buffer overflow, potentially allowing an attacker to corrupt memory.", "issued": "2026-04-20T20:55:41Z", "links": "https://access.redhat.com/security/cve/CVE-2026-5450 https://bugzilla.redhat.com/show_bug.cgi?id=2459853 https://www.cve.org/CVERecord?id=CVE-2026-5450 https://nvd.nist.gov/vuln/detail/CVE-2026-5450 https://inbox.sourceware.org/libc-announce/b11f0003-6ec1-4bd6-b9de-9e38a4efeca3@redhat.com/T/#u https://nvd.nist.gov/vuln/detail/CVE-2026-5450#range-21286997 https://sourceware.org/bugzilla/show_bug.cgi?id=CVE-2026-5450 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-5450.json https://access.redhat.com/errata/RHSA-2026:33226", "severity": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "glibc-headers", "version": "", "kind": "binary", "normalized_version": "", "arch": "s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "0:2.34-272.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "YgehfkOilPM31dosmRXxDA==": { "id": "YgehfkOilPM31dosmRXxDA==", "updater": "rhel-vex", "name": "CVE-2026-35386", "description": "A flaw was found in OpenSSH. This vulnerability allows a remote attacker to achieve arbitrary command execution by injecting shell metacharacters into a username provided on the command line. Exploitation requires an untrusted username and a non-default configuration of the '%' character in `ssh_config`.", "issued": "2026-04-02T16:44:27Z", "links": "https://access.redhat.com/security/cve/CVE-2026-35386 https://bugzilla.redhat.com/show_bug.cgi?id=2454506 https://www.cve.org/CVERecord?id=CVE-2026-35386 https://nvd.nist.gov/vuln/detail/CVE-2026-35386 https://marc.info/?l=openssh-unix-dev\u0026m=177513443901484\u0026w=2 https://www.openssh.org/releasenotes.html#10.3p1 https://www.openwall.com/lists/oss-security/2026/04/02/3 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-35386.json https://access.redhat.com/errata/RHSA-2026:13381", "severity": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N", "normalized_severity": "Low", "package": { "id": "", "name": "openssh", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:8.7p1-49.el9_7", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "YoLm41YhtgLxKYJ1/exB9g==": { "id": "YoLm41YhtgLxKYJ1/exB9g==", "updater": "rhel-vex", "name": "CVE-2025-24294", "description": "A denial of service flaw was found in resolv ruby gem. This flaw allows an attacker to craft a malicious DNS packet containing a highly compressed domain name. When the resolv library parses this packet, the name decompression process consumes a large amount of CPU resources, as the library does not limit the resulting length of the name.", "issued": "2025-07-12T03:30:40Z", "links": "https://access.redhat.com/security/cve/CVE-2025-24294 https://bugzilla.redhat.com/show_bug.cgi?id=2379684 https://www.cve.org/CVERecord?id=CVE-2025-24294 https://nvd.nist.gov/vuln/detail/CVE-2025-24294 https://www.ruby-lang.org/en/news/2025/07/08/dos-resolv-cve-2025-24294/ https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-24294.json https://access.redhat.com/errata/RHSA-2025:23063", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "normalized_severity": "Medium", "package": { "id": "", "name": "ruby-libs", "version": "", "kind": "binary", "normalized_version": "", "module": "ruby:3.3", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "0:3.3.10-5.module+el9.7.0+23651+15dc1615", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "YodqYykSYwoW2Z78DZNfRA==": { "id": "YodqYykSYwoW2Z78DZNfRA==", "updater": "rhel-vex", "name": "CVE-2026-12912", "description": "A flaw was found in libtiff. A remote attacker could exploit this vulnerability by providing a specially crafted PixarLog-compressed TIFF image. This issue occurs when decoding Pixarlog codec images with the PIXARLOGDATAFMT_8BITABGR output format and a specific stride value, leading to a heap-based buffer overflow. This could potentially result in arbitrary code execution or a denial of service (DoS).", "issued": "2026-04-16T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-12912 https://bugzilla.redhat.com/show_bug.cgi?id=2492871 https://www.cve.org/CVERecord?id=CVE-2026-12912 https://nvd.nist.gov/vuln/detail/CVE-2026-12912 https://gitlab.com/libtiff/libtiff/-/merge_requests/873 https://gitlab.com/libtiff/libtiff/-/work_items/824 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-12912.json https://access.redhat.com/errata/RHSA-2026:42668", "severity": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H", "normalized_severity": "High", "package": { "id": "", "name": "libtiff-devel", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "0:4.4.0-18.el9_8.1", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "Ywdulqdw8k75jjL2qb8gPg==": { "id": "Ywdulqdw8k75jjL2qb8gPg==", "updater": "rhel-vex", "name": "CVE-2026-5704", "description": "A flaw was found in tar. A remote attacker could exploit this vulnerability by crafting a malicious archive, leading to hidden file injection with fully attacker-controlled content. This bypasses pre-extraction inspection mechanisms, potentially allowing an attacker to introduce malicious files onto a system without detection.", "issued": "2026-04-06T13:36:20Z", "links": "https://access.redhat.com/security/cve/CVE-2026-5704 https://bugzilla.redhat.com/show_bug.cgi?id=2455360 https://www.cve.org/CVERecord?id=CVE-2026-5704 https://nvd.nist.gov/vuln/detail/CVE-2026-5704 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-5704.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N", "normalized_severity": "Medium", "package": { "id": "", "name": "tar", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "YwrNcgB1VRavvqQXhCICXg==": { "id": "YwrNcgB1VRavvqQXhCICXg==", "updater": "rhel-vex", "name": "CVE-2026-5435", "description": "A flaw was found in glibc, the GNU C Library. Specifically, deprecated functions responsible for printing TSIG (Transaction Signature) records fail to properly manage memory buffers. This oversight can lead to an out-of-bounds write when processing specially crafted TSIG records. An attacker could exploit this to cause a denial of service or potentially execute arbitrary code.", "issued": "2026-04-28T11:58:54Z", "links": "https://access.redhat.com/security/cve/CVE-2026-5435 https://bugzilla.redhat.com/show_bug.cgi?id=2463465 https://www.cve.org/CVERecord?id=CVE-2026-5435 https://nvd.nist.gov/vuln/detail/CVE-2026-5435 https://inbox.sourceware.org/libc-announce/7a655d55-276f-41fe-b550-feb3ebb2ce91@redhat.com/T/#u https://sourceware.org/bugzilla/show_bug.cgi?id=34033 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-5435.json https://access.redhat.com/errata/RHSA-2026:42952", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "glibc-common", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:2.34-274.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "Z/nuiLo/kSAcxolOXcSWYw==": { "id": "Z/nuiLo/kSAcxolOXcSWYw==", "updater": "rhel-vex", "name": "CVE-2026-21637", "description": "A flaw in Node.js TLS error handling allows remote attackers to crash or exhaust resources of a TLS server when `pskCallback` or `ALPNCallback` are in use. Synchronous exceptions thrown during these callbacks bypass standard TLS error handling paths (tlsClientError and error), causing either immediate process termination or silent file descriptor leaks that eventually lead to denial of service. Because these callbacks process attacker-controlled input during the TLS handshake, a remote client can repeatedly trigger the issue. This vulnerability affects TLS servers using PSK or ALPN callbacks across Node.js versions where these callbacks throw without being safely wrapped.", "issued": "2026-01-20T20:41:55Z", "links": "https://access.redhat.com/security/cve/CVE-2026-21637 https://bugzilla.redhat.com/show_bug.cgi?id=2431340 https://www.cve.org/CVERecord?id=CVE-2026-21637 https://nvd.nist.gov/vuln/detail/CVE-2026-21637 https://nodejs.org/en/blog/vulnerability/december-2025-security-releases https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-21637.json https://access.redhat.com/errata/RHSA-2026:2782", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "nodejs-libs", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:22.22.0-1.module+el9.7.0+23896+b5802de9", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "Z0bbSkX8e3OUKdJa86CbBw==": { "id": "Z0bbSkX8e3OUKdJa86CbBw==", "updater": "rhel-vex", "name": "CVE-2021-4217", "description": "A flaw was found in unzip. The vulnerability occurs due to improper handling of Unicode strings, which can lead to a null pointer dereference. This flaw allows an attacker to input a specially crafted zip file, leading to a crash or code execution.", "issued": "2022-01-14T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2021-4217 https://bugzilla.redhat.com/show_bug.cgi?id=2044583 https://www.cve.org/CVERecord?id=CVE-2021-4217 https://nvd.nist.gov/vuln/detail/CVE-2021-4217 https://security.access.redhat.com/data/csaf/v2/vex/2021/cve-2021-4217.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "normalized_severity": "Low", "package": { "id": "", "name": "unzip", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "ZA3vHdd4PXjvIsTBPl1mxg==": { "id": "ZA3vHdd4PXjvIsTBPl1mxg==", "updater": "rhel-vex", "name": "CVE-2026-1528", "description": "A flaw was found in undici. A remote attacker could exploit this vulnerability by sending a specially crafted WebSocket frame with an extremely large 64-bit length. This causes undici's ByteParser to overflow its internal calculations, leading to an invalid state and a fatal TypeError. The primary consequence is a Denial of Service (DoS), which terminates the process.", "issued": "2026-03-12T20:21:57Z", "links": "https://access.redhat.com/security/cve/CVE-2026-1528 https://bugzilla.redhat.com/show_bug.cgi?id=2447145 https://www.cve.org/CVERecord?id=CVE-2026-1528 https://nvd.nist.gov/vuln/detail/CVE-2026-1528 https://cna.openjsf.org/security-advisories.html https://github.com/nodejs/undici/security/advisories/GHSA-f269-vfmq-vjvj https://hackerone.com/reports/3537648 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-1528.json https://access.redhat.com/errata/RHSA-2026:7302", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "High", "package": { "id": "", "name": "nodejs-full-i18n", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:22.22.2-1.module+el9.7.0+24157+8ddb2461", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "ZCLP8N4soyt53A9I5VdxcA==": { "id": "ZCLP8N4soyt53A9I5VdxcA==", "updater": "rhel-vex", "name": "CVE-2026-35388", "description": "A flaw was found in OpenSSH. This vulnerability allows for a low integrity impact due to the omission of connection multiplexing confirmation for proxy-mode multiplexing sessions. A local user, under specific and complex conditions requiring user interaction, could potentially establish a multiplexed session without explicit confirmation, leading to unintended data handling.", "issued": "2026-04-02T16:57:31Z", "links": "https://access.redhat.com/security/cve/CVE-2026-35388 https://bugzilla.redhat.com/show_bug.cgi?id=2454500 https://www.cve.org/CVERecord?id=CVE-2026-35388 https://nvd.nist.gov/vuln/detail/CVE-2026-35388 https://marc.info/?l=openssh-unix-dev\u0026m=177513443901484\u0026w=2 https://www.openssh.org/releasenotes.html#10.3p1 https://www.openwall.com/lists/oss-security/2026/04/02/3 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-35388.json https://access.redhat.com/errata/RHSA-2026:19219", "severity": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:N", "normalized_severity": "Low", "package": { "id": "", "name": "openssh", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:9.9p1-7.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "ZMqtUXBs3IUyb3eHhTEM+Q==": { "id": "ZMqtUXBs3IUyb3eHhTEM+Q==", "updater": "rhel-vex", "name": "CVE-2026-5928", "description": "A flaw was found in glibc (GNU C Library). When the `ungetwc` function is called on a file stream using wide characters with specific overlapping single-byte and multi-byte encodings, it may attempt to read data outside of its allocated buffer. This can lead to the unintentional disclosure of sensitive information from memory or cause the program to crash, resulting in a denial of service.", "issued": "2026-04-20T20:37:31Z", "links": "https://access.redhat.com/security/cve/CVE-2026-5928 https://bugzilla.redhat.com/show_bug.cgi?id=2459854 https://www.cve.org/CVERecord?id=CVE-2026-5928 https://nvd.nist.gov/vuln/detail/CVE-2026-5928 https://sourceware.org/bugzilla/show_bug.cgi?id=33998 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-5928.json https://access.redhat.com/errata/RHSA-2026:42952", "severity": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "glibc", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:2.34-274.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "ZNpRshLHRo06/00CGV605Q==": { "id": "ZNpRshLHRo06/00CGV605Q==", "updater": "rhel-vex", "name": "CVE-2025-11083", "description": "A head based buffer overflow flaw has been discovered in GNU bin utilities. The affected element is the function elf_swap_shdr in the library bfd/elfcode.h of the component Linker. The manipulation leads to heap-based buffer overflow. The attack must be carried out locally.", "issued": "2025-09-27T23:02:08Z", "links": "https://access.redhat.com/security/cve/CVE-2025-11083 https://bugzilla.redhat.com/show_bug.cgi?id=2399948 https://www.cve.org/CVERecord?id=CVE-2025-11083 https://nvd.nist.gov/vuln/detail/CVE-2025-11083 https://sourceware.org/bugzilla/attachment.cgi?id=16353 https://sourceware.org/bugzilla/show_bug.cgi?id=33457 https://sourceware.org/bugzilla/show_bug.cgi?id=33457#c1 https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=9ca499644a21ceb3f946d1c179c38a83be084490 https://vuldb.com/?ctiid.326124 https://vuldb.com/?id.326124 https://vuldb.com/?submit.661277 https://www.gnu.org/ https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-11083.json https://access.redhat.com/errata/RHSA-2025:23343", "severity": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "normalized_severity": "Medium", "package": { "id": "", "name": "binutils", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:2.35.2-67.el9_7.1", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "ZRSF+MayCxLJlIAPWIqUVA==": { "id": "ZRSF+MayCxLJlIAPWIqUVA==", "updater": "rhel-vex", "name": "CVE-2026-42246", "description": "A flaw was found in the Ruby net-imap library. When upgrading a cleartext IMAP connection to TLS using the Net::IMAP#starttls method, the library improperly handles certain responses received during STARTTLS negotiation. A man-in-the-middle (MITM) attacker can inject a predicted tagged OK response before the client completes the STARTTLS command, causing the operation to appear successful without establishing a TLS session. As a result, the connection may continue to transmit sensitive information in cleartext and enable modification of data exchanged over the affected connection, while the application incorrectly believes that encryption has been enabled.", "issued": "2026-05-09T19:33:17Z", "links": "https://access.redhat.com/security/cve/CVE-2026-42246 https://bugzilla.redhat.com/show_bug.cgi?id=2468499 https://www.cve.org/CVERecord?id=CVE-2026-42246 https://nvd.nist.gov/vuln/detail/CVE-2026-42246 https://github.com/ruby/net-imap/commit/0ede4c40b1523dfeaf95777b2678e54cc0fd9618 https://github.com/ruby/net-imap/commit/24a4e770b43230286a05aa2a9746cdbb3eb8485e https://github.com/ruby/net-imap/commit/97e2488fb5401a1783bddd959dde007d9fbce42c https://github.com/ruby/net-imap/commit/f79d35bf5833f186e81044c57c843eda30c873da https://github.com/ruby/net-imap/releases/tag/v0.3.10 https://github.com/ruby/net-imap/releases/tag/v0.4.24 https://github.com/ruby/net-imap/releases/tag/v0.5.14 https://github.com/ruby/net-imap/security/advisories/GHSA-vcgp-9326-pqcp https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42246.json https://access.redhat.com/errata/RHSA-2026:33576", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "normalized_severity": "High", "package": { "id": "", "name": "ruby-devel", "version": "", "kind": "binary", "normalized_version": "", "module": "ruby:3.3", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "0:3.3.10-7.module+el9.8.0+24406+8975e57f", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "ZhTLRTlcbZumWmiritxOAw==": { "id": "ZhTLRTlcbZumWmiritxOAw==", "updater": "rhel-vex", "name": "CVE-2026-6100", "description": "A flaw was found in Python's decompression modules, including `lzma.LZMADecompressor`, `bz2.BZ2Decompressor`, and `gzip.GzipFile`. This vulnerability, a use-after-free, can occur if a program attempts to re-use a decompression object after a memory allocation error, especially when the system is experiencing high memory usage. Exploitation of this flaw could potentially allow an attacker to execute arbitrary code or access sensitive data. The vulnerability is only present if the program re-uses decompressor instances across multiple decompression calls even after a `MemoryError` is raised during decompression. Using the helper functions to one-shot decompress data such as `lzma.decompress()`, `bz2.decompress()`, `gzip.decompress()`, and `zlib.decompress()` are not affected as a new decompressor instance is used per call. If the decompressor instance is not re-used after an error condition, this usage is similarly not vulnerable.", "issued": "2026-04-13T17:15:47Z", "links": "https://access.redhat.com/security/cve/CVE-2026-6100 https://bugzilla.redhat.com/show_bug.cgi?id=2457932 https://www.cve.org/CVERecord?id=CVE-2026-6100 https://nvd.nist.gov/vuln/detail/CVE-2026-6100 https://github.com/python/cpython/commit/6a5f79c8d7bbf22b083b240910c7a8781a59437d https://github.com/python/cpython/commit/8fc66aef6d7b3ae58f43f5c66f9366cc8cbbfcd2 https://github.com/python/cpython/commit/c3cf71c3366fe49acb776a639405c0eea6169c20 https://github.com/python/cpython/issues/148395 https://github.com/python/cpython/pull/148396 https://mail.python.org/archives/list/security-announce@python.org/thread/HTWB2Z6KT5QQX4RYEZAFININDHNOSIF3/ https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6100.json https://access.redhat.com/errata/RHSA-2026:10949", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "normalized_severity": "High", "package": { "id": "", "name": "python3-libs", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:3.9.25-3.el9_7.3", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "ZkozpC3UXStcW3ZbPMbsTA==": { "id": "ZkozpC3UXStcW3ZbPMbsTA==", "updater": "rhel-vex", "name": "CVE-2025-14512", "description": "A flaw was found in glib. This vulnerability allows a heap buffer overflow and denial-of-service (DoS) via an integer overflow in GLib's GIO (GLib Input/Output) escape_byte_string() function when processing malicious file or remote filesystem attribute values.", "issued": "2025-12-11T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2025-14512 https://bugzilla.redhat.com/show_bug.cgi?id=2421339 https://www.cve.org/CVERecord?id=CVE-2025-14512 https://nvd.nist.gov/vuln/detail/CVE-2025-14512 https://gitlab.gnome.org/GNOME/glib/-/issues/3845 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-14512.json https://access.redhat.com/errata/RHSA-2026:15971", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "glib2-devel", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "0:2.68.4-18.el9_7.2", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "ZuhhG1bpyIKZ8+BvJQvoUQ==": { "id": "ZuhhG1bpyIKZ8+BvJQvoUQ==", "updater": "rhel-vex", "name": "CVE-2026-7210", "description": "A flaw was found in the `python` and `expat` components. Insufficient entropy in the hash-flooding protection mechanism of `xml.parsers.expat` and `xml.etree.ElementTree` allows a remote attacker to craft a malicious XML document. This crafted document can trigger a hash flooding attack, leading to a denial of service (DoS) condition.", "issued": "2026-05-11T17:19:09Z", "links": "https://access.redhat.com/security/cve/CVE-2026-7210 https://bugzilla.redhat.com/show_bug.cgi?id=2469216 https://www.cve.org/CVERecord?id=CVE-2026-7210 https://nvd.nist.gov/vuln/detail/CVE-2026-7210 https://github.com/python/cpython/issues/149018 https://github.com/python/cpython/pull/149023 https://mail.python.org/archives/list/security-announce@python.org/thread/PNY5OMBDPM2FRUZTWFFPJ6LISWKV627K/ https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-7210.json", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "normalized_severity": "Medium", "package": { "id": "", "name": "python3.9", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "a8Muru+syePTNtU2/rVrUg==": { "id": "a8Muru+syePTNtU2/rVrUg==", "updater": "rhel-vex", "name": "CVE-2026-1525", "description": "A flaw was found in undici, a Node.js HTTP/1.1 client. A remote attacker could exploit this vulnerability by sending HTTP/1.1 requests that include duplicate Content-Length headers with different casing (e.g., \"Content-Length\" and \"content-length\"). This can lead to HTTP Request Smuggling, a technique where an attacker sends an ambiguous request that is interpreted differently by a proxy and a backend server. Successful exploitation could result in unauthorized access, cache poisoning, or credential hijacking. It may also cause a Denial of Service (DoS) if strict HTTP parsers reject the malformed requests.", "issued": "2026-03-12T19:56:55Z", "links": "https://access.redhat.com/security/cve/CVE-2026-1525 https://bugzilla.redhat.com/show_bug.cgi?id=2447144 https://www.cve.org/CVERecord?id=CVE-2026-1525 https://nvd.nist.gov/vuln/detail/CVE-2026-1525 https://cna.openjsf.org/security-advisories.html https://cwe.mitre.org/data/definitions/444.html https://github.com/nodejs/undici/security/advisories/GHSA-2mjp-6q6p-2qxm https://hackerone.com/reports/3556037 https://www.rfc-editor.org/rfc/rfc9110.html#section-8.6 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-1525.json https://access.redhat.com/errata/RHSA-2026:7302", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "normalized_severity": "Medium", "package": { "id": "", "name": "npm", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:10.9.7-1.22.22.2.1.module+el9.7.0+24157+8ddb2461", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "aJsQ4a3gp8/jsNBVC56QHw==": { "id": "aJsQ4a3gp8/jsNBVC56QHw==", "updater": "rhel-vex", "name": "CVE-2026-48930", "description": "A flaw was found in Node.js. This vulnerability in the TLS (Transport Layer Security) hostname handling allows embedded null characters in hostnames. This can lead to silent authority rebinding, potentially enabling an attacker to redirect network traffic to an unintended server and disclose sensitive information.", "issued": "2026-06-26T01:14:37Z", "links": "https://access.redhat.com/security/cve/CVE-2026-48930 https://bugzilla.redhat.com/show_bug.cgi?id=2493326 https://www.cve.org/CVERecord?id=CVE-2026-48930 https://nvd.nist.gov/vuln/detail/CVE-2026-48930 https://github.com/nodejs/node/commit/7dafafa2424710ded8b77eb7c878e884c1aef64e https://hackerone.com/reports/3656716 https://nodejs.org/en/blog/vulnerability/june-2026-security-releases https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-48930.json https://access.redhat.com/errata/RHSA-2026:35892", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L", "normalized_severity": "Medium", "package": { "id": "", "name": "nodejs-libs", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:22.23.1-1.module+el9.8.0+24457+996af7aa", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "aK9Mq6KdK8L3Pl0r1rTwYA==": { "id": "aK9Mq6KdK8L3Pl0r1rTwYA==", "updater": "rhel-vex", "name": "CVE-2026-55653", "description": "A flaw was found in OpenSSH. A malicious SSH server can exploit a double free vulnerability in the Diffie-Hellman Group Exchange (DH-GEX) client path. This occurs during FIPS (Federal Information Processing Standards) mode known-group validation when the client processes attacker-controlled DH-GEX group parameters. Successful exploitation leads to client-side process termination, resulting in a Denial of Service (DoS).", "issued": "2026-06-22T23:17:43Z", "links": "https://access.redhat.com/security/cve/CVE-2026-55653 https://bugzilla.redhat.com/show_bug.cgi?id=2462351 https://www.cve.org/CVERecord?id=CVE-2026-55653 https://nvd.nist.gov/vuln/detail/CVE-2026-55653 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-55653.json https://access.redhat.com/errata/RHSA-2026:47756", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "normalized_severity": "Medium", "package": { "id": "", "name": "openssh", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:9.9p1-9.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "aKS5Pwr8YswsXS77DXcixA==": { "id": "aKS5Pwr8YswsXS77DXcixA==", "updater": "rhel-vex", "name": "CVE-2026-4786", "description": "A flaw was found in the Python webbrowser.open() API. If a specially crafted URL containing \"%action\" is processed, an attacker could bypass a previous mitigation for CVE-2026-4519. This bypass allows for command injection into the underlying shell, potentially leading to arbitrary code execution.", "issued": "2026-04-13T21:52:19Z", "links": "https://access.redhat.com/security/cve/CVE-2026-4786 https://bugzilla.redhat.com/show_bug.cgi?id=2458049 https://www.cve.org/CVERecord?id=CVE-2026-4786 https://nvd.nist.gov/vuln/detail/CVE-2026-4786 https://github.com/python/cpython/issues/148169 https://github.com/python/cpython/pull/148170 https://mail.python.org/archives/list/security-announce@python.org/thread/JQDUNJVB4AQNTJECSUKOBDU3XCJIPSE5/ https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-4786.json https://access.redhat.com/errata/RHSA-2026:19216", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L", "normalized_severity": "High", "package": { "id": "", "name": "python3", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:3.9.25-7.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "aKcPzJFDOswSNCIlBX5/jQ==": { "id": "aKcPzJFDOswSNCIlBX5/jQ==", "updater": "rhel-vex", "name": "CVE-2026-33636", "description": "A flaw was found in libpng. A remote attacker could exploit an out-of-bounds read and write vulnerability in the ARM/AArch64 Neon-optimized palette expansion path. This occurs when processing a final partial chunk of 8-bit paletted rows without verifying sufficient input pixels, leading to dereferencing pointers before the start of the row buffer and writing expanded pixel data to underflowed positions. This flaw can result in information disclosure and denial of service.", "issued": "2026-03-26T16:51:58Z", "links": "https://access.redhat.com/security/cve/CVE-2026-33636 https://bugzilla.redhat.com/show_bug.cgi?id=2451819 https://www.cve.org/CVERecord?id=CVE-2026-33636 https://nvd.nist.gov/vuln/detail/CVE-2026-33636 https://github.com/pnggroup/libpng/commit/7734cda20cf1236aef60f3bbd2267c97bbb40869 https://github.com/pnggroup/libpng/commit/aba9f18eba870d14fb52c5ba5d73451349e339c3 https://github.com/pnggroup/libpng/security/advisories/GHSA-wjr5-c57x-95m2 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33636.json https://access.redhat.com/errata/RHSA-2026:14791", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "libpng-devel", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "2:1.6.37-12.el9_7.3", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "aMOKwSAvMIKqreq1+gZ2ow==": { "id": "aMOKwSAvMIKqreq1+gZ2ow==", "updater": "rhel-vex", "name": "CVE-2026-4046", "description": "A flaw was found in glibc, the GNU C Library. A remote attacker could exploit this vulnerability by providing specially crafted inputs using the IBM1390 or IBM1399 character sets to the `iconv()` function. This could lead to an assertion failure, causing the application to crash and resulting in a Denial of Service (DoS).", "issued": "2026-03-30T17:16:11Z", "links": "https://access.redhat.com/security/cve/CVE-2026-4046 https://bugzilla.redhat.com/show_bug.cgi?id=2453117 https://www.cve.org/CVERecord?id=CVE-2026-4046 https://nvd.nist.gov/vuln/detail/CVE-2026-4046 https://packages.fedoraproject.org/pkgs/glibc/glibc-gconv-extra/ https://sourceware.org/bugzilla/show_bug.cgi?id=33980 https://sourceware.org/git/?p=glibc.git;a=blob_plain;f=advisories/GLIBC-SA-2026-0007;hb=HEAD https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-4046.json https://access.redhat.com/errata/RHSA-2026:20597", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "normalized_severity": "Medium", "package": { "id": "", "name": "glibc", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:2.34-270.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "aN7J4vjcApPz2ZabMR0Irg==": { "id": "aN7J4vjcApPz2ZabMR0Irg==", "updater": "rhel-vex", "name": "CVE-2026-42245", "description": "A flaw was found in Net::IMAP, a Ruby library implementing the Internet Message Access Protocol (IMAP) client functionality. A hostile server can exploit a quadratic time complexity issue in the `Net::IMAP::ResponseReader` when processing large responses containing numerous string literals. This can lead to the client's CPU being exhausted, resulting in a denial of service (DoS) attack.", "issued": "2026-05-09T19:37:08Z", "links": "https://access.redhat.com/security/cve/CVE-2026-42245 https://bugzilla.redhat.com/show_bug.cgi?id=2468495 https://www.cve.org/CVERecord?id=CVE-2026-42245 https://nvd.nist.gov/vuln/detail/CVE-2026-42245 https://github.com/ruby/net-imap/commit/6091f7d6b1f3514cafbfe39c76f2b5d73de3ca96 https://github.com/ruby/net-imap/commit/88d95231fc8afef11c1f074453f7d75b68c9dfda https://github.com/ruby/net-imap/commit/de685f91a4a4cc75eb80da898c2bf8af08d34819 https://github.com/ruby/net-imap/releases/tag/v0.4.24 https://github.com/ruby/net-imap/releases/tag/v0.5.14 https://github.com/ruby/net-imap/releases/tag/v0.6.4 https://github.com/ruby/net-imap/security/advisories/GHSA-q2mw-fvj9-vvcw https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42245.json https://access.redhat.com/errata/RHSA-2026:33576", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "rubygem-bundler", "version": "", "kind": "binary", "normalized_version": "", "module": "ruby:3.3", "arch": "noarch", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "0:2.5.22-7.module+el9.8.0+24406+8975e57f", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "aOUfuyvyyWEe7Z1IZT+fGw==": { "id": "aOUfuyvyyWEe7Z1IZT+fGw==", "updater": "rhel-vex", "name": "CVE-2026-34743", "description": "A flaw was found in XZ Utils. When the `lzma_index_decoder()` function processes an empty index, and a subsequent `lzma_index_append()` operation is performed, insufficient memory is allocated. This can lead to a buffer overflow, potentially causing a denial of service (DoS) for affected systems.", "issued": "2026-04-02T18:36:37Z", "links": "https://access.redhat.com/security/cve/CVE-2026-34743 https://bugzilla.redhat.com/show_bug.cgi?id=2454589 https://www.cve.org/CVERecord?id=CVE-2026-34743 https://nvd.nist.gov/vuln/detail/CVE-2026-34743 https://github.com/tukaani-project/xz/commit/c8c22869e780ff57c96b46939c3d79ff99395f87 https://github.com/tukaani-project/xz/releases/tag/v5.8.3 https://github.com/tukaani-project/xz/security/advisories/GHSA-x872-m794-cxhv https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-34743.json", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "normalized_severity": "Medium", "package": { "id": "", "name": "xz", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "aQGx6Am8fU9TZmcyiMNL4A==": { "id": "aQGx6Am8fU9TZmcyiMNL4A==", "updater": "rhel-vex", "name": "CVE-2024-43802", "description": "A flaw was found in Vim. This issue may allow a heap-buffer overflow via improper management of the typeahead buffer, leading to crashes when error messages occur in combination with several long mappings.", "issued": "2024-08-26T19:15:07Z", "links": "https://access.redhat.com/security/cve/CVE-2024-43802 https://bugzilla.redhat.com/show_bug.cgi?id=2307995 https://www.cve.org/CVERecord?id=CVE-2024-43802 https://nvd.nist.gov/vuln/detail/CVE-2024-43802 https://github.com/vim/vim/commit/322ba9108612bead5eb https://github.com/vim/vim/security/advisories/GHSA-4ghr-c62x-cqfh https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-43802.json", "severity": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L", "normalized_severity": "Low", "package": { "id": "", "name": "vim", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "aWSD4ccAhJBO5Heyt5mTxQ==": { "id": "aWSD4ccAhJBO5Heyt5mTxQ==", "updater": "rhel-vex", "name": "CVE-2025-6069", "description": "A denial-of-service (DoS) vulnerability has been discovered in Python's html.parser.HTMLParser class. When processing specially malformed HTML input, the parsing runtime can become quadratic with respect to the input size. This significantly increased processing time can lead to excessive resource consumption, ultimately causing a denial-of-service condition in applications that rely on this parser.", "issued": "2025-06-17T13:39:46Z", "links": "https://access.redhat.com/security/cve/CVE-2025-6069 https://bugzilla.redhat.com/show_bug.cgi?id=2373234 https://www.cve.org/CVERecord?id=CVE-2025-6069 https://nvd.nist.gov/vuln/detail/CVE-2025-6069 https://github.com/python/cpython/commit/4455cbabf991e202185a25a631af206f60bbc949 https://github.com/python/cpython/commit/6eb6c5dbfb528bd07d77b60fd71fd05d81d45c41 https://github.com/python/cpython/commit/d851f8e258c7328814943e923a7df81bca15df4b https://github.com/python/cpython/issues/135462 https://github.com/python/cpython/pull/135464 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-6069.json https://access.redhat.com/errata/RHSA-2025:23342", "severity": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L", "normalized_severity": "Medium", "package": { "id": "", "name": "python3", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:3.9.25-2.el9_7", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "ajT6YifLzju5PlaUiX+EvA==": { "id": "ajT6YifLzju5PlaUiX+EvA==", "updater": "rhel-vex", "name": "CVE-2026-11850", "description": "An integer underflow vulnerability was found in MIT krb5 in the berval2tl_data() function in plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c. The function performs an unsigned subtraction (bv_len - 2) without a prior bounds check. When bv_len is 0 or 1, the subtraction wraps to a large value which is then truncated to uint16_t, yielding 0xFFFE (65534) or 0xFFFF (65535). The subsequent malloc succeeds and memcpy reads up to 65534 bytes from a 0-1 byte buffer, resulting in a heap out-of-bounds read.\nThe attack vector involves a malicious or compromised LDAP KDB backend returning a krbExtraData attribute with bv_len \u003c 2, triggering the underflow when the KDC or kadmind reads principal data.", "issued": "2026-06-10T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-11850 https://bugzilla.redhat.com/show_bug.cgi?id=2459970 https://www.cve.org/CVERecord?id=CVE-2026-11850 https://nvd.nist.gov/vuln/detail/CVE-2026-11850 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-11850.json", "severity": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "krb5", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "axpLUf/WfpliDV7UixDwiQ==": { "id": "axpLUf/WfpliDV7UixDwiQ==", "updater": "rhel-vex", "name": "CVE-2025-55132", "description": "A file access flaw has been discovered in NodeJS. A file's access and modification timestamps to be changed via `futimes()` even when the process has only read permissions. Unlike `utimes()`, `futimes()` does not apply the expected write-permission checks, which means file metadata can be modified in read-only directories. This behavior could be used to alter timestamps in ways that obscure activity, reducing the reliability of logs.", "issued": "2026-01-20T20:41:55Z", "links": "https://access.redhat.com/security/cve/CVE-2025-55132 https://bugzilla.redhat.com/show_bug.cgi?id=2431338 https://www.cve.org/CVERecord?id=CVE-2025-55132 https://nvd.nist.gov/vuln/detail/CVE-2025-55132 https://nodejs.org/en/blog/vulnerability/december-2025-security-releases https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-55132.json https://access.redhat.com/errata/RHSA-2026:2782", "severity": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "normalized_severity": "Medium", "package": { "id": "", "name": "nodejs-libs", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:22.22.0-1.module+el9.7.0+23896+b5802de9", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "ayJ94QRlWYBn8mXMxBDr+Q==": { "id": "ayJ94QRlWYBn8mXMxBDr+Q==", "updater": "rhel-vex", "name": "CVE-2026-11525", "description": "A flaw was found in undici. When undici processes Set-Cookie headers, it incorrectly interprets the SameSite attribute, accepting partial matches instead of exact ones. This allows a malicious server to downgrade a cookie's SameSite policy to a less secure setting, potentially leading to unintended information disclosure or a weakening of security protections for the user.", "issued": "2026-06-17T17:31:03Z", "links": "https://access.redhat.com/security/cve/CVE-2026-11525 https://bugzilla.redhat.com/show_bug.cgi?id=2490008 https://www.cve.org/CVERecord?id=CVE-2026-11525 https://nvd.nist.gov/vuln/detail/CVE-2026-11525 https://cna.openjsf.org/security-advisories.html https://github.com/nodejs/undici/security/advisories/GHSA-g8m3-5g58-fq7m https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-11525.json https://access.redhat.com/errata/RHSA-2026:35892", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N", "normalized_severity": "Low", "package": { "id": "", "name": "nodejs-full-i18n", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:22.23.1-1.module+el9.8.0+24457+996af7aa", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "b+WKHvVRvScXQjTpsI/dQA==": { "id": "b+WKHvVRvScXQjTpsI/dQA==", "updater": "rhel-vex", "name": "CVE-2025-6176", "description": "Scrapy are vulnerable to a denial of service (DoS) attack due to a flaw in its brotli decompression implementation. The protection mechanism against decompression bombs fails to mitigate the brotli variant, allowing remote servers to crash clients with less than 80GB of available memory. This occurs because brotli can achieve extremely high compression ratios for zero-filled data, leading to excessive memory consumption during decompression.", "issued": "2025-10-31T00:00:21Z", "links": "https://access.redhat.com/security/cve/CVE-2025-6176 https://bugzilla.redhat.com/show_bug.cgi?id=2408762 https://www.cve.org/CVERecord?id=CVE-2025-6176 https://nvd.nist.gov/vuln/detail/CVE-2025-6176 https://huntr.com/bounties/2c26a886-5984-47ee-a421-0d5fe1344eb0 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-6176.json https://access.redhat.com/errata/RHSA-2026:2042", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "High", "package": { "id": "", "name": "libbrotli", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:1.0.9-9.el9_7", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "b1aMkFsUYzQ15fp9A4JV2w==": { "id": "b1aMkFsUYzQ15fp9A4JV2w==", "updater": "rhel-vex", "name": "CVE-2025-55130", "description": "A flaw in Node.js’s Permissions model allows attackers to bypass `--allow-fs-read` and `--allow-fs-write` restrictions using crafted relative symlink paths. By chaining directories and symlinks, a script granted access only to the current directory can escape the allowed path and read sensitive files. This breaks the expected isolation guarantees and enables arbitrary file read/write.", "issued": "2026-01-20T20:41:55Z", "links": "https://access.redhat.com/security/cve/CVE-2025-55130 https://bugzilla.redhat.com/show_bug.cgi?id=2431352 https://www.cve.org/CVERecord?id=CVE-2025-55130 https://nvd.nist.gov/vuln/detail/CVE-2025-55130 https://nodejs.org/en/blog/vulnerability/december-2025-security-releases https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-55130.json https://access.redhat.com/errata/RHSA-2026:2782", "severity": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "normalized_severity": "High", "package": { "id": "", "name": "npm", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:10.9.4-1.22.22.0.1.module+el9.7.0+23896+b5802de9", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "b2xf65/2S45gOxG8Grxy0g==": { "id": "b2xf65/2S45gOxG8Grxy0g==", "updater": "rhel-vex", "name": "CVE-2023-5441", "description": "A NULL pointer dereference vulnerability was found in Vim. This flaw allows an attacker who can trick a user into processing a specially crafted file to trigger the NULL pointer dereference, causing the application to crash.", "issued": "2023-10-01T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2023-5441 https://bugzilla.redhat.com/show_bug.cgi?id=2242926 https://www.cve.org/CVERecord?id=CVE-2023-5441 https://nvd.nist.gov/vuln/detail/CVE-2023-5441 https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-5441.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "vim", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "b9vpp7YMXEAHYnt8gPj4PA==": { "id": "b9vpp7YMXEAHYnt8gPj4PA==", "updater": "rhel-vex", "name": "CVE-2025-15469", "description": "A flaw was found in openssl. When a user signs or verifies files larger than 16MB using the `openssl dgst` command with one-shot algorithms, the tool silently truncates the input to 16MB. This creates an integrity gap, allowing trailing data beyond the initial 16MB to be modified without detection because it remains unauthenticated. This vulnerability primarily impacts workflows that both sign and verify files using the affected `openssl dgst` command.", "issued": "2026-01-27T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2025-15469 https://bugzilla.redhat.com/show_bug.cgi?id=2430378 https://www.cve.org/CVERecord?id=CVE-2025-15469 https://nvd.nist.gov/vuln/detail/CVE-2025-15469 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-15469.json https://access.redhat.com/errata/RHSA-2026:1473", "severity": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N", "normalized_severity": "Low", "package": { "id": "", "name": "openssl", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "1:3.5.1-7.el9_7", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "bACUKZThWu3kcO82NfO4eg==": { "id": "bACUKZThWu3kcO82NfO4eg==", "updater": "rhel-vex", "name": "CVE-2023-1264", "description": "A NULL pointer dereference vulnerability was discovered in vim's utfc_ptr2len() function in the mbyte.c file. This issue is due to using a NULL pointer with the nested :open command. This flaw allows an attacker to trick a user into opening a specially crafted file, triggering an issue that causes an application to crash, leading to a denial of service.", "issued": "2023-03-07T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2023-1264 https://bugzilla.redhat.com/show_bug.cgi?id=2176413 https://www.cve.org/CVERecord?id=CVE-2023-1264 https://nvd.nist.gov/vuln/detail/CVE-2023-1264 https://huntr.dev/bounties/b2989095-88f3-413a-9a39-c1c58a6e6815 https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-1264.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "vim", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "bCZjE4S4e+JRkpJeCZ485w==": { "id": "bCZjE4S4e+JRkpJeCZ485w==", "updater": "rhel-vex", "name": "CVE-2026-41316", "description": "A flaw was found in ERB, a templating system for Ruby. An attacker who can trigger deserialization of untrusted data in a Ruby application can bypass existing protections. This vulnerability allows for arbitrary code execution by exploiting specific public methods that evaluate template source code, which were not properly guarded against deserialization attacks.", "issued": "2026-04-24T02:35:41Z", "links": "https://access.redhat.com/security/cve/CVE-2026-41316 https://bugzilla.redhat.com/show_bug.cgi?id=2461369 https://www.cve.org/CVERecord?id=CVE-2026-41316 https://nvd.nist.gov/vuln/detail/CVE-2026-41316 https://github.com/ruby/erb/security/advisories/GHSA-q339-8rmv-2mhv https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-41316.json https://access.redhat.com/errata/RHSA-2026:18030", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "normalized_severity": "High", "package": { "id": "", "name": "rubygem-irb", "version": "", "kind": "binary", "normalized_version": "", "module": "ruby:3.3", "arch": "noarch", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "0:1.13.1-6.module+el9.7.0+24248+66578cbb", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "bHbadSMaYCdCzwHNWG3fzw==": { "id": "bHbadSMaYCdCzwHNWG3fzw==", "updater": "rhel-vex", "name": "CVE-2025-55132", "description": "A file access flaw has been discovered in NodeJS. A file's access and modification timestamps to be changed via `futimes()` even when the process has only read permissions. Unlike `utimes()`, `futimes()` does not apply the expected write-permission checks, which means file metadata can be modified in read-only directories. This behavior could be used to alter timestamps in ways that obscure activity, reducing the reliability of logs.", "issued": "2026-01-20T20:41:55Z", "links": "https://access.redhat.com/security/cve/CVE-2025-55132 https://bugzilla.redhat.com/show_bug.cgi?id=2431338 https://www.cve.org/CVERecord?id=CVE-2025-55132 https://nvd.nist.gov/vuln/detail/CVE-2025-55132 https://nodejs.org/en/blog/vulnerability/december-2025-security-releases https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-55132.json https://access.redhat.com/errata/RHSA-2026:2782", "severity": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "normalized_severity": "Medium", "package": { "id": "", "name": "nodejs-docs", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "noarch", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:22.22.0-1.module+el9.7.0+23896+b5802de9", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "bJGGlc8FG/c2T93ktUh6Ig==": { "id": "bJGGlc8FG/c2T93ktUh6Ig==", "updater": "rhel-vex", "name": "CVE-2025-66418", "description": "A flaw was found in urllib3 Python library that could lead to a Denial of Service condition. A remote, malicious server can exploit this flaw by responding to a client request with an HTTP message that uses an excessive number of chained compression algorithms. This unlimited decompression chain causes the client system to consume a virtually unbounded amount of CPU resources and memory. The high resource usage leads to service disruption, making the application unresponsive.", "issued": "2025-12-05T16:02:15Z", "links": "https://access.redhat.com/security/cve/CVE-2025-66418 https://bugzilla.redhat.com/show_bug.cgi?id=2419455 https://www.cve.org/CVERecord?id=CVE-2025-66418 https://nvd.nist.gov/vuln/detail/CVE-2025-66418 https://github.com/urllib3/urllib3/commit/24d7b67eac89f94e11003424bcf0d8f7b72222a8 https://github.com/urllib3/urllib3/security/advisories/GHSA-gm62-xv2j-4w53 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-66418.json https://access.redhat.com/errata/RHSA-2026:1087", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "High", "package": { "id": "", "name": "python3-urllib3", "version": "", "kind": "binary", "normalized_version": "", "arch": "noarch", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:1.26.5-6.el9_7.1", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "bNVewgNMQNWC+EwlyIyTlA==": { "id": "bNVewgNMQNWC+EwlyIyTlA==", "updater": "rhel-vex", "name": "CVE-2026-45447", "description": "A flaw was found in OpenSSL. When processing a specially crafted PKCS#7 or S/MIME (Secure/Multipurpose Internet Mail Extensions) signed message, a heap use-after-free vulnerability in the PKCS7_verify() function can be triggered. This occurs if the SignedData digestAlgorithms field is present as an empty ASN.1 SET, leading to incorrect memory deallocation. A remote attacker could exploit this to cause application crashes, memory corruption, or potentially achieve remote code execution.", "issued": "2026-06-09T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-45447 https://bugzilla.redhat.com/show_bug.cgi?id=2481898 https://www.cve.org/CVERecord?id=CVE-2026-45447 https://nvd.nist.gov/vuln/detail/CVE-2026-45447 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-45447.json https://access.redhat.com/errata/RHSA-2026:25239", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "normalized_severity": "High", "package": { "id": "", "name": "openssl-devel", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:3.5.5-4.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "bOC69k4Gpn8Av1w/ra2Tdw==": { "id": "bOC69k4Gpn8Av1w/ra2Tdw==", "updater": "rhel-vex", "name": "CVE-2025-14104", "description": "A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the `setpwnam()` function, affecting SUID (Set User ID) login-utils utilities writing to the password database.", "issued": "2025-12-05T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2025-14104 https://bugzilla.redhat.com/show_bug.cgi?id=2419369 https://www.cve.org/CVERecord?id=CVE-2025-14104 https://nvd.nist.gov/vuln/detail/CVE-2025-14104 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-14104.json https://access.redhat.com/errata/RHSA-2026:1913", "severity": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "libuuid", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:2.37.4-21.el9_7", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "bQ1N5xPGM/wU59iAjdfQ6A==": { "id": "bQ1N5xPGM/wU59iAjdfQ6A==", "updater": "rhel-vex", "name": "CVE-2025-15468", "description": "A flaw was found in openssl. A remote attacker could trigger a NULL pointer dereference by sending an unknown or unsupported cipher ID during the client hello callback in applications using the QUIC (Quick UDP Internet Connections) protocol. This vulnerability, occurring when the SSL_CIPHER_find() function is called in this specific context, leads to an abnormal termination of the running process, causing a Denial of Service (DoS).", "issued": "2026-01-27T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2025-15468 https://bugzilla.redhat.com/show_bug.cgi?id=2430377 https://www.cve.org/CVERecord?id=CVE-2025-15468 https://nvd.nist.gov/vuln/detail/CVE-2025-15468 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-15468.json https://access.redhat.com/errata/RHSA-2026:1473", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "openssl", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "1:3.5.1-7.el9_7", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "bS47R6kjzBYQaQepU2dXHw==": { "id": "bS47R6kjzBYQaQepU2dXHw==", "updater": "rhel-vex", "name": "CVE-2026-42769", "description": "A flaw was found in the Certificate Management Protocol (CMP) implementation within OpenSSL. An attacker with existing Registration Authority (RA) level credentials could exploit an error in the certificate verification process during a Root Certificate Authority (CA) key update. This vulnerability allows the attacker to replace the root CA certificate for CMP clients with a fraudulent one. The primary consequence is an escalation of privileges, enabling the attacker to gain control equivalent to the root CA.", "issued": "2026-06-09T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-42769 https://bugzilla.redhat.com/show_bug.cgi?id=2481893 https://www.cve.org/CVERecord?id=CVE-2026-42769 https://nvd.nist.gov/vuln/detail/CVE-2026-42769 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42769.json https://access.redhat.com/errata/RHSA-2026:25239", "severity": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N", "normalized_severity": "Low", "package": { "id": "", "name": "openssl-devel", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:3.5.5-4.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "bXKnVRmmXzNE9gSoSjNlOQ==": { "id": "bXKnVRmmXzNE9gSoSjNlOQ==", "updater": "rhel-vex", "name": "CVE-2026-6477", "description": "A flaw was found in PostgreSQL libpq. A server superuser can exploit a buffer overflow vulnerability in the PQfn function, which is used by client functions such as lo_export(), lo_read(), lo_lseek64(), and lo_tell64(). This allows the superuser to send an arbitrarily large response, overwriting the client's stack memory, specifically in tools like psql and pg_dump. This could lead to arbitrary code execution on the client system.", "issued": "2026-05-14T13:00:12Z", "links": "https://access.redhat.com/security/cve/CVE-2026-6477 https://bugzilla.redhat.com/show_bug.cgi?id=2477442 https://www.cve.org/CVERecord?id=CVE-2026-6477 https://nvd.nist.gov/vuln/detail/CVE-2026-6477 https://www.postgresql.org/support/security/CVE-2026-6477/ https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6477.json https://access.redhat.com/errata/RHSA-2026:44308", "severity": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H", "normalized_severity": "High", "package": { "id": "", "name": "libpq", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "0:13.23-3.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "bZGx+ktPNqzyr9hXBoIOTA==": { "id": "bZGx+ktPNqzyr9hXBoIOTA==", "updater": "rhel-vex", "name": "CVE-2025-4598", "description": "A vulnerability was found in systemd-coredump. This flaw allows an attacker to force a SUID process to crash and replace it with a non-SUID binary to access the original's privileged process coredump, allowing the attacker to read sensitive data, such as /etc/shadow content, loaded by the original process.\n\nA SUID binary or process has a special type of permission, which allows the process to run with the file owner's permissions, regardless of the user executing the binary. This allows the process to access more restricted data than unprivileged users or processes would be able to. An attacker can leverage this flaw by forcing a SUID process to crash and force the Linux kernel to recycle the process PID before systemd-coredump can analyze the /proc/pid/auxv file. If the attacker wins the race condition, they gain access to the original's SUID process coredump file. They can read sensitive content loaded into memory by the original binary, affecting data confidentiality.", "issued": "2025-05-29T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2025-4598 https://bugzilla.redhat.com/show_bug.cgi?id=2369242 https://www.cve.org/CVERecord?id=CVE-2025-4598 https://nvd.nist.gov/vuln/detail/CVE-2025-4598 https://www.openwall.com/lists/oss-security/2025/05/29/3 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-4598.json https://access.redhat.com/errata/RHSA-2025:22660", "severity": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N", "normalized_severity": "Medium", "package": { "id": "", "name": "systemd", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:252-55.el9_7.7", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "bbylqjYpcbE9/Bm4AdduVQ==": { "id": "bbylqjYpcbE9/Bm4AdduVQ==", "updater": "rhel-vex", "name": "CVE-2025-58767", "description": "A denial of service flaw has been discovered in the rubygem REXML. Certain input can cause excess cpu usage and given sufficiently large input this can affect program performance.", "issued": "2025-09-17T17:45:58Z", "links": "https://access.redhat.com/security/cve/CVE-2025-58767 https://bugzilla.redhat.com/show_bug.cgi?id=2396186 https://www.cve.org/CVERecord?id=CVE-2025-58767 https://nvd.nist.gov/vuln/detail/CVE-2025-58767 https://github.com/ruby/rexml/commit/5859bdeac792687eaf93d8e8f0b7e3c1e2ed5c23 https://github.com/ruby/rexml/security/advisories/GHSA-c2f4-jgmc-q2r5 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-58767.json https://access.redhat.com/errata/RHSA-2025:23063", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "normalized_severity": "Medium", "package": { "id": "", "name": "rubygem-irb", "version": "", "kind": "binary", "normalized_version": "", "module": "ruby:3.3", "arch": "noarch", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "0:1.13.1-5.module+el9.7.0+23651+15dc1615", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "bcO+GuPgyR+iGLy6+mF2Cg==": { "id": "bcO+GuPgyR+iGLy6+mF2Cg==", "updater": "rhel-vex", "name": "CVE-2026-55892", "description": "A flaw was found in Vim, an open-source command-line text editor. A remote attacker could exploit this vulnerability by convincing a user to load a specially crafted spell file. This malicious file can trigger a stack out-of-bounds write, which corrupts the editor's memory and causes it to crash. This leads to a Denial of Service (DoS), making the editor unavailable to the user.", "issued": "2026-06-25T15:32:41Z", "links": "https://access.redhat.com/security/cve/CVE-2026-55892 https://bugzilla.redhat.com/show_bug.cgi?id=2492975 https://www.cve.org/CVERecord?id=CVE-2026-55892 https://nvd.nist.gov/vuln/detail/CVE-2026-55892 https://github.com/vim/vim/commit/8325b193bba5f01e7a7d8241f https://github.com/vim/vim/releases/tag/v9.2.0662 https://github.com/vim/vim/security/advisories/GHSA-qm9w-fmpj-879h https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-55892.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "vim", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "bf41zTvm6HAv6xdiXpwGWQ==": { "id": "bf41zTvm6HAv6xdiXpwGWQ==", "updater": "rhel-vex", "name": "CVE-2025-32728", "description": "A flaw was found in OpenSSH. In affected versions of sshd, the DisableForwarding directive does not fully adhere to the intended functionality as documented. Specifically, it fails to disable X11 and agent forwarding, which may allow unintended access under certain configurations.", "issued": "2025-04-10T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2025-32728 https://bugzilla.redhat.com/show_bug.cgi?id=2358767 https://www.cve.org/CVERecord?id=CVE-2025-32728 https://nvd.nist.gov/vuln/detail/CVE-2025-32728 https://lists.mindrot.org/pipermail/openssh-unix-dev/2025-April/041879.html https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-32728.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N", "normalized_severity": "Medium", "package": { "id": "", "name": "openssh", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "bg8JYRcvY0wFh5b8Bl6Gmw==": { "id": "bg8JYRcvY0wFh5b8Bl6Gmw==", "updater": "rhel-vex", "name": "CVE-2026-42766", "description": "A flaw was found in OpenSSL. A remote attacker could exploit a NULL pointer dereference vulnerability in the Cryptographic Message Syntax (CMS) decryption process by providing a specially crafted password-encrypted CMS message. This occurs because the keyDerivationAlgorithm field, which is optional, is dereferenced without proper validation. Successful exploitation leads to an application crash, resulting in a Denial of Service.", "issued": "2026-06-09T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-42766 https://bugzilla.redhat.com/show_bug.cgi?id=2481890 https://www.cve.org/CVERecord?id=CVE-2026-42766 https://nvd.nist.gov/vuln/detail/CVE-2026-42766 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42766.json https://access.redhat.com/errata/RHSA-2026:25239", "severity": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "openssl-devel", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:3.5.5-4.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "bh7RRRlNP555+LOFASdB0w==": { "id": "bh7RRRlNP555+LOFASdB0w==", "updater": "rhel-vex", "name": "CVE-2022-2980", "description": "A NULL pointer dereference vulnerability was found in vim's do_mouse() function of the src/mouse.c file. The issue occurs with a mouse click when it is not initialized. This flaw allows an attacker to trick a user into opening a specially crafted input file, triggering the vulnerability that could cause an application to crash.", "issued": "2022-08-25T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2022-2980 https://bugzilla.redhat.com/show_bug.cgi?id=2123709 https://www.cve.org/CVERecord?id=CVE-2022-2980 https://nvd.nist.gov/vuln/detail/CVE-2022-2980 https://huntr.dev/bounties/6e7b12a5-242c-453d-b39e-9625d563b0ea https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-2980.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "vim", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "bjyLMZdYnkrpUxDySiQ34Q==": { "id": "bjyLMZdYnkrpUxDySiQ34Q==", "updater": "rhel-vex", "name": "CVE-2025-15468", "description": "A flaw was found in openssl. A remote attacker could trigger a NULL pointer dereference by sending an unknown or unsupported cipher ID during the client hello callback in applications using the QUIC (Quick UDP Internet Connections) protocol. This vulnerability, occurring when the SSL_CIPHER_find() function is called in this specific context, leads to an abnormal termination of the running process, causing a Denial of Service (DoS).", "issued": "2026-01-27T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2025-15468 https://bugzilla.redhat.com/show_bug.cgi?id=2430377 https://www.cve.org/CVERecord?id=CVE-2025-15468 https://nvd.nist.gov/vuln/detail/CVE-2025-15468 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-15468.json https://access.redhat.com/errata/RHSA-2026:1473", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "openssl-libs", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "1:3.5.1-7.el9_7", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "bk6ikdg+f6vAFzgypr0cOw==": { "id": "bk6ikdg+f6vAFzgypr0cOw==", "updater": "rhel-vex", "name": "CVE-2026-48618", "description": "A flaw was found in Node.js. This flaw involves a mismatch in how Node.js handles TLS (Transport Layer Security) hostnames and unicode dot separators during authentication. This mismatch can lead to a wildcard-depth authentication bypass. An attacker could exploit this to bypass intended security boundaries, potentially leading to unauthorized access and confidentiality impact.", "issued": "2026-06-26T01:14:36Z", "links": "https://access.redhat.com/security/cve/CVE-2026-48618 https://bugzilla.redhat.com/show_bug.cgi?id=2493337 https://www.cve.org/CVERecord?id=CVE-2026-48618 https://nvd.nist.gov/vuln/detail/CVE-2026-48618 https://nodejs.org/en/blog/vulnerability/june-2026-security-releases https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-48618.json https://access.redhat.com/errata/RHSA-2026:35892", "severity": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N", "normalized_severity": "High", "package": { "id": "", "name": "nodejs-full-i18n", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:22.23.1-1.module+el9.8.0+24457+996af7aa", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "boWBDvSNZPI7kiGalqeu1g==": { "id": "boWBDvSNZPI7kiGalqeu1g==", "updater": "rhel-vex", "name": "CVE-2026-42258", "description": "A flaw was found in Net::IMAP, a Ruby library that provides Internet Message Access Protocol (IMAP) client functionality. This vulnerability allows a remote attacker to inject arbitrary IMAP commands. This is achieved by passing specially crafted symbol arguments to IMAP commands. Successful exploitation could lead to unauthorized actions on the IMAP server or client, potentially resulting in information disclosure or other integrity impacts.", "issued": "2026-05-09T19:40:49Z", "links": "https://access.redhat.com/security/cve/CVE-2026-42258 https://bugzilla.redhat.com/show_bug.cgi?id=2468498 https://www.cve.org/CVERecord?id=CVE-2026-42258 https://nvd.nist.gov/vuln/detail/CVE-2026-42258 https://github.com/ruby/net-imap/releases/tag/v0.4.24 https://github.com/ruby/net-imap/releases/tag/v0.5.14 https://github.com/ruby/net-imap/releases/tag/v0.6.4 https://github.com/ruby/net-imap/security/advisories/GHSA-75xq-5h9v-w6px https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42258.json https://access.redhat.com/errata/RHSA-2026:33576", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:N", "normalized_severity": "High", "package": { "id": "", "name": "rubygem-json", "version": "", "kind": "binary", "normalized_version": "", "module": "ruby:3.3", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "0:2.7.2-7.module+el9.8.0+24406+8975e57f", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "bpwdCug2xQZhmaazCqwIew==": { "id": "bpwdCug2xQZhmaazCqwIew==", "updater": "rhel-vex", "name": "CVE-2023-51767", "description": "An authentication bypass vulnerability was found in a modified version of OpenSSH. When common types of DRAM memory are used, it might allow row hammer attacks because the integer value of authenticated authpassword does not resist flips of a single bit. Exploiting a Rowhammer-style attack to flip bits in memory, forces successful authentication by setting the return code to 0.", "issued": "2023-12-24T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2023-51767 https://bugzilla.redhat.com/show_bug.cgi?id=2255850 https://www.cve.org/CVERecord?id=CVE-2023-51767 https://nvd.nist.gov/vuln/detail/CVE-2023-51767 https://arxiv.org/abs/2309.02545 https://github.com/openssh/openssh-portable/blob/8241b9c0529228b4b86d88b1a6076fb9f97e4a99/auth-passwd.c#L77 https://github.com/openssh/openssh-portable/blob/8241b9c0529228b4b86d88b1a6076fb9f97e4a99/monitor.c#L878 https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-51767.json", "severity": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "openssh", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "br+ShorUFea/O+vyZNDWZQ==": { "id": "br+ShorUFea/O+vyZNDWZQ==", "updater": "rhel-vex", "name": "CVE-2024-34459", "description": "A flaw was found in the xmllint program distributed by the libxml2 package. A buffer over-read in the xmlHTMLPrintFileContext function in the xmllint.c file may be triggered when a crafted file is processed with the xmllint program using the `--htmlout` command line option, causing an application crash and resulting in a denial of service.", "issued": "2024-05-08T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2024-34459 https://bugzilla.redhat.com/show_bug.cgi?id=2280532 https://www.cve.org/CVERecord?id=CVE-2024-34459 https://nvd.nist.gov/vuln/detail/CVE-2024-34459 https://gitlab.gnome.org/GNOME/libxml2/-/issues/720 https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-34459.json https://access.redhat.com/errata/RHSA-2026:28254", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "libxml2", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:2.9.13-14.el9_8.1", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "bugTfOdgCaATW4vTnuXTSQ==": { "id": "bugTfOdgCaATW4vTnuXTSQ==", "updater": "rhel-vex", "name": "CVE-2025-70873", "description": "A flaw was found in SQLite. This information disclosure vulnerability exists within the zipfile extension, specifically in the zipfileInflate function. A remote attacker could exploit this by providing a specially crafted ZIP file. Successful exploitation could lead to the disclosure of sensitive heap memory information.", "issued": "2026-03-12T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2025-70873 https://bugzilla.redhat.com/show_bug.cgi?id=2447086 https://www.cve.org/CVERecord?id=CVE-2025-70873 https://nvd.nist.gov/vuln/detail/CVE-2025-70873 https://gist.github.com/cnwangjihe/f496393f30f5ecec5b18c8f5ab072054 https://sqlite.org/forum/forumpost/761eac3c82 https://sqlite.org/src/info/3d459f1fb1bd1b5e https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-70873.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N", "normalized_severity": "Low", "package": { "id": "", "name": "sqlite", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "c2gL4Z8Tbc2Ge5iwCDCV9Q==": { "id": "c2gL4Z8Tbc2Ge5iwCDCV9Q==", "updater": "rhel-vex", "name": "CVE-2025-58767", "description": "A denial of service flaw has been discovered in the rubygem REXML. Certain input can cause excess cpu usage and given sufficiently large input this can affect program performance.", "issued": "2025-09-17T17:45:58Z", "links": "https://access.redhat.com/security/cve/CVE-2025-58767 https://bugzilla.redhat.com/show_bug.cgi?id=2396186 https://www.cve.org/CVERecord?id=CVE-2025-58767 https://nvd.nist.gov/vuln/detail/CVE-2025-58767 https://github.com/ruby/rexml/commit/5859bdeac792687eaf93d8e8f0b7e3c1e2ed5c23 https://github.com/ruby/rexml/security/advisories/GHSA-c2f4-jgmc-q2r5 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-58767.json https://access.redhat.com/errata/RHSA-2025:23063", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "normalized_severity": "Medium", "package": { "id": "", "name": "rubygems", "version": "", "kind": "binary", "normalized_version": "", "module": "ruby:3.3", "arch": "noarch", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "0:3.5.22-5.module+el9.7.0+23651+15dc1615", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "c76DQiDMr2npmMChLqBaow==": { "id": "c76DQiDMr2npmMChLqBaow==", "updater": "rhel-vex", "name": "CVE-2026-48928", "description": "A flaw was found in Node.js. An inconsistency in how Node.js matches hostnames can be exploited by a remote attacker in multi-context mTLS (mutual Transport Layer Security) setups. This vulnerability allows for a trust-policy bypass, potentially leading to unauthorized access to sensitive information or integrity compromise within the affected system.", "issued": "2026-06-26T01:14:36Z", "links": "https://access.redhat.com/security/cve/CVE-2026-48928 https://bugzilla.redhat.com/show_bug.cgi?id=2493333 https://www.cve.org/CVERecord?id=CVE-2026-48928 https://nvd.nist.gov/vuln/detail/CVE-2026-48928 https://nodejs.org/en/blog/vulnerability/june-2026-security-releases https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-48928.json https://access.redhat.com/errata/RHSA-2026:35892", "severity": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N", "normalized_severity": "Medium", "package": { "id": "", "name": "npm", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:10.9.8-1.22.23.1.1.module+el9.8.0+24457+996af7aa", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "cI+dz7I9kKgyQoTuHBA+4Q==": { "id": "cI+dz7I9kKgyQoTuHBA+4Q==", "updater": "rhel-vex", "name": "CVE-2026-2229", "description": "A flaw was found in the undici WebSocket client. A remote malicious server can exploit this vulnerability by sending a WebSocket frame with an invalid `server_max_window_bits` parameter within the permessage-deflate extension. This improper validation causes the client's Node.js process to terminate, leading to a denial-of-service (DoS) condition for the client.", "issued": "2026-03-12T20:27:05Z", "links": "https://access.redhat.com/security/cve/CVE-2026-2229 https://bugzilla.redhat.com/show_bug.cgi?id=2447143 https://www.cve.org/CVERecord?id=CVE-2026-2229 https://nvd.nist.gov/vuln/detail/CVE-2026-2229 https://cna.openjsf.org/security-advisories.html https://datatracker.ietf.org/doc/html/rfc7692 https://github.com/nodejs/undici/security/advisories/GHSA-v9p9-hfj2-hcw8 https://hackerone.com/reports/3487486 https://nodejs.org/api/zlib.html#class-zlibinflateraw https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-2229.json https://access.redhat.com/errata/RHSA-2026:7302", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "High", "package": { "id": "", "name": "nodejs", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "aarch64|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:22.22.2-1.module+el9.7.0+24157+8ddb2461", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "cMY+6QfPqyOZE380Mf5rIQ==": { "id": "cMY+6QfPqyOZE380Mf5rIQ==", "updater": "rhel-vex", "name": "CVE-2022-0351", "description": "A flaw was found in vim. The vulnerability occurs due to too many recursions, which can lead to a segmentation fault. This flaw allows an attacker to input a specially crafted file, leading to a crash or code execution.", "issued": "2022-01-23T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2022-0351 https://bugzilla.redhat.com/show_bug.cgi?id=2046436 https://www.cve.org/CVERecord?id=CVE-2022-0351 https://nvd.nist.gov/vuln/detail/CVE-2022-0351 https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-0351.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "vim", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "cQ4uQyL9nbrYK9Ka1PjEaQ==": { "id": "cQ4uQyL9nbrYK9Ka1PjEaQ==", "updater": "rhel-vex", "name": "CVE-2026-59873", "description": "A flaw was found in node-tar, a tar archive manipulation library for Node.js. This vulnerability allows a remote attacker to craft a small gzip bomb, which, when processed, can lead to the exhaustion of disk space and CPU resources. This occurs because node-tar does not enforce strict limits on the total decompressed data, the number of entries, or the decompression ratio during extraction and parsing. The primary impact is a Denial of Service (DoS), making the affected system or application unavailable.", "issued": "2026-07-08T15:22:40Z", "links": "https://access.redhat.com/security/cve/CVE-2026-59873 https://bugzilla.redhat.com/show_bug.cgi?id=2498120 https://www.cve.org/CVERecord?id=CVE-2026-59873 https://nvd.nist.gov/vuln/detail/CVE-2026-59873 https://github.com/isaacs/node-tar/commit/2812e9338665659b183aa7226518c307044957d3 https://github.com/isaacs/node-tar/releases/tag/v7.5.19 https://github.com/isaacs/node-tar/security/advisories/GHSA-23hp-3jrh-7fpw https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59873.json https://access.redhat.com/errata/RHSA-2026:47058", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "High", "package": { "id": "", "name": "nodejs", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "aarch64|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:22.23.1-2.module+el9.8.0+24538+3f176d52", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "cQHSxL+ZfKCYmJnTVIzcRw==": { "id": "cQHSxL+ZfKCYmJnTVIzcRw==", "updater": "rhel-vex", "name": "CVE-2026-48615", "description": "A flaw was found in Node.js. When proxy credentials are embedded in a proxy URL, an issue in the proxy tunnel error handling can lead to the exposure of these credentials. This information disclosure vulnerability allows an attacker to potentially capture sensitive proxy credentials through logs, diagnostics, or other error-consuming mechanisms.", "issued": "2026-06-26T01:14:36Z", "links": "https://access.redhat.com/security/cve/CVE-2026-48615 https://bugzilla.redhat.com/show_bug.cgi?id=2493335 https://www.cve.org/CVERecord?id=CVE-2026-48615 https://nvd.nist.gov/vuln/detail/CVE-2026-48615 https://nodejs.org/en/blog/vulnerability/june-2026-security-releases https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-48615.json https://access.redhat.com/errata/RHSA-2026:35892", "severity": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "normalized_severity": "Medium", "package": { "id": "", "name": "nodejs", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "aarch64|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:22.23.1-1.module+el9.8.0+24457+996af7aa", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "cXB5uJOI3UJ7dOyNiQwFDg==": { "id": "cXB5uJOI3UJ7dOyNiQwFDg==", "updater": "rhel-vex", "name": "CVE-2021-46195", "description": "A flaw was discovered in the GNU libiberty library within the demangle_path() function in rust-demangle.c, as distributed in the GNU Compiler Collection (GCC). This flaw allows a crafted symbol to cause stack memory to be exhausted, leading to a crash.", "issued": "2021-01-29T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2021-46195 https://bugzilla.redhat.com/show_bug.cgi?id=2046300 https://www.cve.org/CVERecord?id=CVE-2021-46195 https://nvd.nist.gov/vuln/detail/CVE-2021-46195 https://security.access.redhat.com/data/csaf/v2/vex/2021/cve-2021-46195.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "normalized_severity": "Low", "package": { "id": "", "name": "gcc", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "cebQbn0Dg58LegYW4JDjIA==": { "id": "cebQbn0Dg58LegYW4JDjIA==", "updater": "rhel-vex", "name": "CVE-2026-4775", "description": "A flaw was found in the libtiff library. A remote attacker could exploit a signed integer overflow vulnerability in the putcontig8bitYCbCr44tile function by providing a specially crafted TIFF file. This flaw can lead to an out-of-bounds heap write due to incorrect memory pointer calculations, potentially causing a denial of service (application crash) or arbitrary code execution.", "issued": "2026-03-24T14:33:35Z", "links": "https://access.redhat.com/security/cve/CVE-2026-4775 https://bugzilla.redhat.com/show_bug.cgi?id=2450768 https://www.cve.org/CVERecord?id=CVE-2026-4775 https://nvd.nist.gov/vuln/detail/CVE-2026-4775 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-4775.json https://access.redhat.com/errata/RHSA-2026:19363", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "normalized_severity": "High", "package": { "id": "", "name": "libtiff", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "0:4.4.0-18.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "chGqAT1jYixNKwXlctnUeg==": { "id": "chGqAT1jYixNKwXlctnUeg==", "updater": "rhel-vex", "name": "CVE-2025-59465", "description": "A denial of service flaw has been discovered in NodeJS. A malformed `HTTP/2 HEADERS` frame with oversized, invalid `HPACK` data can cause Node.js to crash by triggering an unhandled `TLSSocket` error `ECONNRESET`. Instead of safely closing the connection, the process crashes, enabling a remote denial of service. This primarily affects applications that do not attach explicit error handlers to secure sockets", "issued": "2026-01-20T20:41:55Z", "links": "https://access.redhat.com/security/cve/CVE-2025-59465 https://bugzilla.redhat.com/show_bug.cgi?id=2431349 https://www.cve.org/CVERecord?id=CVE-2025-59465 https://nvd.nist.gov/vuln/detail/CVE-2025-59465 https://nodejs.org/en/blog/vulnerability/december-2025-security-releases https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-59465.json https://access.redhat.com/errata/RHSA-2026:2782", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "High", "package": { "id": "", "name": "nodejs-full-i18n", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:22.22.0-1.module+el9.7.0+23896+b5802de9", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "cjoCrbQlAeGxtTPUlcMPuA==": { "id": "cjoCrbQlAeGxtTPUlcMPuA==", "updater": "rhel-vex", "name": "CVE-2025-26603", "description": "A flaw was found in Vim's :redir command. This vulnerability allows a use-after-free condition via redirecting the :display command to a clipboard register (* or +), which allows access to freed memory.", "issued": "2025-02-18T19:04:24Z", "links": "https://access.redhat.com/security/cve/CVE-2025-26603 https://bugzilla.redhat.com/show_bug.cgi?id=2346346 https://www.cve.org/CVERecord?id=CVE-2025-26603 https://nvd.nist.gov/vuln/detail/CVE-2025-26603 https://github.com/vim/vim/commit/c0f0e2380e5954f4a52a131bf6b8 https://github.com/vim/vim/security/advisories/GHSA-63p5-mwg2-787v https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-26603.json", "severity": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L", "normalized_severity": "Low", "package": { "id": "", "name": "vim", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "cly/G/AvUZQM2J1YMymkpQ==": { "id": "cly/G/AvUZQM2J1YMymkpQ==", "updater": "rhel-vex", "name": "CVE-2025-66866", "description": "A flaw was found in BinUtils. An attacker can exploit a vulnerability in the `d_abi_tags` function within the `cp-demangle.c` file by providing a specially crafted Portable Executable (PE) file. This can lead to a Denial of Service (DoS), making the affected application unavailable to legitimate users.", "issued": "2025-12-29T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2025-66866 https://bugzilla.redhat.com/show_bug.cgi?id=2425830 https://www.cve.org/CVERecord?id=CVE-2025-66866 https://nvd.nist.gov/vuln/detail/CVE-2025-66866 https://github.com/caozhzh/CRGF-Vul/blob/main/cxxfilt/crash6.md https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-66866.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "normalized_severity": "Low", "package": { "id": "", "name": "binutils", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "ctALzLE36TiW3KdxIlF4Mw==": { "id": "ctALzLE36TiW3KdxIlF4Mw==", "updater": "rhel-vex", "name": "CVE-2026-8924", "description": "A flaw was found in curl's cookie parsing logic. A malicious HTTP server can exploit this by setting 'super cookies' that bypass the Public Suffix List check. This allows an attacker-controlled origin to inject cookies that curl then transmits to unrelated third-party domains, leading to compromising request integrity.", "issued": "2026-07-03T06:15:04Z", "links": "https://access.redhat.com/security/cve/CVE-2026-8924 https://bugzilla.redhat.com/show_bug.cgi?id=2496765 https://www.cve.org/CVERecord?id=CVE-2026-8924 https://nvd.nist.gov/vuln/detail/CVE-2026-8924 https://curl.se/docs/CVE-2026-8924.html https://curl.se/docs/CVE-2026-8924.json https://hackerone.com/reports/3733905 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-8924.json", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "normalized_severity": "Medium", "package": { "id": "", "name": "curl", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "cxMZ2TEnkk6RdtuU9fDThg==": { "id": "cxMZ2TEnkk6RdtuU9fDThg==", "updater": "rhel-vex", "name": "CVE-2021-3927", "description": "A flaw was found in vim. A possible heap-based buffer overflow could allow an attacker to input a specially crafted file leading to a crash or code execution. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.", "issued": "2021-10-26T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2021-3927 https://bugzilla.redhat.com/show_bug.cgi?id=2021290 https://www.cve.org/CVERecord?id=CVE-2021-3927 https://nvd.nist.gov/vuln/detail/CVE-2021-3927 https://security.access.redhat.com/data/csaf/v2/vex/2021/cve-2021-3927.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "vim", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "czyzjx8xL/qpVEGcPiV7Og==": { "id": "czyzjx8xL/qpVEGcPiV7Og==", "updater": "rhel-vex", "name": "CVE-2024-12086", "description": "A flaw was found in rsync. It could allow a server to enumerate the contents of an arbitrary file from the client's machine. This issue occurs when files are being copied from a client to a server. During this process, the rsync server will send checksums of local data to the client to compare with in order to determine what data needs to be sent to the server. By sending specially constructed checksum values for arbitrary files, an attacker may be able to reconstruct the data of those files byte-by-byte based on the responses from the client.", "issued": "2025-01-14T15:06:00Z", "links": "https://access.redhat.com/security/cve/CVE-2024-12086 https://bugzilla.redhat.com/show_bug.cgi?id=2330577 https://www.cve.org/CVERecord?id=CVE-2024-12086 https://nvd.nist.gov/vuln/detail/CVE-2024-12086 https://kb.cert.org/vuls/id/952657 https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-12086.json https://access.redhat.com/errata/RHSA-2026:19368", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N", "normalized_severity": "Medium", "package": { "id": "", "name": "rsync", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:3.2.5-7.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "d+D4c9x4GMdq33+dJrszxQ==": { "id": "d+D4c9x4GMdq33+dJrszxQ==", "updater": "rhel-vex", "name": "CVE-2026-19548", "description": "Multiple Use-After-Free vulnerabilities were found in the add_archive_element function in ld/ldmain.c of the GNU linker (ld), a component of binutils. The root cause is that plugin_maybe_claim() in ld/plugin.c frees the original BFD object via bfd_close/_bfd_delete_bfd when entry-\u003ethe_bfd-\u003emy_archive == NULL, but the caller retains both the original abfd parameter and a shallow copy (orig_input.the_bfd) as dangling pointers. These dangling pointers are subsequently dereferenced at three distinct locations in add_archive_element:\n\n1. Line ~1442: accessing abfd-\u003emy_archive via bfd_usrdata(abfd-\u003emy_archive)\n2. Line ~1493: multiple accesses to abfd and abfd-\u003emy_archive in a conditional check and bfd_get_filename call\n3. Line ~1525: dereferencing the shallow copy orig_input.the_bfd-\u003emy_archive in trace/verbose logging\n\nThe vulnerability is triggered when LTO plugins are active (link_info.lto_plugin_active is true) and the input object has abfd-\u003emy_archive == NULL, which is a valid state for standalone object files. Red Hat builds binutils with --enable-plugins and --enable-lto, confirming the vulnerable code path is compiled in and reachable.\n\nAn attacker who can supply a crafted object or archive file to a build process using LTO-enabled linking could exploit this flaw to cause a denial of service (linker crash via segmentation fault). Arbitrary code execution is theoretically possible through heap manipulation but is substantially mitigated by hardening measures including stack protector, FORTIFY_SOURCE, ASLR, and PIE.\n\nThe attack surface is limited to build-time environments — the linker is a development tool not exposed in production runtime. The most realistic exploitation scenario is a supply chain attack introducing a crafted object file as a build dependency in CI/CD pipelines or development environments.", "issued": "2026-08-12T13:40:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-19548 https://bugzilla.redhat.com/show_bug.cgi?id=2507832 https://www.cve.org/CVERecord?id=CVE-2026-19548 https://nvd.nist.gov/vuln/detail/CVE-2026-19548 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-19548.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "binutils", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "d/522T+B/ARMNSG+3QfAWA==": { "id": "d/522T+B/ARMNSG+3QfAWA==", "updater": "rhel-vex", "name": "CVE-2026-22185", "description": "A flaw was found in OpenLDAP Lightning Memory-Mapped Database (LMDB) mdb_load. When processing malformed input, a local attacker can exploit a heap buffer underflow vulnerability in the readline() function. This can lead to an out-of-bounds read, potentially causing a denial of service (DoS) and limited disclosure of heap memory contents.", "issued": "2026-01-07T20:26:30Z", "links": "https://access.redhat.com/security/cve/CVE-2026-22185 https://bugzilla.redhat.com/show_bug.cgi?id=2427679 https://www.cve.org/CVERecord?id=CVE-2026-22185 https://nvd.nist.gov/vuln/detail/CVE-2026-22185 https://seclists.org/fulldisclosure/2026/Jan/5 https://seclists.org/fulldisclosure/2026/Jan/8 https://www.openldap.org/ https://www.vulncheck.com/advisories/openldap-lmdb-mdb-load-heap-buffer-underflow-in-readline https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-22185.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "openldap", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "d0nPfXoEZybRuV9TMDY3YQ==": { "id": "d0nPfXoEZybRuV9TMDY3YQ==", "updater": "rhel-vex", "name": "CVE-2026-6253", "description": "A flaw was found in curl. When curl is configured to use distinct proxies for different URL schemes, a redirect from a URL using an authenticated proxy to one using an unauthenticated proxy can inadvertently expose the initial proxy's credentials. This improper credential management (CWE-522) may allow an attacker to gain unauthorized access or information by intercepting these disclosed credentials.", "issued": "2026-04-29T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-6253 https://bugzilla.redhat.com/show_bug.cgi?id=2461202 https://www.cve.org/CVERecord?id=CVE-2026-6253 https://nvd.nist.gov/vuln/detail/CVE-2026-6253 https://curl.se/docs/CVE-2026-6253.html https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6253.json", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N", "normalized_severity": "Medium", "package": { "id": "", "name": "curl", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "d28O4EsS+H4v4JSsIykoOg==": { "id": "d28O4EsS+H4v4JSsIykoOg==", "updater": "rhel-vex", "name": "CVE-2026-48615", "description": "A flaw was found in Node.js. When proxy credentials are embedded in a proxy URL, an issue in the proxy tunnel error handling can lead to the exposure of these credentials. This information disclosure vulnerability allows an attacker to potentially capture sensitive proxy credentials through logs, diagnostics, or other error-consuming mechanisms.", "issued": "2026-06-26T01:14:36Z", "links": "https://access.redhat.com/security/cve/CVE-2026-48615 https://bugzilla.redhat.com/show_bug.cgi?id=2493335 https://www.cve.org/CVERecord?id=CVE-2026-48615 https://nvd.nist.gov/vuln/detail/CVE-2026-48615 https://nodejs.org/en/blog/vulnerability/june-2026-security-releases https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-48615.json https://access.redhat.com/errata/RHSA-2026:35892", "severity": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "normalized_severity": "Medium", "package": { "id": "", "name": "nodejs-full-i18n", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:22.23.1-1.module+el9.8.0+24457+996af7aa", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "d3Z1riL6AkoWkk27zYoWCw==": { "id": "d3Z1riL6AkoWkk27zYoWCw==", "updater": "rhel-vex", "name": "CVE-2026-58055", "description": "A flaw in nghttp2's nghttpx proxy allows a remote attacker to perform HTTP request smuggling and cross-client response-queue poisoning. This occurs because the proxy ambiguously forwards HTTP/1.1 Upgrade requests that contain a Content-Length header to reusable keep-alive backend connections.", "issued": "2026-06-28T01:32:57Z", "links": "https://access.redhat.com/security/cve/CVE-2026-58055 https://bugzilla.redhat.com/show_bug.cgi?id=2493954 https://www.cve.org/CVERecord?id=CVE-2026-58055 https://nvd.nist.gov/vuln/detail/CVE-2026-58055 https://github.com/bikini/exploitarium/tree/main/nghttp2-nghttpx-upgrade-queue-poison-poc https://github.com/nghttp2/nghttp2/commit/ab28105c4a0197da24f8bfc414bc116055249e1e https://www.vulncheck.com/advisories/nghttp2-nghttpx-http-request-response-smuggling-via-upgrade-request-with-content-length https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-58055.json https://access.redhat.com/errata/RHSA-2026:54662", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N", "normalized_severity": "Medium", "package": { "id": "", "name": "libnghttp2", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:1.43.0-6.el9_8.2", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "d9oy2JiAKtie2N1lu2J6ew==": { "id": "d9oy2JiAKtie2N1lu2J6ew==", "updater": "rhel-vex", "name": "CVE-2026-4224", "description": "A stack overflow flaw has been discovered in the python pyexpat module. When an Expat parser with a registered ElementDeclHandler parses an inline document type definition containing a deeply nested content model a C stack overflow occurs. This will result in a program crash.", "issued": "2026-03-16T17:52:26Z", "links": "https://access.redhat.com/security/cve/CVE-2026-4224 https://bugzilla.redhat.com/show_bug.cgi?id=2448181 https://www.cve.org/CVERecord?id=CVE-2026-4224 https://nvd.nist.gov/vuln/detail/CVE-2026-4224 https://github.com/python/cpython/commit/196edfb06a7458377d4d0f4b3cd41724c1f3bd4a https://github.com/python/cpython/commit/e0a8a6da90597a924b300debe045cdb4628ee1f3 https://github.com/python/cpython/commit/eb0e8be3a7e11b87d198a2c3af1ed0eccf532768 https://github.com/python/cpython/issues/145986 https://github.com/python/cpython/pull/145987 https://mail.python.org/archives/list/security-announce@python.org/thread/5M7CGUW3XBRY7II4DK43KF7NQQ3TPZ6R/ https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-4224.json", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "python3.9", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "dDPwWBP+ziJTbpE/idIe+w==": { "id": "dDPwWBP+ziJTbpE/idIe+w==", "updater": "rhel-vex", "name": "CVE-2026-34181", "description": "A flaw was found in OpenSSL. This vulnerability allows a remote attacker to forge PKCS#12 (Public-Key Cryptography Standards #12) files that use Password-Based Message Authentication Code 1 (PBMAC1) with short HMAC (Hash-based Message Authentication Code) keys. This can lead to a service accepting attacker-controlled certificates and private keys with a 1 in 256 probability, potentially enabling impersonation.", "issued": "2026-06-09T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-34181 https://bugzilla.redhat.com/show_bug.cgi?id=2481882 https://www.cve.org/CVERecord?id=CVE-2026-34181 https://nvd.nist.gov/vuln/detail/CVE-2026-34181 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-34181.json https://access.redhat.com/errata/RHSA-2026:25239", "severity": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N", "normalized_severity": "Low", "package": { "id": "", "name": "openssl-libs", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "1:3.5.5-4.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "dKzgwwkG/spsYd8PVvrk6A==": { "id": "dKzgwwkG/spsYd8PVvrk6A==", "updater": "rhel-vex", "name": "CVE-2023-39804", "description": "A flaw was found in tar. This issue occurs when extended attributes are processed in PAX archives, and could allow an attacker to cause an application crash, resulting in a denial of service.", "issued": "2023-12-11T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2023-39804 https://bugzilla.redhat.com/show_bug.cgi?id=2254067 https://www.cve.org/CVERecord?id=CVE-2023-39804 https://nvd.nist.gov/vuln/detail/CVE-2023-39804 https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-39804.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "normalized_severity": "Low", "package": { "id": "", "name": "tar", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "dNLHuLPIX/j9HB0bv6uBww==": { "id": "dNLHuLPIX/j9HB0bv6uBww==", "updater": "rhel-vex", "name": "CVE-2026-33636", "description": "A flaw was found in libpng. A remote attacker could exploit an out-of-bounds read and write vulnerability in the ARM/AArch64 Neon-optimized palette expansion path. This occurs when processing a final partial chunk of 8-bit paletted rows without verifying sufficient input pixels, leading to dereferencing pointers before the start of the row buffer and writing expanded pixel data to underflowed positions. This flaw can result in information disclosure and denial of service.", "issued": "2026-03-26T16:51:58Z", "links": "https://access.redhat.com/security/cve/CVE-2026-33636 https://bugzilla.redhat.com/show_bug.cgi?id=2451819 https://www.cve.org/CVERecord?id=CVE-2026-33636 https://nvd.nist.gov/vuln/detail/CVE-2026-33636 https://github.com/pnggroup/libpng/commit/7734cda20cf1236aef60f3bbd2267c97bbb40869 https://github.com/pnggroup/libpng/commit/aba9f18eba870d14fb52c5ba5d73451349e339c3 https://github.com/pnggroup/libpng/security/advisories/GHSA-wjr5-c57x-95m2 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33636.json https://access.redhat.com/errata/RHSA-2026:28255", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "libpng", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "2:1.6.37-15.el9_8.2", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "dO/rj/SVo/ZlfJAB2ajOEQ==": { "id": "dO/rj/SVo/ZlfJAB2ajOEQ==", "updater": "rhel-vex", "name": "CVE-2023-5535", "description": "A heap-based buffer overflow vulnerability was found in some affected packages of Vim. This flaw allows an attacker to send a specially crafted file that could lead to a complete system compromise when opened by a victim.", "issued": "2023-10-10T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2023-5535 https://bugzilla.redhat.com/show_bug.cgi?id=2244101 https://www.cve.org/CVERecord?id=CVE-2023-5535 https://nvd.nist.gov/vuln/detail/CVE-2023-5535 https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-5535.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "normalized_severity": "Low", "package": { "id": "", "name": "vim", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "dOcg60kDi70nJl9Km2ugWQ==": { "id": "dOcg60kDi70nJl9Km2ugWQ==", "updater": "rhel-vex", "name": "CVE-2026-4519", "description": "A flaw was found in Python. The `webbrowser.open()` API, used to launch web browsers, does not properly sanitize input. This allows a remote attacker to craft a malicious URL containing leading dashes. When such a URL is opened, certain web browsers may interpret these dashes as command-line options, which could lead to unexpected behavior, information disclosure, or potentially arbitrary code execution, impacting the integrity of the system.", "issued": "2026-03-20T15:08:32Z", "links": "https://access.redhat.com/security/cve/CVE-2026-4519 https://bugzilla.redhat.com/show_bug.cgi?id=2449649 https://www.cve.org/CVERecord?id=CVE-2026-4519 https://nvd.nist.gov/vuln/detail/CVE-2026-4519 https://github.com/python/cpython/issues/143930 https://github.com/python/cpython/pull/143931 https://mail.python.org/archives/list/security-announce@python.org/thread/AY5NDSS433JK56Q7Q5IS7B37QFZVVOUS/ https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-4519.json https://access.redhat.com/errata/RHSA-2026:19216", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L", "normalized_severity": "High", "package": { "id": "", "name": "python3", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:3.9.25-7.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "dQM2EJNgLlaaPe53GlhnMg==": { "id": "dQM2EJNgLlaaPe53GlhnMg==", "updater": "rhel-vex", "name": "CVE-2026-34183", "description": "A flaw was found in OpenSSL's QUIC PATH_CHALLENGE handler. A remote attacker can exploit this vulnerability by flooding a QUIC client or server with specially crafted PATH_CHALLENGE frames. This leads to unbounded memory allocation within the local QUIC stack, as the system continuously allocates PATH_RESPONSE frames without them being acknowledged. The primary consequence is a Denial of Service (DoS), causing the affected application to terminate abnormally due to memory exhaustion.", "issued": "2026-06-09T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-34183 https://bugzilla.redhat.com/show_bug.cgi?id=2481885 https://www.cve.org/CVERecord?id=CVE-2026-34183 https://nvd.nist.gov/vuln/detail/CVE-2026-34183 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-34183.json https://access.redhat.com/errata/RHSA-2026:25239", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "openssl-devel", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:3.5.5-4.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "dTHv7xNEey4Rvi0jaC90Ng==": { "id": "dTHv7xNEey4Rvi0jaC90Ng==", "updater": "rhel-vex", "name": "CVE-2026-42258", "description": "A flaw was found in Net::IMAP, a Ruby library that provides Internet Message Access Protocol (IMAP) client functionality. This vulnerability allows a remote attacker to inject arbitrary IMAP commands. This is achieved by passing specially crafted symbol arguments to IMAP commands. Successful exploitation could lead to unauthorized actions on the IMAP server or client, potentially resulting in information disclosure or other integrity impacts.", "issued": "2026-05-09T19:40:49Z", "links": "https://access.redhat.com/security/cve/CVE-2026-42258 https://bugzilla.redhat.com/show_bug.cgi?id=2468498 https://www.cve.org/CVERecord?id=CVE-2026-42258 https://nvd.nist.gov/vuln/detail/CVE-2026-42258 https://github.com/ruby/net-imap/releases/tag/v0.4.24 https://github.com/ruby/net-imap/releases/tag/v0.5.14 https://github.com/ruby/net-imap/releases/tag/v0.6.4 https://github.com/ruby/net-imap/security/advisories/GHSA-75xq-5h9v-w6px https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42258.json https://access.redhat.com/errata/RHSA-2026:33576", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:N", "normalized_severity": "High", "package": { "id": "", "name": "rubygem-rake", "version": "", "kind": "binary", "normalized_version": "", "module": "ruby:3.3", "arch": "noarch", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "0:13.1.0-7.module+el9.8.0+24406+8975e57f", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "dXN2fYt7gJPawfay7UcWxA==": { "id": "dXN2fYt7gJPawfay7UcWxA==", "updater": "rhel-vex", "name": "CVE-2026-33636", "description": "A flaw was found in libpng. A remote attacker could exploit an out-of-bounds read and write vulnerability in the ARM/AArch64 Neon-optimized palette expansion path. This occurs when processing a final partial chunk of 8-bit paletted rows without verifying sufficient input pixels, leading to dereferencing pointers before the start of the row buffer and writing expanded pixel data to underflowed positions. This flaw can result in information disclosure and denial of service.", "issued": "2026-03-26T16:51:58Z", "links": "https://access.redhat.com/security/cve/CVE-2026-33636 https://bugzilla.redhat.com/show_bug.cgi?id=2451819 https://www.cve.org/CVERecord?id=CVE-2026-33636 https://nvd.nist.gov/vuln/detail/CVE-2026-33636 https://github.com/pnggroup/libpng/commit/7734cda20cf1236aef60f3bbd2267c97bbb40869 https://github.com/pnggroup/libpng/commit/aba9f18eba870d14fb52c5ba5d73451349e339c3 https://github.com/pnggroup/libpng/security/advisories/GHSA-wjr5-c57x-95m2 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33636.json https://access.redhat.com/errata/RHSA-2026:14791", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "libpng", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "2:1.6.37-12.el9_7.3", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "dZ7ryQ0b1w50+eNxXX/Jcg==": { "id": "dZ7ryQ0b1w50+eNxXX/Jcg==", "updater": "rhel-vex", "name": "CVE-2026-29111", "description": "A flaw was found in systemd, a system and service manager. An unprivileged user can exploit this vulnerability by making an Inter-Process Communication (IPC) API call with spurious data. In older versions (v249 and earlier), this can lead to stack overwriting with attacker-controlled content, potentially enabling arbitrary code execution or privilege escalation. In newer versions (v250 and later), the flaw causes systemd to assert and freeze, resulting in a Denial of Service (DoS).", "issued": "2026-03-23T21:03:56Z", "links": "https://access.redhat.com/security/cve/CVE-2026-29111 https://bugzilla.redhat.com/show_bug.cgi?id=2450505 https://www.cve.org/CVERecord?id=CVE-2026-29111 https://nvd.nist.gov/vuln/detail/CVE-2026-29111 https://github.com/systemd/systemd/commit/1d22f706bd04f45f8422e17fbde3f56ece17758a https://github.com/systemd/systemd/commit/20021e7686426052e3a7505425d7e12085feb2a6 https://github.com/systemd/systemd/commit/21167006574d6b83813c7596759b474f56562412 https://github.com/systemd/systemd/commit/3cee294fe8cf4fa0eff933ab21416d099942cabd https://github.com/systemd/systemd/commit/42aee39107fbdd7db1ccd402a2151822b2805e9f https://github.com/systemd/systemd/commit/54588d2dedff54bfb6036670820650e4ea74628f https://github.com/systemd/systemd/commit/7ac3220213690e8a8d6d2a6e81e43bd1dce01d69 https://github.com/systemd/systemd/commit/80acea4ef80a4bb78560ed970c34952299b890d6 https://github.com/systemd/systemd/commit/b5fd14693057e5f2c9b4a49603be64ec3608ff6c https://github.com/systemd/systemd/commit/efa6ba2ab625aaa160ac435a09e6482fc63bdbe8 https://github.com/systemd/systemd/security/advisories/GHSA-gx6q-6f99-m764 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-29111.json https://access.redhat.com/errata/RHSA-2026:13677", "severity": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "systemd", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:252-55.el9_7.9", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "dcH4AHY4X+K0bO3O9nqJrQ==": { "id": "dcH4AHY4X+K0bO3O9nqJrQ==", "updater": "rhel-vex", "name": "CVE-2025-69652", "description": "A flaw was found in binutils. Processing a specially crafted ELF binary file containing malformed DWARF abbrev or debug information with the readelf program using the -w abbrev command line option can trigger an abort, causing a crash and resulting in a denial of service.", "issued": "2026-03-06T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2025-69652 https://bugzilla.redhat.com/show_bug.cgi?id=2445296 https://www.cve.org/CVERecord?id=CVE-2025-69652 https://nvd.nist.gov/vuln/detail/CVE-2025-69652 https://sourceware.org/bugzilla/show_bug.cgi?id=33701 https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=44b79abd0fa12e7947252eb4c6e5d16ed6033e01 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-69652.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "normalized_severity": "Low", "package": { "id": "", "name": "binutils", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "doax1FtBT8uwFLYDyWb1Bg==": { "id": "doax1FtBT8uwFLYDyWb1Bg==", "updater": "rhel-vex", "name": "CVE-2026-4438", "description": "A flaw was found in the GNU C library (glibc). When applications use the `gethostbyaddr` or `gethostbyaddr_r` functions with a `nsswitch.conf` configuration that specifies glibc's DNS backend, the library may return an invalid DNS hostname. This violates the DNS specification and could lead to applications receiving incorrect hostname information, potentially impacting network operations or security decisions.", "issued": "2026-03-20T19:59:06Z", "links": "https://access.redhat.com/security/cve/CVE-2026-4438 https://bugzilla.redhat.com/show_bug.cgi?id=2449783 https://www.cve.org/CVERecord?id=CVE-2026-4438 https://nvd.nist.gov/vuln/detail/CVE-2026-4438 https://sourceware.org/bugzilla/show_bug.cgi?id=34015 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-4438.json https://access.redhat.com/errata/RHSA-2026:20597", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "normalized_severity": "Low", "package": { "id": "", "name": "glibc-devel", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "0:2.34-270.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "dtQx2uUyC6Kj72i0o1bELQ==": { "id": "dtQx2uUyC6Kj72i0o1bELQ==", "updater": "rhel-vex", "name": "CVE-2026-35414", "description": "A flaw was found in OpenSSH. This vulnerability arises from the incorrect handling of the authorized_keys principals option in uncommon scenarios. Specifically, when a principals list is used with a Certificate Authority that includes comma characters, OpenSSH may misinterpret the input. This could lead to security bypasses, potentially allowing unintended access or information disclosure in specific authentication contexts.", "issued": "2026-04-02T17:08:15Z", "links": "https://access.redhat.com/security/cve/CVE-2026-35414 https://bugzilla.redhat.com/show_bug.cgi?id=2454490 https://www.cve.org/CVERecord?id=CVE-2026-35414 https://nvd.nist.gov/vuln/detail/CVE-2026-35414 https://marc.info/?l=openssh-unix-dev\u0026m=177513443901484\u0026w=2 https://www.openssh.org/releasenotes.html#10.3p1 https://www.openwall.com/lists/oss-security/2026/04/02/3 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-35414.json https://access.redhat.com/errata/RHSA-2026:13381", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N", "normalized_severity": "Medium", "package": { "id": "", "name": "openssh", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:8.7p1-49.el9_7", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "dw03VWGdtImJ58988UyhtQ==": { "id": "dw03VWGdtImJ58988UyhtQ==", "updater": "rhel-vex", "name": "CVE-2026-42764", "description": "A flaw was found in the OpenSSL QUIC (Quick UDP Internet Connections) server. A remote attacker could send a specially crafted QUIC initial packet with an invalid token. If the server's address validation is explicitly disabled, this could lead to a NULL pointer dereference, causing the server process to terminate abnormally and resulting in a Denial of Service (DoS).", "issued": "2026-06-09T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-42764 https://bugzilla.redhat.com/show_bug.cgi?id=2481887 https://www.cve.org/CVERecord?id=CVE-2026-42764 https://nvd.nist.gov/vuln/detail/CVE-2026-42764 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42764.json https://access.redhat.com/errata/RHSA-2026:25239", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "openssl-devel", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:3.5.5-4.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "dz5oxhJicudEulHfFUUHJw==": { "id": "dz5oxhJicudEulHfFUUHJw==", "updater": "rhel-vex", "name": "CVE-2025-3360", "description": "A flaw was found in GLib. An integer overflow and buffer under-read occur when parsing a long invalid ISO 8601 timestamp with the g_date_time_new_from_iso8601() function.", "issued": "2025-04-07T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2025-3360 https://bugzilla.redhat.com/show_bug.cgi?id=2357754 https://www.cve.org/CVERecord?id=CVE-2025-3360 https://nvd.nist.gov/vuln/detail/CVE-2025-3360 https://gitlab.gnome.org/GNOME/glib/-/issues/3647 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-3360.json", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L", "normalized_severity": "Low", "package": { "id": "", "name": "glib2", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "dzniYI3/1uomz0XJinM4FA==": { "id": "dzniYI3/1uomz0XJinM4FA==", "updater": "rhel-vex", "name": "CVE-2026-6238", "description": "A flaw was found in glibc (GNU C Library). The deprecated functions ns_printrrf, ns_printrr, and fp_nquery do not properly validate the length of RDATA (Resource Record Data) in a DNS (Domain Name System) response when processing specific record types like LOC, CERT, TKEY, or TSIG. A remote attacker could craft a malicious DNS response, leading to a target application crashing or reading uninitialized memory. These functions are intended for application debugging and are not part of the standard DNS resolver path.", "issued": "2026-04-28T16:43:08Z", "links": "https://access.redhat.com/security/cve/CVE-2026-6238 https://bugzilla.redhat.com/show_bug.cgi?id=2463539 https://www.cve.org/CVERecord?id=CVE-2026-6238 https://nvd.nist.gov/vuln/detail/CVE-2026-6238 https://inbox.sourceware.org/libc-announce/7a655d55-276f-41fe-b550-feb3ebb2ce91@redhat.com/T/#u https://sourceware.org/bugzilla/show_bug.cgi?id=34069 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6238.json https://access.redhat.com/errata/RHSA-2026:42952", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "glibc-locale-source", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "0:2.34-274.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "e+FXR06J5tPREKXnCKeZWg==": { "id": "e+FXR06J5tPREKXnCKeZWg==", "updater": "rhel-vex", "name": "CVE-2026-40356", "description": "A flaw was found in MIT Kerberos 5 (krb5). An unauthenticated remote attacker can exploit an integer underflow and an out-of-bounds read vulnerability by calling `gss_accept_sec_context()` on a system with a NegoEx mechanism registered. This can lead to the process terminating, resulting in a Denial of Service (DoS).", "issued": "2026-04-28T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-40356 https://bugzilla.redhat.com/show_bug.cgi?id=2463368 https://www.cve.org/CVERecord?id=CVE-2026-40356 https://nvd.nist.gov/vuln/detail/CVE-2026-40356 https://cems.fun/2026/04/27/krb5-two-unauthenticated-network-vulnerabilities.html https://github.com/krb5/krb5/commit/2e75f0d9362fb979f5fc92829431a590a130929f https://web.mit.edu/kerberos/advisories/ https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-40356.json https://access.redhat.com/errata/RHSA-2026:19357", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "krb5-libs", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:1.21.1-10.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "e/EuZlSZUQTHCSl8kHuFag==": { "id": "e/EuZlSZUQTHCSl8kHuFag==", "updater": "rhel-vex", "name": "CVE-2025-11187", "description": "A flaw was found in OpenSSL. When an application processes a maliciously crafted PKCS#12 file, an attacker can exploit a stack buffer overflow or a NULL pointer dereference. This can lead to a denial of service (DoS) by crashing the application, and in some cases, may enable arbitrary code execution. The vulnerability arises from the lack of validation for PBKDF2 salt and keylength parameters within the PKCS#12 file.", "issued": "2026-01-27T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2025-11187 https://bugzilla.redhat.com/show_bug.cgi?id=2430375 https://www.cve.org/CVERecord?id=CVE-2025-11187 https://nvd.nist.gov/vuln/detail/CVE-2025-11187 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-11187.json https://access.redhat.com/errata/RHSA-2026:1473", "severity": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "openssl-libs", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "1:3.5.1-7.el9_7", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "e/bnYsWq3UNe4TO8qzzb8A==": { "id": "e/bnYsWq3UNe4TO8qzzb8A==", "updater": "rhel-vex", "name": "CVE-2022-47010", "description": "A memory leak flaw was found in binutils in the pr_function_type function. This flaw allows an attacker to use a set of steps to trigger a memory leak and perform a denial of service, resulting in a loss of the system's availability.", "issued": "2022-06-18T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2022-47010 https://bugzilla.redhat.com/show_bug.cgi?id=2233988 https://www.cve.org/CVERecord?id=CVE-2022-47010 https://nvd.nist.gov/vuln/detail/CVE-2022-47010 https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-47010.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "binutils", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "e0/Fzu8wfMZp9zX32i9rMQ==": { "id": "e0/Fzu8wfMZp9zX32i9rMQ==", "updater": "rhel-vex", "name": "CVE-2026-27456", "description": "A flaw was found in util-linux. When an /etc/fstab entry is configured with the user,loop options, the `mount` program checks the file path with user permissions but later opens it with root privileges. This creates a brief Time-of-Check-Time-of-Use (TOCTOU) window where an attacker can substitute the intended file with a malicious symbolic link. This allows a local unprivileged user to mount any root-owned file or block device that contains a valid filesystem, gaining full read access to its contents.", "issued": "2026-04-03T21:23:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-27456 https://bugzilla.redhat.com/show_bug.cgi?id=2454956 https://www.cve.org/CVERecord?id=CVE-2026-27456 https://nvd.nist.gov/vuln/detail/CVE-2026-27456 https://github.com/util-linux/util-linux/commit/5e390467b26a3cf3fecc04e1a0d482dff3162fc4 https://github.com/util-linux/util-linux/releases/tag/v2.41.4 https://github.com/util-linux/util-linux/security/advisories/GHSA-qq4x-vfq4-9h9g https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-27456.json", "severity": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N", "normalized_severity": "Medium", "package": { "id": "", "name": "util-linux", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "e57+W7idPeSI15OIacmH5Q==": { "id": "e57+W7idPeSI15OIacmH5Q==", "updater": "rhel-vex", "name": "CVE-2025-24294", "description": "A denial of service flaw was found in resolv ruby gem. This flaw allows an attacker to craft a malicious DNS packet containing a highly compressed domain name. When the resolv library parses this packet, the name decompression process consumes a large amount of CPU resources, as the library does not limit the resulting length of the name.", "issued": "2025-07-12T03:30:40Z", "links": "https://access.redhat.com/security/cve/CVE-2025-24294 https://bugzilla.redhat.com/show_bug.cgi?id=2379684 https://www.cve.org/CVERecord?id=CVE-2025-24294 https://nvd.nist.gov/vuln/detail/CVE-2025-24294 https://www.ruby-lang.org/en/news/2025/07/08/dos-resolv-cve-2025-24294/ https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-24294.json https://access.redhat.com/errata/RHSA-2025:23063", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "normalized_severity": "Medium", "package": { "id": "", "name": "rubygem-rdoc", "version": "", "kind": "binary", "normalized_version": "", "module": "ruby:3.3", "arch": "noarch", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "0:6.6.3.1-5.module+el9.7.0+23651+15dc1615", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "e7h3lwyDkLbzwbeza9/TWw==": { "id": "e7h3lwyDkLbzwbeza9/TWw==", "updater": "rhel-vex", "name": "CVE-2022-4293", "description": "A floating point exception flaw was found in Vim's num_divide() function of the eval.c file. This issue occurs when dividing the largest negative number by -1. This could allow an attacker to trick a user into opening a specially crafted file, triggering an application to crash and leading to a denial of service.", "issued": "2022-12-02T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2022-4293 https://bugzilla.redhat.com/show_bug.cgi?id=2151566 https://www.cve.org/CVERecord?id=CVE-2022-4293 https://nvd.nist.gov/vuln/detail/CVE-2022-4293 https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-4293.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "vim", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "eM2mlJEyKuGpc2sJMlq4xA==": { "id": "eM2mlJEyKuGpc2sJMlq4xA==", "updater": "rhel-vex", "name": "CVE-2026-3276", "description": "A flaw was found in the `unicodedata.normalize()` function in Python. This vulnerability allows a remote attacker to cause excessive CPU consumption by providing specially crafted Unicode input. Successful exploitation can lead to a Denial of Service (DoS) on the affected system.", "issued": "2026-06-03T14:29:39Z", "links": "https://access.redhat.com/security/cve/CVE-2026-3276 https://bugzilla.redhat.com/show_bug.cgi?id=2484424 https://www.cve.org/CVERecord?id=CVE-2026-3276 https://nvd.nist.gov/vuln/detail/CVE-2026-3276 https://github.com/python/cpython/issues/149079 https://github.com/python/cpython/pull/149080 https://mail.python.org/archives/list/security-announce@python.org/thread/PP5HB4K7727OBBM76KA2ILID76K3OZGZ/ https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-3276.json", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "normalized_severity": "Medium", "package": { "id": "", "name": "python3.9", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "eWiVyh/zommMEkP0Gx9Oow==": { "id": "eWiVyh/zommMEkP0Gx9Oow==", "updater": "rhel-vex", "name": "CVE-2026-31790", "description": "A flaw was found in openssl. Applications that use RSASVE key encapsulation, a method for securely exchanging encryption keys, may inadvertently expose sensitive data. This vulnerability arises when an application processes a malicious, invalid RSA public key provided by an attacker without proper validation. Consequently, the application might send the contents of an uninitialized memory buffer, which could contain confidential information, to the attacker.", "issued": "2026-04-07T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-31790 https://bugzilla.redhat.com/show_bug.cgi?id=2451094 https://www.cve.org/CVERecord?id=CVE-2026-31790 https://nvd.nist.gov/vuln/detail/CVE-2026-31790 https://openssl-library.org/news/secadv/20260407.txt https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-31790.json https://access.redhat.com/errata/RHSA-2026:19218", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "normalized_severity": "Medium", "package": { "id": "", "name": "openssl-libs", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "1:3.5.5-2.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "eZAX5+dryNgqi55C7fN1LQ==": { "id": "eZAX5+dryNgqi55C7fN1LQ==", "updater": "rhel-vex", "name": "CVE-2026-42246", "description": "A flaw was found in the Ruby net-imap library. When upgrading a cleartext IMAP connection to TLS using the Net::IMAP#starttls method, the library improperly handles certain responses received during STARTTLS negotiation. A man-in-the-middle (MITM) attacker can inject a predicted tagged OK response before the client completes the STARTTLS command, causing the operation to appear successful without establishing a TLS session. As a result, the connection may continue to transmit sensitive information in cleartext and enable modification of data exchanged over the affected connection, while the application incorrectly believes that encryption has been enabled.", "issued": "2026-05-09T19:33:17Z", "links": "https://access.redhat.com/security/cve/CVE-2026-42246 https://bugzilla.redhat.com/show_bug.cgi?id=2468499 https://www.cve.org/CVERecord?id=CVE-2026-42246 https://nvd.nist.gov/vuln/detail/CVE-2026-42246 https://github.com/ruby/net-imap/commit/0ede4c40b1523dfeaf95777b2678e54cc0fd9618 https://github.com/ruby/net-imap/commit/24a4e770b43230286a05aa2a9746cdbb3eb8485e https://github.com/ruby/net-imap/commit/97e2488fb5401a1783bddd959dde007d9fbce42c https://github.com/ruby/net-imap/commit/f79d35bf5833f186e81044c57c843eda30c873da https://github.com/ruby/net-imap/releases/tag/v0.3.10 https://github.com/ruby/net-imap/releases/tag/v0.4.24 https://github.com/ruby/net-imap/releases/tag/v0.5.14 https://github.com/ruby/net-imap/security/advisories/GHSA-vcgp-9326-pqcp https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42246.json https://access.redhat.com/errata/RHSA-2026:33576", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "normalized_severity": "High", "package": { "id": "", "name": "ruby", "version": "", "kind": "binary", "normalized_version": "", "module": "ruby:3.3", "arch": "aarch64|i686|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "0:3.3.10-7.module+el9.8.0+24406+8975e57f", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "eaoaQZQXOAlAomwMnyNLSQ==": { "id": "eaoaQZQXOAlAomwMnyNLSQ==", "updater": "rhel-vex", "name": "CVE-2026-5435", "description": "A flaw was found in glibc, the GNU C Library. Specifically, deprecated functions responsible for printing TSIG (Transaction Signature) records fail to properly manage memory buffers. This oversight can lead to an out-of-bounds write when processing specially crafted TSIG records. An attacker could exploit this to cause a denial of service or potentially execute arbitrary code.", "issued": "2026-04-28T11:58:54Z", "links": "https://access.redhat.com/security/cve/CVE-2026-5435 https://bugzilla.redhat.com/show_bug.cgi?id=2463465 https://www.cve.org/CVERecord?id=CVE-2026-5435 https://nvd.nist.gov/vuln/detail/CVE-2026-5435 https://inbox.sourceware.org/libc-announce/7a655d55-276f-41fe-b550-feb3ebb2ce91@redhat.com/T/#u https://sourceware.org/bugzilla/show_bug.cgi?id=34033 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-5435.json https://access.redhat.com/errata/RHSA-2026:42952", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "glibc", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:2.34-274.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "edQImQW6OalMt0U0nrXR2Q==": { "id": "edQImQW6OalMt0U0nrXR2Q==", "updater": "rhel-vex", "name": "CVE-2026-26996", "description": "A flaw was found in minimatch. A remote attacker could exploit this Regular Expression Denial of Service (ReDoS) vulnerability by providing a specially crafted glob pattern. This pattern, containing numerous consecutive wildcard characters, causes excessive processing and exponential backtracking in the regular expression engine. Successful exploitation leads to a Denial of Service (DoS), making the application unresponsive.", "issued": "2026-02-20T03:05:21Z", "links": "https://access.redhat.com/security/cve/CVE-2026-26996 https://bugzilla.redhat.com/show_bug.cgi?id=2441268 https://www.cve.org/CVERecord?id=CVE-2026-26996 https://nvd.nist.gov/vuln/detail/CVE-2026-26996 https://github.com/isaacs/minimatch/commit/2e111f3a79abc00fa73110195de2c0f2351904f5 https://github.com/isaacs/minimatch/security/advisories/GHSA-3ppc-4f35-3m26 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-26996.json https://access.redhat.com/errata/RHSA-2026:7302", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "npm", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:10.9.7-1.22.22.2.1.module+el9.7.0+24157+8ddb2461", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "eekbTUpqIafepE8Hfmhn6g==": { "id": "eekbTUpqIafepE8Hfmhn6g==", "updater": "rhel-vex", "name": "CVE-2021-4187", "description": "A flaw was found in vim. A possible use after free vulnerability could allow an attacker to input a specially crafted file leading to a crash or code execution.", "issued": "2021-12-27T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2021-4187 https://bugzilla.redhat.com/show_bug.cgi?id=2036129 https://www.cve.org/CVERecord?id=CVE-2021-4187 https://nvd.nist.gov/vuln/detail/CVE-2021-4187 https://security.access.redhat.com/data/csaf/v2/vex/2021/cve-2021-4187.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "vim", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "egAiHhCEkMFVMFqpyh1hdw==": { "id": "egAiHhCEkMFVMFqpyh1hdw==", "updater": "rhel-vex", "name": "CVE-2026-6733", "description": "A flaw was found in undici. An attacker-controlled upstream server can exploit a vulnerability in Undici's HTTP/1.1 client, specifically related to response queue poisoning on reused keep-alive sockets. This allows the attacker to inject an unsolicited HTTP/1.1 response onto an idle socket. Consequently, when the client dispatches a new request on that socket, it may associate the injected response with the new request, leading to responses being delivered to unintended recipients or requests. This could result in a low impact on data integrity.", "issued": "2026-06-17T17:14:50Z", "links": "https://access.redhat.com/security/cve/CVE-2026-6733 https://bugzilla.redhat.com/show_bug.cgi?id=2490006 https://www.cve.org/CVERecord?id=CVE-2026-6733 https://nvd.nist.gov/vuln/detail/CVE-2026-6733 https://cna.openjsf.org/security-advisories.html https://github.com/nodejs/undici/security/advisories/GHSA-35p6-xmwp-9g52 https://hackerone.com/reports/3582376 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6733.json https://access.redhat.com/errata/RHSA-2026:35892", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N", "normalized_severity": "Low", "package": { "id": "", "name": "npm", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:10.9.8-1.22.23.1.1.module+el9.8.0+24457+996af7aa", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "eiMh0pZiJlWSr3FHHfVKhg==": { "id": "eiMh0pZiJlWSr3FHHfVKhg==", "updater": "rhel-vex", "name": "CVE-2025-11083", "description": "A head based buffer overflow flaw has been discovered in GNU bin utilities. The affected element is the function elf_swap_shdr in the library bfd/elfcode.h of the component Linker. The manipulation leads to heap-based buffer overflow. The attack must be carried out locally.", "issued": "2025-09-27T23:02:08Z", "links": "https://access.redhat.com/security/cve/CVE-2025-11083 https://bugzilla.redhat.com/show_bug.cgi?id=2399948 https://www.cve.org/CVERecord?id=CVE-2025-11083 https://nvd.nist.gov/vuln/detail/CVE-2025-11083 https://sourceware.org/bugzilla/attachment.cgi?id=16353 https://sourceware.org/bugzilla/show_bug.cgi?id=33457 https://sourceware.org/bugzilla/show_bug.cgi?id=33457#c1 https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=9ca499644a21ceb3f946d1c179c38a83be084490 https://vuldb.com/?ctiid.326124 https://vuldb.com/?id.326124 https://vuldb.com/?submit.661277 https://www.gnu.org/ https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-11083.json https://access.redhat.com/errata/RHSA-2025:23343", "severity": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "normalized_severity": "Medium", "package": { "id": "", "name": "binutils-gold", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:2.35.2-67.el9_7.1", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "f0N8ZEj6GTGaAo1R6vDhMw==": { "id": "f0N8ZEj6GTGaAo1R6vDhMw==", "updater": "rhel-vex", "name": "CVE-2025-59465", "description": "A denial of service flaw has been discovered in NodeJS. A malformed `HTTP/2 HEADERS` frame with oversized, invalid `HPACK` data can cause Node.js to crash by triggering an unhandled `TLSSocket` error `ECONNRESET`. Instead of safely closing the connection, the process crashes, enabling a remote denial of service. This primarily affects applications that do not attach explicit error handlers to secure sockets", "issued": "2026-01-20T20:41:55Z", "links": "https://access.redhat.com/security/cve/CVE-2025-59465 https://bugzilla.redhat.com/show_bug.cgi?id=2431349 https://www.cve.org/CVERecord?id=CVE-2025-59465 https://nvd.nist.gov/vuln/detail/CVE-2025-59465 https://nodejs.org/en/blog/vulnerability/december-2025-security-releases https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-59465.json https://access.redhat.com/errata/RHSA-2026:2782", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "High", "package": { "id": "", "name": "nodejs-libs", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:22.22.0-1.module+el9.7.0+23896+b5802de9", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "f2M9JeIe3F0Fc9CFbQ6bTQ==": { "id": "f2M9JeIe3F0Fc9CFbQ6bTQ==", "updater": "rhel-vex", "name": "CVE-2026-14164", "description": "A double free issue has been identified in libarchive's RAR5 reader. During parsing of a specially crafted RAR5 archive, the filtered_buf pointer may remain stale after being freed during unpacking state reinitialization. Subsequent processing of another archive entry can trigger a second free of the same memory region, resulting in a double-free condition. Successful exploitation may cause applications using the vulnerable libarchive API to terminate unexpectedly, leading to a denial of service.", "issued": "2026-05-24T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-14164 https://bugzilla.redhat.com/show_bug.cgi?id=2493411 https://www.cve.org/CVERecord?id=CVE-2026-14164 https://nvd.nist.gov/vuln/detail/CVE-2026-14164 https://github.com/libarchive/libarchive/issues/3069 https://github.com/libarchive/libarchive/pull/3071 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-14164.json https://access.redhat.com/errata/RHSA-2026:52674", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "bsdtar", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "0:3.5.3-11.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "f6JDKuVN2cqa3h32gmRjXA==": { "id": "f6JDKuVN2cqa3h32gmRjXA==", "updater": "rhel-vex", "name": "CVE-2026-42246", "description": "A flaw was found in the Ruby net-imap library. When upgrading a cleartext IMAP connection to TLS using the Net::IMAP#starttls method, the library improperly handles certain responses received during STARTTLS negotiation. A man-in-the-middle (MITM) attacker can inject a predicted tagged OK response before the client completes the STARTTLS command, causing the operation to appear successful without establishing a TLS session. As a result, the connection may continue to transmit sensitive information in cleartext and enable modification of data exchanged over the affected connection, while the application incorrectly believes that encryption has been enabled.", "issued": "2026-05-09T19:33:17Z", "links": "https://access.redhat.com/security/cve/CVE-2026-42246 https://bugzilla.redhat.com/show_bug.cgi?id=2468499 https://www.cve.org/CVERecord?id=CVE-2026-42246 https://nvd.nist.gov/vuln/detail/CVE-2026-42246 https://github.com/ruby/net-imap/commit/0ede4c40b1523dfeaf95777b2678e54cc0fd9618 https://github.com/ruby/net-imap/commit/24a4e770b43230286a05aa2a9746cdbb3eb8485e https://github.com/ruby/net-imap/commit/97e2488fb5401a1783bddd959dde007d9fbce42c https://github.com/ruby/net-imap/commit/f79d35bf5833f186e81044c57c843eda30c873da https://github.com/ruby/net-imap/releases/tag/v0.3.10 https://github.com/ruby/net-imap/releases/tag/v0.4.24 https://github.com/ruby/net-imap/releases/tag/v0.5.14 https://github.com/ruby/net-imap/security/advisories/GHSA-vcgp-9326-pqcp https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42246.json https://access.redhat.com/errata/RHSA-2026:33576", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "normalized_severity": "High", "package": { "id": "", "name": "rubygem-json", "version": "", "kind": "binary", "normalized_version": "", "module": "ruby:3.3", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "0:2.7.2-7.module+el9.8.0+24406+8975e57f", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "f6oGdnhZomBa/bs3snB3kA==": { "id": "f6oGdnhZomBa/bs3snB3kA==", "updater": "rhel-vex", "name": "CVE-2025-14831", "description": "A flaw was found in GnuTLS. This vulnerability allows a denial of service (DoS) by excessive CPU (Central Processing Unit) and memory consumption via specially crafted malicious certificates containing a large number of name constraints and subject alternative names (SANs).", "issued": "2026-02-09T14:26:34Z", "links": "https://access.redhat.com/security/cve/CVE-2025-14831 https://bugzilla.redhat.com/show_bug.cgi?id=2423177 https://www.cve.org/CVERecord?id=CVE-2025-14831 https://nvd.nist.gov/vuln/detail/CVE-2025-14831 https://gitlab.com/gnutls/gnutls/-/issues/1773 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-14831.json https://access.redhat.com/errata/RHSA-2026:4188", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "normalized_severity": "Medium", "package": { "id": "", "name": "gnutls", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:3.8.3-10.el9_7", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "fKu2JVqQCl/zwzvO3uUkJw==": { "id": "fKu2JVqQCl/zwzvO3uUkJw==", "updater": "rhel-vex", "name": "CVE-2026-26996", "description": "A flaw was found in minimatch. A remote attacker could exploit this Regular Expression Denial of Service (ReDoS) vulnerability by providing a specially crafted glob pattern. This pattern, containing numerous consecutive wildcard characters, causes excessive processing and exponential backtracking in the regular expression engine. Successful exploitation leads to a Denial of Service (DoS), making the application unresponsive.", "issued": "2026-02-20T03:05:21Z", "links": "https://access.redhat.com/security/cve/CVE-2026-26996 https://bugzilla.redhat.com/show_bug.cgi?id=2441268 https://www.cve.org/CVERecord?id=CVE-2026-26996 https://nvd.nist.gov/vuln/detail/CVE-2026-26996 https://github.com/isaacs/minimatch/commit/2e111f3a79abc00fa73110195de2c0f2351904f5 https://github.com/isaacs/minimatch/security/advisories/GHSA-3ppc-4f35-3m26 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-26996.json https://access.redhat.com/errata/RHSA-2026:7302", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "nodejs-libs", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:22.22.2-1.module+el9.7.0+24157+8ddb2461", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "fPh6cJ7fj6ecJeD/S/iyJg==": { "id": "fPh6cJ7fj6ecJeD/S/iyJg==", "updater": "rhel-vex", "name": "CVE-2026-58015", "description": "A flaw was found in GLib. The D-Bus client-side implementation of the DBUS_COOKIE_SHA1 SASL authentication mechanism does not validate the cookie_context parameter received from the server. A malicious D-Bus server can supply a cookie_context containing path traversal sequences, causing the client to read an arbitrary file and exfiltrate sensitive data by verifying guessed file contents against a generated hash.", "issued": "2026-04-08T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-58015 https://bugzilla.redhat.com/show_bug.cgi?id=2492256 https://www.cve.org/CVERecord?id=CVE-2026-58015 https://nvd.nist.gov/vuln/detail/CVE-2026-58015 https://gitlab.gnome.org/GNOME/glib/-/issues/3931 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-58015.json", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "normalized_severity": "Medium", "package": { "id": "", "name": "glib2", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "fSeU4QTAs+fY+ihLpgdM9A==": { "id": "fSeU4QTAs+fY+ihLpgdM9A==", "updater": "rhel-vex", "name": "CVE-2025-1377", "description": "A flaw was found in GNU elfutils. This vulnerability allows denial of service via manipulation of the gelf_getsymshndx function in strip.c.", "issued": "2025-02-17T05:00:19Z", "links": "https://access.redhat.com/security/cve/CVE-2025-1377 https://bugzilla.redhat.com/show_bug.cgi?id=2346066 https://www.cve.org/CVERecord?id=CVE-2025-1377 https://nvd.nist.gov/vuln/detail/CVE-2025-1377 https://sourceware.org/bugzilla/attachment.cgi?id=15941 https://sourceware.org/bugzilla/show_bug.cgi?id=32673 https://sourceware.org/bugzilla/show_bug.cgi?id=32673#c2 https://vuldb.com/?ctiid.295985 https://vuldb.com/?id.295985 https://vuldb.com/?submit.497539 https://www.gnu.org/ https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-1377.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L", "normalized_severity": "Low", "package": { "id": "", "name": "elfutils", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "ffV5WUu4x4B5YykIdxqFhA==": { "id": "ffV5WUu4x4B5YykIdxqFhA==", "updater": "rhel-vex", "name": "CVE-2026-42764", "description": "A flaw was found in the OpenSSL QUIC (Quick UDP Internet Connections) server. A remote attacker could send a specially crafted QUIC initial packet with an invalid token. If the server's address validation is explicitly disabled, this could lead to a NULL pointer dereference, causing the server process to terminate abnormally and resulting in a Denial of Service (DoS).", "issued": "2026-06-09T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-42764 https://bugzilla.redhat.com/show_bug.cgi?id=2481887 https://www.cve.org/CVERecord?id=CVE-2026-42764 https://nvd.nist.gov/vuln/detail/CVE-2026-42764 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42764.json https://access.redhat.com/errata/RHSA-2026:25239", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "openssl-libs", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "1:3.5.5-4.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "fqP9GV2+ELPjUr/DY2avpQ==": { "id": "fqP9GV2+ELPjUr/DY2avpQ==", "updater": "rhel-vex", "name": "CVE-2026-1525", "description": "A flaw was found in undici, a Node.js HTTP/1.1 client. A remote attacker could exploit this vulnerability by sending HTTP/1.1 requests that include duplicate Content-Length headers with different casing (e.g., \"Content-Length\" and \"content-length\"). This can lead to HTTP Request Smuggling, a technique where an attacker sends an ambiguous request that is interpreted differently by a proxy and a backend server. Successful exploitation could result in unauthorized access, cache poisoning, or credential hijacking. It may also cause a Denial of Service (DoS) if strict HTTP parsers reject the malformed requests.", "issued": "2026-03-12T19:56:55Z", "links": "https://access.redhat.com/security/cve/CVE-2026-1525 https://bugzilla.redhat.com/show_bug.cgi?id=2447144 https://www.cve.org/CVERecord?id=CVE-2026-1525 https://nvd.nist.gov/vuln/detail/CVE-2026-1525 https://cna.openjsf.org/security-advisories.html https://cwe.mitre.org/data/definitions/444.html https://github.com/nodejs/undici/security/advisories/GHSA-2mjp-6q6p-2qxm https://hackerone.com/reports/3556037 https://www.rfc-editor.org/rfc/rfc9110.html#section-8.6 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-1525.json https://access.redhat.com/errata/RHSA-2026:7302", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "normalized_severity": "Medium", "package": { "id": "", "name": "nodejs-full-i18n", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:22.22.2-1.module+el9.7.0+24157+8ddb2461", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "fuOmX+MQWgJjrWZ2kXbtlQ==": { "id": "fuOmX+MQWgJjrWZ2kXbtlQ==", "updater": "rhel-vex", "name": "CVE-2026-0672", "description": "An injection flaw has been discovered in Python. When using http.cookies.Morsel, user-controlled cookie values and parameters can allow injecting HTTP headers into messages. Patch rejects all control characters within cookie names, values, and parameters.", "issued": "2026-01-20T21:52:33Z", "links": "https://access.redhat.com/security/cve/CVE-2026-0672 https://bugzilla.redhat.com/show_bug.cgi?id=2431374 https://www.cve.org/CVERecord?id=CVE-2026-0672 https://nvd.nist.gov/vuln/detail/CVE-2026-0672 https://github.com/python/cpython/issues/143919 https://github.com/python/cpython/pull/143920 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-0672.json", "severity": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:N", "normalized_severity": "Medium", "package": { "id": "", "name": "python3.9", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "fzE91AQotuZJ8swhDTTd+g==": { "id": "fzE91AQotuZJ8swhDTTd+g==", "updater": "rhel-vex", "name": "CVE-2025-14087", "description": "A flaw was found in GLib (Gnome Lib). This vulnerability allows a remote attacker to cause heap corruption, leading to a denial of service or potential code execution via a buffer-underflow in the GVariant parser when processing maliciously crafted input strings.", "issued": "2025-12-05T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2025-14087 https://bugzilla.redhat.com/show_bug.cgi?id=2419093 https://www.cve.org/CVERecord?id=CVE-2025-14087 https://nvd.nist.gov/vuln/detail/CVE-2025-14087 https://gitlab.gnome.org/GNOME/glib/-/issues/3834 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-14087.json https://access.redhat.com/errata/RHSA-2026:19361", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L", "normalized_severity": "Medium", "package": { "id": "", "name": "glib2-devel", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "0:2.68.4-19.el9_8.1", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "g6spFzT6DoopzuQCE0pjRg==": { "id": "g6spFzT6DoopzuQCE0pjRg==", "updater": "rhel-vex", "name": "CVE-2022-2285", "description": "Integer Overflow or Wraparound in GitHub repository vim/vim prior to 9.0.", "issued": "2022-07-02T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2022-2285 https://bugzilla.redhat.com/show_bug.cgi?id=2103874 https://www.cve.org/CVERecord?id=CVE-2022-2285 https://nvd.nist.gov/vuln/detail/CVE-2022-2285 https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-2285.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "vim", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "g7YHFtZ3mWRLeNfv7s6g4w==": { "id": "g7YHFtZ3mWRLeNfv7s6g4w==", "updater": "rhel-vex", "name": "CVE-2026-0865", "description": "Missing newline filtering has been discovered in Python. User-controlled header names and values containing newlines can allow injecting HTTP headers.", "issued": "2026-01-20T21:26:15Z", "links": "https://access.redhat.com/security/cve/CVE-2026-0865 https://bugzilla.redhat.com/show_bug.cgi?id=2431367 https://www.cve.org/CVERecord?id=CVE-2026-0865 https://nvd.nist.gov/vuln/detail/CVE-2026-0865 https://github.com/python/cpython/issues/143916 https://github.com/python/cpython/pull/143917 https://mail.python.org/archives/list/security-announce@python.org/thread/BJ6QPHNSHJTS3A7CFV6IBMCAP2DWRVNT/ https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-0865.json https://access.redhat.com/errata/RHSA-2026:18693", "severity": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:N", "normalized_severity": "Medium", "package": { "id": "", "name": "python3", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:3.9.25-5.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "gBKPfFUBWkIoh/DpIktgJA==": { "id": "gBKPfFUBWkIoh/DpIktgJA==", "updater": "rhel-vex", "name": "CVE-2025-24294", "description": "A denial of service flaw was found in resolv ruby gem. This flaw allows an attacker to craft a malicious DNS packet containing a highly compressed domain name. When the resolv library parses this packet, the name decompression process consumes a large amount of CPU resources, as the library does not limit the resulting length of the name.", "issued": "2025-07-12T03:30:40Z", "links": "https://access.redhat.com/security/cve/CVE-2025-24294 https://bugzilla.redhat.com/show_bug.cgi?id=2379684 https://www.cve.org/CVERecord?id=CVE-2025-24294 https://nvd.nist.gov/vuln/detail/CVE-2025-24294 https://www.ruby-lang.org/en/news/2025/07/08/dos-resolv-cve-2025-24294/ https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-24294.json https://access.redhat.com/errata/RHSA-2025:23063", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "normalized_severity": "Medium", "package": { "id": "", "name": "ruby-default-gems", "version": "", "kind": "binary", "normalized_version": "", "module": "ruby:3.3", "arch": "noarch", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "0:3.3.10-5.module+el9.7.0+23651+15dc1615", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "gET5R3f4XDkfL+cBxb3pJQ==": { "id": "gET5R3f4XDkfL+cBxb3pJQ==", "updater": "rhel-vex", "name": "CVE-2026-4046", "description": "A flaw was found in glibc, the GNU C Library. A remote attacker could exploit this vulnerability by providing specially crafted inputs using the IBM1390 or IBM1399 character sets to the `iconv()` function. This could lead to an assertion failure, causing the application to crash and resulting in a Denial of Service (DoS).", "issued": "2026-03-30T17:16:11Z", "links": "https://access.redhat.com/security/cve/CVE-2026-4046 https://bugzilla.redhat.com/show_bug.cgi?id=2453117 https://www.cve.org/CVERecord?id=CVE-2026-4046 https://nvd.nist.gov/vuln/detail/CVE-2026-4046 https://packages.fedoraproject.org/pkgs/glibc/glibc-gconv-extra/ https://sourceware.org/bugzilla/show_bug.cgi?id=33980 https://sourceware.org/git/?p=glibc.git;a=blob_plain;f=advisories/GLIBC-SA-2026-0007;hb=HEAD https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-4046.json https://access.redhat.com/errata/RHSA-2026:20597", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "normalized_severity": "Medium", "package": { "id": "", "name": "glibc-devel", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "0:2.34-270.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "gFKfr+coMvRSD0OxrJHXPQ==": { "id": "gFKfr+coMvRSD0OxrJHXPQ==", "updater": "rhel-vex", "name": "CVE-2025-55131", "description": "A memory exposure flaw has been discovered in Node.js. A flaw in Node.js's buffer allocation logic can expose uninitialized memory when allocations are interrupted, when using the `vm` module with the timeout option. Under specific timing conditions, buffers allocated with `Buffer.alloc` and other `TypedArray` instances like `Uint8Array` may contain leftover data from previous operations, allowing in-process secrets like tokens or passwords to leak or causing data corruption.", "issued": "2026-01-20T20:41:55Z", "links": "https://access.redhat.com/security/cve/CVE-2025-55131 https://bugzilla.redhat.com/show_bug.cgi?id=2431350 https://www.cve.org/CVERecord?id=CVE-2025-55131 https://nvd.nist.gov/vuln/detail/CVE-2025-55131 https://nodejs.org/en/blog/vulnerability/december-2025-security-releases https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-55131.json https://access.redhat.com/errata/RHSA-2026:2782", "severity": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L", "normalized_severity": "High", "package": { "id": "", "name": "nodejs-libs", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:22.22.0-1.module+el9.7.0+23896+b5802de9", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "gGrGej/Pj6/poAgebFb+dg==": { "id": "gGrGej/Pj6/poAgebFb+dg==", "updater": "rhel-vex", "name": "CVE-2022-3352", "description": "Use After Free in GitHub repository vim/vim prior to 9.0.0614.", "issued": "2022-09-29T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2022-3352 https://bugzilla.redhat.com/show_bug.cgi?id=2131087 https://www.cve.org/CVERecord?id=CVE-2022-3352 https://nvd.nist.gov/vuln/detail/CVE-2022-3352 https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-3352.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "vim", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "gNGv6C2nj/tHk2ntVJUOWw==": { "id": "gNGv6C2nj/tHk2ntVJUOWw==", "updater": "rhel-vex", "name": "CVE-2022-47011", "description": "A memory leak flaw was found in binutils. This flaw allows an attacker to use a set of steps to trigger a memory leak and perform a denial of service, resulting in a loss of the system's availability.", "issued": "2022-06-18T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2022-47011 https://bugzilla.redhat.com/show_bug.cgi?id=2233992 https://www.cve.org/CVERecord?id=CVE-2022-47011 https://nvd.nist.gov/vuln/detail/CVE-2022-47011 https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-47011.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "binutils", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "gPjSjC7XxsCvs5w6EQPViQ==": { "id": "gPjSjC7XxsCvs5w6EQPViQ==", "updater": "rhel-vex", "name": "CVE-2025-68160", "description": "A flaw was found in OpenSSL. This vulnerability involves an out-of-bounds write in the line-buffering BIO filter, which can lead to memory corruption. While exploitation is unlikely to be under direct attacker control, a successful attack could cause an application to crash, resulting in a Denial of Service (DoS).", "issued": "2026-01-27T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2025-68160 https://bugzilla.redhat.com/show_bug.cgi?id=2430380 https://www.cve.org/CVERecord?id=CVE-2025-68160 https://nvd.nist.gov/vuln/detail/CVE-2025-68160 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-68160.json https://access.redhat.com/errata/RHSA-2026:1473", "severity": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "openssl-devel", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:3.5.1-7.el9_7", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "gRH01HjqQn159522OfR71A==": { "id": "gRH01HjqQn159522OfR71A==", "updater": "rhel-vex", "name": "CVE-2026-9678", "description": "A flaw was found in Undici. The cache interceptor in shared-cache mode incorrectly classifies certain responses as cacheable due to improper handling of whitespace-padded Cache-Control header field names. This vulnerability allows an unauthenticated attacker to access authenticated user data from the cache, leading to information disclosure. This occurs when both authenticated and unauthenticated requests resolve to the same cache key.", "issued": "2026-06-17T17:04:09Z", "links": "https://access.redhat.com/security/cve/CVE-2026-9678 https://bugzilla.redhat.com/show_bug.cgi?id=2490000 https://www.cve.org/CVERecord?id=CVE-2026-9678 https://nvd.nist.gov/vuln/detail/CVE-2026-9678 https://cna.openjsf.org/security-advisories.html https://github.com/nodejs/undici/security/advisories/GHSA-pr7r-676h-xcf6 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-9678.json https://access.redhat.com/errata/RHSA-2026:35892", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "normalized_severity": "Medium", "package": { "id": "", "name": "nodejs-docs", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "noarch", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:22.23.1-1.module+el9.8.0+24457+996af7aa", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "gSYlqWWhsq36L2EzWb/x+w==": { "id": "gSYlqWWhsq36L2EzWb/x+w==", "updater": "rhel-vex", "name": "CVE-2025-58767", "description": "A denial of service flaw has been discovered in the rubygem REXML. Certain input can cause excess cpu usage and given sufficiently large input this can affect program performance.", "issued": "2025-09-17T17:45:58Z", "links": "https://access.redhat.com/security/cve/CVE-2025-58767 https://bugzilla.redhat.com/show_bug.cgi?id=2396186 https://www.cve.org/CVERecord?id=CVE-2025-58767 https://nvd.nist.gov/vuln/detail/CVE-2025-58767 https://github.com/ruby/rexml/commit/5859bdeac792687eaf93d8e8f0b7e3c1e2ed5c23 https://github.com/ruby/rexml/security/advisories/GHSA-c2f4-jgmc-q2r5 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-58767.json https://access.redhat.com/errata/RHSA-2025:23063", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "normalized_severity": "Medium", "package": { "id": "", "name": "rubygem-rake", "version": "", "kind": "binary", "normalized_version": "", "module": "ruby:3.3", "arch": "noarch", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "0:13.1.0-5.module+el9.7.0+23651+15dc1615", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "gg6QYPBlPoN8zpwNyr7x6w==": { "id": "gg6QYPBlPoN8zpwNyr7x6w==", "updater": "rhel-vex", "name": "CVE-2026-29111", "description": "A flaw was found in systemd, a system and service manager. An unprivileged user can exploit this vulnerability by making an Inter-Process Communication (IPC) API call with spurious data. In older versions (v249 and earlier), this can lead to stack overwriting with attacker-controlled content, potentially enabling arbitrary code execution or privilege escalation. In newer versions (v250 and later), the flaw causes systemd to assert and freeze, resulting in a Denial of Service (DoS).", "issued": "2026-03-23T21:03:56Z", "links": "https://access.redhat.com/security/cve/CVE-2026-29111 https://bugzilla.redhat.com/show_bug.cgi?id=2450505 https://www.cve.org/CVERecord?id=CVE-2026-29111 https://nvd.nist.gov/vuln/detail/CVE-2026-29111 https://github.com/systemd/systemd/commit/1d22f706bd04f45f8422e17fbde3f56ece17758a https://github.com/systemd/systemd/commit/20021e7686426052e3a7505425d7e12085feb2a6 https://github.com/systemd/systemd/commit/21167006574d6b83813c7596759b474f56562412 https://github.com/systemd/systemd/commit/3cee294fe8cf4fa0eff933ab21416d099942cabd https://github.com/systemd/systemd/commit/42aee39107fbdd7db1ccd402a2151822b2805e9f https://github.com/systemd/systemd/commit/54588d2dedff54bfb6036670820650e4ea74628f https://github.com/systemd/systemd/commit/7ac3220213690e8a8d6d2a6e81e43bd1dce01d69 https://github.com/systemd/systemd/commit/80acea4ef80a4bb78560ed970c34952299b890d6 https://github.com/systemd/systemd/commit/b5fd14693057e5f2c9b4a49603be64ec3608ff6c https://github.com/systemd/systemd/commit/efa6ba2ab625aaa160ac435a09e6482fc63bdbe8 https://github.com/systemd/systemd/security/advisories/GHSA-gx6q-6f99-m764 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-29111.json https://access.redhat.com/errata/RHSA-2026:13677", "severity": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "systemd-libs", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:252-55.el9_7.9", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "gjKjRZqPuBXFD+3YZ4GvNg==": { "id": "gjKjRZqPuBXFD+3YZ4GvNg==", "updater": "rhel-vex", "name": "CVE-2026-25547", "description": "A flaw was found in the brace-expansion component. This denial of service (DoS) vulnerability allows a remote attacker to provide specially crafted input containing repeated numeric brace ranges. This input causes the library to attempt an unbounded expansion, consuming excessive CPU and memory resources. This can lead to a system crash, impacting the availability of the service.", "issued": "2026-02-04T21:51:17Z", "links": "https://access.redhat.com/security/cve/CVE-2026-25547 https://bugzilla.redhat.com/show_bug.cgi?id=2436942 https://www.cve.org/CVERecord?id=CVE-2026-25547 https://nvd.nist.gov/vuln/detail/CVE-2026-25547 https://github.com/isaacs/brace-expansion/security/advisories/GHSA-7h2j-956f-4vf2 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-25547.json https://access.redhat.com/errata/RHSA-2026:7302", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "nodejs-libs", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:22.22.2-1.module+el9.7.0+24157+8ddb2461", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "glhykijCt1euysZQdgNP+A==": { "id": "glhykijCt1euysZQdgNP+A==", "updater": "rhel-vex", "name": "CVE-2026-4046", "description": "A flaw was found in glibc, the GNU C Library. A remote attacker could exploit this vulnerability by providing specially crafted inputs using the IBM1390 or IBM1399 character sets to the `iconv()` function. This could lead to an assertion failure, causing the application to crash and resulting in a Denial of Service (DoS).", "issued": "2026-03-30T17:16:11Z", "links": "https://access.redhat.com/security/cve/CVE-2026-4046 https://bugzilla.redhat.com/show_bug.cgi?id=2453117 https://www.cve.org/CVERecord?id=CVE-2026-4046 https://nvd.nist.gov/vuln/detail/CVE-2026-4046 https://packages.fedoraproject.org/pkgs/glibc/glibc-gconv-extra/ https://sourceware.org/bugzilla/show_bug.cgi?id=33980 https://sourceware.org/git/?p=glibc.git;a=blob_plain;f=advisories/GLIBC-SA-2026-0007;hb=HEAD https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-4046.json https://access.redhat.com/errata/RHSA-2026:20597", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "normalized_severity": "Medium", "package": { "id": "", "name": "glibc-langpack-en", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:2.34-270.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "gn3bQe/78AdzPhooNm1KQw==": { "id": "gn3bQe/78AdzPhooNm1KQw==", "updater": "rhel-vex", "name": "CVE-2025-66293", "description": "An out of bounds read vulnerability has been discovered in libpng. This vulnerability is in libpng's simplified API allows reading up to 1012 bytes beyond the png_sRGB_base[512] array when processing valid palette PNG images with partial transparency and gamma correction. The PNG files that trigger this vulnerability are valid per the PNG specification; the bug is in libpng's internal state management.", "issued": "2025-12-03T20:33:57Z", "links": "https://access.redhat.com/security/cve/CVE-2025-66293 https://bugzilla.redhat.com/show_bug.cgi?id=2418711 https://www.cve.org/CVERecord?id=CVE-2025-66293 https://nvd.nist.gov/vuln/detail/CVE-2025-66293 https://github.com/pnggroup/libpng/commit/788a624d7387a758ffd5c7ab010f1870dea753a1 https://github.com/pnggroup/libpng/commit/a05a48b756de63e3234ea6b3b938b8f5f862484a https://github.com/pnggroup/libpng/issues/764 https://github.com/pnggroup/libpng/security/advisories/GHSA-9mpm-9pxh-mg4f https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-66293.json https://access.redhat.com/errata/RHSA-2026:0238", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H", "normalized_severity": "High", "package": { "id": "", "name": "libpng-devel", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "2:1.6.37-12.el9_7.1", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "gpPTgXxcA95Uk2vaf3/2dw==": { "id": "gpPTgXxcA95Uk2vaf3/2dw==", "updater": "rhel-vex", "name": "CVE-2023-45803", "description": "A flaw was found in urllib3, an HTTP client library for Python. urllib3 doesn't remove the HTTP request body when an HTTP redirect response using status 301, 302, or 303, after changing the method in a request from one that could accept a request body such as `POST` to `GET`, as is required by HTTP RFCs. This issue requires a previously trusted service to become compromised in order to have an impact on confidentiality, therefore, the exploitability of this vulnerability is low. Additionally, many users aren't putting sensitive data in HTTP request bodies; if this is the case, this vulnerability isn't exploitable.", "issued": "2023-10-13T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2023-45803 https://bugzilla.redhat.com/show_bug.cgi?id=2246840 https://www.cve.org/CVERecord?id=CVE-2023-45803 https://nvd.nist.gov/vuln/detail/CVE-2023-45803 https://github.com/urllib3/urllib3/commit/4e98d57809dacab1cbe625fddeec1a290c478ea9 https://github.com/urllib3/urllib3/security/advisories/GHSA-g4mx-q9vg-27p4 https://www.rfc-editor.org/rfc/rfc9110.html#name-get https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-45803.json", "severity": "CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N", "normalized_severity": "Medium", "package": { "id": "", "name": "python-pip", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "gt3d97KykHIhCqEzLKzqHQ==": { "id": "gt3d97KykHIhCqEzLKzqHQ==", "updater": "rhel-vex", "name": "CVE-2026-41316", "description": "A flaw was found in ERB, a templating system for Ruby. An attacker who can trigger deserialization of untrusted data in a Ruby application can bypass existing protections. This vulnerability allows for arbitrary code execution by exploiting specific public methods that evaluate template source code, which were not properly guarded against deserialization attacks.", "issued": "2026-04-24T02:35:41Z", "links": "https://access.redhat.com/security/cve/CVE-2026-41316 https://bugzilla.redhat.com/show_bug.cgi?id=2461369 https://www.cve.org/CVERecord?id=CVE-2026-41316 https://nvd.nist.gov/vuln/detail/CVE-2026-41316 https://github.com/ruby/erb/security/advisories/GHSA-q339-8rmv-2mhv https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-41316.json https://access.redhat.com/errata/RHSA-2026:18030", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "normalized_severity": "High", "package": { "id": "", "name": "rubygems", "version": "", "kind": "binary", "normalized_version": "", "module": "ruby:3.3", "arch": "noarch", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "0:3.5.22-6.module+el9.7.0+24248+66578cbb", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "guG+lyS5JQIDSZS6MEfIow==": { "id": "guG+lyS5JQIDSZS6MEfIow==", "updater": "rhel-vex", "name": "CVE-2025-11840", "description": "An out of bounds read flaw has been discovered in GNU binutils. The `vfinfo` function in the `ldmisc.c` file. Exploitation of this flaw requires local access and may cause a program crash.", "issued": "2025-10-16T15:32:11Z", "links": "https://access.redhat.com/security/cve/CVE-2025-11840 https://bugzilla.redhat.com/show_bug.cgi?id=2404481 https://www.cve.org/CVERecord?id=CVE-2025-11840 https://nvd.nist.gov/vuln/detail/CVE-2025-11840 https://sourceware.org/bugzilla/attachment.cgi?id=16351 https://sourceware.org/bugzilla/attachment.cgi?id=16357 https://sourceware.org/bugzilla/show_bug.cgi?id=33455 https://vuldb.com/?ctiid.328775 https://vuldb.com/?id.328775 https://vuldb.com/?submit.661281 https://www.gnu.org/ https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-11840.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L", "normalized_severity": "Low", "package": { "id": "", "name": "binutils", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "h+nOQU6khNxAH7kkGqVqkQ==": { "id": "h+nOQU6khNxAH7kkGqVqkQ==", "updater": "rhel-vex", "name": "CVE-2022-3296", "description": "A stack-based buffer overflow vulnerability was found in vim's ex_finally() function of the src/ex_eval.c file. This flaw allows an attacker to trick a user into opening a specially crafted file, triggering a bug that causes an application to crash, possibly executing code and corrupting memory.", "issued": "2022-09-25T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2022-3296 https://bugzilla.redhat.com/show_bug.cgi?id=2129835 https://www.cve.org/CVERecord?id=CVE-2022-3296 https://nvd.nist.gov/vuln/detail/CVE-2022-3296 https://huntr.dev/bounties/958866b8-526a-4979-9471-39392e0c9077 https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-3296.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "vim", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "hHDtCxiuvJ9VSCSwnEG0Fw==": { "id": "hHDtCxiuvJ9VSCSwnEG0Fw==", "updater": "rhel-vex", "name": "CVE-2026-27135", "description": "A flaw was found in nghttp2. Due to missing internal state validation, the library continues to process incoming data even after a session has been terminated. A remote attacker could exploit this by sending a specially crafted HTTP/2 frame, leading to an assertion failure and a denial of service (DoS).", "issued": "2026-03-18T17:59:02Z", "links": "https://access.redhat.com/security/cve/CVE-2026-27135 https://bugzilla.redhat.com/show_bug.cgi?id=2448754 https://www.cve.org/CVERecord?id=CVE-2026-27135 https://nvd.nist.gov/vuln/detail/CVE-2026-27135 https://github.com/nghttp2/nghttp2/commit/5c7df8fa815ac1004d9ecb9d1f7595c4d37f46e1 https://github.com/nghttp2/nghttp2/security/advisories/GHSA-6933-cjhr-5qg6 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-27135.json https://access.redhat.com/errata/RHSA-2026:7668", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "High", "package": { "id": "", "name": "libnghttp2", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:1.43.0-6.el9_7.1", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "hLNqQASPtA3T5zDQurOMBA==": { "id": "hLNqQASPtA3T5zDQurOMBA==", "updater": "rhel-vex", "name": "CVE-2026-15308", "description": "A flaw was found in Python. Its incremental HTML parser can be exploited by a remote attacker. By sending specially crafted, uncontrolled data with repeated, incomplete markup declarations, the attacker can cause the system to consume excessive central processing unit (CPU) resources. This leads to a denial of service, making the affected system unresponsive.", "issued": "2026-07-09T17:10:57Z", "links": "https://access.redhat.com/security/cve/CVE-2026-15308 https://bugzilla.redhat.com/show_bug.cgi?id=2498608 https://www.cve.org/CVERecord?id=CVE-2026-15308 https://nvd.nist.gov/vuln/detail/CVE-2026-15308 https://github.com/python/cpython/commit/07efb08123ba9367a7107325adb9d5626dca1ca9 https://github.com/python/cpython/commit/7933f4bf7131aa4140750f9404f5de0aa2969ced https://github.com/python/cpython/commit/bcf98ddbc40ec9b3ee87da0124a5660b19b7e606 https://github.com/python/cpython/commit/e9f92ac0b298292e7ff998e52cb8ccacfb27a0bd https://github.com/python/cpython/issues/153030 https://github.com/python/cpython/pull/153031 https://mail.python.org/archives/list/security-announce@python.org/thread/F6453LWKSHKCTWFLCOURWPLETNUIW2Z5/ https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-15308.json https://access.redhat.com/errata/RHSA-2026:39798", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "High", "package": { "id": "", "name": "python3", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:3.9.25-7.el9_8.2", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "hLbfRT5oTN6ilWiJVmH5Uw==": { "id": "hLbfRT5oTN6ilWiJVmH5Uw==", "updater": "rhel-vex", "name": "CVE-2026-42246", "description": "A flaw was found in the Ruby net-imap library. When upgrading a cleartext IMAP connection to TLS using the Net::IMAP#starttls method, the library improperly handles certain responses received during STARTTLS negotiation. A man-in-the-middle (MITM) attacker can inject a predicted tagged OK response before the client completes the STARTTLS command, causing the operation to appear successful without establishing a TLS session. As a result, the connection may continue to transmit sensitive information in cleartext and enable modification of data exchanged over the affected connection, while the application incorrectly believes that encryption has been enabled.", "issued": "2026-05-09T19:33:17Z", "links": "https://access.redhat.com/security/cve/CVE-2026-42246 https://bugzilla.redhat.com/show_bug.cgi?id=2468499 https://www.cve.org/CVERecord?id=CVE-2026-42246 https://nvd.nist.gov/vuln/detail/CVE-2026-42246 https://github.com/ruby/net-imap/commit/0ede4c40b1523dfeaf95777b2678e54cc0fd9618 https://github.com/ruby/net-imap/commit/24a4e770b43230286a05aa2a9746cdbb3eb8485e https://github.com/ruby/net-imap/commit/97e2488fb5401a1783bddd959dde007d9fbce42c https://github.com/ruby/net-imap/commit/f79d35bf5833f186e81044c57c843eda30c873da https://github.com/ruby/net-imap/releases/tag/v0.3.10 https://github.com/ruby/net-imap/releases/tag/v0.4.24 https://github.com/ruby/net-imap/releases/tag/v0.5.14 https://github.com/ruby/net-imap/security/advisories/GHSA-vcgp-9326-pqcp https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42246.json https://access.redhat.com/errata/RHSA-2026:33576", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "normalized_severity": "High", "package": { "id": "", "name": "ruby-bundled-gems", "version": "", "kind": "binary", "normalized_version": "", "module": "ruby:3.3", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "0:3.3.10-7.module+el9.8.0+24406+8975e57f", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "hMMTiPhU7F2ErldK8mMkDQ==": { "id": "hMMTiPhU7F2ErldK8mMkDQ==", "updater": "rhel-vex", "name": "CVE-2026-48615", "description": "A flaw was found in Node.js. When proxy credentials are embedded in a proxy URL, an issue in the proxy tunnel error handling can lead to the exposure of these credentials. This information disclosure vulnerability allows an attacker to potentially capture sensitive proxy credentials through logs, diagnostics, or other error-consuming mechanisms.", "issued": "2026-06-26T01:14:36Z", "links": "https://access.redhat.com/security/cve/CVE-2026-48615 https://bugzilla.redhat.com/show_bug.cgi?id=2493335 https://www.cve.org/CVERecord?id=CVE-2026-48615 https://nvd.nist.gov/vuln/detail/CVE-2026-48615 https://nodejs.org/en/blog/vulnerability/june-2026-security-releases https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-48615.json https://access.redhat.com/errata/RHSA-2026:35892", "severity": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "normalized_severity": "Medium", "package": { "id": "", "name": "nodejs-docs", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "noarch", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:22.23.1-1.module+el9.8.0+24457+996af7aa", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "hUC86VV8kD262xFcev0ZiA==": { "id": "hUC86VV8kD262xFcev0ZiA==", "updater": "rhel-vex", "name": "CVE-2025-11412", "description": "A flaw was found in binutils. Processing a specially crafted object file with the ld linker can trigger an out-of-bounds read in the bfd_elf_gc_record_vtentry function in the bfd/elflink.c file due to a missing sanity check, causing a crash and resulting in a denial of service.", "issued": "2025-10-07T22:02:08Z", "links": "https://access.redhat.com/security/cve/CVE-2025-11412 https://bugzilla.redhat.com/show_bug.cgi?id=2402425 https://www.cve.org/CVERecord?id=CVE-2025-11412 https://nvd.nist.gov/vuln/detail/CVE-2025-11412 https://sourceware.org/bugzilla/show_bug.cgi?id=33452 https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=047435dd988a3975d40c6626a8f739a0b2e154bc https://vuldb.com/?id.327348 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-11412.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "normalized_severity": "Low", "package": { "id": "", "name": "binutils", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "hUsu+oNx2zrpqDVbukPejw==": { "id": "hUsu+oNx2zrpqDVbukPejw==", "updater": "rhel-vex", "name": "CVE-2026-0865", "description": "Missing newline filtering has been discovered in Python. User-controlled header names and values containing newlines can allow injecting HTTP headers.", "issued": "2026-01-20T21:26:15Z", "links": "https://access.redhat.com/security/cve/CVE-2026-0865 https://bugzilla.redhat.com/show_bug.cgi?id=2431367 https://www.cve.org/CVERecord?id=CVE-2026-0865 https://nvd.nist.gov/vuln/detail/CVE-2026-0865 https://github.com/python/cpython/issues/143916 https://github.com/python/cpython/pull/143917 https://mail.python.org/archives/list/security-announce@python.org/thread/BJ6QPHNSHJTS3A7CFV6IBMCAP2DWRVNT/ https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-0865.json https://access.redhat.com/errata/RHSA-2026:18693", "severity": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:N", "normalized_severity": "Medium", "package": { "id": "", "name": "python3-libs", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:3.9.25-5.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "haC60dPgMQIFAnJX4zid+A==": { "id": "haC60dPgMQIFAnJX4zid+A==", "updater": "rhel-vex", "name": "CVE-2026-41316", "description": "A flaw was found in ERB, a templating system for Ruby. An attacker who can trigger deserialization of untrusted data in a Ruby application can bypass existing protections. This vulnerability allows for arbitrary code execution by exploiting specific public methods that evaluate template source code, which were not properly guarded against deserialization attacks.", "issued": "2026-04-24T02:35:41Z", "links": "https://access.redhat.com/security/cve/CVE-2026-41316 https://bugzilla.redhat.com/show_bug.cgi?id=2461369 https://www.cve.org/CVERecord?id=CVE-2026-41316 https://nvd.nist.gov/vuln/detail/CVE-2026-41316 https://github.com/ruby/erb/security/advisories/GHSA-q339-8rmv-2mhv https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-41316.json https://access.redhat.com/errata/RHSA-2026:18030", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "normalized_severity": "High", "package": { "id": "", "name": "rubygem-rdoc", "version": "", "kind": "binary", "normalized_version": "", "module": "ruby:3.3", "arch": "noarch", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "0:6.6.3.1-6.module+el9.7.0+24248+66578cbb", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "haEbUAG+u1TE1V7073rUjA==": { "id": "haEbUAG+u1TE1V7073rUjA==", "updater": "rhel-vex", "name": "CVE-2026-42258", "description": "A flaw was found in Net::IMAP, a Ruby library that provides Internet Message Access Protocol (IMAP) client functionality. This vulnerability allows a remote attacker to inject arbitrary IMAP commands. This is achieved by passing specially crafted symbol arguments to IMAP commands. Successful exploitation could lead to unauthorized actions on the IMAP server or client, potentially resulting in information disclosure or other integrity impacts.", "issued": "2026-05-09T19:40:49Z", "links": "https://access.redhat.com/security/cve/CVE-2026-42258 https://bugzilla.redhat.com/show_bug.cgi?id=2468498 https://www.cve.org/CVERecord?id=CVE-2026-42258 https://nvd.nist.gov/vuln/detail/CVE-2026-42258 https://github.com/ruby/net-imap/releases/tag/v0.4.24 https://github.com/ruby/net-imap/releases/tag/v0.5.14 https://github.com/ruby/net-imap/releases/tag/v0.6.4 https://github.com/ruby/net-imap/security/advisories/GHSA-75xq-5h9v-w6px https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42258.json https://access.redhat.com/errata/RHSA-2026:33576", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:N", "normalized_severity": "High", "package": { "id": "", "name": "rubygem-bigdecimal", "version": "", "kind": "binary", "normalized_version": "", "module": "ruby:3.3", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "0:3.1.5-7.module+el9.8.0+24406+8975e57f", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "hbenTywo0l7anle5/bJQBw==": { "id": "hbenTywo0l7anle5/bJQBw==", "updater": "rhel-vex", "name": "CVE-2026-34182", "description": "A flaw was found in OpenSSL's Cryptographic Message Services (CMS) AuthEnvelopedData processing. An on-path attacker can exploit insufficient input validation on cipher and tag length fields by sending specially crafted CMS messages. This can lead to the forging of messages or bypassing integrity validation. Consequently, an attacker may achieve key-equivalent functionality for a given CMS recipient.", "issued": "2026-06-09T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-34182 https://bugzilla.redhat.com/show_bug.cgi?id=2481884 https://www.cve.org/CVERecord?id=CVE-2026-34182 https://nvd.nist.gov/vuln/detail/CVE-2026-34182 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-34182.json https://access.redhat.com/errata/RHSA-2026:25239", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "normalized_severity": "Medium", "package": { "id": "", "name": "openssl", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "1:3.5.5-4.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "hxluEp8Si16NQcfaJDWcLg==": { "id": "hxluEp8Si16NQcfaJDWcLg==", "updater": "rhel-vex", "name": "CVE-2022-3324", "description": "A stack-based buffer overflow vulnerability was found in Vim's win_redr_ruler() function of the src/drawscreen.c file. The issue occurs when using a negative array index with a negative width window. This flaw allows an attacker to trick a user into opening a specially crafted file, which triggers the bug, causing an application to crash, possibly executing code and corrupting memory.", "issued": "2022-09-28T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2022-3324 https://bugzilla.redhat.com/show_bug.cgi?id=2132558 https://www.cve.org/CVERecord?id=CVE-2022-3324 https://nvd.nist.gov/vuln/detail/CVE-2022-3324 https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-3324.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "vim", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "hxsQAGbTfRAveju4VaX/RA==": { "id": "hxsQAGbTfRAveju4VaX/RA==", "updater": "rhel-vex", "name": "CVE-2026-21637", "description": "A flaw in Node.js TLS error handling allows remote attackers to crash or exhaust resources of a TLS server when `pskCallback` or `ALPNCallback` are in use. Synchronous exceptions thrown during these callbacks bypass standard TLS error handling paths (tlsClientError and error), causing either immediate process termination or silent file descriptor leaks that eventually lead to denial of service. Because these callbacks process attacker-controlled input during the TLS handshake, a remote client can repeatedly trigger the issue. This vulnerability affects TLS servers using PSK or ALPN callbacks across Node.js versions where these callbacks throw without being safely wrapped.", "issued": "2026-01-20T20:41:55Z", "links": "https://access.redhat.com/security/cve/CVE-2026-21637 https://bugzilla.redhat.com/show_bug.cgi?id=2431340 https://www.cve.org/CVERecord?id=CVE-2026-21637 https://nvd.nist.gov/vuln/detail/CVE-2026-21637 https://nodejs.org/en/blog/vulnerability/december-2025-security-releases https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-21637.json https://access.redhat.com/errata/RHSA-2026:2782", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "nodejs-docs", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "noarch", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:22.22.0-1.module+el9.7.0+23896+b5802de9", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "i2CsObRdsFCFCIvnyVzw5g==": { "id": "i2CsObRdsFCFCIvnyVzw5g==", "updater": "rhel-vex", "name": "CVE-2025-66863", "description": "A flaw was found in BinUtils. Attackers can exploit this vulnerability by providing a specially crafted Portable Executable (PE) file. This can lead to a denial of service, making the affected application unavailable.", "issued": "2025-12-29T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2025-66863 https://bugzilla.redhat.com/show_bug.cgi?id=2425824 https://www.cve.org/CVERecord?id=CVE-2025-66863 https://nvd.nist.gov/vuln/detail/CVE-2025-66863 https://github.com/caozhzh/CRGF-Vul/blob/main/cxxfilt/crash2.md https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-66863.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "normalized_severity": "Low", "package": { "id": "", "name": "binutils", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "i6aHe7Qjo768bvS9xSorFw==": { "id": "i6aHe7Qjo768bvS9xSorFw==", "updater": "rhel-vex", "name": "CVE-2023-40403", "description": "A flaw was found in libxslt package. Processing web content may disclose sensitive information. This issue was addressed with improved memory handling.", "issued": "2023-09-26T20:14:54Z", "links": "https://access.redhat.com/security/cve/CVE-2023-40403 https://bugzilla.redhat.com/show_bug.cgi?id=2349766 https://www.cve.org/CVERecord?id=CVE-2023-40403 https://nvd.nist.gov/vuln/detail/CVE-2023-40403 http://seclists.org/fulldisclosure/2023/Oct/10 http://seclists.org/fulldisclosure/2023/Oct/3 http://seclists.org/fulldisclosure/2023/Oct/4 http://seclists.org/fulldisclosure/2023/Oct/5 http://seclists.org/fulldisclosure/2023/Oct/6 http://seclists.org/fulldisclosure/2023/Oct/8 http://seclists.org/fulldisclosure/2023/Oct/9 https://bugs.chromium.org/p/chromium/issues/detail?id=1356211 https://bugzilla.gnome.org/show_bug.cgi?id=751621 https://gitlab.gnome.org/GNOME/libxslt/-/issues/94 https://support.apple.com/en-us/HT213927 https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-40403.json https://access.redhat.com/errata/RHSA-2026:6266", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "normalized_severity": "Medium", "package": { "id": "", "name": "libxslt", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "0:1.1.34-14.el9_7.1", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "i9sUrKKUObLH200e/JvjcA==": { "id": "i9sUrKKUObLH200e/JvjcA==", "updater": "rhel-vex", "name": "CVE-2026-59873", "description": "A flaw was found in node-tar, a tar archive manipulation library for Node.js. This vulnerability allows a remote attacker to craft a small gzip bomb, which, when processed, can lead to the exhaustion of disk space and CPU resources. This occurs because node-tar does not enforce strict limits on the total decompressed data, the number of entries, or the decompression ratio during extraction and parsing. The primary impact is a Denial of Service (DoS), making the affected system or application unavailable.", "issued": "2026-07-08T15:22:40Z", "links": "https://access.redhat.com/security/cve/CVE-2026-59873 https://bugzilla.redhat.com/show_bug.cgi?id=2498120 https://www.cve.org/CVERecord?id=CVE-2026-59873 https://nvd.nist.gov/vuln/detail/CVE-2026-59873 https://github.com/isaacs/node-tar/commit/2812e9338665659b183aa7226518c307044957d3 https://github.com/isaacs/node-tar/releases/tag/v7.5.19 https://github.com/isaacs/node-tar/security/advisories/GHSA-23hp-3jrh-7fpw https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59873.json https://access.redhat.com/errata/RHSA-2026:47058", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "High", "package": { "id": "", "name": "nodejs-full-i18n", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:22.23.1-2.module+el9.8.0+24538+3f176d52", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "iCq8lbTZO3yBSlU4d4JPMQ==": { "id": "iCq8lbTZO3yBSlU4d4JPMQ==", "updater": "rhel-vex", "name": "CVE-2025-59466", "description": "A stack overflow flaw has been discovered in Node.js error handling where \"Maximum call stack size exceeded\" errors become uncatchable when `async_hooks.createHook()` is enabled. Instead of reaching `process.on('uncaughtException')`, the process terminates, making the crash unrecoverable. Applications that rely on `AsyncLocalStorage` (v22, v20) or `async_hooks.createHook()` (v24, v22, v20) become vulnerable to denial-of-service crashes triggered by deep recursion under specific conditions.", "issued": "2026-01-20T20:41:55Z", "links": "https://access.redhat.com/security/cve/CVE-2025-59466 https://bugzilla.redhat.com/show_bug.cgi?id=2431343 https://www.cve.org/CVERecord?id=CVE-2025-59466 https://nvd.nist.gov/vuln/detail/CVE-2025-59466 https://nodejs.org/en/blog/vulnerability/december-2025-security-releases https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-59466.json https://access.redhat.com/errata/RHSA-2026:2782", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "nodejs-docs", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "noarch", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:22.22.0-1.module+el9.7.0+23896+b5802de9", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "iF/o4aDbQf1DAw7R+LiVQw==": { "id": "iF/o4aDbQf1DAw7R+LiVQw==", "updater": "rhel-vex", "name": "CVE-2025-68972", "description": "A flaw was found in GnuPG. An adversary can exploit this vulnerability by crafting a signed message that includes a form feed character (\\f) at the end of a plaintext line. This allows the adversary to append additional, unsigned text to the message while the signature verification still reports success. This issue leads to an integrity bypass, potentially enabling the spoofing of signed communications.", "issued": "2025-12-27T22:52:30Z", "links": "https://access.redhat.com/security/cve/CVE-2025-68972 https://bugzilla.redhat.com/show_bug.cgi?id=2425646 https://www.cve.org/CVERecord?id=CVE-2025-68972 https://nvd.nist.gov/vuln/detail/CVE-2025-68972 https://gpg.fail/formfeed https://news.ycombinator.com/item?id=46404339 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-68972.json", "severity": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N", "normalized_severity": "Medium", "package": { "id": "", "name": "gnupg2", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "iFdXYPdbzmitrrthD7u8yA==": { "id": "iFdXYPdbzmitrrthD7u8yA==", "updater": "rhel-vex", "name": "CVE-2026-59874", "description": "A flaw was found in node-tar, a tar archive manipulation library for Node.js. A remote attacker could exploit this vulnerability by providing a specially crafted tar archive with a negative entry size in its header. This malformed header causes the archive scanner to enter an infinite loop, repeatedly parsing the same header and preventing further processing. This can lead to a denial of service (DoS) condition, making the affected system or application unresponsive.", "issued": "2026-07-08T15:23:47Z", "links": "https://access.redhat.com/security/cve/CVE-2026-59874 https://bugzilla.redhat.com/show_bug.cgi?id=2498116 https://www.cve.org/CVERecord?id=CVE-2026-59874 https://nvd.nist.gov/vuln/detail/CVE-2026-59874 https://github.com/isaacs/node-tar/commit/9e78bf058b2c22dd4d52e00d8922d5c06fc2f7b5 https://github.com/isaacs/node-tar/releases/tag/v7.5.18 https://github.com/isaacs/node-tar/security/advisories/GHSA-8x88-c5mf-7j5w https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59874.json https://access.redhat.com/errata/RHSA-2026:47058", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "High", "package": { "id": "", "name": "npm", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:10.9.8-1.22.23.1.2.module+el9.8.0+24538+3f176d52", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "iSzOvPxPGZr2PfJTBTQBCQ==": { "id": "iSzOvPxPGZr2PfJTBTQBCQ==", "updater": "rhel-vex", "name": "CVE-2024-29040", "description": "A flaw was found in the tpm2-tss package, where it was not checked to see if the magic number in the attest is equal to the TPM2_GENERATED_VALUE. This flaw allows an attacker to generate arbitrary quote data, which may not be detected by Fapi_VerifyQuote.", "issued": "2024-04-30T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2024-29040 https://bugzilla.redhat.com/show_bug.cgi?id=2278077 https://www.cve.org/CVERecord?id=CVE-2024-29040 https://nvd.nist.gov/vuln/detail/CVE-2024-29040 https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-29040.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N", "normalized_severity": "Medium", "package": { "id": "", "name": "tpm2-tss", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "iT0wLV5um6Novvux5XEDSA==": { "id": "iT0wLV5um6Novvux5XEDSA==", "updater": "rhel-vex", "name": "CVE-2026-42245", "description": "A flaw was found in Net::IMAP, a Ruby library implementing the Internet Message Access Protocol (IMAP) client functionality. A hostile server can exploit a quadratic time complexity issue in the `Net::IMAP::ResponseReader` when processing large responses containing numerous string literals. This can lead to the client's CPU being exhausted, resulting in a denial of service (DoS) attack.", "issued": "2026-05-09T19:37:08Z", "links": "https://access.redhat.com/security/cve/CVE-2026-42245 https://bugzilla.redhat.com/show_bug.cgi?id=2468495 https://www.cve.org/CVERecord?id=CVE-2026-42245 https://nvd.nist.gov/vuln/detail/CVE-2026-42245 https://github.com/ruby/net-imap/commit/6091f7d6b1f3514cafbfe39c76f2b5d73de3ca96 https://github.com/ruby/net-imap/commit/88d95231fc8afef11c1f074453f7d75b68c9dfda https://github.com/ruby/net-imap/commit/de685f91a4a4cc75eb80da898c2bf8af08d34819 https://github.com/ruby/net-imap/releases/tag/v0.4.24 https://github.com/ruby/net-imap/releases/tag/v0.5.14 https://github.com/ruby/net-imap/releases/tag/v0.6.4 https://github.com/ruby/net-imap/security/advisories/GHSA-q2mw-fvj9-vvcw https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42245.json https://access.redhat.com/errata/RHSA-2026:33576", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "rubygems", "version": "", "kind": "binary", "normalized_version": "", "module": "ruby:3.3", "arch": "noarch", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "0:3.5.22-7.module+el9.8.0+24406+8975e57f", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "iYahLjRBvYk4Zq4Nz9JtHg==": { "id": "iYahLjRBvYk4Zq4Nz9JtHg==", "updater": "rhel-vex", "name": "CVE-2025-66382", "description": "A flaw was found in libexpat. This vulnerability allows a denial of service (DoS) by processing a crafted file with an approximate size of 2 MiB, leading to dozens of seconds of processing time.", "issued": "2025-11-28T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2025-66382 https://bugzilla.redhat.com/show_bug.cgi?id=2417661 https://www.cve.org/CVERecord?id=CVE-2025-66382 https://nvd.nist.gov/vuln/detail/CVE-2025-66382 https://github.com/libexpat/libexpat/issues/1076 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-66382.json", "severity": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L", "normalized_severity": "Low", "package": { "id": "", "name": "expat", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "idDdN00zXJT8ntMCqQfdkA==": { "id": "idDdN00zXJT8ntMCqQfdkA==", "updater": "rhel-vex", "name": "CVE-2026-35414", "description": "A flaw was found in OpenSSH. This vulnerability arises from the incorrect handling of the authorized_keys principals option in uncommon scenarios. Specifically, when a principals list is used with a Certificate Authority that includes comma characters, OpenSSH may misinterpret the input. This could lead to security bypasses, potentially allowing unintended access or information disclosure in specific authentication contexts.", "issued": "2026-04-02T17:08:15Z", "links": "https://access.redhat.com/security/cve/CVE-2026-35414 https://bugzilla.redhat.com/show_bug.cgi?id=2454490 https://www.cve.org/CVERecord?id=CVE-2026-35414 https://nvd.nist.gov/vuln/detail/CVE-2026-35414 https://marc.info/?l=openssh-unix-dev\u0026m=177513443901484\u0026w=2 https://www.openssh.org/releasenotes.html#10.3p1 https://www.openwall.com/lists/oss-security/2026/04/02/3 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-35414.json https://access.redhat.com/errata/RHSA-2026:19219", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N", "normalized_severity": "Medium", "package": { "id": "", "name": "openssh-clients", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:9.9p1-7.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "iwe2PkNe91EUwDENn+pmew==": { "id": "iwe2PkNe91EUwDENn+pmew==", "updater": "rhel-vex", "name": "CVE-2026-40468", "description": "A flaw was found in gawk. An integer overflow vulnerability could allow a local attacker to cause memory exhaustion, leading to a denial of service. This flaw may also enable an attacker to corrupt gawk's internal memory, potentially leading to system instability.", "issued": "2026-07-13T12:07:54Z", "links": "https://access.redhat.com/security/cve/CVE-2026-40468 https://bugzilla.redhat.com/show_bug.cgi?id=2499655 https://www.cve.org/CVERecord?id=CVE-2026-40468 https://nvd.nist.gov/vuln/detail/CVE-2026-40468 https://cert.pl/en/posts/2026/07/CVE-2026-40467 https://cgit.git.savannah.gnu.org/cgit/gawk.git/commit/?id=062f2f2581b991362c046f7f2e238ffa34e6f8c7 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-40468.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L", "normalized_severity": "Medium", "package": { "id": "", "name": "gawk", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "ixD2h349uZz3eCy55KxIlw==": { "id": "ixD2h349uZz3eCy55KxIlw==", "updater": "rhel-vex", "name": "CVE-2025-69421", "description": "A flaw was found in OpenSSL. This vulnerability allows a remote attacker to trigger a Denial of Service (DoS) by providing a specially crafted, malformed PKCS#12 file to an application that processes it. The flaw occurs due to a NULL pointer dereference in the PKCS12_item_decrypt_d2i_ex() function when handling the malformed file, leading to an application crash.", "issued": "2026-01-27T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2025-69421 https://bugzilla.redhat.com/show_bug.cgi?id=2430387 https://www.cve.org/CVERecord?id=CVE-2025-69421 https://nvd.nist.gov/vuln/detail/CVE-2025-69421 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-69421.json https://access.redhat.com/errata/RHSA-2026:1473", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "openssl-libs", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "1:3.5.1-7.el9_7", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "ixc06f0H9vqMfsbwQSwwvA==": { "id": "ixc06f0H9vqMfsbwQSwwvA==", "updater": "rhel-vex", "name": "CVE-2023-32636", "description": "A flaw was found in glib, where the gvariant deserialization code is vulnerable to a denial of service introduced by additional input validation added to resolve CVE-2023-29499. The offset table validation may be very slow. This bug does not affect any released version of glib but does affect glib distributors who followed the guidance of glib developers to backport the initial fix for CVE-2023-29499.", "issued": "2022-12-14T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2023-32636 https://bugzilla.redhat.com/show_bug.cgi?id=2211833 https://www.cve.org/CVERecord?id=CVE-2023-32636 https://nvd.nist.gov/vuln/detail/CVE-2023-32636 https://discourse.gnome.org/t/multiple-fixes-for-gvariant-normalisation-issues-in-glib/12835 https://gitlab.gnome.org/GNOME/glib/-/issues/2841 https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-32636.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "glib2", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "j/vFtwZCr4ow5q2VPKgR9g==": { "id": "j/vFtwZCr4ow5q2VPKgR9g==", "updater": "rhel-vex", "name": "CVE-2025-69418", "description": "A flaw was found in OpenSSL. When applications directly call the low-level CRYPTO_ocb128_encrypt() or CRYPTO_ocb128_decrypt() functions with non-block-aligned lengths in a single call on hardware-accelerated builds, the trailing 1-15 bytes of a message may be exposed in cleartext. These exposed bytes are not covered by the authentication tag, allowing an attacker to read or tamper with them without detection.", "issued": "2026-01-27T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2025-69418 https://bugzilla.redhat.com/show_bug.cgi?id=2430381 https://www.cve.org/CVERecord?id=CVE-2025-69418 https://nvd.nist.gov/vuln/detail/CVE-2025-69418 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-69418.json https://access.redhat.com/errata/RHSA-2026:1473", "severity": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N", "normalized_severity": "Low", "package": { "id": "", "name": "openssl-libs", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "1:3.5.1-7.el9_7", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "j2qyk9XQmGp7ssMhZKM8jg==": { "id": "j2qyk9XQmGp7ssMhZKM8jg==", "updater": "rhel-vex", "name": "CVE-2026-25749", "description": "A flaw was found in Vim, an open source, command line text editor. This heap buffer overflow vulnerability exists in the tag file resolution logic when processing the 'helpfile' option. A local user could exploit this by providing a specially crafted 'helpfile' option value, leading to a heap buffer overflow. This could result in arbitrary code execution or a denial of service.", "issued": "2026-02-06T22:43:38Z", "links": "https://access.redhat.com/security/cve/CVE-2026-25749 https://bugzilla.redhat.com/show_bug.cgi?id=2437843 https://www.cve.org/CVERecord?id=CVE-2026-25749 https://nvd.nist.gov/vuln/detail/CVE-2026-25749 https://github.com/vim/vim/commit/0714b15940b245108e6e9d7aa2260dd849a26fa9 https://github.com/vim/vim/releases/tag/v9.1.2132 https://github.com/vim/vim/security/advisories/GHSA-5w93-4g67-mm43 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-25749.json https://access.redhat.com/errata/RHSA-2026:5602", "severity": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "vim-minimal", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "2:8.2.2637-23.el9_7.1", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "j3PAipb/hCxnbdoUmJvkNQ==": { "id": "j3PAipb/hCxnbdoUmJvkNQ==", "updater": "rhel-vex", "name": "CVE-2025-61984", "description": "A flaw was found in OpenSSH where control characters in usernames were not properly validated when sourced from untrusted inputs like the command line or configuration expansion. If a ProxyCommand is used, these control characters could modify command behavior, potentially leading to code execution.", "issued": "2025-10-06T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2025-61984 https://bugzilla.redhat.com/show_bug.cgi?id=2401960 https://www.cve.org/CVERecord?id=CVE-2025-61984 https://nvd.nist.gov/vuln/detail/CVE-2025-61984 https://marc.info/?l=openssh-unix-dev\u0026m=175974522032149\u0026w=2 https://www.openssh.com/releasenotes.html#10.1p1 https://www.openwall.com/lists/oss-security/2025/10/06/1 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-61984.json https://access.redhat.com/errata/RHSA-2025:23480", "severity": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "normalized_severity": "Medium", "package": { "id": "", "name": "openssh-clients", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:8.7p1-47.el9_7", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "j71n+HvL+1UIm3Tw+EUHpw==": { "id": "j71n+HvL+1UIm3Tw+EUHpw==", "updater": "rhel-vex", "name": "CVE-2026-59999", "description": "A flaw was found in `sshd`, the OpenSSH server daemon. When `DisableForwarding=yes` is configured to prevent network traffic forwarding, it incorrectly fails to take precedence over `PermitTunnel=yes`. This allows a remote attacker to bypass intended security restrictions and establish a tunnel, potentially leading to unauthorized network access or circumvention of security policies, even when forwarding is explicitly disabled.", "issued": "2026-07-08T00:13:08Z", "links": "https://access.redhat.com/security/cve/CVE-2026-59999 https://bugzilla.redhat.com/show_bug.cgi?id=2497942 https://www.cve.org/CVERecord?id=CVE-2026-59999 https://nvd.nist.gov/vuln/detail/CVE-2026-59999 https://marc.info/?l=openssh-unix-dev\u0026m=178333966933090\u0026w=2 https://www.openssh.org/releasenotes.html#10.4p1 https://www.openwall.com/lists/oss-security/2026/07/06/5 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59999.json", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "normalized_severity": "High", "package": { "id": "", "name": "openssh", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "j7yoSCks+i8LevHtgFwCwQ==": { "id": "j7yoSCks+i8LevHtgFwCwQ==", "updater": "rhel-vex", "name": "CVE-2023-24056", "description": "A flaw was found in pkgconf, where a variable duplication can cause unbounded string expansion due to incorrect checks in libpkgconf/tuple.c:pkgconf_tuple_parse. This issue may lead to a buffer overflow, which can crash the software.", "issued": "2023-01-21T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2023-24056 https://bugzilla.redhat.com/show_bug.cgi?id=2165034 https://www.cve.org/CVERecord?id=CVE-2023-24056 https://nvd.nist.gov/vuln/detail/CVE-2023-24056 https://nullprogram.com/blog/2023/01/18/ https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-24056.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "pkgconf", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "j8SFSR8BZ09zBKgRkzC7Jg==": { "id": "j8SFSR8BZ09zBKgRkzC7Jg==", "updater": "rhel-vex", "name": "CVE-2025-61985", "description": "A flaw was found in OpenSSH where the SSH client accepted \\0 (null) characters in ssh:// URIs. When a ProxyCommand is configured, these characters could alter how the command is parsed, potentially leading to code execution depending on how the proxy is set up.", "issued": "2025-10-06T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2025-61985 https://bugzilla.redhat.com/show_bug.cgi?id=2401962 https://www.cve.org/CVERecord?id=CVE-2025-61985 https://nvd.nist.gov/vuln/detail/CVE-2025-61985 https://marc.info/?l=openssh-unix-dev\u0026m=175974522032149\u0026w=2 https://www.openssh.com/releasenotes.html#10.1p1 https://www.openwall.com/lists/oss-security/2025/10/06/1 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-61985.json https://access.redhat.com/errata/RHSA-2025:23480", "severity": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "normalized_severity": "Medium", "package": { "id": "", "name": "openssh-clients", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:8.7p1-47.el9_7", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "j9OVo/jK62GKOQBSgKgJGw==": { "id": "j9OVo/jK62GKOQBSgKgJGw==", "updater": "rhel-vex", "name": "CVE-2026-12151", "description": "A flaw was found in undici. A malicious WebSocket server can exploit this by streaming numerous small or empty continuation frames. This can bypass per-frame and cumulative-size validation, leading to unbounded memory growth in the client process. The primary consequence is memory exhaustion, resulting in a denial of service (DoS) for affected applications using the undici WebSocket client or WebSocketStream API.", "issued": "2026-06-17T16:05:38Z", "links": "https://access.redhat.com/security/cve/CVE-2026-12151 https://bugzilla.redhat.com/show_bug.cgi?id=2489980 https://www.cve.org/CVERecord?id=CVE-2026-12151 https://nvd.nist.gov/vuln/detail/CVE-2026-12151 https://cna.openjsf.org/security-advisories.html https://github.com/nodejs/undici/security/advisories/GHSA-vxpw-j846-p89q https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-12151.json https://access.redhat.com/errata/RHSA-2026:35892", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "High", "package": { "id": "", "name": "nodejs-full-i18n", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:22.23.1-1.module+el9.8.0+24457+996af7aa", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "jAAGS0/fgd26tdTkBYM5+w==": { "id": "jAAGS0/fgd26tdTkBYM5+w==", "updater": "rhel-vex", "name": "CVE-2026-27135", "description": "A flaw was found in nghttp2. Due to missing internal state validation, the library continues to process incoming data even after a session has been terminated. A remote attacker could exploit this by sending a specially crafted HTTP/2 frame, leading to an assertion failure and a denial of service (DoS).", "issued": "2026-03-18T17:59:02Z", "links": "https://access.redhat.com/security/cve/CVE-2026-27135 https://bugzilla.redhat.com/show_bug.cgi?id=2448754 https://www.cve.org/CVERecord?id=CVE-2026-27135 https://nvd.nist.gov/vuln/detail/CVE-2026-27135 https://github.com/nghttp2/nghttp2/commit/5c7df8fa815ac1004d9ecb9d1f7595c4d37f46e1 https://github.com/nghttp2/nghttp2/security/advisories/GHSA-6933-cjhr-5qg6 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-27135.json https://access.redhat.com/errata/RHSA-2026:7302", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "High", "package": { "id": "", "name": "nodejs-full-i18n", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:22.22.2-1.module+el9.7.0+24157+8ddb2461", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "jGwIyHTli8TFB8vvlYRLgQ==": { "id": "jGwIyHTli8TFB8vvlYRLgQ==", "updater": "rhel-vex", "name": "CVE-2026-32284", "description": "A flaw was found in the msgpack decoder. A remote attacker could send specially crafted, truncated fixext data to an application using the msgpack library. This improper input validation can lead to an out-of-bounds read and a runtime panic, resulting in a denial of service (DoS) attack against the application.", "issued": "2026-03-26T19:40:51Z", "links": "https://access.redhat.com/security/cve/CVE-2026-32284 https://bugzilla.redhat.com/show_bug.cgi?id=2451851 https://www.cve.org/CVERecord?id=CVE-2026-32284 https://nvd.nist.gov/vuln/detail/CVE-2026-32284 https://github.com/golang/vulndb/issues/4513 https://github.com/shamaton/msgpack/issues/59 https://pkg.go.dev/vuln/GO-2026-4513 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-32284.json", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "python-pip", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "jJU1rFjbneT5RWmoUr6uxw==": { "id": "jJU1rFjbneT5RWmoUr6uxw==", "updater": "rhel-vex", "name": "CVE-2026-27135", "description": "A flaw was found in nghttp2. Due to missing internal state validation, the library continues to process incoming data even after a session has been terminated. A remote attacker could exploit this by sending a specially crafted HTTP/2 frame, leading to an assertion failure and a denial of service (DoS).", "issued": "2026-03-18T17:59:02Z", "links": "https://access.redhat.com/security/cve/CVE-2026-27135 https://bugzilla.redhat.com/show_bug.cgi?id=2448754 https://www.cve.org/CVERecord?id=CVE-2026-27135 https://nvd.nist.gov/vuln/detail/CVE-2026-27135 https://github.com/nghttp2/nghttp2/commit/5c7df8fa815ac1004d9ecb9d1f7595c4d37f46e1 https://github.com/nghttp2/nghttp2/security/advisories/GHSA-6933-cjhr-5qg6 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-27135.json https://access.redhat.com/errata/RHSA-2026:7302", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "High", "package": { "id": "", "name": "nodejs", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "aarch64|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:22.22.2-1.module+el9.7.0+24157+8ddb2461", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "jLwTZ1iGPDmq13+JErDhGQ==": { "id": "jLwTZ1iGPDmq13+JErDhGQ==", "updater": "rhel-vex", "name": "CVE-2026-5435", "description": "A flaw was found in glibc, the GNU C Library. Specifically, deprecated functions responsible for printing TSIG (Transaction Signature) records fail to properly manage memory buffers. This oversight can lead to an out-of-bounds write when processing specially crafted TSIG records. An attacker could exploit this to cause a denial of service or potentially execute arbitrary code.", "issued": "2026-04-28T11:58:54Z", "links": "https://access.redhat.com/security/cve/CVE-2026-5435 https://bugzilla.redhat.com/show_bug.cgi?id=2463465 https://www.cve.org/CVERecord?id=CVE-2026-5435 https://nvd.nist.gov/vuln/detail/CVE-2026-5435 https://inbox.sourceware.org/libc-announce/7a655d55-276f-41fe-b550-feb3ebb2ce91@redhat.com/T/#u https://sourceware.org/bugzilla/show_bug.cgi?id=34033 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-5435.json https://access.redhat.com/errata/RHSA-2026:42952", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "glibc-langpack-en", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:2.34-274.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "jVOV80BPiMF1EYk2uq9ohg==": { "id": "jVOV80BPiMF1EYk2uq9ohg==", "updater": "rhel-vex", "name": "CVE-2026-2100", "description": "A flaw was found in p11-kit. A remote attacker could exploit this vulnerability by calling the C_DeriveKey function on a remote token with specific IBM kyber or IBM btc derive mechanism parameters set to NULL. This could lead to the RPC-client attempting to return an uninitialized value, potentially resulting in a NULL dereference or undefined behavior. This issue may cause an application level denial of service or other unpredictable system states.", "issued": "2026-02-06T08:08:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-2100 https://bugzilla.redhat.com/show_bug.cgi?id=2437308 https://www.cve.org/CVERecord?id=CVE-2026-2100 https://nvd.nist.gov/vuln/detail/CVE-2026-2100 https://github.com/p11-glue/p11-kit/pull/740 https://github.com/p11-glue/p11-kit/releases/tag/0.26.2 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-2100.json https://access.redhat.com/errata/RHSA-2026:18599", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "normalized_severity": "Medium", "package": { "id": "", "name": "p11-kit-trust", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:0.26.2-1.el9", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "jVeIQzIm92EdkbCIlGT1qA==": { "id": "jVeIQzIm92EdkbCIlGT1qA==", "updater": "rhel-vex", "name": "CVE-2022-3153", "description": "A flaw was found in vim, where it is vulnerable to a null-pointer-dereference in the vim_regcomp() function. This flaw allows a specially crafted file to crash a program or execute code.", "issued": "2022-09-08T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2022-3153 https://bugzilla.redhat.com/show_bug.cgi?id=2126401 https://www.cve.org/CVERecord?id=CVE-2022-3153 https://nvd.nist.gov/vuln/detail/CVE-2022-3153 https://huntr.dev/bounties/68331124-620d-48bc-a8fa-cd947b26270a/ https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-3153.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "vim", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "jZO++vSydJTiCIbVesbXEQ==": { "id": "jZO++vSydJTiCIbVesbXEQ==", "updater": "rhel-vex", "name": "CVE-2026-41316", "description": "A flaw was found in ERB, a templating system for Ruby. An attacker who can trigger deserialization of untrusted data in a Ruby application can bypass existing protections. This vulnerability allows for arbitrary code execution by exploiting specific public methods that evaluate template source code, which were not properly guarded against deserialization attacks.", "issued": "2026-04-24T02:35:41Z", "links": "https://access.redhat.com/security/cve/CVE-2026-41316 https://bugzilla.redhat.com/show_bug.cgi?id=2461369 https://www.cve.org/CVERecord?id=CVE-2026-41316 https://nvd.nist.gov/vuln/detail/CVE-2026-41316 https://github.com/ruby/erb/security/advisories/GHSA-q339-8rmv-2mhv https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-41316.json https://access.redhat.com/errata/RHSA-2026:18030", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "normalized_severity": "High", "package": { "id": "", "name": "rubygem-rake", "version": "", "kind": "binary", "normalized_version": "", "module": "ruby:3.3", "arch": "noarch", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "0:13.1.0-6.module+el9.7.0+24248+66578cbb", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "jiVVTQmOtKqVixv7agF/Hg==": { "id": "jiVVTQmOtKqVixv7agF/Hg==", "updater": "rhel-vex", "name": "CVE-2025-27113", "description": "A flaw was found in libxml2. This vulnerability allows a NULL pointer dereference, leading to a potential crash or denial of service via a crafted XML pattern.", "issued": "2025-02-18T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2025-27113 https://bugzilla.redhat.com/show_bug.cgi?id=2346410 https://www.cve.org/CVERecord?id=CVE-2025-27113 https://nvd.nist.gov/vuln/detail/CVE-2025-27113 https://gitlab.gnome.org/GNOME/libxml2/-/issues/861 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-27113.json", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L", "normalized_severity": "Low", "package": { "id": "", "name": "libxml2", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "jw+r2jbroWxBcAHcFZs/eg==": { "id": "jw+r2jbroWxBcAHcFZs/eg==", "updater": "rhel-vex", "name": "CVE-2026-42245", "description": "A flaw was found in Net::IMAP, a Ruby library implementing the Internet Message Access Protocol (IMAP) client functionality. A hostile server can exploit a quadratic time complexity issue in the `Net::IMAP::ResponseReader` when processing large responses containing numerous string literals. This can lead to the client's CPU being exhausted, resulting in a denial of service (DoS) attack.", "issued": "2026-05-09T19:37:08Z", "links": "https://access.redhat.com/security/cve/CVE-2026-42245 https://bugzilla.redhat.com/show_bug.cgi?id=2468495 https://www.cve.org/CVERecord?id=CVE-2026-42245 https://nvd.nist.gov/vuln/detail/CVE-2026-42245 https://github.com/ruby/net-imap/commit/6091f7d6b1f3514cafbfe39c76f2b5d73de3ca96 https://github.com/ruby/net-imap/commit/88d95231fc8afef11c1f074453f7d75b68c9dfda https://github.com/ruby/net-imap/commit/de685f91a4a4cc75eb80da898c2bf8af08d34819 https://github.com/ruby/net-imap/releases/tag/v0.4.24 https://github.com/ruby/net-imap/releases/tag/v0.5.14 https://github.com/ruby/net-imap/releases/tag/v0.6.4 https://github.com/ruby/net-imap/security/advisories/GHSA-q2mw-fvj9-vvcw https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42245.json https://access.redhat.com/errata/RHSA-2026:33576", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "rubygem-psych", "version": "", "kind": "binary", "normalized_version": "", "module": "ruby:3.3", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "0:5.1.2-7.module+el9.8.0+24406+8975e57f", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "jyKmIhGp11jpJBCY83RPQA==": { "id": "jyKmIhGp11jpJBCY83RPQA==", "updater": "rhel-vex", "name": "CVE-2026-13149", "description": "A flaw was found in brace-expansion. An attacker can exploit a vulnerability in the `expand()` function by providing a specially crafted string. This string, containing consecutive non-expanding brace groups, can trigger exponential-time complexity, leading to significant CPU consumption and event-loop blocking. This can result in a Denial of Service (DoS) for the affected system.", "issued": "2026-06-30T08:30:34Z", "links": "https://access.redhat.com/security/cve/CVE-2026-13149 https://bugzilla.redhat.com/show_bug.cgi?id=2494813 https://www.cve.org/CVERecord?id=CVE-2026-13149 https://nvd.nist.gov/vuln/detail/CVE-2026-13149 https://github.com/juliangruber/brace-expansion/commit/c7e33ec13ac1a684c116720843ce24e208611754 https://www.npmjs.com/package/brace-expansion https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-13149.json https://access.redhat.com/errata/RHSA-2026:47058", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "High", "package": { "id": "", "name": "nodejs-libs", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:22.23.1-2.module+el9.8.0+24538+3f176d52", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "k9jtJIr2beiO7DTwypDNWw==": { "id": "k9jtJIr2beiO7DTwypDNWw==", "updater": "rhel-vex", "name": "CVE-2026-6844", "description": "A flaw was found in the `readelf` utility of the binutils package. A local attacker could exploit two Denial of Service (DoS) vulnerabilities by providing a specially crafted Executable and Linkable Format (ELF) file. One vulnerability, a resource exhaustion (CWE-400), can lead to an out-of-memory condition. The other, a null pointer dereference (CWE-476), can cause a segmentation fault. Both issues can result in the `readelf` utility becoming unresponsive or crashing, leading to a denial of service.", "issued": "2026-04-13T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-6844 https://bugzilla.redhat.com/show_bug.cgi?id=2460016 https://www.cve.org/CVERecord?id=CVE-2026-6844 https://nvd.nist.gov/vuln/detail/CVE-2026-6844 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6844.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "binutils", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "kDNo+1U3zj32TNGC/5DIKw==": { "id": "kDNo+1U3zj32TNGC/5DIKw==", "updater": "rhel-vex", "name": "CVE-2026-8286", "description": "A flaw was found in curl. When a new data transfer attempts to upgrade its connection using STARTTLS, it may incorrectly reuse an existing live connection. This reuse can occur even if the Transport Layer Security (TLS) configuration of the new transfer does not match the existing connection, potentially leading to an insecure connection being established.", "issued": "2026-07-03T06:14:17Z", "links": "https://access.redhat.com/security/cve/CVE-2026-8286 https://bugzilla.redhat.com/show_bug.cgi?id=2496763 https://www.cve.org/CVERecord?id=CVE-2026-8286 https://nvd.nist.gov/vuln/detail/CVE-2026-8286 https://curl.se/docs/CVE-2026-8286.html https://curl.se/docs/CVE-2026-8286.json https://hackerone.com/reports/3718195 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-8286.json", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N", "normalized_severity": "High", "package": { "id": "", "name": "curl", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "kGC5RaOJSDDnqCSoiLqrIA==": { "id": "kGC5RaOJSDDnqCSoiLqrIA==", "updater": "rhel-vex", "name": "CVE-2026-54371", "description": "A flaw was found in the `attr` package. This vulnerability allows a local attacker to perform a symlink traversal attack by replacing a pathname component with a symbolic link - either during directory hierarchy traversal by `getfattr` or during backup restoration by `setfattr`, which reads and resolves full pathnames from backup files. In both cases, when these utilities are executed by a privileged process over a path controlled by the attacker, this can lead to local privilege escalation.", "issued": "2026-06-29T13:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-54371 https://bugzilla.redhat.com/show_bug.cgi?id=2490283 https://www.cve.org/CVERecord?id=CVE-2026-54371 https://nvd.nist.gov/vuln/detail/CVE-2026-54371 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-54371.json", "severity": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N", "normalized_severity": "Medium", "package": { "id": "", "name": "attr", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "kGY3woMWc1W36Wi2YstJ0Q==": { "id": "kGY3woMWc1W36Wi2YstJ0Q==", "updater": "rhel-vex", "name": "CVE-2026-6791", "description": "A flaw was found in glibc. When processing paths that start with a tilde (~) followed by a username, the `wordexp` function can be forced to allocate an excessive amount of memory on the program's stack. A remote attacker could exploit this by providing a very long username, leading to a stack exhaustion and causing a denial of service (DoS) for the affected application.", "issued": "2026-08-10T18:41:25Z", "links": "https://access.redhat.com/security/cve/CVE-2026-6791 https://bugzilla.redhat.com/show_bug.cgi?id=2513603 https://www.cve.org/CVERecord?id=CVE-2026-6791 https://nvd.nist.gov/vuln/detail/CVE-2026-6791 https://sourceware.org/bugzilla/show_bug.cgi?id=34091 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6791.json", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "glibc", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "kHJ1B6H/qaZ/vmirvtTenQ==": { "id": "kHJ1B6H/qaZ/vmirvtTenQ==", "updater": "rhel-vex", "name": "CVE-2026-27904", "description": "A flaw was found in minimatch. A remote attacker could exploit this vulnerability by providing a specially crafted glob expression with nested unbounded quantifiers. This could lead to catastrophic backtracking in the V8 JavaScript engine, causing the application to become unresponsive and resulting in a Denial of Service (DoS).", "issued": "2026-02-26T01:07:42Z", "links": "https://access.redhat.com/security/cve/CVE-2026-27904 https://bugzilla.redhat.com/show_bug.cgi?id=2442922 https://www.cve.org/CVERecord?id=CVE-2026-27904 https://nvd.nist.gov/vuln/detail/CVE-2026-27904 https://github.com/isaacs/minimatch/security/advisories/GHSA-23c5-xmqv-rm74 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-27904.json https://access.redhat.com/errata/RHSA-2026:7302", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "npm", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:10.9.7-1.22.22.2.1.module+el9.7.0+24157+8ddb2461", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "kR9Bs/gd2Qm09J0HnMmVzg==": { "id": "kR9Bs/gd2Qm09J0HnMmVzg==", "updater": "rhel-vex", "name": "CVE-2026-58014", "description": "A flaw was found in GLib. An off-by-one error can occur in the g_key_file_get_locale_string_list function in the gkeyfile.c file when loading a key file with an empty value. This flaw can cause an out-of-bounds access of 1 byte or a denial of service when the out-of-bounds access crosses a page boundary.", "issued": "2026-04-07T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-58014 https://bugzilla.redhat.com/show_bug.cgi?id=2492255 https://www.cve.org/CVERecord?id=CVE-2026-58014 https://nvd.nist.gov/vuln/detail/CVE-2026-58014 https://gitlab.gnome.org/GNOME/glib/-/issues/3930 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-58014.json", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "normalized_severity": "Medium", "package": { "id": "", "name": "glib2", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "kTyfGInwWoCVv7gGPYCF5g==": { "id": "kTyfGInwWoCVv7gGPYCF5g==", "updater": "rhel-vex", "name": "CVE-2023-2610", "description": "Integer Overflow or Wraparound in GitHub repository vim/vim prior to 9.0.1532.", "issued": "2023-05-10T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2023-2610 https://bugzilla.redhat.com/show_bug.cgi?id=2209048 https://www.cve.org/CVERecord?id=CVE-2023-2610 https://nvd.nist.gov/vuln/detail/CVE-2023-2610 https://huntr.dev/bounties/31e67340-935b-4f6c-a923-f7246bc29c7d https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-2610.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "vim", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "kXRjhXGDLvcaf9UDToCwQQ==": { "id": "kXRjhXGDLvcaf9UDToCwQQ==", "updater": "rhel-vex", "name": "CVE-2026-12912", "description": "A flaw was found in libtiff. A remote attacker could exploit this vulnerability by providing a specially crafted PixarLog-compressed TIFF image. This issue occurs when decoding Pixarlog codec images with the PIXARLOGDATAFMT_8BITABGR output format and a specific stride value, leading to a heap-based buffer overflow. This could potentially result in arbitrary code execution or a denial of service (DoS).", "issued": "2026-04-16T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-12912 https://bugzilla.redhat.com/show_bug.cgi?id=2492871 https://www.cve.org/CVERecord?id=CVE-2026-12912 https://nvd.nist.gov/vuln/detail/CVE-2026-12912 https://gitlab.com/libtiff/libtiff/-/merge_requests/873 https://gitlab.com/libtiff/libtiff/-/work_items/824 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-12912.json https://access.redhat.com/errata/RHSA-2026:42668", "severity": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H", "normalized_severity": "High", "package": { "id": "", "name": "libtiff", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "0:4.4.0-18.el9_8.1", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "kaUbMItvWrS1leJMEsAk9A==": { "id": "kaUbMItvWrS1leJMEsAk9A==", "updater": "rhel-vex", "name": "CVE-2022-2284", "description": "Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.", "issued": "2022-07-02T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2022-2284 https://bugzilla.redhat.com/show_bug.cgi?id=2103872 https://www.cve.org/CVERecord?id=CVE-2022-2284 https://nvd.nist.gov/vuln/detail/CVE-2022-2284 https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-2284.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "vim", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "klH60uFrR0WkawaSlcOEKg==": { "id": "klH60uFrR0WkawaSlcOEKg==", "updater": "rhel-vex", "name": "CVE-2026-1484", "description": "A flaw was found in the GLib Base64 encoding routine when processing very large input data. Due to incorrect use of integer types during length calculation, the library may miscalculate buffer boundaries. This can cause memory writes outside the allocated buffer. Applications that process untrusted or extremely large Base64 input using GLib may crash or behave unpredictably.", "issued": "2026-01-27T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-1484 https://bugzilla.redhat.com/show_bug.cgi?id=2433259 https://www.cve.org/CVERecord?id=CVE-2026-1484 https://nvd.nist.gov/vuln/detail/CVE-2026-1484 https://gitlab.gnome.org/GNOME/glib/-/issues/3870 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-1484.json", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L", "normalized_severity": "Medium", "package": { "id": "", "name": "glib2", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "knUP7wXG3O435cJDvu9Thw==": { "id": "knUP7wXG3O435cJDvu9Thw==", "updater": "rhel-vex", "name": "CVE-2025-69647", "description": "A flaw was found in binutils. Processing a specially crafted ELF binary file containing malformed DWARF loclists data with the readelf program can trigger an infinite loop and result in a denial of service.", "issued": "2026-03-09T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2025-69647 https://bugzilla.redhat.com/show_bug.cgi?id=2445773 https://www.cve.org/CVERecord?id=CVE-2025-69647 https://nvd.nist.gov/vuln/detail/CVE-2025-69647 https://sourceware.org/bugzilla/show_bug.cgi?id=33640 https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=455446bbdc8675f34808187de2bbad4682016ff7 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-69647.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "normalized_severity": "Low", "package": { "id": "", "name": "binutils", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "kuuz4akZvpNKTf2txpaWog==": { "id": "kuuz4akZvpNKTf2txpaWog==", "updater": "rhel-vex", "name": "CVE-2026-35386", "description": "A flaw was found in OpenSSH. This vulnerability allows a remote attacker to achieve arbitrary command execution by injecting shell metacharacters into a username provided on the command line. Exploitation requires an untrusted username and a non-default configuration of the '%' character in `ssh_config`.", "issued": "2026-04-02T16:44:27Z", "links": "https://access.redhat.com/security/cve/CVE-2026-35386 https://bugzilla.redhat.com/show_bug.cgi?id=2454506 https://www.cve.org/CVERecord?id=CVE-2026-35386 https://nvd.nist.gov/vuln/detail/CVE-2026-35386 https://marc.info/?l=openssh-unix-dev\u0026m=177513443901484\u0026w=2 https://www.openssh.org/releasenotes.html#10.3p1 https://www.openwall.com/lists/oss-security/2026/04/02/3 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-35386.json https://access.redhat.com/errata/RHSA-2026:19219", "severity": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N", "normalized_severity": "Low", "package": { "id": "", "name": "openssh-clients", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:9.9p1-7.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "kxWAVe7EWU20jParQphcRA==": { "id": "kxWAVe7EWU20jParQphcRA==", "updater": "rhel-vex", "name": "CVE-2026-35414", "description": "A flaw was found in OpenSSH. This vulnerability arises from the incorrect handling of the authorized_keys principals option in uncommon scenarios. Specifically, when a principals list is used with a Certificate Authority that includes comma characters, OpenSSH may misinterpret the input. This could lead to security bypasses, potentially allowing unintended access or information disclosure in specific authentication contexts.", "issued": "2026-04-02T17:08:15Z", "links": "https://access.redhat.com/security/cve/CVE-2026-35414 https://bugzilla.redhat.com/show_bug.cgi?id=2454490 https://www.cve.org/CVERecord?id=CVE-2026-35414 https://nvd.nist.gov/vuln/detail/CVE-2026-35414 https://marc.info/?l=openssh-unix-dev\u0026m=177513443901484\u0026w=2 https://www.openssh.org/releasenotes.html#10.3p1 https://www.openwall.com/lists/oss-security/2026/04/02/3 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-35414.json https://access.redhat.com/errata/RHSA-2026:19219", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N", "normalized_severity": "Medium", "package": { "id": "", "name": "openssh", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:9.9p1-7.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "l1pK1ezh6e0g8I+Dp2iK7w==": { "id": "l1pK1ezh6e0g8I+Dp2iK7w==", "updater": "rhel-vex", "name": "CVE-2025-9086", "description": "An out of bounds read flaw has been discovered in the curl project. Under specific conditions the path comparison logic makes curl read outside a heap buffer boundary. This bug either causes a crash or it potentially makes the comparison come to the wrong conclusion and lets the clear-text site override the contents of the secure cookie, contrary to expectations and depending on the memory contents immediately following the single-byte allocation that holds the path.", "issued": "2025-09-12T05:10:03Z", "links": "https://access.redhat.com/security/cve/CVE-2025-9086 https://bugzilla.redhat.com/show_bug.cgi?id=2394750 https://www.cve.org/CVERecord?id=CVE-2025-9086 https://nvd.nist.gov/vuln/detail/CVE-2025-9086 https://curl.se/docs/CVE-2025-9086.html https://curl.se/docs/CVE-2025-9086.json https://github.com/curl/curl/commit/c6ae07c6a541e0e96d0040afb6 https://hackerone.com/reports/3294999 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-9086.json https://access.redhat.com/errata/RHSA-2026:1350", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "normalized_severity": "Medium", "package": { "id": "", "name": "libcurl-minimal", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:7.76.1-35.el9_7.3", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "l6IrI73Pg+lrisEtcgX+0Q==": { "id": "l6IrI73Pg+lrisEtcgX+0Q==", "updater": "rhel-vex", "name": "CVE-2026-3784", "description": "A flaw was found in curl. This vulnerability allows curl to wrongly reuse an existing HTTP proxy connection when performing a CONNECT request to a server, even if the new request uses different authentication credentials for the HTTP proxy. This improper connection reuse could lead to an attacker gaining unauthorized access to resources or information intended for a different user.", "issued": "2026-03-11T10:09:21Z", "links": "https://access.redhat.com/security/cve/CVE-2026-3784 https://bugzilla.redhat.com/show_bug.cgi?id=2446449 https://www.cve.org/CVERecord?id=CVE-2026-3784 https://nvd.nist.gov/vuln/detail/CVE-2026-3784 http://www.openwall.com/lists/oss-security/2026/03/11/3 https://curl.se/docs/CVE-2026-3784.html https://curl.se/docs/CVE-2026-3784.json https://hackerone.com/reports/3584903 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-3784.json", "severity": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "normalized_severity": "Medium", "package": { "id": "", "name": "curl", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "lCc1jyHfsFJK2HfULjN8pA==": { "id": "lCc1jyHfsFJK2HfULjN8pA==", "updater": "rhel-vex", "name": "CVE-2025-12781", "description": "A flaw was found in the base64 module in the Python standard library. The b64decode, standard_b64decode and urlsafe_b64decode functions will always accept the '+' and '/' characters even when an alternative base64 alphabet is specified via the altchars parameter that excludes them. This input validation bypass allows malformed or unexpected data to pass through decoding filters, potentially causing logical errors or data integrity issues in applications relying on strict character sets.", "issued": "2026-01-21T19:34:47Z", "links": "https://access.redhat.com/security/cve/CVE-2025-12781 https://bugzilla.redhat.com/show_bug.cgi?id=2431736 https://www.cve.org/CVERecord?id=CVE-2025-12781 https://nvd.nist.gov/vuln/detail/CVE-2025-12781 https://github.com/python/cpython/issues/125346 https://github.com/python/cpython/pull/141128 https://mail.python.org/archives/list/security-announce@python.org/thread/KRI7GC6S27YV5NJ4FPDALS2WI5ENAFJ6/ https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-12781.json", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "normalized_severity": "Medium", "package": { "id": "", "name": "python3.9", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "lFQcTCheSGIjEbZVivulnA==": { "id": "lFQcTCheSGIjEbZVivulnA==", "updater": "rhel-vex", "name": "CVE-2026-42245", "description": "A flaw was found in Net::IMAP, a Ruby library implementing the Internet Message Access Protocol (IMAP) client functionality. A hostile server can exploit a quadratic time complexity issue in the `Net::IMAP::ResponseReader` when processing large responses containing numerous string literals. This can lead to the client's CPU being exhausted, resulting in a denial of service (DoS) attack.", "issued": "2026-05-09T19:37:08Z", "links": "https://access.redhat.com/security/cve/CVE-2026-42245 https://bugzilla.redhat.com/show_bug.cgi?id=2468495 https://www.cve.org/CVERecord?id=CVE-2026-42245 https://nvd.nist.gov/vuln/detail/CVE-2026-42245 https://github.com/ruby/net-imap/commit/6091f7d6b1f3514cafbfe39c76f2b5d73de3ca96 https://github.com/ruby/net-imap/commit/88d95231fc8afef11c1f074453f7d75b68c9dfda https://github.com/ruby/net-imap/commit/de685f91a4a4cc75eb80da898c2bf8af08d34819 https://github.com/ruby/net-imap/releases/tag/v0.4.24 https://github.com/ruby/net-imap/releases/tag/v0.5.14 https://github.com/ruby/net-imap/releases/tag/v0.6.4 https://github.com/ruby/net-imap/security/advisories/GHSA-q2mw-fvj9-vvcw https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42245.json https://access.redhat.com/errata/RHSA-2026:33576", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "rubygem-json", "version": "", "kind": "binary", "normalized_version": "", "module": "ruby:3.3", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "0:2.7.2-7.module+el9.8.0+24406+8975e57f", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "lFfYg6015iTLGI5pZVMU7w==": { "id": "lFfYg6015iTLGI5pZVMU7w==", "updater": "rhel-vex", "name": "CVE-2026-58012", "description": "A flaw was found in GLib. A buffer over-read can occur in the g_regex_replace function when used with the `G_REGEX_RAW` compile flag and case-change replacement escapes because the string_append function processes matched substrings using UTF-8 functions that assume valid UTF-8 input, even when the string is treated as raw bytes. This vulnerability can cause a minor information disclosure of 1-5 bytes and a denial of service when the buffer over-read crosses a page boundary.", "issued": "2026-03-27T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-58012 https://bugzilla.redhat.com/show_bug.cgi?id=2492247 https://www.cve.org/CVERecord?id=CVE-2026-58012 https://nvd.nist.gov/vuln/detail/CVE-2026-58012 https://gitlab.gnome.org/GNOME/glib/-/issues/3918 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-58012.json", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L", "normalized_severity": "Medium", "package": { "id": "", "name": "glib2", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "lHLNxD93t7uUJfmDhNwvCQ==": { "id": "lHLNxD93t7uUJfmDhNwvCQ==", "updater": "rhel-vex", "name": "CVE-2022-3256", "description": "A heap use-after-free vulnerability was found in vim's movemark() function of the src/mark.c file. This issue occurs because vim uses freed memory when 'autocmd' changes the mark. This flaw allows an attacker to trick a user into opening a specially crafted file, triggering a heap use-after-free that causes an application to crash, possibly executing code and corrupting memory.", "issued": "2022-09-22T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2022-3256 https://bugzilla.redhat.com/show_bug.cgi?id=2132571 https://www.cve.org/CVERecord?id=CVE-2022-3256 https://nvd.nist.gov/vuln/detail/CVE-2022-3256 https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-3256.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "vim", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "lJ8RTw7m+AgAnWW6upSntA==": { "id": "lJ8RTw7m+AgAnWW6upSntA==", "updater": "rhel-vex", "name": "CVE-2021-45078", "description": "An out-of-bounds flaw was found in binutils’ stabs functionality. The attack needs to be initiated locally where an attacker could convince a victim to read a specially crafted file that is processed by objdump, leading to the disclosure of memory and possibly leading to the execution of arbitrary code or causing the utility to crash.", "issued": "2021-12-14T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2021-45078 https://bugzilla.redhat.com/show_bug.cgi?id=2033715 https://www.cve.org/CVERecord?id=CVE-2021-45078 https://nvd.nist.gov/vuln/detail/CVE-2021-45078 https://security.access.redhat.com/data/csaf/v2/vex/2021/cve-2021-45078.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L", "normalized_severity": "Medium", "package": { "id": "", "name": "binutils", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "lNSOU9e0rQLWWUuG6KmS+w==": { "id": "lNSOU9e0rQLWWUuG6KmS+w==", "updater": "rhel-vex", "name": "CVE-2026-60002", "description": "A flaw was found in OpenSSH. A remote attacker could exploit a use-after-free vulnerability on the client side when a server changes its host key during a key re-exchange. This could lead to high impact on confidentiality and integrity, and low impact on availability.", "issued": "2026-07-08T00:17:33Z", "links": "https://access.redhat.com/security/cve/CVE-2026-60002 https://bugzilla.redhat.com/show_bug.cgi?id=2497936 https://www.cve.org/CVERecord?id=CVE-2026-60002 https://nvd.nist.gov/vuln/detail/CVE-2026-60002 https://marc.info/?l=openssh-unix-dev\u0026m=178333966933090\u0026w=2 https://www.openssh.org/releasenotes.html#10.4p1 https://www.openwall.com/lists/oss-security/2026/07/06/5 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-60002.json https://access.redhat.com/errata/RHSA-2026:47756", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L", "normalized_severity": "High", "package": { "id": "", "name": "openssh", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:9.9p1-9.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "lPpQZfWnRR1kvdFRKr34Kg==": { "id": "lPpQZfWnRR1kvdFRKr34Kg==", "updater": "rhel-vex", "name": "CVE-2026-45445", "description": "A flaw was found in OpenSSL. Applications that use the AES-OCB encryption method with a specific one-shot interface (EVP_Cipher()) will have their provided Initialization Vector (IV) silently discarded. This leads to the same internal cryptographic value being used repeatedly, which compromises the confidentiality of encrypted data. Additionally, this issue allows for the universal forgery of authentication tags, undermining the integrity of communications.", "issued": "2026-06-09T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-45445 https://bugzilla.redhat.com/show_bug.cgi?id=2481896 https://www.cve.org/CVERecord?id=CVE-2026-45445 https://nvd.nist.gov/vuln/detail/CVE-2026-45445 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-45445.json https://access.redhat.com/errata/RHSA-2026:25239", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "normalized_severity": "Medium", "package": { "id": "", "name": "openssl-devel", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:3.5.5-4.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "lQBARBTddFvexevUD04GZA==": { "id": "lQBARBTddFvexevUD04GZA==", "updater": "rhel-vex", "name": "CVE-2026-5745", "description": "A flaw was found in libarchive. A NULL pointer dereference vulnerability exists in the ACL parsing logic, specifically within the archive_acl_from_text_nl() function. When processing a malformed ACL string (such as a bare \"d\" or \"default\" tag without subsequent fields), the function fails to perform adequate validation before advancing the pointer. An attacker can exploit this by providing a maliciously crafted archive, causing an application utilizing the libarchive API (such as bsdtar) to crash, resulting in a Denial of Service (DoS).", "issued": "2026-04-07T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-5745 https://bugzilla.redhat.com/show_bug.cgi?id=2455921 https://www.cve.org/CVERecord?id=CVE-2026-5745 https://nvd.nist.gov/vuln/detail/CVE-2026-5745 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-5745.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "libarchive", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "lWdVDKK0NI1ECjrQyrQZhA==": { "id": "lWdVDKK0NI1ECjrQyrQZhA==", "updater": "rhel-vex", "name": "CVE-2025-11414", "description": "A flaw was found in binutils. Processing a specially crafted object file with the ld linker can trigger an out-of-bounds read in the get_link_hash_entry function in the bfd/elflink.c file due to an improper check, causing a crash and resulting in a denial of service.", "issued": "2025-10-07T22:32:07Z", "links": "https://access.redhat.com/security/cve/CVE-2025-11414 https://bugzilla.redhat.com/show_bug.cgi?id=2402424 https://www.cve.org/CVERecord?id=CVE-2025-11414 https://nvd.nist.gov/vuln/detail/CVE-2025-11414 https://sourceware.org/bugzilla/show_bug.cgi?id=33450 https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=aeaaa9af6359c8e394ce9cf24911fec4f4d23703 https://vuldb.com/?id.327350 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-11414.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "normalized_severity": "Low", "package": { "id": "", "name": "binutils", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "lz6O0nYiDpis8SScmTUuSg==": { "id": "lz6O0nYiDpis8SScmTUuSg==", "updater": "rhel-vex", "name": "CVE-2025-1215", "description": "A flaw was found in Vim. A local user may be able to trigger memory corruption by using the `--log` option with a non-existent path, which can lead to an application crash or other undefined behavior.", "issued": "2025-02-12T18:31:06Z", "links": "https://access.redhat.com/security/cve/CVE-2025-1215 https://bugzilla.redhat.com/show_bug.cgi?id=2345318 https://www.cve.org/CVERecord?id=CVE-2025-1215 https://nvd.nist.gov/vuln/detail/CVE-2025-1215 https://github.com/vim/vim/commit/c5654b84480822817bb7b69ebc97c174c91185e9 https://github.com/vim/vim/issues/16606 https://github.com/vim/vim/releases/tag/v9.1.1097 https://vuldb.com/?ctiid.295174 https://vuldb.com/?id.295174 https://vuldb.com/?submit.497546 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-1215.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L", "normalized_severity": "Low", "package": { "id": "", "name": "vim", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "lzB4zyDZ+L/0TgHu+34IeA==": { "id": "lzB4zyDZ+L/0TgHu+34IeA==", "updater": "rhel-vex", "name": "CVE-2026-41989", "description": "A flaw was found in Libgcrypt. A remote attacker could exploit this vulnerability by sending crafted Elliptic Curve Diffie-Hellman (ECDH) ciphertext to the `gcry_pk_decrypt` function. This can lead to a heap-based buffer overflow, potentially causing a denial of service (DoS) condition.", "issued": "2026-04-23T04:30:26Z", "links": "https://access.redhat.com/security/cve/CVE-2026-41989 https://bugzilla.redhat.com/show_bug.cgi?id=2461063 https://www.cve.org/CVERecord?id=CVE-2026-41989 https://nvd.nist.gov/vuln/detail/CVE-2026-41989 https://dev.gnupg.org/T8211 https://lists.gnupg.org/pipermail/gnupg-announce/2026q2/000503.html https://www.openwall.com/lists/oss-security/2026/04/21/1 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-41989.json https://access.redhat.com/errata/RHSA-2026:50147", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "libgcrypt", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:1.10.0-13.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "m/cpX9gyFETv4B87S/qRxw==": { "id": "m/cpX9gyFETv4B87S/qRxw==", "updater": "rhel-vex", "name": "CVE-2025-11468", "description": "Missing character filtering has been discovered in Python. When folding a long comment in an email header containing exclusively unfoldable characters, the parenthesis would not be preserved. This could be used for injecting headers into email messages where addresses are user-controlled and not sanitized.", "issued": "2026-01-20T21:09:11Z", "links": "https://access.redhat.com/security/cve/CVE-2025-11468 https://bugzilla.redhat.com/show_bug.cgi?id=2431375 https://www.cve.org/CVERecord?id=CVE-2025-11468 https://nvd.nist.gov/vuln/detail/CVE-2025-11468 https://github.com/python/cpython/issues/143935 https://github.com/python/cpython/pull/143936 https://mail.python.org/archives/list/security-announce@python.org/thread/FELSEOLBI2QR6YLG6Q7VYF7FWSGQTKLI/ https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-11468.json", "severity": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:N", "normalized_severity": "Medium", "package": { "id": "", "name": "python3.9", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "m9ROycwLgAur/M8HFSigEw==": { "id": "m9ROycwLgAur/M8HFSigEw==", "updater": "rhel-vex", "name": "CVE-2026-45130", "description": "A flaw was found in Vim, an open-source command-line text editor. A heap buffer overflow exists in the `read_compound()` function when processing a specially crafted spell file (.spl) with UTF-8 encoding active. A remote attacker could exploit this by convincing a user to open a text file containing a malicious modeline, which could then load a planted malicious spell file. This could lead to a heap overflow, potentially resulting in an application-level denial of service.", "issued": "2026-05-08T22:42:35Z", "links": "https://access.redhat.com/security/cve/CVE-2026-45130 https://bugzilla.redhat.com/show_bug.cgi?id=2468422 https://www.cve.org/CVERecord?id=CVE-2026-45130 https://nvd.nist.gov/vuln/detail/CVE-2026-45130 https://github.com/vim/vim/commit/92993329178cb1f72d700fff45ca86e1c2d369f8 https://github.com/vim/vim/releases/tag/v9.2.0450 https://github.com/vim/vim/security/advisories/GHSA-q4jv-r9gj-6cwv https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-45130.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "vim", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "mCbTv5P9L2CaDsmaEWknNw==": { "id": "mCbTv5P9L2CaDsmaEWknNw==", "updater": "rhel-vex", "name": "CVE-2026-41316", "description": "A flaw was found in ERB, a templating system for Ruby. An attacker who can trigger deserialization of untrusted data in a Ruby application can bypass existing protections. This vulnerability allows for arbitrary code execution by exploiting specific public methods that evaluate template source code, which were not properly guarded against deserialization attacks.", "issued": "2026-04-24T02:35:41Z", "links": "https://access.redhat.com/security/cve/CVE-2026-41316 https://bugzilla.redhat.com/show_bug.cgi?id=2461369 https://www.cve.org/CVERecord?id=CVE-2026-41316 https://nvd.nist.gov/vuln/detail/CVE-2026-41316 https://github.com/ruby/erb/security/advisories/GHSA-q339-8rmv-2mhv https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-41316.json https://access.redhat.com/errata/RHSA-2026:18030", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "normalized_severity": "High", "package": { "id": "", "name": "rubygem-bigdecimal", "version": "", "kind": "binary", "normalized_version": "", "module": "ruby:3.3", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "0:3.1.5-6.module+el9.7.0+24248+66578cbb", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "mESXtMr2XIcnFGpdxMD0iA==": { "id": "mESXtMr2XIcnFGpdxMD0iA==", "updater": "rhel-vex", "name": "CVE-2025-15467", "description": "A flaw was found in OpenSSL. A remote attacker can exploit a stack buffer overflow vulnerability by supplying a crafted Cryptographic Message Syntax (CMS) message with an oversized Initialization Vector (IV) when parsing AuthEnvelopedData structures that use Authenticated Encryption with Associated Data (AEAD) ciphers such as AES-GCM. This can lead to a crash, causing a Denial of Service (DoS), or potentially allow for remote code execution.", "issued": "2026-01-27T14:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2025-15467 https://bugzilla.redhat.com/show_bug.cgi?id=2430376 https://www.cve.org/CVERecord?id=CVE-2025-15467 https://nvd.nist.gov/vuln/detail/CVE-2025-15467 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-15467.json https://access.redhat.com/errata/RHSA-2026:1473", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "normalized_severity": "High", "package": { "id": "", "name": "openssl-devel", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:3.5.1-7.el9_7", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "mEw7dcF5jpuxJvu2G3JEew==": { "id": "mEw7dcF5jpuxJvu2G3JEew==", "updater": "rhel-vex", "name": "CVE-2026-34982", "description": "A flaw was found in Vim. A modeline is used to set specific editor options directly from a text file. However, the `complete`, `guitabtooltip`, `printheader` options and the `mapset` function lack proper security checks, allowing an attacker to bypass restrictions and cause arbitrary OS command execution.", "issued": "2026-04-06T15:16:48Z", "links": "https://access.redhat.com/security/cve/CVE-2026-34982 https://bugzilla.redhat.com/show_bug.cgi?id=2455400 https://www.cve.org/CVERecord?id=CVE-2026-34982 https://nvd.nist.gov/vuln/detail/CVE-2026-34982 http://www.openwall.com/lists/oss-security/2026/04/01/1 https://github.com/vim/vim/commit/75661a66a1db1e1f3f1245c615 https://github.com/vim/vim/releases/tag/v9.2.0276 https://github.com/vim/vim/security/advisories/GHSA-8h6p-m6gr-mpw9 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-34982.json https://access.redhat.com/errata/RHSA-2026:11510", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N", "normalized_severity": "High", "package": { "id": "", "name": "vim-filesystem", "version": "", "kind": "binary", "normalized_version": "", "arch": "noarch", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "2:8.2.2637-23.el9_7.3", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "mINycH+x60PTfgPLuT1gJw==": { "id": "mINycH+x60PTfgPLuT1gJw==", "updater": "rhel-vex", "name": "CVE-2026-42767", "description": "A flaw was found in OpenSSL. An attacker controlling a Certificate Management Protocol (CMP) server, or acting as a man-in-the-middle, could craft a malicious CMP response. This response, containing a Certificate Request Message Format (CRMF) CertRepMessage with a specific malformed EncryptedValue structure, would trigger a NULL pointer dereference in the OpenSSL CMP client. This vulnerability leads to a crash of the application, resulting in a Denial of Service (DoS).", "issued": "2026-06-09T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-42767 https://bugzilla.redhat.com/show_bug.cgi?id=2481891 https://www.cve.org/CVERecord?id=CVE-2026-42767 https://nvd.nist.gov/vuln/detail/CVE-2026-42767 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42767.json https://access.redhat.com/errata/RHSA-2026:25239", "severity": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "openssl-libs", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "1:3.5.5-4.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "mJw+LvAbCoVMIOZXCXNFpg==": { "id": "mJw+LvAbCoVMIOZXCXNFpg==", "updater": "rhel-vex", "name": "CVE-2025-5916", "description": "A vulnerability has been identified in the libarchive library. This flaw involves an integer overflow that can be triggered when processing a Web Archive (WARC) file that claims to have more than INT64_MAX - 4 content bytes. An attacker could craft a malicious WARC archive to induce this overflow, potentially leading to unpredictable program behavior, memory corruption, or a denial-of-service condition within applications that process such archives using libarchive. This bug affects libarchive versions prior to 3.8.0.", "issued": "2025-05-20T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2025-5916 https://bugzilla.redhat.com/show_bug.cgi?id=2370872 https://www.cve.org/CVERecord?id=CVE-2025-5916 https://nvd.nist.gov/vuln/detail/CVE-2025-5916 https://github.com/libarchive/libarchive/pull/2568 https://github.com/libarchive/libarchive/releases/tag/v3.8.0 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-5916.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:L", "normalized_severity": "Low", "package": { "id": "", "name": "libarchive", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "mNXETDKAQUXFDVp1hgY7fQ==": { "id": "mNXETDKAQUXFDVp1hgY7fQ==", "updater": "rhel-vex", "name": "CVE-2026-5435", "description": "A flaw was found in glibc, the GNU C Library. Specifically, deprecated functions responsible for printing TSIG (Transaction Signature) records fail to properly manage memory buffers. This oversight can lead to an out-of-bounds write when processing specially crafted TSIG records. An attacker could exploit this to cause a denial of service or potentially execute arbitrary code.", "issued": "2026-04-28T11:58:54Z", "links": "https://access.redhat.com/security/cve/CVE-2026-5435 https://bugzilla.redhat.com/show_bug.cgi?id=2463465 https://www.cve.org/CVERecord?id=CVE-2026-5435 https://nvd.nist.gov/vuln/detail/CVE-2026-5435 https://inbox.sourceware.org/libc-announce/7a655d55-276f-41fe-b550-feb3ebb2ce91@redhat.com/T/#u https://sourceware.org/bugzilla/show_bug.cgi?id=34033 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-5435.json https://access.redhat.com/errata/RHSA-2026:42952", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "glibc-minimal-langpack", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:2.34-274.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "mXoGTWRL/KLyEYWh5uyvXQ==": { "id": "mXoGTWRL/KLyEYWh5uyvXQ==", "updater": "rhel-vex", "name": "CVE-2026-28421", "description": "A flaw was found in Vim. This vulnerability, a heap-buffer-overflow and a segmentation fault, exists in the swap file recovery logic. A local attacker could exploit this by providing a specially crafted swap file. This could lead to a denial of service (DoS) or potentially information disclosure.", "issued": "2026-02-27T22:06:34Z", "links": "https://access.redhat.com/security/cve/CVE-2026-28421 https://bugzilla.redhat.com/show_bug.cgi?id=2443474 https://www.cve.org/CVERecord?id=CVE-2026-28421 https://nvd.nist.gov/vuln/detail/CVE-2026-28421 https://github.com/vim/vim/commit/65c1a143c331c886dc28 https://github.com/vim/vim/releases/tag/v9.2.0077 https://github.com/vim/vim/security/advisories/GHSA-r2gw-2x48-jj5p https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-28421.json https://access.redhat.com/errata/RHSA-2026:8259", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L", "normalized_severity": "Medium", "package": { "id": "", "name": "vim-minimal", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "2:8.2.2637-23.el9_7.2", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "mXtaaJBTQTZ/zl5a00GqaA==": { "id": "mXtaaJBTQTZ/zl5a00GqaA==", "updater": "rhel-vex", "name": "CVE-2026-21637", "description": "A flaw in Node.js TLS error handling allows remote attackers to crash or exhaust resources of a TLS server when `pskCallback` or `ALPNCallback` are in use. Synchronous exceptions thrown during these callbacks bypass standard TLS error handling paths (tlsClientError and error), causing either immediate process termination or silent file descriptor leaks that eventually lead to denial of service. Because these callbacks process attacker-controlled input during the TLS handshake, a remote client can repeatedly trigger the issue. This vulnerability affects TLS servers using PSK or ALPN callbacks across Node.js versions where these callbacks throw without being safely wrapped.", "issued": "2026-01-20T20:41:55Z", "links": "https://access.redhat.com/security/cve/CVE-2026-21637 https://bugzilla.redhat.com/show_bug.cgi?id=2431340 https://www.cve.org/CVERecord?id=CVE-2026-21637 https://nvd.nist.gov/vuln/detail/CVE-2026-21637 https://nodejs.org/en/blog/vulnerability/december-2025-security-releases https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-21637.json https://access.redhat.com/errata/RHSA-2026:2782", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "nodejs", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "aarch64|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:22.22.0-1.module+el9.7.0+23896+b5802de9", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "mZC3gBcn6x1aC7q9hXUpKg==": { "id": "mZC3gBcn6x1aC7q9hXUpKg==", "updater": "rhel-vex", "name": "CVE-2026-3644", "description": "A control character validation flaw has been discovered in the Python http.cookie module. The Morsel.update(), |= operator, and unpickling paths were not patched to resolve CVE-2026-0672, allowing control characters to bypass input validation. Additionally, BaseCookie.js_output() lacked the output validation applied to BaseCookie.output().", "issued": "2026-03-16T17:37:31Z", "links": "https://access.redhat.com/security/cve/CVE-2026-3644 https://bugzilla.redhat.com/show_bug.cgi?id=2448168 https://www.cve.org/CVERecord?id=CVE-2026-3644 https://nvd.nist.gov/vuln/detail/CVE-2026-3644 https://github.com/python/cpython/commit/57e88c1cf95e1481b94ae57abe1010469d47a6b4 https://github.com/python/cpython/issues/145599 https://github.com/python/cpython/pull/145600 https://mail.python.org/archives/list/security-announce@python.org/thread/H6CADMBCDRFGWCMOXWUIHFJNV43GABJ7/ https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-3644.json", "severity": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N", "normalized_severity": "Medium", "package": { "id": "", "name": "python3.9", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "mZCCwO//htsOIXazj/SeOw==": { "id": "mZCCwO//htsOIXazj/SeOw==", "updater": "rhel-vex", "name": "CVE-2026-31789", "description": "A flaw was found in OpenSSL. This vulnerability, a heap buffer overflow, affects 32-bit systems when processing an unusually large X.509 certificate. If an application or service attempts to print or log such a specially crafted certificate, it could lead to a system crash or potentially allow an attacker to execute arbitrary code. This issue is considered low severity due to the specific conditions required for exploitation, including the need for an extremely large certificate and a 32-bit operating environment.", "issued": "2026-04-07T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-31789 https://bugzilla.redhat.com/show_bug.cgi?id=2451095 https://www.cve.org/CVERecord?id=CVE-2026-31789 https://nvd.nist.gov/vuln/detail/CVE-2026-31789 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-31789.json", "severity": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "openssl", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "mZpS2ltu6/QRC8uFk/t2ag==": { "id": "mZpS2ltu6/QRC8uFk/t2ag==", "updater": "rhel-vex", "name": "CVE-2026-11525", "description": "A flaw was found in undici. When undici processes Set-Cookie headers, it incorrectly interprets the SameSite attribute, accepting partial matches instead of exact ones. This allows a malicious server to downgrade a cookie's SameSite policy to a less secure setting, potentially leading to unintended information disclosure or a weakening of security protections for the user.", "issued": "2026-06-17T17:31:03Z", "links": "https://access.redhat.com/security/cve/CVE-2026-11525 https://bugzilla.redhat.com/show_bug.cgi?id=2490008 https://www.cve.org/CVERecord?id=CVE-2026-11525 https://nvd.nist.gov/vuln/detail/CVE-2026-11525 https://cna.openjsf.org/security-advisories.html https://github.com/nodejs/undici/security/advisories/GHSA-g8m3-5g58-fq7m https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-11525.json https://access.redhat.com/errata/RHSA-2026:35892", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N", "normalized_severity": "Low", "package": { "id": "", "name": "nodejs-docs", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "noarch", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:22.23.1-1.module+el9.8.0+24457+996af7aa", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "mgY0OXX1J12mJy1iNllE3A==": { "id": "mgY0OXX1J12mJy1iNllE3A==", "updater": "rhel-vex", "name": "CVE-2026-45447", "description": "A flaw was found in OpenSSL. When processing a specially crafted PKCS#7 or S/MIME (Secure/Multipurpose Internet Mail Extensions) signed message, a heap use-after-free vulnerability in the PKCS7_verify() function can be triggered. This occurs if the SignedData digestAlgorithms field is present as an empty ASN.1 SET, leading to incorrect memory deallocation. A remote attacker could exploit this to cause application crashes, memory corruption, or potentially achieve remote code execution.", "issued": "2026-06-09T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-45447 https://bugzilla.redhat.com/show_bug.cgi?id=2481898 https://www.cve.org/CVERecord?id=CVE-2026-45447 https://nvd.nist.gov/vuln/detail/CVE-2026-45447 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-45447.json https://access.redhat.com/errata/RHSA-2026:25239", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "normalized_severity": "High", "package": { "id": "", "name": "openssl", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "1:3.5.5-4.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "mllkaOQAaJYNZpdIF7Bkbw==": { "id": "mllkaOQAaJYNZpdIF7Bkbw==", "updater": "rhel-vex", "name": "CVE-2024-9681", "description": "A vulnerability was found in curl. When curl is asked to use HSTS, the expiry time for a subdomain might overwrite a parent domain's cache entry, making it end sooner or later than intended.", "issued": "2024-11-06T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2024-9681 https://bugzilla.redhat.com/show_bug.cgi?id=2322969 https://www.cve.org/CVERecord?id=CVE-2024-9681 https://nvd.nist.gov/vuln/detail/CVE-2024-9681 https://curl.se/docs/CVE-2024-9681.html https://hackerone.com/reports/2764830 https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-9681.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L", "normalized_severity": "Low", "package": { "id": "", "name": "curl", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "mmFI4mA7exd6BfbwTUwJfQ==": { "id": "mmFI4mA7exd6BfbwTUwJfQ==", "updater": "rhel-vex", "name": "CVE-2021-20197", "description": "There is an open race window when writing output in the following utilities in GNU binutils1: ar, objcopy, strip, and ranlib. When these utilities are run as a privileged user (presumably as part of a script updating binaries across different users), an unprivileged user can trick these utilities into getting ownership of arbitrary files through a symlink.", "issued": "2021-01-07T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2021-20197 https://bugzilla.redhat.com/show_bug.cgi?id=1913743 https://www.cve.org/CVERecord?id=CVE-2021-20197 https://nvd.nist.gov/vuln/detail/CVE-2021-20197 https://security.access.redhat.com/data/csaf/v2/vex/2021/cve-2021-20197.json", "severity": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N", "normalized_severity": "Medium", "package": { "id": "", "name": "binutils", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "mt2uKyaY1pD5PD0HEI8sFg==": { "id": "mt2uKyaY1pD5PD0HEI8sFg==", "updater": "rhel-vex", "name": "CVE-2026-4438", "description": "A flaw was found in the GNU C library (glibc). When applications use the `gethostbyaddr` or `gethostbyaddr_r` functions with a `nsswitch.conf` configuration that specifies glibc's DNS backend, the library may return an invalid DNS hostname. This violates the DNS specification and could lead to applications receiving incorrect hostname information, potentially impacting network operations or security decisions.", "issued": "2026-03-20T19:59:06Z", "links": "https://access.redhat.com/security/cve/CVE-2026-4438 https://bugzilla.redhat.com/show_bug.cgi?id=2449783 https://www.cve.org/CVERecord?id=CVE-2026-4438 https://nvd.nist.gov/vuln/detail/CVE-2026-4438 https://sourceware.org/bugzilla/show_bug.cgi?id=34015 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-4438.json https://access.redhat.com/errata/RHSA-2026:20597", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "normalized_severity": "Low", "package": { "id": "", "name": "glibc-headers", "version": "", "kind": "binary", "normalized_version": "", "arch": "s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "0:2.34-270.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "mwfwMX3+sIJWibPk7jkY/Q==": { "id": "mwfwMX3+sIJWibPk7jkY/Q==", "updater": "rhel-vex", "name": "CVE-2026-26996", "description": "A flaw was found in minimatch. A remote attacker could exploit this Regular Expression Denial of Service (ReDoS) vulnerability by providing a specially crafted glob pattern. This pattern, containing numerous consecutive wildcard characters, causes excessive processing and exponential backtracking in the regular expression engine. Successful exploitation leads to a Denial of Service (DoS), making the application unresponsive.", "issued": "2026-02-20T03:05:21Z", "links": "https://access.redhat.com/security/cve/CVE-2026-26996 https://bugzilla.redhat.com/show_bug.cgi?id=2441268 https://www.cve.org/CVERecord?id=CVE-2026-26996 https://nvd.nist.gov/vuln/detail/CVE-2026-26996 https://github.com/isaacs/minimatch/commit/2e111f3a79abc00fa73110195de2c0f2351904f5 https://github.com/isaacs/minimatch/security/advisories/GHSA-3ppc-4f35-3m26 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-26996.json https://access.redhat.com/errata/RHSA-2026:7302", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "nodejs", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "aarch64|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:22.22.2-1.module+el9.7.0+24157+8ddb2461", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "n30+9otRNHBUO3IOHvF3kA==": { "id": "n30+9otRNHBUO3IOHvF3kA==", "updater": "rhel-vex", "name": "CVE-2025-14104", "description": "A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the `setpwnam()` function, affecting SUID (Set User ID) login-utils utilities writing to the password database.", "issued": "2025-12-05T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2025-14104 https://bugzilla.redhat.com/show_bug.cgi?id=2419369 https://www.cve.org/CVERecord?id=CVE-2025-14104 https://nvd.nist.gov/vuln/detail/CVE-2025-14104 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-14104.json https://access.redhat.com/errata/RHSA-2026:1913", "severity": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "libmount-devel", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "0:2.37.4-21.el9_7", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "n39YhRffL6tFFAy/S18A8Q==": { "id": "n39YhRffL6tFFAy/S18A8Q==", "updater": "rhel-vex", "name": "CVE-2025-1371", "description": "A flaw was found in GNU elfutils. This vulnerability allows a NULL pointer dereference via the handle_dynamic_symtab function in readelf.c.", "issued": "2025-02-17T02:31:07Z", "links": "https://access.redhat.com/security/cve/CVE-2025-1371 https://bugzilla.redhat.com/show_bug.cgi?id=2346055 https://www.cve.org/CVERecord?id=CVE-2025-1371 https://nvd.nist.gov/vuln/detail/CVE-2025-1371 https://sourceware.org/bugzilla/attachment.cgi?id=15926 https://sourceware.org/bugzilla/show_bug.cgi?id=32655 https://sourceware.org/bugzilla/show_bug.cgi?id=32655#c2 https://vuldb.com/?ctiid.295978 https://vuldb.com/?id.295978 https://vuldb.com/?submit.496484 https://www.gnu.org/ https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-1371.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L", "normalized_severity": "Low", "package": { "id": "", "name": "elfutils", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "nCQ2LebiZFodYZ8OrVfuXw==": { "id": "nCQ2LebiZFodYZ8OrVfuXw==", "updater": "rhel-vex", "name": "CVE-2026-29111", "description": "A flaw was found in systemd, a system and service manager. An unprivileged user can exploit this vulnerability by making an Inter-Process Communication (IPC) API call with spurious data. In older versions (v249 and earlier), this can lead to stack overwriting with attacker-controlled content, potentially enabling arbitrary code execution or privilege escalation. In newer versions (v250 and later), the flaw causes systemd to assert and freeze, resulting in a Denial of Service (DoS).", "issued": "2026-03-23T21:03:56Z", "links": "https://access.redhat.com/security/cve/CVE-2026-29111 https://bugzilla.redhat.com/show_bug.cgi?id=2450505 https://www.cve.org/CVERecord?id=CVE-2026-29111 https://nvd.nist.gov/vuln/detail/CVE-2026-29111 https://github.com/systemd/systemd/commit/1d22f706bd04f45f8422e17fbde3f56ece17758a https://github.com/systemd/systemd/commit/20021e7686426052e3a7505425d7e12085feb2a6 https://github.com/systemd/systemd/commit/21167006574d6b83813c7596759b474f56562412 https://github.com/systemd/systemd/commit/3cee294fe8cf4fa0eff933ab21416d099942cabd https://github.com/systemd/systemd/commit/42aee39107fbdd7db1ccd402a2151822b2805e9f https://github.com/systemd/systemd/commit/54588d2dedff54bfb6036670820650e4ea74628f https://github.com/systemd/systemd/commit/7ac3220213690e8a8d6d2a6e81e43bd1dce01d69 https://github.com/systemd/systemd/commit/80acea4ef80a4bb78560ed970c34952299b890d6 https://github.com/systemd/systemd/commit/b5fd14693057e5f2c9b4a49603be64ec3608ff6c https://github.com/systemd/systemd/commit/efa6ba2ab625aaa160ac435a09e6482fc63bdbe8 https://github.com/systemd/systemd/security/advisories/GHSA-gx6q-6f99-m764 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-29111.json https://access.redhat.com/errata/RHSA-2026:19213", "severity": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "systemd-pam", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:252-67.el9_8.2", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "nNAYHDwpTrgu1xKD+v9Oww==": { "id": "nNAYHDwpTrgu1xKD+v9Oww==", "updater": "rhel-vex", "name": "CVE-2026-73078", "description": "A flaw in Vim's netrw plugin fails to sanitize special characters in directory paths when creating GUI menu entries. Browsing or bookmarking a maliciously crafted path in GUI Vim allows attackers to execute arbitrary OS commands as the running user.", "issued": "2026-08-11T15:41:08Z", "links": "https://access.redhat.com/security/cve/CVE-2026-73078 https://bugzilla.redhat.com/show_bug.cgi?id=2514058 https://www.cve.org/CVERecord?id=CVE-2026-73078 https://nvd.nist.gov/vuln/detail/CVE-2026-73078 https://github.com/vim/vim/commit/29c6fd090d4520592f8be7d9ec81190edf25ef69 https://github.com/vim/vim/security/advisories/GHSA-rcr7-f3wr-22r2 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-73078.json", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "normalized_severity": "High", "package": { "id": "", "name": "vim", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "nS3gw6C5KX889pH0DdnXbQ==": { "id": "nS3gw6C5KX889pH0DdnXbQ==", "updater": "rhel-vex", "name": "CVE-2026-5121", "description": "A flaw was found in libarchive. On 32-bit systems, an integer overflow vulnerability exists in the zisofs block pointer allocation logic. A remote attacker can exploit this by providing a specially crafted ISO9660 image, which can lead to a heap buffer overflow. This could potentially allow for arbitrary code execution on the affected system.", "issued": "2026-03-30T07:44:15Z", "links": "https://access.redhat.com/security/cve/CVE-2026-5121 https://bugzilla.redhat.com/show_bug.cgi?id=2452945 https://www.cve.org/CVERecord?id=CVE-2026-5121 https://nvd.nist.gov/vuln/detail/CVE-2026-5121 https://github.com/advisories/GHSA-2vwv-vqpv-v8vc https://github.com/libarchive/libarchive/pull/2934 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-5121.json https://access.redhat.com/errata/RHSA-2026:8510", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "normalized_severity": "Medium", "package": { "id": "", "name": "bsdtar", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "0:3.5.3-9.el9_7", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "nZ2DFaqiaft4/Dqj5SJp4Q==": { "id": "nZ2DFaqiaft4/Dqj5SJp4Q==", "updater": "rhel-vex", "name": "CVE-2025-69421", "description": "A flaw was found in OpenSSL. This vulnerability allows a remote attacker to trigger a Denial of Service (DoS) by providing a specially crafted, malformed PKCS#12 file to an application that processes it. The flaw occurs due to a NULL pointer dereference in the PKCS12_item_decrypt_d2i_ex() function when handling the malformed file, leading to an application crash.", "issued": "2026-01-27T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2025-69421 https://bugzilla.redhat.com/show_bug.cgi?id=2430387 https://www.cve.org/CVERecord?id=CVE-2025-69421 https://nvd.nist.gov/vuln/detail/CVE-2025-69421 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-69421.json https://access.redhat.com/errata/RHSA-2026:1473", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "openssl", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "1:3.5.1-7.el9_7", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "nicOe0HMeoCrfaBInGMpgA==": { "id": "nicOe0HMeoCrfaBInGMpgA==", "updater": "rhel-vex", "name": "CVE-2025-59465", "description": "A denial of service flaw has been discovered in NodeJS. A malformed `HTTP/2 HEADERS` frame with oversized, invalid `HPACK` data can cause Node.js to crash by triggering an unhandled `TLSSocket` error `ECONNRESET`. Instead of safely closing the connection, the process crashes, enabling a remote denial of service. This primarily affects applications that do not attach explicit error handlers to secure sockets", "issued": "2026-01-20T20:41:55Z", "links": "https://access.redhat.com/security/cve/CVE-2025-59465 https://bugzilla.redhat.com/show_bug.cgi?id=2431349 https://www.cve.org/CVERecord?id=CVE-2025-59465 https://nvd.nist.gov/vuln/detail/CVE-2025-59465 https://nodejs.org/en/blog/vulnerability/december-2025-security-releases https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-59465.json https://access.redhat.com/errata/RHSA-2026:2782", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "High", "package": { "id": "", "name": "nodejs", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "aarch64|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:22.22.0-1.module+el9.7.0+23896+b5802de9", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "novhorrUhD5n0pl3qmImIw==": { "id": "novhorrUhD5n0pl3qmImIw==", "updater": "rhel-vex", "name": "CVE-2026-42246", "description": "A flaw was found in the Ruby net-imap library. When upgrading a cleartext IMAP connection to TLS using the Net::IMAP#starttls method, the library improperly handles certain responses received during STARTTLS negotiation. A man-in-the-middle (MITM) attacker can inject a predicted tagged OK response before the client completes the STARTTLS command, causing the operation to appear successful without establishing a TLS session. As a result, the connection may continue to transmit sensitive information in cleartext and enable modification of data exchanged over the affected connection, while the application incorrectly believes that encryption has been enabled.", "issued": "2026-05-09T19:33:17Z", "links": "https://access.redhat.com/security/cve/CVE-2026-42246 https://bugzilla.redhat.com/show_bug.cgi?id=2468499 https://www.cve.org/CVERecord?id=CVE-2026-42246 https://nvd.nist.gov/vuln/detail/CVE-2026-42246 https://github.com/ruby/net-imap/commit/0ede4c40b1523dfeaf95777b2678e54cc0fd9618 https://github.com/ruby/net-imap/commit/24a4e770b43230286a05aa2a9746cdbb3eb8485e https://github.com/ruby/net-imap/commit/97e2488fb5401a1783bddd959dde007d9fbce42c https://github.com/ruby/net-imap/commit/f79d35bf5833f186e81044c57c843eda30c873da https://github.com/ruby/net-imap/releases/tag/v0.3.10 https://github.com/ruby/net-imap/releases/tag/v0.4.24 https://github.com/ruby/net-imap/releases/tag/v0.5.14 https://github.com/ruby/net-imap/security/advisories/GHSA-vcgp-9326-pqcp https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42246.json https://access.redhat.com/errata/RHSA-2026:33576", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "normalized_severity": "High", "package": { "id": "", "name": "ruby-default-gems", "version": "", "kind": "binary", "normalized_version": "", "module": "ruby:3.3", "arch": "noarch", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "0:3.3.10-7.module+el9.8.0+24406+8975e57f", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "nxtlAyA33msfy3ysIKdYBg==": { "id": "nxtlAyA33msfy3ysIKdYBg==", "updater": "rhel-vex", "name": "CVE-2026-25547", "description": "A flaw was found in the brace-expansion component. This denial of service (DoS) vulnerability allows a remote attacker to provide specially crafted input containing repeated numeric brace ranges. This input causes the library to attempt an unbounded expansion, consuming excessive CPU and memory resources. This can lead to a system crash, impacting the availability of the service.", "issued": "2026-02-04T21:51:17Z", "links": "https://access.redhat.com/security/cve/CVE-2026-25547 https://bugzilla.redhat.com/show_bug.cgi?id=2436942 https://www.cve.org/CVERecord?id=CVE-2026-25547 https://nvd.nist.gov/vuln/detail/CVE-2026-25547 https://github.com/isaacs/brace-expansion/security/advisories/GHSA-7h2j-956f-4vf2 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-25547.json https://access.redhat.com/errata/RHSA-2026:7302", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "nodejs-full-i18n", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:22.22.2-1.module+el9.7.0+24157+8ddb2461", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "o/v8DGswQXGkB45uD8rRUw==": { "id": "o/v8DGswQXGkB45uD8rRUw==", "updater": "rhel-vex", "name": "CVE-2026-15028", "description": "A flaw was found in libarchive. This vulnerability allows a remote attacker to trigger a heap overflow by providing a specially crafted tar archive. The issue occurs during the parsing of a PAX extended header containing a malformed SUN.holesdata sparse-file attribute. Successful exploitation could lead to a denial of service, making the system unavailable, or potentially allow for arbitrary code execution, giving the attacker control over the affected system.", "issued": "2026-07-08T10:10:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-15028 https://bugzilla.redhat.com/show_bug.cgi?id=2497970 https://www.cve.org/CVERecord?id=CVE-2026-15028 https://nvd.nist.gov/vuln/detail/CVE-2026-15028 https://github.com/libarchive/libarchive/issues/3251 https://github.com/libarchive/libarchive/pull/3253 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-15028.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:L", "normalized_severity": "Low", "package": { "id": "", "name": "libarchive", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "o16kBwzDyL2DXuhbCPWX9Q==": { "id": "o16kBwzDyL2DXuhbCPWX9Q==", "updater": "rhel-vex", "name": "CVE-2021-3572", "description": "A flaw was found in python-pip in the way it handled Unicode separators in git references. A remote attacker could possibly use this issue to install a different revision on a repository. The highest threat from this vulnerability is to data integrity.", "issued": "2021-04-24T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2021-3572 https://bugzilla.redhat.com/show_bug.cgi?id=1962856 https://www.cve.org/CVERecord?id=CVE-2021-3572 https://nvd.nist.gov/vuln/detail/CVE-2021-3572 https://security.access.redhat.com/data/csaf/v2/vex/2021/cve-2021-3572.json", "severity": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:N", "normalized_severity": "Low", "package": { "id": "", "name": "python-pip", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "o8O4Ttqnv0lQfm1yyfyVsw==": { "id": "o8O4Ttqnv0lQfm1yyfyVsw==", "updater": "rhel-vex", "name": "CVE-2022-1720", "description": "A heap buffer over-read vulnerability was found in Vim's grab_file_name() function of the src/findfile.c file. This flaw occurs because the function reads after the NULL terminates the line with \"gf\" in Visual block mode. This flaw allows an attacker to trick a user into opening a specially crafted file, triggering a heap buffer over-read vulnerability that causes an application to crash and corrupt memory.", "issued": "2022-05-13T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2022-1720 https://bugzilla.redhat.com/show_bug.cgi?id=2099979 https://www.cve.org/CVERecord?id=CVE-2022-1720 https://nvd.nist.gov/vuln/detail/CVE-2022-1720 https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-1720.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "vim", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "oED190j69/of7CStGTEa5A==": { "id": "oED190j69/of7CStGTEa5A==", "updater": "rhel-vex", "name": "CVE-2026-55654", "description": "A flaw was found in OpenSSH. This vulnerability, a heap out-of-bounds read, occurs during the cleanup of GSSAPI (Generic Security Service Application Programming Interface) indicators when a trailing NULL termination is missing in the auth-indicators array. A remote attacker, under specific configurations involving GSSAPI authentication and a Kerberos environment, could exploit this to cause the SSH authentication path to crash or abort. This leads to a denial of service (DoS), impacting the availability of the SSH service.", "issued": "2026-06-22T23:18:14Z", "links": "https://access.redhat.com/security/cve/CVE-2026-55654 https://bugzilla.redhat.com/show_bug.cgi?id=2462493 https://www.cve.org/CVERecord?id=CVE-2026-55654 https://nvd.nist.gov/vuln/detail/CVE-2026-55654 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-55654.json https://access.redhat.com/errata/RHSA-2026:47756", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L", "normalized_severity": "Low", "package": { "id": "", "name": "openssh", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:9.9p1-9.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "oGYbR6FNz1KIQ8VJiypCZg==": { "id": "oGYbR6FNz1KIQ8VJiypCZg==", "updater": "rhel-vex", "name": "CVE-2026-48930", "description": "A flaw was found in Node.js. This vulnerability in the TLS (Transport Layer Security) hostname handling allows embedded null characters in hostnames. This can lead to silent authority rebinding, potentially enabling an attacker to redirect network traffic to an unintended server and disclose sensitive information.", "issued": "2026-06-26T01:14:37Z", "links": "https://access.redhat.com/security/cve/CVE-2026-48930 https://bugzilla.redhat.com/show_bug.cgi?id=2493326 https://www.cve.org/CVERecord?id=CVE-2026-48930 https://nvd.nist.gov/vuln/detail/CVE-2026-48930 https://github.com/nodejs/node/commit/7dafafa2424710ded8b77eb7c878e884c1aef64e https://hackerone.com/reports/3656716 https://nodejs.org/en/blog/vulnerability/june-2026-security-releases https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-48930.json https://access.redhat.com/errata/RHSA-2026:35892", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L", "normalized_severity": "Medium", "package": { "id": "", "name": "nodejs", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "aarch64|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:22.23.1-1.module+el9.8.0+24457+996af7aa", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "oGhsPyoyEtiEHT7/0qF+CQ==": { "id": "oGhsPyoyEtiEHT7/0qF+CQ==", "updater": "rhel-vex", "name": "CVE-2025-7545", "description": "A flaw was found in binutils. The `copy_section` function in `binutils/objcopy.c` is susceptible to a heap-based buffer overflow due to improper bounds checking during data copying. This flaw allows a local attacker to provide a specially crafted file. This manipulation can lead to a denial of service.", "issued": "2025-07-13T21:44:08Z", "links": "https://access.redhat.com/security/cve/CVE-2025-7545 https://bugzilla.redhat.com/show_bug.cgi?id=2379785 https://www.cve.org/CVERecord?id=CVE-2025-7545 https://nvd.nist.gov/vuln/detail/CVE-2025-7545 https://sourceware.org/bugzilla/attachment.cgi?id=16117 https://sourceware.org/bugzilla/show_bug.cgi?id=33049 https://sourceware.org/bugzilla/show_bug.cgi?id=33049#c1 https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=08c3cbe5926e4d355b5cb70bbec2b1eeb40c2944 https://vuldb.com/?ctiid.316243 https://vuldb.com/?id.316243 https://vuldb.com/?submit.614355 https://www.gnu.org/ https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-7545.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "normalized_severity": "Medium", "package": { "id": "", "name": "binutils", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "oIBUxFCAPk4vRXBwpcmtFw==": { "id": "oIBUxFCAPk4vRXBwpcmtFw==", "updater": "rhel-vex", "name": "CVE-2022-44840", "description": "A heap-based buffer overflow vulnerability was found in binutils in the find_section_in_set function. This flaw allows an attacker to use a specially crafted payload to trigger a buffer overflow, resulting in issues with availability, confidentiality, and integrity.", "issued": "2022-10-30T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2022-44840 https://bugzilla.redhat.com/show_bug.cgi?id=2234004 https://www.cve.org/CVERecord?id=CVE-2022-44840 https://nvd.nist.gov/vuln/detail/CVE-2022-44840 https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-44840.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "binutils", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "oVgcRSL89qnSRkMXpV8N8A==": { "id": "oVgcRSL89qnSRkMXpV8N8A==", "updater": "rhel-vex", "name": "CVE-2022-2819", "description": "A flaw was found in vim. The vulnerability occurs due to illegal memory access and leads to a heap buffer overflow vulnerability. This flaw allows an attacker to input a specially crafted file, leading to a crash or code execution.", "issued": "2022-08-15T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2022-2819 https://bugzilla.redhat.com/show_bug.cgi?id=2118594 https://www.cve.org/CVERecord?id=CVE-2022-2819 https://nvd.nist.gov/vuln/detail/CVE-2022-2819 https://huntr.dev/bounties/0a9bd71e-66b8-4eb1-9566-7dfd9b097e59 https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-2819.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "vim", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "oeQZicbrugL5hg8G7dVmSw==": { "id": "oeQZicbrugL5hg8G7dVmSw==", "updater": "rhel-vex", "name": "CVE-2025-59465", "description": "A denial of service flaw has been discovered in NodeJS. A malformed `HTTP/2 HEADERS` frame with oversized, invalid `HPACK` data can cause Node.js to crash by triggering an unhandled `TLSSocket` error `ECONNRESET`. Instead of safely closing the connection, the process crashes, enabling a remote denial of service. This primarily affects applications that do not attach explicit error handlers to secure sockets", "issued": "2026-01-20T20:41:55Z", "links": "https://access.redhat.com/security/cve/CVE-2025-59465 https://bugzilla.redhat.com/show_bug.cgi?id=2431349 https://www.cve.org/CVERecord?id=CVE-2025-59465 https://nvd.nist.gov/vuln/detail/CVE-2025-59465 https://nodejs.org/en/blog/vulnerability/december-2025-security-releases https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-59465.json https://access.redhat.com/errata/RHSA-2026:2782", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "High", "package": { "id": "", "name": "nodejs-docs", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "noarch", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:22.22.0-1.module+el9.7.0+23896+b5802de9", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "orI4WDU+1BLBSEG99OS8MA==": { "id": "orI4WDU+1BLBSEG99OS8MA==", "updater": "rhel-vex", "name": "CVE-2026-45446", "description": "A flaw was found in OpenSSL. The implementations of AES-SIV (Advanced Encryption Standard - SIV) and AES-GCM-SIV (Advanced Encryption Standard - Galois/Counter Mode - SIV) incorrectly process authentication tags for empty messages. This vulnerability allows a remote attacker to forge empty messages with arbitrary Additional Authenticated Data (AAD) in applications that utilize these specific cipher modes within custom protocols and do not properly handle zero-length ciphertexts. This could lead to unauthorized data manipulation.", "issued": "2026-06-09T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-45446 https://bugzilla.redhat.com/show_bug.cgi?id=2481897 https://www.cve.org/CVERecord?id=CVE-2026-45446 https://nvd.nist.gov/vuln/detail/CVE-2026-45446 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-45446.json https://access.redhat.com/errata/RHSA-2026:25239", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N", "normalized_severity": "Low", "package": { "id": "", "name": "openssl-devel", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:3.5.5-4.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "oxSfxLnytv2y2gHjvplCuw==": { "id": "oxSfxLnytv2y2gHjvplCuw==", "updater": "rhel-vex", "name": "CVE-2026-59996", "description": "A flaw was found in OpenSSH, a widely used tool for secure remote access. When a user attempts to copy files between two different remote systems using the `scp` command, the file might be incorrectly placed in a directory above the intended destination. This unintended file placement could lead to data integrity issues or, in some cases, unauthorized access to sensitive information if files are stored in an exposed location.", "issued": "2026-07-08T00:07:07Z", "links": "https://access.redhat.com/security/cve/CVE-2026-59996 https://bugzilla.redhat.com/show_bug.cgi?id=2497944 https://www.cve.org/CVERecord?id=CVE-2026-59996 https://nvd.nist.gov/vuln/detail/CVE-2026-59996 https://marc.info/?l=openssh-unix-dev\u0026m=178333966933090\u0026w=2 https://www.openssh.org/releasenotes.html#10.4p1 https://www.openwall.com/lists/oss-security/2026/07/06/5 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59996.json https://access.redhat.com/errata/RHSA-2026:47756", "severity": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L", "normalized_severity": "Medium", "package": { "id": "", "name": "openssh-clients", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:9.9p1-9.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "oyvtOIVUDqm1ruQx8vhRhA==": { "id": "oyvtOIVUDqm1ruQx8vhRhA==", "updater": "rhel-vex", "name": "CVE-2024-22667", "description": "A stack-based buffer overflow flaw was found in Vim. The did_set_langmap function in map.c calls sprintf to write to the error buffer that is passed down to the option callback functions. That buffer can be overflown, possibly leading to memory corruption and escalation of privileges.", "issued": "2024-02-05T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2024-22667 https://bugzilla.redhat.com/show_bug.cgi?id=2262999 https://www.cve.org/CVERecord?id=CVE-2024-22667 https://nvd.nist.gov/vuln/detail/CVE-2024-22667 https://github.com/vim/vim/commit/b39b240c386a5a29241415541f1c99e2e6b8ce47 https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-22667.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "vim", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "p0umWDpPMiOz8HPGPopybw==": { "id": "p0umWDpPMiOz8HPGPopybw==", "updater": "rhel-vex", "name": "CVE-2026-11525", "description": "A flaw was found in undici. When undici processes Set-Cookie headers, it incorrectly interprets the SameSite attribute, accepting partial matches instead of exact ones. This allows a malicious server to downgrade a cookie's SameSite policy to a less secure setting, potentially leading to unintended information disclosure or a weakening of security protections for the user.", "issued": "2026-06-17T17:31:03Z", "links": "https://access.redhat.com/security/cve/CVE-2026-11525 https://bugzilla.redhat.com/show_bug.cgi?id=2490008 https://www.cve.org/CVERecord?id=CVE-2026-11525 https://nvd.nist.gov/vuln/detail/CVE-2026-11525 https://cna.openjsf.org/security-advisories.html https://github.com/nodejs/undici/security/advisories/GHSA-g8m3-5g58-fq7m https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-11525.json https://access.redhat.com/errata/RHSA-2026:35892", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N", "normalized_severity": "Low", "package": { "id": "", "name": "nodejs-libs", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:22.23.1-1.module+el9.8.0+24457+996af7aa", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "p1r6Su9OK5/1nhaGskH+Pw==": { "id": "p1r6Su9OK5/1nhaGskH+Pw==", "updater": "rhel-vex", "name": "CVE-2026-4437", "description": "A flaw was found in glibc (the GNU C Library). When an application uses the `gethostbyaddr` or `gethostbyaddr_r` functions with a `nsswitch.conf` configuration that specifies glibc's DNS backend, a remote attacker can send a specially crafted DNS (Domain Name System) response. This crafted response can cause the application to incorrectly interpret a non-answer section of the DNS response as a valid answer, leading to potential misbehavior or incorrect information processing.", "issued": "2026-03-20T19:59:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-4437 https://bugzilla.redhat.com/show_bug.cgi?id=2449777 https://www.cve.org/CVERecord?id=CVE-2026-4437 https://nvd.nist.gov/vuln/detail/CVE-2026-4437 https://sourceware.org/bugzilla/show_bug.cgi?id=34014 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-4437.json https://access.redhat.com/errata/RHSA-2026:20597", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L", "normalized_severity": "Medium", "package": { "id": "", "name": "glibc-locale-source", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "0:2.34-270.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "p8wzfQhvimCzJ24LCz0qSQ==": { "id": "p8wzfQhvimCzJ24LCz0qSQ==", "updater": "rhel-vex", "name": "CVE-2026-35387", "description": "A flaw was found in OpenSSH. This vulnerability allows the system to use unintended Elliptic Curve Digital Signature Algorithm (ECDSA) algorithms. This occurs because the configuration for accepted public key algorithms is misinterpreted, leading to the use of weaker cryptographic methods than intended. This could potentially allow an attacker to compromise the confidentiality of data.", "issued": "2026-04-02T16:52:53Z", "links": "https://access.redhat.com/security/cve/CVE-2026-35387 https://bugzilla.redhat.com/show_bug.cgi?id=2454494 https://www.cve.org/CVERecord?id=CVE-2026-35387 https://nvd.nist.gov/vuln/detail/CVE-2026-35387 https://marc.info/?l=openssh-unix-dev\u0026m=177513443901484\u0026w=2 https://www.openssh.org/releasenotes.html#10.3p1 https://www.openwall.com/lists/oss-security/2026/04/02/3 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-35387.json https://access.redhat.com/errata/RHSA-2026:19219", "severity": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N", "normalized_severity": "Low", "package": { "id": "", "name": "openssh-clients", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:9.9p1-7.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "pDJ3Xpebdx7KToS5V5VZDQ==": { "id": "pDJ3Xpebdx7KToS5V5VZDQ==", "updater": "rhel-vex", "name": "CVE-2026-4438", "description": "A flaw was found in the GNU C library (glibc). When applications use the `gethostbyaddr` or `gethostbyaddr_r` functions with a `nsswitch.conf` configuration that specifies glibc's DNS backend, the library may return an invalid DNS hostname. This violates the DNS specification and could lead to applications receiving incorrect hostname information, potentially impacting network operations or security decisions.", "issued": "2026-03-20T19:59:06Z", "links": "https://access.redhat.com/security/cve/CVE-2026-4438 https://bugzilla.redhat.com/show_bug.cgi?id=2449783 https://www.cve.org/CVERecord?id=CVE-2026-4438 https://nvd.nist.gov/vuln/detail/CVE-2026-4438 https://sourceware.org/bugzilla/show_bug.cgi?id=34015 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-4438.json https://access.redhat.com/errata/RHSA-2026:20597", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "normalized_severity": "Low", "package": { "id": "", "name": "glibc-gconv-extra", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:2.34-270.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "pL5xLi7HF+fZxJQ9yVoHHw==": { "id": "pL5xLi7HF+fZxJQ9yVoHHw==", "updater": "rhel-vex", "name": "CVE-2026-48933", "description": "A flaw was found in the Node.js WebCrypto implementation. A remote attacker could exploit this vulnerability by providing an input to the `subtle.encrypt()` function that is a multiple of 2 gigabytes (GiB). This could lead to a denial of service (DoS) by crashing the Node.js process.", "issued": "2026-06-26T01:14:36Z", "links": "https://access.redhat.com/security/cve/CVE-2026-48933 https://bugzilla.redhat.com/show_bug.cgi?id=2493331 https://www.cve.org/CVERecord?id=CVE-2026-48933 https://nvd.nist.gov/vuln/detail/CVE-2026-48933 https://nodejs.org/en/blog/vulnerability/june-2026-security-releases https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-48933.json https://access.redhat.com/errata/RHSA-2026:35892", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "High", "package": { "id": "", "name": "nodejs-docs", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "noarch", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:22.23.1-1.module+el9.8.0+24457+996af7aa", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "pOKoOa+tppgNwBAEgYrxlg==": { "id": "pOKoOa+tppgNwBAEgYrxlg==", "updater": "rhel-vex", "name": "CVE-2026-48618", "description": "A flaw was found in Node.js. This flaw involves a mismatch in how Node.js handles TLS (Transport Layer Security) hostnames and unicode dot separators during authentication. This mismatch can lead to a wildcard-depth authentication bypass. An attacker could exploit this to bypass intended security boundaries, potentially leading to unauthorized access and confidentiality impact.", "issued": "2026-06-26T01:14:36Z", "links": "https://access.redhat.com/security/cve/CVE-2026-48618 https://bugzilla.redhat.com/show_bug.cgi?id=2493337 https://www.cve.org/CVERecord?id=CVE-2026-48618 https://nvd.nist.gov/vuln/detail/CVE-2026-48618 https://nodejs.org/en/blog/vulnerability/june-2026-security-releases https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-48618.json https://access.redhat.com/errata/RHSA-2026:35892", "severity": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N", "normalized_severity": "High", "package": { "id": "", "name": "npm", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:10.9.8-1.22.23.1.1.module+el9.8.0+24457+996af7aa", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "pe4Shj+F17XwL0468/ASsg==": { "id": "pe4Shj+F17XwL0468/ASsg==", "updater": "rhel-vex", "name": "CVE-2026-42246", "description": "A flaw was found in the Ruby net-imap library. When upgrading a cleartext IMAP connection to TLS using the Net::IMAP#starttls method, the library improperly handles certain responses received during STARTTLS negotiation. A man-in-the-middle (MITM) attacker can inject a predicted tagged OK response before the client completes the STARTTLS command, causing the operation to appear successful without establishing a TLS session. As a result, the connection may continue to transmit sensitive information in cleartext and enable modification of data exchanged over the affected connection, while the application incorrectly believes that encryption has been enabled.", "issued": "2026-05-09T19:33:17Z", "links": "https://access.redhat.com/security/cve/CVE-2026-42246 https://bugzilla.redhat.com/show_bug.cgi?id=2468499 https://www.cve.org/CVERecord?id=CVE-2026-42246 https://nvd.nist.gov/vuln/detail/CVE-2026-42246 https://github.com/ruby/net-imap/commit/0ede4c40b1523dfeaf95777b2678e54cc0fd9618 https://github.com/ruby/net-imap/commit/24a4e770b43230286a05aa2a9746cdbb3eb8485e https://github.com/ruby/net-imap/commit/97e2488fb5401a1783bddd959dde007d9fbce42c https://github.com/ruby/net-imap/commit/f79d35bf5833f186e81044c57c843eda30c873da https://github.com/ruby/net-imap/releases/tag/v0.3.10 https://github.com/ruby/net-imap/releases/tag/v0.4.24 https://github.com/ruby/net-imap/releases/tag/v0.5.14 https://github.com/ruby/net-imap/security/advisories/GHSA-vcgp-9326-pqcp https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42246.json https://access.redhat.com/errata/RHSA-2026:33576", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "normalized_severity": "High", "package": { "id": "", "name": "rubygem-rake", "version": "", "kind": "binary", "normalized_version": "", "module": "ruby:3.3", "arch": "noarch", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "0:13.1.0-7.module+el9.8.0+24406+8975e57f", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "pgBZKIeBAAyMOCe6qVOUxg==": { "id": "pgBZKIeBAAyMOCe6qVOUxg==", "updater": "rhel-vex", "name": "CVE-2026-34182", "description": "A flaw was found in OpenSSL's Cryptographic Message Services (CMS) AuthEnvelopedData processing. An on-path attacker can exploit insufficient input validation on cipher and tag length fields by sending specially crafted CMS messages. This can lead to the forging of messages or bypassing integrity validation. Consequently, an attacker may achieve key-equivalent functionality for a given CMS recipient.", "issued": "2026-06-09T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-34182 https://bugzilla.redhat.com/show_bug.cgi?id=2481884 https://www.cve.org/CVERecord?id=CVE-2026-34182 https://nvd.nist.gov/vuln/detail/CVE-2026-34182 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-34182.json https://access.redhat.com/errata/RHSA-2026:25239", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "normalized_severity": "Medium", "package": { "id": "", "name": "openssl-devel", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:3.5.5-4.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "po1D239o+AaKFXhspYJxNw==": { "id": "po1D239o+AaKFXhspYJxNw==", "updater": "rhel-vex", "name": "CVE-2026-42768", "description": "A flaw was found in OpenSSL's CMS_decrypt() and PKCS7_decrypt() functions. This vulnerability, a Bleichenbacher-style oracle, could allow a remote attacker to decrypt or sign messages using the victim's private RSA key. Exploitation requires the attacker to provide specially crafted CMS or S/MIME messages and observe the application's error codes or decryption output. While the attack is technically possible, the specific conditions required make it unlikely to be exploited in typical deployments.", "issued": "2026-06-09T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-42768 https://bugzilla.redhat.com/show_bug.cgi?id=2481892 https://www.cve.org/CVERecord?id=CVE-2026-42768 https://nvd.nist.gov/vuln/detail/CVE-2026-42768 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42768.json https://access.redhat.com/errata/RHSA-2026:25239", "severity": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N", "normalized_severity": "Low", "package": { "id": "", "name": "openssl-devel", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:3.5.5-4.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "poe+ZOEeV2eDvTqSL2bcHA==": { "id": "poe+ZOEeV2eDvTqSL2bcHA==", "updater": "rhel-vex", "name": "CVE-2026-18508", "description": "A flaw was found in GNU tar. When extracting an archive with the --one-top-level option, hardlink targets are not confined to the designated top-level directory and may resolve relative to the extraction working directory. A crafted archive can create hardlinks that escape the intended boundary and, when combined with a preexisting symbolic link under the working directory, may allow writing outside that boundary during a single extraction.", "issued": "2026-07-31T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-18508 https://bugzilla.redhat.com/show_bug.cgi?id=2509843 https://www.cve.org/CVERecord?id=CVE-2026-18508 https://nvd.nist.gov/vuln/detail/CVE-2026-18508 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-18508.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N", "normalized_severity": "Medium", "package": { "id": "", "name": "tar", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "px8rY0l1xijMh1q/wodpIQ==": { "id": "px8rY0l1xijMh1q/wodpIQ==", "updater": "rhel-vex", "name": "CVE-2025-24294", "description": "A denial of service flaw was found in resolv ruby gem. This flaw allows an attacker to craft a malicious DNS packet containing a highly compressed domain name. When the resolv library parses this packet, the name decompression process consumes a large amount of CPU resources, as the library does not limit the resulting length of the name.", "issued": "2025-07-12T03:30:40Z", "links": "https://access.redhat.com/security/cve/CVE-2025-24294 https://bugzilla.redhat.com/show_bug.cgi?id=2379684 https://www.cve.org/CVERecord?id=CVE-2025-24294 https://nvd.nist.gov/vuln/detail/CVE-2025-24294 https://www.ruby-lang.org/en/news/2025/07/08/dos-resolv-cve-2025-24294/ https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-24294.json https://access.redhat.com/errata/RHSA-2025:23063", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "normalized_severity": "Medium", "package": { "id": "", "name": "rubygem-io-console", "version": "", "kind": "binary", "normalized_version": "", "module": "ruby:3.3", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "0:0.7.1-5.module+el9.7.0+23651+15dc1615", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "pzONVbRfZmj1lkGaWtUucQ==": { "id": "pzONVbRfZmj1lkGaWtUucQ==", "updater": "rhel-vex", "name": "CVE-2026-22795", "description": "A flaw was found in OpenSSL. This type confusion vulnerability allows a remote attacker to cause a Denial of Service (DoS) by tricking a user or application into processing a maliciously crafted PKCS#12 (Personal Information Exchange Syntax Standard) file. The vulnerability leads to an invalid or NULL pointer dereference, resulting in an application crash.", "issued": "2026-01-27T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-22795 https://bugzilla.redhat.com/show_bug.cgi?id=2430389 https://www.cve.org/CVERecord?id=CVE-2026-22795 https://nvd.nist.gov/vuln/detail/CVE-2026-22795 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-22795.json https://access.redhat.com/errata/RHSA-2026:1473", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "openssl-devel", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:3.5.1-7.el9_7", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "q0+0u3TKsGvCBRBK4RgVAw==": { "id": "q0+0u3TKsGvCBRBK4RgVAw==", "updater": "rhel-vex", "name": "CVE-2026-5928", "description": "A flaw was found in glibc (GNU C Library). When the `ungetwc` function is called on a file stream using wide characters with specific overlapping single-byte and multi-byte encodings, it may attempt to read data outside of its allocated buffer. This can lead to the unintentional disclosure of sensitive information from memory or cause the program to crash, resulting in a denial of service.", "issued": "2026-04-20T20:37:31Z", "links": "https://access.redhat.com/security/cve/CVE-2026-5928 https://bugzilla.redhat.com/show_bug.cgi?id=2459854 https://www.cve.org/CVERecord?id=CVE-2026-5928 https://nvd.nist.gov/vuln/detail/CVE-2026-5928 https://sourceware.org/bugzilla/show_bug.cgi?id=33998 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-5928.json https://access.redhat.com/errata/RHSA-2026:42952", "severity": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "glibc-langpack-en", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:2.34-274.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "q59Dz6hmc7o1qITDwl3CCw==": { "id": "q59Dz6hmc7o1qITDwl3CCw==", "updater": "rhel-vex", "name": "CVE-2026-1525", "description": "A flaw was found in undici, a Node.js HTTP/1.1 client. A remote attacker could exploit this vulnerability by sending HTTP/1.1 requests that include duplicate Content-Length headers with different casing (e.g., \"Content-Length\" and \"content-length\"). This can lead to HTTP Request Smuggling, a technique where an attacker sends an ambiguous request that is interpreted differently by a proxy and a backend server. Successful exploitation could result in unauthorized access, cache poisoning, or credential hijacking. It may also cause a Denial of Service (DoS) if strict HTTP parsers reject the malformed requests.", "issued": "2026-03-12T19:56:55Z", "links": "https://access.redhat.com/security/cve/CVE-2026-1525 https://bugzilla.redhat.com/show_bug.cgi?id=2447144 https://www.cve.org/CVERecord?id=CVE-2026-1525 https://nvd.nist.gov/vuln/detail/CVE-2026-1525 https://cna.openjsf.org/security-advisories.html https://cwe.mitre.org/data/definitions/444.html https://github.com/nodejs/undici/security/advisories/GHSA-2mjp-6q6p-2qxm https://hackerone.com/reports/3556037 https://www.rfc-editor.org/rfc/rfc9110.html#section-8.6 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-1525.json https://access.redhat.com/errata/RHSA-2026:7302", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "normalized_severity": "Medium", "package": { "id": "", "name": "nodejs", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "aarch64|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:22.22.2-1.module+el9.7.0+24157+8ddb2461", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "q5joCCZ2cOTa0rXBUtiSpQ==": { "id": "q5joCCZ2cOTa0rXBUtiSpQ==", "updater": "rhel-vex", "name": "CVE-2025-11839", "description": "An uncheck return value flaw has been discovered in the GNU binutils program. This flaw exists in the `tg_tag_type` function of the file prdbg.c and exploitation of this flaw may lead to a program crash.", "issued": "2025-10-16T14:02:13Z", "links": "https://access.redhat.com/security/cve/CVE-2025-11839 https://bugzilla.redhat.com/show_bug.cgi?id=2404439 https://www.cve.org/CVERecord?id=CVE-2025-11839 https://nvd.nist.gov/vuln/detail/CVE-2025-11839 https://sourceware.org/bugzilla/attachment.cgi?id=16344 https://sourceware.org/bugzilla/show_bug.cgi?id=33448 https://vuldb.com/?ctiid.328774 https://vuldb.com/?id.328774 https://vuldb.com/?submit.661279 https://www.gnu.org/ https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-11839.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L", "normalized_severity": "Low", "package": { "id": "", "name": "binutils", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "q7c6mw4iAmau1l6sfNLk8w==": { "id": "q7c6mw4iAmau1l6sfNLk8w==", "updater": "rhel-vex", "name": "CVE-2026-42258", "description": "A flaw was found in Net::IMAP, a Ruby library that provides Internet Message Access Protocol (IMAP) client functionality. This vulnerability allows a remote attacker to inject arbitrary IMAP commands. This is achieved by passing specially crafted symbol arguments to IMAP commands. Successful exploitation could lead to unauthorized actions on the IMAP server or client, potentially resulting in information disclosure or other integrity impacts.", "issued": "2026-05-09T19:40:49Z", "links": "https://access.redhat.com/security/cve/CVE-2026-42258 https://bugzilla.redhat.com/show_bug.cgi?id=2468498 https://www.cve.org/CVERecord?id=CVE-2026-42258 https://nvd.nist.gov/vuln/detail/CVE-2026-42258 https://github.com/ruby/net-imap/releases/tag/v0.4.24 https://github.com/ruby/net-imap/releases/tag/v0.5.14 https://github.com/ruby/net-imap/releases/tag/v0.6.4 https://github.com/ruby/net-imap/security/advisories/GHSA-75xq-5h9v-w6px https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42258.json https://access.redhat.com/errata/RHSA-2026:33576", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:N", "normalized_severity": "High", "package": { "id": "", "name": "rubygem-rdoc", "version": "", "kind": "binary", "normalized_version": "", "module": "ruby:3.3", "arch": "noarch", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "0:6.6.3.1-7.module+el9.8.0+24406+8975e57f", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "qEhRdzGH44SGjJIcqcIv/g==": { "id": "qEhRdzGH44SGjJIcqcIv/g==", "updater": "rhel-vex", "name": "CVE-2022-2344", "description": "A heap-based buffer overflow was found in Vim in the ins_compl_add function in the insexpand.c file. This issue occurs due to a read past the end of a buffer when a specially crafted input is processed. This flaw allows an attacker who can trick a user into opening a specially crafted file into triggering the heap-based buffer overflow, causing the application to crash, possibly executing code and corrupting memory.", "issued": "2022-07-06T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2022-2344 https://bugzilla.redhat.com/show_bug.cgi?id=2106787 https://www.cve.org/CVERecord?id=CVE-2022-2344 https://nvd.nist.gov/vuln/detail/CVE-2022-2344 https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-2344.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "vim", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "qFIYjZJeFnLAVC7lR0n6oQ==": { "id": "qFIYjZJeFnLAVC7lR0n6oQ==", "updater": "rhel-vex", "name": "CVE-2026-0989", "description": "A flaw was identified in the RelaxNG parser of libxml2 related to how external schema inclusions are handled. The parser does not enforce a limit on inclusion depth when resolving nested \u003cinclude\u003e directives. Specially crafted or overly complex schemas can cause excessive recursion during parsing. This may lead to stack exhaustion and application crashes, creating a denial-of-service risk.", "issued": "2026-01-15T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-0989 https://bugzilla.redhat.com/show_bug.cgi?id=2429933 https://www.cve.org/CVERecord?id=CVE-2026-0989 https://nvd.nist.gov/vuln/detail/CVE-2026-0989 https://gitlab.gnome.org/GNOME/libxml2/-/issues/998 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-0989.json", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L", "normalized_severity": "Low", "package": { "id": "", "name": "libxml2", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "qIUMlexpn07c5Ly85v5AjQ==": { "id": "qIUMlexpn07c5Ly85v5AjQ==", "updater": "rhel-vex", "name": "CVE-2026-6368", "description": "A flaw was found in glibc (GNU C Library). A local attacker or application using the wordexp function with the WRDE_APPEND flag can trigger the interface to return invalid memory in the we_wordv member. This invalid memory, when subsequently processed by wordfree, may cause the process to abort, leading to a Denial of Service (DoS).", "issued": "2026-08-10T18:40:11Z", "links": "https://access.redhat.com/security/cve/CVE-2026-6368 https://bugzilla.redhat.com/show_bug.cgi?id=2513608 https://www.cve.org/CVERecord?id=CVE-2026-6368 https://nvd.nist.gov/vuln/detail/CVE-2026-6368 https://sourceware.org/bugzilla/show_bug.cgi?id=34090 https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2026-0014;h=1e9a0039f07471ddfe6816e5df04875bec409f92;hb=HEAD https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6368.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "glibc", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "qIj6aIlqGJtvbX658qTpDQ==": { "id": "qIj6aIlqGJtvbX658qTpDQ==", "updater": "rhel-vex", "name": "CVE-2025-58767", "description": "A denial of service flaw has been discovered in the rubygem REXML. Certain input can cause excess cpu usage and given sufficiently large input this can affect program performance.", "issued": "2025-09-17T17:45:58Z", "links": "https://access.redhat.com/security/cve/CVE-2025-58767 https://bugzilla.redhat.com/show_bug.cgi?id=2396186 https://www.cve.org/CVERecord?id=CVE-2025-58767 https://nvd.nist.gov/vuln/detail/CVE-2025-58767 https://github.com/ruby/rexml/commit/5859bdeac792687eaf93d8e8f0b7e3c1e2ed5c23 https://github.com/ruby/rexml/security/advisories/GHSA-c2f4-jgmc-q2r5 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-58767.json https://access.redhat.com/errata/RHSA-2025:23063", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "normalized_severity": "Medium", "package": { "id": "", "name": "rubygem-bundler", "version": "", "kind": "binary", "normalized_version": "", "module": "ruby:3.3", "arch": "noarch", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "0:2.5.22-5.module+el9.7.0+23651+15dc1615", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "qN6ac9Xwm6AOaO1fAB7fOQ==": { "id": "qN6ac9Xwm6AOaO1fAB7fOQ==", "updater": "rhel-vex", "name": "CVE-2026-33845", "description": "A flaw in GnuTLS DTLS handshake parsing allows malformed fragments with zero length and non-zero offset, leading to an integer underflow during reassembly and resulting in an out-of-bounds read. This issue is remotely exploitable and may cause information disclosure or denial of service.", "issued": "2026-04-30T17:28:41Z", "links": "https://access.redhat.com/security/cve/CVE-2026-33845 https://bugzilla.redhat.com/show_bug.cgi?id=2450624 https://www.cve.org/CVERecord?id=CVE-2026-33845 https://nvd.nist.gov/vuln/detail/CVE-2026-33845 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33845.json https://access.redhat.com/errata/RHSA-2026:20612", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "High", "package": { "id": "", "name": "gnutls", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:3.8.10-4.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "qSRGSB2uV6n5bH1pdu2LUQ==": { "id": "qSRGSB2uV6n5bH1pdu2LUQ==", "updater": "rhel-vex", "name": "CVE-2026-4424", "description": "A flaw was found in libarchive. This heap out-of-bounds read vulnerability exists in the RAR archive processing logic due to improper validation of the LZSS sliding window size after transitions between compression methods. A remote attacker can exploit this by providing a specially crafted RAR archive, leading to the disclosure of sensitive heap memory information without requiring authentication or user interaction.", "issued": "2026-03-19T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-4424 https://bugzilla.redhat.com/show_bug.cgi?id=2449006 https://www.cve.org/CVERecord?id=CVE-2026-4424 https://nvd.nist.gov/vuln/detail/CVE-2026-4424 https://github.com/libarchive/libarchive/pull/2898 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-4424.json https://access.redhat.com/errata/RHSA-2026:8510", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "normalized_severity": "High", "package": { "id": "", "name": "bsdtar", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "0:3.5.3-9.el9_7", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "qWK7H7gz7e8gS19GJSeIIg==": { "id": "qWK7H7gz7e8gS19GJSeIIg==", "updater": "rhel-vex", "name": "CVE-2022-2889", "description": "A use-after-free vulnerability was found in Vim in the find_var_also_in_script function in the evalvars.c file. This issue occurs because an already freed memory is used when a specially crafted input is processed. This flaw allows an attacker who can trick a user into opening a specially crafted file into triggering the use-after-free, causing the application to crash, possibly executing code and corrupting memory.", "issued": "2022-08-16T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2022-2889 https://bugzilla.redhat.com/show_bug.cgi?id=2119864 https://www.cve.org/CVERecord?id=CVE-2022-2889 https://nvd.nist.gov/vuln/detail/CVE-2022-2889 https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-2889.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "vim", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "qYORp6v9x0Jy6S8OKerZvw==": { "id": "qYORp6v9x0Jy6S8OKerZvw==", "updater": "rhel-vex", "name": "CVE-2023-4738", "description": "Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1848.", "issued": "2023-09-02T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2023-4738 https://bugzilla.redhat.com/show_bug.cgi?id=2237176 https://www.cve.org/CVERecord?id=CVE-2023-4738 https://nvd.nist.gov/vuln/detail/CVE-2023-4738 https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-4738.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "vim", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "qfyF3TC4Vao8jmQ0UiB8kA==": { "id": "qfyF3TC4Vao8jmQ0UiB8kA==", "updater": "rhel-vex", "name": "CVE-2025-64720", "description": "A buffer overflow flaw has been discovered in libpng. An out-of-bounds read vulnerability exists in png_image_read_composite when processing palette images with PNG_FLAG_OPTIMIZE_ALPHA enabled. The palette compositing code in png_init_read_transformations incorrectly applies background compositing during premultiplication, violating the invariant component ≤ alpha × 257 required by the simplified PNG API.", "issued": "2025-11-24T23:45:38Z", "links": "https://access.redhat.com/security/cve/CVE-2025-64720 https://bugzilla.redhat.com/show_bug.cgi?id=2416904 https://www.cve.org/CVERecord?id=CVE-2025-64720 https://nvd.nist.gov/vuln/detail/CVE-2025-64720 https://github.com/pnggroup/libpng/commit/08da33b4c88cfcd36e5a706558a8d7e0e4773643 https://github.com/pnggroup/libpng/issues/686 https://github.com/pnggroup/libpng/pull/751 https://github.com/pnggroup/libpng/security/advisories/GHSA-hfc7-ph9c-wcww https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-64720.json https://access.redhat.com/errata/RHSA-2026:0238", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H", "normalized_severity": "High", "package": { "id": "", "name": "libpng", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "2:1.6.37-12.el9_7.1", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "qh5gUahI9nge5StfpD2Efg==": { "id": "qh5gUahI9nge5StfpD2Efg==", "updater": "rhel-vex", "name": "CVE-2026-42770", "description": "A flaw was found in OpenSSL. A malicious peer can exploit this vulnerability by presenting a specially crafted DHX (X9.42) peer key. Due to improper validation of the peer key's subgroup membership, an attacker can recover the victim's private key after a small number of key exchange attempts. This information disclosure can lead to unauthorized access or further compromise of affected systems.", "issued": "2026-06-09T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-42770 https://bugzilla.redhat.com/show_bug.cgi?id=2481894 https://www.cve.org/CVERecord?id=CVE-2026-42770 https://nvd.nist.gov/vuln/detail/CVE-2026-42770 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42770.json https://access.redhat.com/errata/RHSA-2026:25239", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "normalized_severity": "Low", "package": { "id": "", "name": "openssl-libs", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "1:3.5.5-4.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "qkPjlqaV2EZ52NAHd/IgfQ==": { "id": "qkPjlqaV2EZ52NAHd/IgfQ==", "updater": "rhel-vex", "name": "CVE-2026-11525", "description": "A flaw was found in undici. When undici processes Set-Cookie headers, it incorrectly interprets the SameSite attribute, accepting partial matches instead of exact ones. This allows a malicious server to downgrade a cookie's SameSite policy to a less secure setting, potentially leading to unintended information disclosure or a weakening of security protections for the user.", "issued": "2026-06-17T17:31:03Z", "links": "https://access.redhat.com/security/cve/CVE-2026-11525 https://bugzilla.redhat.com/show_bug.cgi?id=2490008 https://www.cve.org/CVERecord?id=CVE-2026-11525 https://nvd.nist.gov/vuln/detail/CVE-2026-11525 https://cna.openjsf.org/security-advisories.html https://github.com/nodejs/undici/security/advisories/GHSA-g8m3-5g58-fq7m https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-11525.json https://access.redhat.com/errata/RHSA-2026:35892", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N", "normalized_severity": "Low", "package": { "id": "", "name": "npm", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:10.9.8-1.22.23.1.1.module+el9.8.0+24457+996af7aa", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "qn72KaShSoWOaJmw6qKS3Q==": { "id": "qn72KaShSoWOaJmw6qKS3Q==", "updater": "rhel-vex", "name": "CVE-2026-42245", "description": "A flaw was found in Net::IMAP, a Ruby library implementing the Internet Message Access Protocol (IMAP) client functionality. A hostile server can exploit a quadratic time complexity issue in the `Net::IMAP::ResponseReader` when processing large responses containing numerous string literals. This can lead to the client's CPU being exhausted, resulting in a denial of service (DoS) attack.", "issued": "2026-05-09T19:37:08Z", "links": "https://access.redhat.com/security/cve/CVE-2026-42245 https://bugzilla.redhat.com/show_bug.cgi?id=2468495 https://www.cve.org/CVERecord?id=CVE-2026-42245 https://nvd.nist.gov/vuln/detail/CVE-2026-42245 https://github.com/ruby/net-imap/commit/6091f7d6b1f3514cafbfe39c76f2b5d73de3ca96 https://github.com/ruby/net-imap/commit/88d95231fc8afef11c1f074453f7d75b68c9dfda https://github.com/ruby/net-imap/commit/de685f91a4a4cc75eb80da898c2bf8af08d34819 https://github.com/ruby/net-imap/releases/tag/v0.4.24 https://github.com/ruby/net-imap/releases/tag/v0.5.14 https://github.com/ruby/net-imap/releases/tag/v0.6.4 https://github.com/ruby/net-imap/security/advisories/GHSA-q2mw-fvj9-vvcw https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42245.json https://access.redhat.com/errata/RHSA-2026:33576", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "rubygem-irb", "version": "", "kind": "binary", "normalized_version": "", "module": "ruby:3.3", "arch": "noarch", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "0:1.13.1-7.module+el9.8.0+24406+8975e57f", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "qpxeH+3MOciW1z6wxEwYBw==": { "id": "qpxeH+3MOciW1z6wxEwYBw==", "updater": "rhel-vex", "name": "CVE-2025-55131", "description": "A memory exposure flaw has been discovered in Node.js. A flaw in Node.js's buffer allocation logic can expose uninitialized memory when allocations are interrupted, when using the `vm` module with the timeout option. Under specific timing conditions, buffers allocated with `Buffer.alloc` and other `TypedArray` instances like `Uint8Array` may contain leftover data from previous operations, allowing in-process secrets like tokens or passwords to leak or causing data corruption.", "issued": "2026-01-20T20:41:55Z", "links": "https://access.redhat.com/security/cve/CVE-2025-55131 https://bugzilla.redhat.com/show_bug.cgi?id=2431350 https://www.cve.org/CVERecord?id=CVE-2025-55131 https://nvd.nist.gov/vuln/detail/CVE-2025-55131 https://nodejs.org/en/blog/vulnerability/december-2025-security-releases https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-55131.json https://access.redhat.com/errata/RHSA-2026:2782", "severity": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L", "normalized_severity": "High", "package": { "id": "", "name": "nodejs", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "aarch64|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:22.22.0-1.module+el9.7.0+23896+b5802de9", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "qug1advw8m4TjVAUPEUPiA==": { "id": "qug1advw8m4TjVAUPEUPiA==", "updater": "rhel-vex", "name": "CVE-2023-4751", "description": "Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1331.", "issued": "2023-09-03T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2023-4751 https://bugzilla.redhat.com/show_bug.cgi?id=2237187 https://www.cve.org/CVERecord?id=CVE-2023-4751 https://nvd.nist.gov/vuln/detail/CVE-2023-4751 https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-4751.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "vim", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "r2VJfkGmsY6Tx/luoo7BHQ==": { "id": "r2VJfkGmsY6Tx/luoo7BHQ==", "updater": "rhel-vex", "name": "CVE-2026-0865", "description": "Missing newline filtering has been discovered in Python. User-controlled header names and values containing newlines can allow injecting HTTP headers.", "issued": "2026-01-20T21:26:15Z", "links": "https://access.redhat.com/security/cve/CVE-2026-0865 https://bugzilla.redhat.com/show_bug.cgi?id=2431367 https://www.cve.org/CVERecord?id=CVE-2026-0865 https://nvd.nist.gov/vuln/detail/CVE-2026-0865 https://github.com/python/cpython/issues/143916 https://github.com/python/cpython/pull/143917 https://mail.python.org/archives/list/security-announce@python.org/thread/BJ6QPHNSHJTS3A7CFV6IBMCAP2DWRVNT/ https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-0865.json https://access.redhat.com/errata/RHSA-2026:4168", "severity": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:N", "normalized_severity": "Medium", "package": { "id": "", "name": "python3", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:3.9.25-3.el9_7.1", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "r3RLKNYtYvKarBqnnrlrew==": { "id": "r3RLKNYtYvKarBqnnrlrew==", "updater": "rhel-vex", "name": "CVE-2022-0529", "description": "A flaw was found in Unzip. The vulnerability occurs during the conversion of a wide string to a local string that leads to a heap of out-of-bound write. This flaw allows an attacker to input a specially crafted zip file, leading to a crash.", "issued": "2022-01-24T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2022-0529 https://bugzilla.redhat.com/show_bug.cgi?id=2051402 https://www.cve.org/CVERecord?id=CVE-2022-0529 https://nvd.nist.gov/vuln/detail/CVE-2022-0529 https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-0529.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "unzip", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "r410Z5X0yojDsVg9YVcNqQ==": { "id": "r410Z5X0yojDsVg9YVcNqQ==", "updater": "rhel-vex", "name": "CVE-2022-2182", "description": "Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.", "issued": "2022-06-23T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2022-2182 https://bugzilla.redhat.com/show_bug.cgi?id=2102153 https://www.cve.org/CVERecord?id=CVE-2022-2182 https://nvd.nist.gov/vuln/detail/CVE-2022-2182 https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-2182.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "vim", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "r4Fu2fNYrl5cfm4zX5YpZQ==": { "id": "r4Fu2fNYrl5cfm4zX5YpZQ==", "updater": "rhel-vex", "name": "CVE-2025-69648", "description": "A flaw was found in binutils. Processing a specially crafted ELF binary file containing malformed DWARF .debug_rnglists data with the readelf program can trigger an infinite loop and result in a denial of service.", "issued": "2026-03-09T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2025-69648 https://bugzilla.redhat.com/show_bug.cgi?id=2445774 https://www.cve.org/CVERecord?id=CVE-2025-69648 https://nvd.nist.gov/vuln/detail/CVE-2025-69648 https://sourceware.org/bugzilla/show_bug.cgi?id=33641 https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=598704a00cbac5e85c2bedd363357b5bf6fcee33 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-69648.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "normalized_severity": "Low", "package": { "id": "", "name": "binutils", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "rJljaCTiTdw1uI1lvfy+hw==": { "id": "rJljaCTiTdw1uI1lvfy+hw==", "updater": "rhel-vex", "name": "CVE-2023-1170", "description": "A heap-based buffer overflow vulnerability was found in Vim's utf_ptr2char() function of the src/mbyte.c file. This flaw occurs because there is access to invalid memory with put in visual block mode. An attacker can trick a user into opening a specially crafted file, triggering an out-of-bounds read that causes an application to crash, leading to a denial of service.", "issued": "2023-03-04T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2023-1170 https://bugzilla.redhat.com/show_bug.cgi?id=2176462 https://www.cve.org/CVERecord?id=CVE-2023-1170 https://nvd.nist.gov/vuln/detail/CVE-2023-1170 https://huntr.dev/bounties/286e0090-e654-46d2-ac60-29f81799d0a4 https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-1170.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L", "normalized_severity": "Low", "package": { "id": "", "name": "vim", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "rO5a9fYyaqaIZ4bH0M8fdA==": { "id": "rO5a9fYyaqaIZ4bH0M8fdA==", "updater": "rhel-vex", "name": "CVE-2022-2862", "description": "Use After Free in GitHub repository vim/vim prior to 9.0.0221.", "issued": "2022-08-17T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2022-2862 https://bugzilla.redhat.com/show_bug.cgi?id=2122139 https://www.cve.org/CVERecord?id=CVE-2022-2862 https://nvd.nist.gov/vuln/detail/CVE-2022-2862 https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-2862.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "vim", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "rR226S9SV4WbmIVotM0CsQ==": { "id": "rR226S9SV4WbmIVotM0CsQ==", "updater": "rhel-vex", "name": "CVE-2023-46246", "description": "Vim is an improved version of the good old UNIX editor Vi. Heap-use-after-free in memory allocated in the function `ga_grow_inner` in in the file `src/alloc.c` at line 748, which is freed in the file `src/ex_docmd.c` in the function `do_cmdline` at line 1010 and then used again in `src/cmdhist.c` at line 759. When using the `:history` command, it's possible that the provided argument overflows the accepted value. Causing an Integer Overflow and potentially later an use-after-free. This vulnerability has been patched in version 9.0.2068.", "issued": "2023-10-27T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2023-46246 https://bugzilla.redhat.com/show_bug.cgi?id=2246953 https://www.cve.org/CVERecord?id=CVE-2023-46246 https://nvd.nist.gov/vuln/detail/CVE-2023-46246 https://github.com/vim/vim/security/advisories/GHSA-q22m-h7m2-9mgm https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-46246.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "normalized_severity": "Low", "package": { "id": "", "name": "vim", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "rSxPRb6y8rOV71QNzjYBEA==": { "id": "rSxPRb6y8rOV71QNzjYBEA==", "updater": "rhel-vex", "name": "CVE-2026-4437", "description": "A flaw was found in glibc (the GNU C Library). When an application uses the `gethostbyaddr` or `gethostbyaddr_r` functions with a `nsswitch.conf` configuration that specifies glibc's DNS backend, a remote attacker can send a specially crafted DNS (Domain Name System) response. This crafted response can cause the application to incorrectly interpret a non-answer section of the DNS response as a valid answer, leading to potential misbehavior or incorrect information processing.", "issued": "2026-03-20T19:59:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-4437 https://bugzilla.redhat.com/show_bug.cgi?id=2449777 https://www.cve.org/CVERecord?id=CVE-2026-4437 https://nvd.nist.gov/vuln/detail/CVE-2026-4437 https://sourceware.org/bugzilla/show_bug.cgi?id=34014 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-4437.json https://access.redhat.com/errata/RHSA-2026:20597", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L", "normalized_severity": "Medium", "package": { "id": "", "name": "glibc-gconv-extra", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:2.34-270.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "rT7Zl5hqfT/SFXkQlgRUqg==": { "id": "rT7Zl5hqfT/SFXkQlgRUqg==", "updater": "rhel-vex", "name": "CVE-2026-12151", "description": "A flaw was found in undici. A malicious WebSocket server can exploit this by streaming numerous small or empty continuation frames. This can bypass per-frame and cumulative-size validation, leading to unbounded memory growth in the client process. The primary consequence is memory exhaustion, resulting in a denial of service (DoS) for affected applications using the undici WebSocket client or WebSocketStream API.", "issued": "2026-06-17T16:05:38Z", "links": "https://access.redhat.com/security/cve/CVE-2026-12151 https://bugzilla.redhat.com/show_bug.cgi?id=2489980 https://www.cve.org/CVERecord?id=CVE-2026-12151 https://nvd.nist.gov/vuln/detail/CVE-2026-12151 https://cna.openjsf.org/security-advisories.html https://github.com/nodejs/undici/security/advisories/GHSA-vxpw-j846-p89q https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-12151.json https://access.redhat.com/errata/RHSA-2026:35892", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "High", "package": { "id": "", "name": "npm", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:10.9.8-1.22.23.1.1.module+el9.8.0+24457+996af7aa", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "rVRinaBex/zPmHE0cI9QNQ==": { "id": "rVRinaBex/zPmHE0cI9QNQ==", "updater": "rhel-vex", "name": "CVE-2026-41316", "description": "A flaw was found in ERB, a templating system for Ruby. An attacker who can trigger deserialization of untrusted data in a Ruby application can bypass existing protections. This vulnerability allows for arbitrary code execution by exploiting specific public methods that evaluate template source code, which were not properly guarded against deserialization attacks.", "issued": "2026-04-24T02:35:41Z", "links": "https://access.redhat.com/security/cve/CVE-2026-41316 https://bugzilla.redhat.com/show_bug.cgi?id=2461369 https://www.cve.org/CVERecord?id=CVE-2026-41316 https://nvd.nist.gov/vuln/detail/CVE-2026-41316 https://github.com/ruby/erb/security/advisories/GHSA-q339-8rmv-2mhv https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-41316.json https://access.redhat.com/errata/RHSA-2026:18030", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "normalized_severity": "High", "package": { "id": "", "name": "rubygem-bundler", "version": "", "kind": "binary", "normalized_version": "", "module": "ruby:3.3", "arch": "noarch", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "0:2.5.22-6.module+el9.7.0+24248+66578cbb", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "rWO0jZdArYZ9zSTLMe8r8w==": { "id": "rWO0jZdArYZ9zSTLMe8r8w==", "updater": "rhel-vex", "name": "CVE-2026-42246", "description": "A flaw was found in the Ruby net-imap library. When upgrading a cleartext IMAP connection to TLS using the Net::IMAP#starttls method, the library improperly handles certain responses received during STARTTLS negotiation. A man-in-the-middle (MITM) attacker can inject a predicted tagged OK response before the client completes the STARTTLS command, causing the operation to appear successful without establishing a TLS session. As a result, the connection may continue to transmit sensitive information in cleartext and enable modification of data exchanged over the affected connection, while the application incorrectly believes that encryption has been enabled.", "issued": "2026-05-09T19:33:17Z", "links": "https://access.redhat.com/security/cve/CVE-2026-42246 https://bugzilla.redhat.com/show_bug.cgi?id=2468499 https://www.cve.org/CVERecord?id=CVE-2026-42246 https://nvd.nist.gov/vuln/detail/CVE-2026-42246 https://github.com/ruby/net-imap/commit/0ede4c40b1523dfeaf95777b2678e54cc0fd9618 https://github.com/ruby/net-imap/commit/24a4e770b43230286a05aa2a9746cdbb3eb8485e https://github.com/ruby/net-imap/commit/97e2488fb5401a1783bddd959dde007d9fbce42c https://github.com/ruby/net-imap/commit/f79d35bf5833f186e81044c57c843eda30c873da https://github.com/ruby/net-imap/releases/tag/v0.3.10 https://github.com/ruby/net-imap/releases/tag/v0.4.24 https://github.com/ruby/net-imap/releases/tag/v0.5.14 https://github.com/ruby/net-imap/security/advisories/GHSA-vcgp-9326-pqcp https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42246.json https://access.redhat.com/errata/RHSA-2026:33576", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "normalized_severity": "High", "package": { "id": "", "name": "rubygem-bundler", "version": "", "kind": "binary", "normalized_version": "", "module": "ruby:3.3", "arch": "noarch", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "0:2.5.22-7.module+el9.8.0+24406+8975e57f", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "rhaCfU7pM1FgApTAw4PpPA==": { "id": "rhaCfU7pM1FgApTAw4PpPA==", "updater": "rhel-vex", "name": "CVE-2026-18739", "description": "A flaw was found in popt, a command-line option parsing library. An off-by-one error in the poptStuffArgs function, when repeatedly called by a host application or through deep alias nesting, can lead to corruption of internal program data. This corruption could potentially enable a local attacker to execute arbitrary code if the host application then unsafely processes the altered data.", "issued": "2026-08-03T18:46:11Z", "links": "https://access.redhat.com/security/cve/CVE-2026-18739 https://bugzilla.redhat.com/show_bug.cgi?id=2510737 https://www.cve.org/CVERecord?id=CVE-2026-18739 https://nvd.nist.gov/vuln/detail/CVE-2026-18739 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-18739.json", "severity": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L", "normalized_severity": "Low", "package": { "id": "", "name": "popt", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "rjcajgsmKA8I5yMLMT8DHg==": { "id": "rjcajgsmKA8I5yMLMT8DHg==", "updater": "rhel-vex", "name": "CVE-2026-55655", "description": "A flaw was found in OpenSSH. A local unprivileged attacker on a Linux client host can hijack client-side X11 forwarding connections. This is possible by pre-binding the preferred abstract X socket name when X11 forwarding is enabled and a local UNIX-domain X socket is used. A successful attack can compromise the confidentiality of forwarded X11 traffic, including sensitive window contents and input, and may allow some manipulation of the forwarded session.", "issued": "2026-06-22T23:22:11Z", "links": "https://access.redhat.com/security/cve/CVE-2026-55655 https://bugzilla.redhat.com/show_bug.cgi?id=2462250 https://www.cve.org/CVERecord?id=CVE-2026-55655 https://nvd.nist.gov/vuln/detail/CVE-2026-55655 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-55655.json https://access.redhat.com/errata/RHSA-2026:47756", "severity": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:L/A:N", "normalized_severity": "Medium", "package": { "id": "", "name": "openssh-clients", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:9.9p1-9.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "rlHsuoluzmy30odv/xIILA==": { "id": "rlHsuoluzmy30odv/xIILA==", "updater": "rhel-vex", "name": "CVE-2026-35388", "description": "A flaw was found in OpenSSH. This vulnerability allows for a low integrity impact due to the omission of connection multiplexing confirmation for proxy-mode multiplexing sessions. A local user, under specific and complex conditions requiring user interaction, could potentially establish a multiplexed session without explicit confirmation, leading to unintended data handling.", "issued": "2026-04-02T16:57:31Z", "links": "https://access.redhat.com/security/cve/CVE-2026-35388 https://bugzilla.redhat.com/show_bug.cgi?id=2454500 https://www.cve.org/CVERecord?id=CVE-2026-35388 https://nvd.nist.gov/vuln/detail/CVE-2026-35388 https://marc.info/?l=openssh-unix-dev\u0026m=177513443901484\u0026w=2 https://www.openssh.org/releasenotes.html#10.3p1 https://www.openwall.com/lists/oss-security/2026/04/02/3 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-35388.json https://access.redhat.com/errata/RHSA-2026:19219", "severity": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:N", "normalized_severity": "Low", "package": { "id": "", "name": "openssh-clients", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:9.9p1-7.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "rmKqD8ZR5vrHqnZkFulqdg==": { "id": "rmKqD8ZR5vrHqnZkFulqdg==", "updater": "rhel-vex", "name": "CVE-2025-64118", "description": "A flaw was found in node-tar, a Tar utility for Node.js. This vulnerability allows a local attacker to potentially disclose sensitive information. When the .t (or .list) function is used with { sync: true } to read tar entry contents, and the tar file is concurrently modified on disk to a smaller size, the function may return uninitialized memory contents. This could lead to the exposure of arbitrary data.", "issued": "2025-10-30T17:50:20Z", "links": "https://access.redhat.com/security/cve/CVE-2025-64118 https://bugzilla.redhat.com/show_bug.cgi?id=2407440 https://www.cve.org/CVERecord?id=CVE-2025-64118 https://nvd.nist.gov/vuln/detail/CVE-2025-64118 https://github.com/isaacs/node-tar/commit/5330eb04bc43014f216e5c271b40d5c00d45224d https://github.com/isaacs/node-tar/issues/445 https://github.com/isaacs/node-tar/pull/446 https://github.com/isaacs/node-tar/security/advisories/GHSA-29xp-372q-xqph https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-64118.json", "severity": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N", "normalized_severity": "Medium", "package": { "id": "", "name": "tar", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "rqKN8+22i5Wi/U+pG39tNg==": { "id": "rqKN8+22i5Wi/U+pG39tNg==", "updater": "rhel-vex", "name": "CVE-2026-13757", "description": "A flaw was found in p11-kit. The RPC message attribute parsing functions p11_rpc_message_get_attribute() and p11_rpc_message_get_attribute_array_value() form a mutually-recursive call chain with no recursion depth limit when processing nested CKA_WRAP_TEMPLATE, CKA_UNWRAP_TEMPLATE, and CKA_DERIVE_TEMPLATE attributes. An unauthenticated attacker with local access to the p11-kit RPC Unix domain socket can send a specially crafted request with deeply nested template attributes, causing stack exhaustion and crashing the p11-kit server process and its dependent services.", "issued": "2026-06-23T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-13757 https://bugzilla.redhat.com/show_bug.cgi?id=2494556 https://www.cve.org/CVERecord?id=CVE-2026-13757 https://nvd.nist.gov/vuln/detail/CVE-2026-13757 https://github.com/advisories/GHSA-p2wm-69qx-x25w https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-13757.json https://access.redhat.com/errata/RHSA-2026:49667", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "p11-kit-trust", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:0.26.4-1.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "rwC2lB0lflNzttbo5Agt3g==": { "id": "rwC2lB0lflNzttbo5Agt3g==", "updater": "rhel-vex", "name": "CVE-2026-6845", "description": "A flaw was found in binutils, specifically within the `readelf` utility. This vulnerability allows a local attacker to cause a Denial of Service (DoS) by tricking a user into processing a specially crafted Executable and Linkable Format (ELF) file. The exploitation of this flaw can lead to the system becoming unresponsive due to excessive resource consumption or a program crash.", "issued": "2026-04-13T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-6845 https://bugzilla.redhat.com/show_bug.cgi?id=2460012 https://www.cve.org/CVERecord?id=CVE-2026-6845 https://nvd.nist.gov/vuln/detail/CVE-2026-6845 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6845.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "binutils", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "rxGz0C3kTCQwThekjofucw==": { "id": "rxGz0C3kTCQwThekjofucw==", "updater": "rhel-vex", "name": "CVE-2026-56132", "description": "A flaw was found in libexpat, a library used for parsing XML data. An attacker could exploit a heap-based buffer overflow, a type of memory error, by providing specially crafted XML input. This vulnerability occurs when the library mishandles memory reallocation while processing XML, particularly when multiple parsers share data. Successful exploitation could allow the attacker to execute arbitrary code, access sensitive information, or cause the application to crash, leading to a denial of service.", "issued": "2026-06-19T03:00:42Z", "links": "https://access.redhat.com/security/cve/CVE-2026-56132 https://bugzilla.redhat.com/show_bug.cgi?id=2490669 https://www.cve.org/CVERecord?id=CVE-2026-56132 https://nvd.nist.gov/vuln/detail/CVE-2026-56132 https://github.com/libexpat/libexpat/pull/1272 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-56132.json", "severity": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L", "normalized_severity": "Medium", "package": { "id": "", "name": "expat", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "rzmoKvIFGvuPP0SzaH7s9w==": { "id": "rzmoKvIFGvuPP0SzaH7s9w==", "updater": "rhel-vex", "name": "CVE-2026-42245", "description": "A flaw was found in Net::IMAP, a Ruby library implementing the Internet Message Access Protocol (IMAP) client functionality. A hostile server can exploit a quadratic time complexity issue in the `Net::IMAP::ResponseReader` when processing large responses containing numerous string literals. This can lead to the client's CPU being exhausted, resulting in a denial of service (DoS) attack.", "issued": "2026-05-09T19:37:08Z", "links": "https://access.redhat.com/security/cve/CVE-2026-42245 https://bugzilla.redhat.com/show_bug.cgi?id=2468495 https://www.cve.org/CVERecord?id=CVE-2026-42245 https://nvd.nist.gov/vuln/detail/CVE-2026-42245 https://github.com/ruby/net-imap/commit/6091f7d6b1f3514cafbfe39c76f2b5d73de3ca96 https://github.com/ruby/net-imap/commit/88d95231fc8afef11c1f074453f7d75b68c9dfda https://github.com/ruby/net-imap/commit/de685f91a4a4cc75eb80da898c2bf8af08d34819 https://github.com/ruby/net-imap/releases/tag/v0.4.24 https://github.com/ruby/net-imap/releases/tag/v0.5.14 https://github.com/ruby/net-imap/releases/tag/v0.6.4 https://github.com/ruby/net-imap/security/advisories/GHSA-q2mw-fvj9-vvcw https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42245.json https://access.redhat.com/errata/RHSA-2026:33576", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "ruby", "version": "", "kind": "binary", "normalized_version": "", "module": "ruby:3.3", "arch": "aarch64|i686|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "0:3.3.10-7.module+el9.8.0+24406+8975e57f", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "s2uSNGuV+OyVW2eHDGWWKw==": { "id": "s2uSNGuV+OyVW2eHDGWWKw==", "updater": "rhel-vex", "name": "CVE-2025-29768", "description": "A flaw was found in Vim's zip.vim plugin. This vulnerability allows potential data loss via specially crafted zip files when a user views the archive in Vim and presses 'x' on an unusual filename.", "issued": "2025-03-13T17:04:56Z", "links": "https://access.redhat.com/security/cve/CVE-2025-29768 https://bugzilla.redhat.com/show_bug.cgi?id=2352418 https://www.cve.org/CVERecord?id=CVE-2025-29768 https://nvd.nist.gov/vuln/detail/CVE-2025-29768 https://github.com/vim/vim/commit/f209dcd3defb95bae21b2740910e6aa7bb940531 https://github.com/vim/vim/security/advisories/GHSA-693p-m996-3rmf https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-29768.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N", "normalized_severity": "Medium", "package": { "id": "", "name": "vim", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "s6kt2DqKLHgzYSGciPtGtQ==": { "id": "s6kt2DqKLHgzYSGciPtGtQ==", "updater": "rhel-vex", "name": "CVE-2021-4166", "description": "A flaw was found in vim. A possible heap-based buffer overflow could allow an attacker to input a specially crafted file leading to a crash or code execution.", "issued": "2021-12-25T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2021-4166 https://bugzilla.redhat.com/show_bug.cgi?id=2035928 https://www.cve.org/CVERecord?id=CVE-2021-4166 https://nvd.nist.gov/vuln/detail/CVE-2021-4166 https://security.access.redhat.com/data/csaf/v2/vex/2021/cve-2021-4166.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "vim", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "sAlO/t+jkkm59mLcdOgB9w==": { "id": "sAlO/t+jkkm59mLcdOgB9w==", "updater": "rhel-vex", "name": "CVE-2025-1151", "description": "A flaw was found in the ld linker utility of GNU Binutils. A specially-crafted payload may be able to trigger a memory leak, which can lead to an application crash or other undefined behavior.", "issued": "2025-02-10T17:00:10Z", "links": "https://access.redhat.com/security/cve/CVE-2025-1151 https://bugzilla.redhat.com/show_bug.cgi?id=2344713 https://www.cve.org/CVERecord?id=CVE-2025-1151 https://nvd.nist.gov/vuln/detail/CVE-2025-1151 https://sourceware.org/bugzilla/attachment.cgi?id=15887 https://sourceware.org/bugzilla/show_bug.cgi?id=32576 https://vuldb.com/?ctiid.295055 https://vuldb.com/?id.295055 https://www.gnu.org/ https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-1151.json", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L", "normalized_severity": "Low", "package": { "id": "", "name": "binutils", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "sJNoOKrtqJYf9M2tWcTlqg==": { "id": "sJNoOKrtqJYf9M2tWcTlqg==", "updater": "rhel-vex", "name": "CVE-2025-15281", "description": "A flaw was found in glibc. When the wordexp function is called with the flags WRDE_REUSE and WRDE_APPEND, it may return uninitialized memory. If the caller inspects the we_wordv array or calls the wordfree function to free the allocated memory, the process will abort, resulting in a denial of service.", "issued": "2026-01-20T13:22:46Z", "links": "https://access.redhat.com/security/cve/CVE-2025-15281 https://bugzilla.redhat.com/show_bug.cgi?id=2431196 https://www.cve.org/CVERecord?id=CVE-2025-15281 https://nvd.nist.gov/vuln/detail/CVE-2025-15281 https://sourceware.org/bugzilla/show_bug.cgi?id=33814 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-15281.json https://access.redhat.com/errata/RHSA-2026:2786", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "glibc", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:2.34-231.el9_7.10", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "sROfYAX8Ekl+9at4JgS5Lg==": { "id": "sROfYAX8Ekl+9at4JgS5Lg==", "updater": "rhel-vex", "name": "CVE-2026-42246", "description": "A flaw was found in the Ruby net-imap library. When upgrading a cleartext IMAP connection to TLS using the Net::IMAP#starttls method, the library improperly handles certain responses received during STARTTLS negotiation. A man-in-the-middle (MITM) attacker can inject a predicted tagged OK response before the client completes the STARTTLS command, causing the operation to appear successful without establishing a TLS session. As a result, the connection may continue to transmit sensitive information in cleartext and enable modification of data exchanged over the affected connection, while the application incorrectly believes that encryption has been enabled.", "issued": "2026-05-09T19:33:17Z", "links": "https://access.redhat.com/security/cve/CVE-2026-42246 https://bugzilla.redhat.com/show_bug.cgi?id=2468499 https://www.cve.org/CVERecord?id=CVE-2026-42246 https://nvd.nist.gov/vuln/detail/CVE-2026-42246 https://github.com/ruby/net-imap/commit/0ede4c40b1523dfeaf95777b2678e54cc0fd9618 https://github.com/ruby/net-imap/commit/24a4e770b43230286a05aa2a9746cdbb3eb8485e https://github.com/ruby/net-imap/commit/97e2488fb5401a1783bddd959dde007d9fbce42c https://github.com/ruby/net-imap/commit/f79d35bf5833f186e81044c57c843eda30c873da https://github.com/ruby/net-imap/releases/tag/v0.3.10 https://github.com/ruby/net-imap/releases/tag/v0.4.24 https://github.com/ruby/net-imap/releases/tag/v0.5.14 https://github.com/ruby/net-imap/security/advisories/GHSA-vcgp-9326-pqcp https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42246.json https://access.redhat.com/errata/RHSA-2026:33576", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "normalized_severity": "High", "package": { "id": "", "name": "rubygem-irb", "version": "", "kind": "binary", "normalized_version": "", "module": "ruby:3.3", "arch": "noarch", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "0:1.13.1-7.module+el9.8.0+24406+8975e57f", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "sZ07/WOVHRgnOtPAXhah8Q==": { "id": "sZ07/WOVHRgnOtPAXhah8Q==", "updater": "rhel-vex", "name": "CVE-2026-25547", "description": "A flaw was found in the brace-expansion component. This denial of service (DoS) vulnerability allows a remote attacker to provide specially crafted input containing repeated numeric brace ranges. This input causes the library to attempt an unbounded expansion, consuming excessive CPU and memory resources. This can lead to a system crash, impacting the availability of the service.", "issued": "2026-02-04T21:51:17Z", "links": "https://access.redhat.com/security/cve/CVE-2026-25547 https://bugzilla.redhat.com/show_bug.cgi?id=2436942 https://www.cve.org/CVERecord?id=CVE-2026-25547 https://nvd.nist.gov/vuln/detail/CVE-2026-25547 https://github.com/isaacs/brace-expansion/security/advisories/GHSA-7h2j-956f-4vf2 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-25547.json https://access.redhat.com/errata/RHSA-2026:7302", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "npm", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:10.9.7-1.22.22.2.1.module+el9.7.0+24157+8ddb2461", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "siR3bdJZdvZI9snXBeScxA==": { "id": "siR3bdJZdvZI9snXBeScxA==", "updater": "rhel-vex", "name": "CVE-2025-8291", "description": "A zip file handling flaw has been discovered in the python standard library `zipfile` module. The 'zipfile' module would not check the validity of the ZIP64 End of Central Directory (EOCD) Locator record offset value would not be used to locate the ZIP64 EOCD record, instead the ZIP64 EOCD record would be assumed to be the previous record in the ZIP archive. This could be abused to create ZIP archives that are handled differently by the 'zipfile' module compared to other ZIP implementations.", "issued": "2025-10-07T18:10:05Z", "links": "https://access.redhat.com/security/cve/CVE-2025-8291 https://bugzilla.redhat.com/show_bug.cgi?id=2402342 https://www.cve.org/CVERecord?id=CVE-2025-8291 https://nvd.nist.gov/vuln/detail/CVE-2025-8291 https://github.com/python/cpython/commit/162997bb70e067668c039700141770687bc8f267 https://github.com/python/cpython/commit/333d4a6f4967d3ace91492a39ededbcf3faa76a6 https://github.com/python/cpython/issues/139700 https://github.com/python/cpython/pull/139702 https://mail.python.org/archives/list/security-announce@python.org/thread/QECOPWMTH4VPPJAXAH2BGTA4XADOP62G/ https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-8291.json https://access.redhat.com/errata/RHSA-2025:23342", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "normalized_severity": "Medium", "package": { "id": "", "name": "python3", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:3.9.25-2.el9_7", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "smB1yCGhBb8gDhPAER7odg==": { "id": "smB1yCGhBb8gDhPAER7odg==", "updater": "rhel-vex", "name": "CVE-2025-14524", "description": "A flaw was found in curl. When an OAuth2 (Open Authorization) bearer token is used for an HTTP(S) transfer, and that transfer performs a cross-protocol redirect to a different scheme like IMAP, LDAP, POP3, or SMTP, curl might incorrectly pass the bearer token to the new target host. This could lead to information disclosure, where sensitive authentication tokens are exposed to unintended recipients.", "issued": "2026-01-07T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2025-14524 https://bugzilla.redhat.com/show_bug.cgi?id=2426407 https://www.cve.org/CVERecord?id=CVE-2025-14524 https://nvd.nist.gov/vuln/detail/CVE-2025-14524 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-14524.json", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "normalized_severity": "Low", "package": { "id": "", "name": "curl", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "sqtLRwfRzV6y9srK/2QK2Q==": { "id": "sqtLRwfRzV6y9srK/2QK2Q==", "updater": "rhel-vex", "name": "CVE-2026-9547", "description": "A flaw was found in curl. When a libcurl-based application uses SCP:// or SFTP:// for transfers and employs the CURLOPT_SSH_KEYFUNCTION callback, it may silently accept an untrusted server. This occurs if the server's host key type differs from the one stored in the known_hosts file. The callback mechanism fails to enforce the host key restriction, enabling a connection to an untrusted server and risking a man-in-the-middle attack.", "issued": "2026-07-03T06:18:44Z", "links": "https://access.redhat.com/security/cve/CVE-2026-9547 https://bugzilla.redhat.com/show_bug.cgi?id=2496758 https://www.cve.org/CVERecord?id=CVE-2026-9547 https://nvd.nist.gov/vuln/detail/CVE-2026-9547 https://curl.se/docs/CVE-2026-9547.html https://curl.se/docs/CVE-2026-9547.json https://hackerone.com/reports/3751712 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-9547.json", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "normalized_severity": "High", "package": { "id": "", "name": "curl", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "su1aceqBKJzyQhYk4DtG5w==": { "id": "su1aceqBKJzyQhYk4DtG5w==", "updater": "rhel-vex", "name": "CVE-2026-27904", "description": "A flaw was found in minimatch. A remote attacker could exploit this vulnerability by providing a specially crafted glob expression with nested unbounded quantifiers. This could lead to catastrophic backtracking in the V8 JavaScript engine, causing the application to become unresponsive and resulting in a Denial of Service (DoS).", "issued": "2026-02-26T01:07:42Z", "links": "https://access.redhat.com/security/cve/CVE-2026-27904 https://bugzilla.redhat.com/show_bug.cgi?id=2442922 https://www.cve.org/CVERecord?id=CVE-2026-27904 https://nvd.nist.gov/vuln/detail/CVE-2026-27904 https://github.com/isaacs/minimatch/security/advisories/GHSA-23c5-xmqv-rm74 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-27904.json https://access.redhat.com/errata/RHSA-2026:7302", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "nodejs-docs", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "noarch", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:22.22.2-1.module+el9.7.0+24157+8ddb2461", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "svCt47J2Zwa45xj8gn3U/w==": { "id": "svCt47J2Zwa45xj8gn3U/w==", "updater": "rhel-vex", "name": "CVE-2026-1485", "description": "A flaw was found in Glib's content type parsing logic. This buffer underflow vulnerability occurs because the length of a header line is stored in a signed integer, which can lead to integer wraparound for very large inputs. This results in pointer underflow and out-of-bounds memory access. Exploitation requires a local user to install or process a specially crafted treemagic file, which can lead to local denial of service or application instability.", "issued": "2026-01-27T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-1485 https://bugzilla.redhat.com/show_bug.cgi?id=2433325 https://www.cve.org/CVERecord?id=CVE-2026-1485 https://nvd.nist.gov/vuln/detail/CVE-2026-1485 https://gitlab.gnome.org/GNOME/glib/-/issues/3871 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-1485.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L", "normalized_severity": "Low", "package": { "id": "", "name": "glib2", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "swCufUgs8xGhLcR4oX101Q==": { "id": "swCufUgs8xGhLcR4oX101Q==", "updater": "rhel-vex", "name": "CVE-2025-69418", "description": "A flaw was found in OpenSSL. When applications directly call the low-level CRYPTO_ocb128_encrypt() or CRYPTO_ocb128_decrypt() functions with non-block-aligned lengths in a single call on hardware-accelerated builds, the trailing 1-15 bytes of a message may be exposed in cleartext. These exposed bytes are not covered by the authentication tag, allowing an attacker to read or tamper with them without detection.", "issued": "2026-01-27T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2025-69418 https://bugzilla.redhat.com/show_bug.cgi?id=2430381 https://www.cve.org/CVERecord?id=CVE-2025-69418 https://nvd.nist.gov/vuln/detail/CVE-2025-69418 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-69418.json https://access.redhat.com/errata/RHSA-2026:1473", "severity": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N", "normalized_severity": "Low", "package": { "id": "", "name": "openssl", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "1:3.5.1-7.el9_7", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "sykv+pGN4TXggZNIwL/H4g==": { "id": "sykv+pGN4TXggZNIwL/H4g==", "updater": "rhel-vex", "name": "CVE-2025-5915", "description": "A vulnerability has been identified in the libarchive library. This flaw can lead to a heap buffer over-read due to the size of a filter block potentially exceeding the Lempel-Ziv-Storer-Schieber (LZSS) window. This means the library may attempt to read beyond the allocated memory buffer, which can result in unpredictable program behavior, crashes (denial of service), or the disclosure of sensitive information from adjacent memory regions.", "issued": "2025-05-20T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2025-5915 https://bugzilla.redhat.com/show_bug.cgi?id=2370865 https://www.cve.org/CVERecord?id=CVE-2025-5915 https://nvd.nist.gov/vuln/detail/CVE-2025-5915 https://github.com/libarchive/libarchive/pull/2599 https://github.com/libarchive/libarchive/releases/tag/v3.8.0 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-5915.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "libarchive", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "t/e+iLCKcOMzXEuhRWry6g==": { "id": "t/e+iLCKcOMzXEuhRWry6g==", "updater": "rhel-vex", "name": "CVE-2026-22796", "description": "A flaw was found in OpenSSL. This type confusion vulnerability allows a remote attacker to cause a denial of service (DoS) by providing specially crafted PKCS#7 data to an application that performs signature verification. The vulnerability occurs because the application accesses an ASN1_TYPE union member without proper type validation, leading to an invalid or NULL pointer dereference and a crash.", "issued": "2026-01-27T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-22796 https://bugzilla.redhat.com/show_bug.cgi?id=2430390 https://www.cve.org/CVERecord?id=CVE-2026-22796 https://nvd.nist.gov/vuln/detail/CVE-2026-22796 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-22796.json https://access.redhat.com/errata/RHSA-2026:1473", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "openssl", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "1:3.5.1-7.el9_7", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "t5kXgaRh+bn2vG112hLo2g==": { "id": "t5kXgaRh+bn2vG112hLo2g==", "updater": "rhel-vex", "name": "CVE-2026-4438", "description": "A flaw was found in the GNU C library (glibc). When applications use the `gethostbyaddr` or `gethostbyaddr_r` functions with a `nsswitch.conf` configuration that specifies glibc's DNS backend, the library may return an invalid DNS hostname. This violates the DNS specification and could lead to applications receiving incorrect hostname information, potentially impacting network operations or security decisions.", "issued": "2026-03-20T19:59:06Z", "links": "https://access.redhat.com/security/cve/CVE-2026-4438 https://bugzilla.redhat.com/show_bug.cgi?id=2449783 https://www.cve.org/CVERecord?id=CVE-2026-4438 https://nvd.nist.gov/vuln/detail/CVE-2026-4438 https://sourceware.org/bugzilla/show_bug.cgi?id=34015 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-4438.json https://access.redhat.com/errata/RHSA-2026:20597", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "normalized_severity": "Low", "package": { "id": "", "name": "glibc-minimal-langpack", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:2.34-270.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "tLSR0X6hQ7hvyPbBXZslBQ==": { "id": "tLSR0X6hQ7hvyPbBXZslBQ==", "updater": "rhel-vex", "name": "CVE-2022-2126", "description": "Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.", "issued": "2022-06-19T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2022-2126 https://bugzilla.redhat.com/show_bug.cgi?id=2099596 https://www.cve.org/CVERecord?id=CVE-2022-2126 https://nvd.nist.gov/vuln/detail/CVE-2022-2126 https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-2126.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "vim", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "tOOsPkEJCdO66XvUUd+xnQ==": { "id": "tOOsPkEJCdO66XvUUd+xnQ==", "updater": "rhel-vex", "name": "CVE-2026-35385", "description": "A flaw was found in OpenSSH. When the `scp` command is used by a root user to download a file with the legacy protocol option (`-O`) and without preserving original file permissions (`-p`), the downloaded file can be installed with elevated privileges (setuid or setgid). This unexpected behavior could allow a malicious file to execute with higher permissions than intended, posing a security risk through potential privilege escalation.", "issued": "2026-04-02T16:30:59Z", "links": "https://access.redhat.com/security/cve/CVE-2026-35385 https://bugzilla.redhat.com/show_bug.cgi?id=2454469 https://www.cve.org/CVERecord?id=CVE-2026-35385 https://nvd.nist.gov/vuln/detail/CVE-2026-35385 https://marc.info/?l=openssh-unix-dev\u0026m=177513443901484\u0026w=2 https://www.openssh.org/releasenotes.html#10.3p1 https://www.openwall.com/lists/oss-security/2026/04/02/3 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-35385.json https://access.redhat.com/errata/RHSA-2026:19219", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "normalized_severity": "High", "package": { "id": "", "name": "openssh-clients", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:9.9p1-7.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "tUTc+tWHx1wVpIbeqTmR0w==": { "id": "tUTc+tWHx1wVpIbeqTmR0w==", "updater": "rhel-vex", "name": "CVE-2026-59874", "description": "A flaw was found in node-tar, a tar archive manipulation library for Node.js. A remote attacker could exploit this vulnerability by providing a specially crafted tar archive with a negative entry size in its header. This malformed header causes the archive scanner to enter an infinite loop, repeatedly parsing the same header and preventing further processing. This can lead to a denial of service (DoS) condition, making the affected system or application unresponsive.", "issued": "2026-07-08T15:23:47Z", "links": "https://access.redhat.com/security/cve/CVE-2026-59874 https://bugzilla.redhat.com/show_bug.cgi?id=2498116 https://www.cve.org/CVERecord?id=CVE-2026-59874 https://nvd.nist.gov/vuln/detail/CVE-2026-59874 https://github.com/isaacs/node-tar/commit/9e78bf058b2c22dd4d52e00d8922d5c06fc2f7b5 https://github.com/isaacs/node-tar/releases/tag/v7.5.18 https://github.com/isaacs/node-tar/security/advisories/GHSA-8x88-c5mf-7j5w https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59874.json https://access.redhat.com/errata/RHSA-2026:47058", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "High", "package": { "id": "", "name": "nodejs-libs", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:22.23.1-2.module+el9.8.0+24538+3f176d52", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "tbhLz74i3ShwS72WbIsoOA==": { "id": "tbhLz74i3ShwS72WbIsoOA==", "updater": "rhel-vex", "name": "CVE-2023-50495", "description": "A vulnerability was found in the NCurses package, where a segmentation fault may be triggered through _nc_wrap_entry().", "issued": "2023-12-12T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2023-50495 https://bugzilla.redhat.com/show_bug.cgi?id=2254244 https://www.cve.org/CVERecord?id=CVE-2023-50495 https://nvd.nist.gov/vuln/detail/CVE-2023-50495 https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-50495.json", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "ncurses", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "tbkEtEs3aa+p2/YQaD8BfQ==": { "id": "tbkEtEs3aa+p2/YQaD8BfQ==", "updater": "rhel-vex", "name": "CVE-2023-1972", "description": "A potential heap-based buffer overflow was found in binutils in the _bfd_elf_slurp_version_tables() function in bfd/elf.c. This issue may lead to a loss of availability.", "issued": "2023-04-10T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2023-1972 https://bugzilla.redhat.com/show_bug.cgi?id=2185646 https://www.cve.org/CVERecord?id=CVE-2023-1972 https://nvd.nist.gov/vuln/detail/CVE-2023-1972 https://sourceware.org/bugzilla/show_bug.cgi?id=30285 https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-1972.json", "severity": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L", "normalized_severity": "Low", "package": { "id": "", "name": "binutils", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "tuPGTYWKd0OWuEIwEsNtuA==": { "id": "tuPGTYWKd0OWuEIwEsNtuA==", "updater": "rhel-vex", "name": "CVE-2025-14087", "description": "A flaw was found in GLib (Gnome Lib). This vulnerability allows a remote attacker to cause heap corruption, leading to a denial of service or potential code execution via a buffer-underflow in the GVariant parser when processing maliciously crafted input strings.", "issued": "2025-12-05T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2025-14087 https://bugzilla.redhat.com/show_bug.cgi?id=2419093 https://www.cve.org/CVERecord?id=CVE-2025-14087 https://nvd.nist.gov/vuln/detail/CVE-2025-14087 https://gitlab.gnome.org/GNOME/glib/-/issues/3834 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-14087.json https://access.redhat.com/errata/RHSA-2026:15971", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L", "normalized_severity": "Medium", "package": { "id": "", "name": "glib2-devel", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "0:2.68.4-18.el9_7.2", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "tvq/gvjGf6pzxLuMOglBaw==": { "id": "tvq/gvjGf6pzxLuMOglBaw==", "updater": "rhel-vex", "name": "CVE-2026-4775", "description": "A flaw was found in the libtiff library. A remote attacker could exploit a signed integer overflow vulnerability in the putcontig8bitYCbCr44tile function by providing a specially crafted TIFF file. This flaw can lead to an out-of-bounds heap write due to incorrect memory pointer calculations, potentially causing a denial of service (application crash) or arbitrary code execution.", "issued": "2026-03-24T14:33:35Z", "links": "https://access.redhat.com/security/cve/CVE-2026-4775 https://bugzilla.redhat.com/show_bug.cgi?id=2450768 https://www.cve.org/CVERecord?id=CVE-2026-4775 https://nvd.nist.gov/vuln/detail/CVE-2026-4775 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-4775.json https://access.redhat.com/errata/RHSA-2026:12271", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "normalized_severity": "High", "package": { "id": "", "name": "libtiff-devel", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "0:4.4.0-15.el9_7.3", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "txqyo4HZxt82KZ1LFkOAcA==": { "id": "txqyo4HZxt82KZ1LFkOAcA==", "updater": "rhel-vex", "name": "CVE-2026-13149", "description": "A flaw was found in brace-expansion. An attacker can exploit a vulnerability in the `expand()` function by providing a specially crafted string. This string, containing consecutive non-expanding brace groups, can trigger exponential-time complexity, leading to significant CPU consumption and event-loop blocking. This can result in a Denial of Service (DoS) for the affected system.", "issued": "2026-06-30T08:30:34Z", "links": "https://access.redhat.com/security/cve/CVE-2026-13149 https://bugzilla.redhat.com/show_bug.cgi?id=2494813 https://www.cve.org/CVERecord?id=CVE-2026-13149 https://nvd.nist.gov/vuln/detail/CVE-2026-13149 https://github.com/juliangruber/brace-expansion/commit/c7e33ec13ac1a684c116720843ce24e208611754 https://www.npmjs.com/package/brace-expansion https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-13149.json https://access.redhat.com/errata/RHSA-2026:47058", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "High", "package": { "id": "", "name": "nodejs", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "aarch64|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:22.23.1-2.module+el9.8.0+24538+3f176d52", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "u0cs09LPRVEEfen4PHM6gA==": { "id": "u0cs09LPRVEEfen4PHM6gA==", "updater": "rhel-vex", "name": "CVE-2026-0990", "description": "A flaw was found in libxml2, an XML parsing library. This uncontrolled recursion vulnerability occurs in the xmlCatalogXMLResolveURI function when an XML catalog contains a delegate URI entry that references itself. A remote attacker could exploit this configuration-dependent issue by providing a specially crafted XML catalog, leading to infinite recursion and call stack exhaustion. This ultimately results in a segmentation fault, causing a Denial of Service (DoS) by crashing affected applications.", "issued": "2026-01-15T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-0990 https://bugzilla.redhat.com/show_bug.cgi?id=2429959 https://www.cve.org/CVERecord?id=CVE-2026-0990 https://nvd.nist.gov/vuln/detail/CVE-2026-0990 https://gitlab.gnome.org/GNOME/libxml2/-/issues/1018 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-0990.json", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "libxml2", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "u1caIbS4Tk6y8c7sz8Hvhw==": { "id": "u1caIbS4Tk6y8c7sz8Hvhw==", "updater": "rhel-vex", "name": "CVE-2024-41957", "description": "A double-free and use-after-free vulnerability was found in the Vim editor. This flaw exists due to the corresponding tagstack being used twice when closing the window and if the quick fix list belonging to that window is also cleared using the same tagstack data. In this instance, Vim will try to free the memory again, causing a crash.", "issued": "2024-08-01T20:41:00Z", "links": "https://access.redhat.com/security/cve/CVE-2024-41957 https://bugzilla.redhat.com/show_bug.cgi?id=2302418 https://www.cve.org/CVERecord?id=CVE-2024-41957 https://nvd.nist.gov/vuln/detail/CVE-2024-41957 https://github.com/vim/vim/commit/8a0bbe7b8aad6f8da28dee218c01bc8a0185a https://github.com/vim/vim/security/advisories/GHSA-f9cr-gv85-hcr4 https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-41957.json", "severity": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L", "normalized_severity": "Low", "package": { "id": "", "name": "vim", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "uDfc8ZaPfrhTGcFwVaIvAA==": { "id": "uDfc8ZaPfrhTGcFwVaIvAA==", "updater": "rhel-vex", "name": "CVE-2023-48706", "description": "A heap use-after-free flaw was found in the vim package. When executing a `:s` command for the first time and using a sub-replace-special atom inside the substitution part, it is possible that the recursive `:s` call causes memory to be freed, which may later then be accessed by the initial `:s` command. This issue may result in Vim crashing.", "issued": "2023-11-22T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2023-48706 https://bugzilla.redhat.com/show_bug.cgi?id=2251118 https://www.cve.org/CVERecord?id=CVE-2023-48706 https://nvd.nist.gov/vuln/detail/CVE-2023-48706 http://www.openwall.com/lists/oss-security/2023/11/22/3 https://github.com/vim/vim/security/advisories/GHSA-c8qm-x72m-q53q https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-48706.json", "severity": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "vim", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "uDqtDPBJb3KaOc2STze05w==": { "id": "uDqtDPBJb3KaOc2STze05w==", "updater": "rhel-vex", "name": "CVE-2026-4438", "description": "A flaw was found in the GNU C library (glibc). When applications use the `gethostbyaddr` or `gethostbyaddr_r` functions with a `nsswitch.conf` configuration that specifies glibc's DNS backend, the library may return an invalid DNS hostname. This violates the DNS specification and could lead to applications receiving incorrect hostname information, potentially impacting network operations or security decisions.", "issued": "2026-03-20T19:59:06Z", "links": "https://access.redhat.com/security/cve/CVE-2026-4438 https://bugzilla.redhat.com/show_bug.cgi?id=2449783 https://www.cve.org/CVERecord?id=CVE-2026-4438 https://nvd.nist.gov/vuln/detail/CVE-2026-4438 https://sourceware.org/bugzilla/show_bug.cgi?id=34015 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-4438.json https://access.redhat.com/errata/RHSA-2026:20597", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "normalized_severity": "Low", "package": { "id": "", "name": "glibc", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:2.34-270.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "uEn9qA67O/SoYHOtH/EL2w==": { "id": "uEn9qA67O/SoYHOtH/EL2w==", "updater": "rhel-vex", "name": "CVE-2025-1150", "description": "A flaw was found in the ld linker utility of GNU Binutils. A specially-crafted payload may be able to trigger a memory leak, which can lead to an application crash or other undefined behavior.", "issued": "2025-02-10T16:31:07Z", "links": "https://access.redhat.com/security/cve/CVE-2025-1150 https://bugzilla.redhat.com/show_bug.cgi?id=2344681 https://www.cve.org/CVERecord?id=CVE-2025-1150 https://nvd.nist.gov/vuln/detail/CVE-2025-1150 https://sourceware.org/bugzilla/attachment.cgi?id=15887 https://sourceware.org/bugzilla/show_bug.cgi?id=32576 https://vuldb.com/?ctiid.295054 https://vuldb.com/?id.295054 https://www.gnu.org/ https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-1150.json", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L", "normalized_severity": "Low", "package": { "id": "", "name": "binutils", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "uJJdxHNbejxspD7yZE5qWA==": { "id": "uJJdxHNbejxspD7yZE5qWA==", "updater": "rhel-vex", "name": "CVE-2026-4437", "description": "A flaw was found in glibc (the GNU C Library). When an application uses the `gethostbyaddr` or `gethostbyaddr_r` functions with a `nsswitch.conf` configuration that specifies glibc's DNS backend, a remote attacker can send a specially crafted DNS (Domain Name System) response. This crafted response can cause the application to incorrectly interpret a non-answer section of the DNS response as a valid answer, leading to potential misbehavior or incorrect information processing.", "issued": "2026-03-20T19:59:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-4437 https://bugzilla.redhat.com/show_bug.cgi?id=2449777 https://www.cve.org/CVERecord?id=CVE-2026-4437 https://nvd.nist.gov/vuln/detail/CVE-2026-4437 https://sourceware.org/bugzilla/show_bug.cgi?id=34014 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-4437.json https://access.redhat.com/errata/RHSA-2026:20597", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L", "normalized_severity": "Medium", "package": { "id": "", "name": "glibc-common", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:2.34-270.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "uLJc9xWoMs4KcjASTFLV/A==": { "id": "uLJc9xWoMs4KcjASTFLV/A==", "updater": "rhel-vex", "name": "CVE-2026-3497", "description": "A flaw was found in the OpenSSH GSSAPI (Generic Security Service Application Program Interface) delta patches, as included in various Linux distributions. A remote attacker could exploit this by sending an unexpected GSSAPI message type during the key exchange process. This occurs because the `sshpkt_disconnect()` function, when called on an error, does not properly terminate the process, leading to the continued execution of the program with uninitialized connection variables. Accessing these uninitialized variables can lead to undefined behavior, potentially resulting in information disclosure or a denial of service.", "issued": "2026-03-12T18:27:44Z", "links": "https://access.redhat.com/security/cve/CVE-2026-3497 https://bugzilla.redhat.com/show_bug.cgi?id=2447085 https://www.cve.org/CVERecord?id=CVE-2026-3497 https://nvd.nist.gov/vuln/detail/CVE-2026-3497 https://ubuntu.com/security/CVE-2026-3497 https://www.openwall.com/lists/oss-security/2026/03/12/3 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-3497.json https://access.redhat.com/errata/RHSA-2026:6462", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H", "normalized_severity": "High", "package": { "id": "", "name": "openssh", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:8.7p1-48.el9_7", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "uMTgzWnvZecD0kujuKPIMw==": { "id": "uMTgzWnvZecD0kujuKPIMw==", "updater": "rhel-vex", "name": "CVE-2026-25547", "description": "A flaw was found in the brace-expansion component. This denial of service (DoS) vulnerability allows a remote attacker to provide specially crafted input containing repeated numeric brace ranges. This input causes the library to attempt an unbounded expansion, consuming excessive CPU and memory resources. This can lead to a system crash, impacting the availability of the service.", "issued": "2026-02-04T21:51:17Z", "links": "https://access.redhat.com/security/cve/CVE-2026-25547 https://bugzilla.redhat.com/show_bug.cgi?id=2436942 https://www.cve.org/CVERecord?id=CVE-2026-25547 https://nvd.nist.gov/vuln/detail/CVE-2026-25547 https://github.com/isaacs/brace-expansion/security/advisories/GHSA-7h2j-956f-4vf2 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-25547.json https://access.redhat.com/errata/RHSA-2026:7302", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "nodejs", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "aarch64|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:22.22.2-1.module+el9.7.0+24157+8ddb2461", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "uO3OOEY6W3k9QH/tNVK0LQ==": { "id": "uO3OOEY6W3k9QH/tNVK0LQ==", "updater": "rhel-vex", "name": "CVE-2025-1152", "description": "A flaw was found in the ld linker utility of GNU Binutils. A specially-crafted payload may be able to trigger a memory leak, which can lead to an application crash or other undefined behavior.", "issued": "2025-02-10T18:00:09Z", "links": "https://access.redhat.com/security/cve/CVE-2025-1152 https://bugzilla.redhat.com/show_bug.cgi?id=2344723 https://www.cve.org/CVERecord?id=CVE-2025-1152 https://nvd.nist.gov/vuln/detail/CVE-2025-1152 https://sourceware.org/bugzilla/attachment.cgi?id=15887 https://sourceware.org/bugzilla/show_bug.cgi?id=32576 https://vuldb.com/?ctiid.295056 https://vuldb.com/?id.295056 https://www.gnu.org/ https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-1152.json", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L", "normalized_severity": "Low", "package": { "id": "", "name": "binutils", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "uPUnbuUJlh23l0km8iQ2tA==": { "id": "uPUnbuUJlh23l0km8iQ2tA==", "updater": "rhel-vex", "name": "CVE-2025-69649", "description": "A flaw was found in binutils. Processing a specially crafted ELF binary file containing malformed header fields with the readelf program can trigger a NULL pointer dereference, causing a crash and resulting in a denial of service.", "issued": "2026-03-06T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2025-69649 https://bugzilla.redhat.com/show_bug.cgi?id=2445298 https://www.cve.org/CVERecord?id=CVE-2025-69649 https://nvd.nist.gov/vuln/detail/CVE-2025-69649 https://sourceware.org/bugzilla/show_bug.cgi?id=33697 https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=66a3492ce68e1ae45b2489bd9a815c39ea5d7f66 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-69649.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "normalized_severity": "Low", "package": { "id": "", "name": "binutils", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "uaetuJImncB6wudykQLpEA==": { "id": "uaetuJImncB6wudykQLpEA==", "updater": "rhel-vex", "name": "CVE-2025-1632", "description": "A flaw was found in the bsdunzip utility of libarchive. In affected versions, a specially crafted file may trigger a null pointer dereference. This issue can lead to an application crash or other unexpected behavior. This bug does not compromise the integrity or availability of the base system.", "issued": "2025-02-24T13:31:08Z", "links": "https://access.redhat.com/security/cve/CVE-2025-1632 https://bugzilla.redhat.com/show_bug.cgi?id=2347309 https://www.cve.org/CVERecord?id=CVE-2025-1632 https://nvd.nist.gov/vuln/detail/CVE-2025-1632 https://github.com/Ekkosun/pocs/blob/main/bsdunzip-poc https://vuldb.com/?ctiid.296619 https://vuldb.com/?id.296619 https://vuldb.com/?submit.496460 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-1632.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L", "normalized_severity": "Low", "package": { "id": "", "name": "libarchive", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "uu3d3lIlYVCZwOjqoNec3g==": { "id": "uu3d3lIlYVCZwOjqoNec3g==", "updater": "rhel-vex", "name": "CVE-2025-14104", "description": "A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the `setpwnam()` function, affecting SUID (Set User ID) login-utils utilities writing to the password database.", "issued": "2025-12-05T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2025-14104 https://bugzilla.redhat.com/show_bug.cgi?id=2419369 https://www.cve.org/CVERecord?id=CVE-2025-14104 https://nvd.nist.gov/vuln/detail/CVE-2025-14104 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-14104.json https://access.redhat.com/errata/RHSA-2026:1913", "severity": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "libblkid", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:2.37.4-21.el9_7", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "v/Rdzpp9xZ3VFXBewTwV0A==": { "id": "v/Rdzpp9xZ3VFXBewTwV0A==", "updater": "rhel-vex", "name": "CVE-2026-4437", "description": "A flaw was found in glibc (the GNU C Library). When an application uses the `gethostbyaddr` or `gethostbyaddr_r` functions with a `nsswitch.conf` configuration that specifies glibc's DNS backend, a remote attacker can send a specially crafted DNS (Domain Name System) response. This crafted response can cause the application to incorrectly interpret a non-answer section of the DNS response as a valid answer, leading to potential misbehavior or incorrect information processing.", "issued": "2026-03-20T19:59:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-4437 https://bugzilla.redhat.com/show_bug.cgi?id=2449777 https://www.cve.org/CVERecord?id=CVE-2026-4437 https://nvd.nist.gov/vuln/detail/CVE-2026-4437 https://sourceware.org/bugzilla/show_bug.cgi?id=34014 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-4437.json https://access.redhat.com/errata/RHSA-2026:20597", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L", "normalized_severity": "Medium", "package": { "id": "", "name": "glibc-minimal-langpack", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:2.34-270.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "v3PTZuvRGvqZW5kgzYKjFA==": { "id": "v3PTZuvRGvqZW5kgzYKjFA==", "updater": "rhel-vex", "name": "CVE-2026-27904", "description": "A flaw was found in minimatch. A remote attacker could exploit this vulnerability by providing a specially crafted glob expression with nested unbounded quantifiers. This could lead to catastrophic backtracking in the V8 JavaScript engine, causing the application to become unresponsive and resulting in a Denial of Service (DoS).", "issued": "2026-02-26T01:07:42Z", "links": "https://access.redhat.com/security/cve/CVE-2026-27904 https://bugzilla.redhat.com/show_bug.cgi?id=2442922 https://www.cve.org/CVERecord?id=CVE-2026-27904 https://nvd.nist.gov/vuln/detail/CVE-2026-27904 https://github.com/isaacs/minimatch/security/advisories/GHSA-23c5-xmqv-rm74 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-27904.json https://access.redhat.com/errata/RHSA-2026:7302", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "nodejs-libs", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:22.22.2-1.module+el9.7.0+24157+8ddb2461", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "v9qMLnWqPbLz+WC1hPhb9g==": { "id": "v9qMLnWqPbLz+WC1hPhb9g==", "updater": "rhel-vex", "name": "CVE-2025-64506", "description": "A buffer over read flaw has been discovered in libpng. A heap buffer over-read vulnerability exists in libpng's png_write_image_8bit function when processing 8-bit images through the simplified write API with convert_to_8bit enabled. The vulnerability affects 8-bit grayscale+alpha, RGB/RGBA, and images with incomplete row data. A conditional guard incorrectly allows 8-bit input to enter code expecting 16-bit input, causing reads up to 2 bytes beyond allocated buffer boundaries.", "issued": "2025-11-24T23:41:09Z", "links": "https://access.redhat.com/security/cve/CVE-2025-64506 https://bugzilla.redhat.com/show_bug.cgi?id=2416906 https://www.cve.org/CVERecord?id=CVE-2025-64506 https://nvd.nist.gov/vuln/detail/CVE-2025-64506 https://github.com/pnggroup/libpng/commit/2bd84c019c300b78e811743fbcddb67c9d9bf821 https://github.com/pnggroup/libpng/pull/749 https://github.com/pnggroup/libpng/security/advisories/GHSA-qpr4-xm66-hww6 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-64506.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "libpng", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "vFpvBSl3ZcIap1nZTTjWsg==": { "id": "vFpvBSl3ZcIap1nZTTjWsg==", "updater": "rhel-vex", "name": "CVE-2026-3833", "description": "A flaw was found in gnutls. This vulnerability occurs because gnutls performs case-sensitive comparisons of `nameConstraints` labels, specifically for `dNSName` (DNS) or `rfc822Name` (email) constraints within `excludedSubtrees` or `permittedSubtrees`. A remote attacker can exploit this by crafting a leaf certificate with casing differences in the Subject Alternative Name (SAN), leading to a policy bypass where a certificate that should be rejected is instead accepted. This could result in unauthorized access or information disclosure.", "issued": "2026-04-30T17:26:28Z", "links": "https://access.redhat.com/security/cve/CVE-2026-3833 https://bugzilla.redhat.com/show_bug.cgi?id=2445763 https://www.cve.org/CVERecord?id=CVE-2026-3833 https://nvd.nist.gov/vuln/detail/CVE-2026-3833 https://gitlab.com/gnutls/gnutls/-/issues/1803 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-3833.json https://access.redhat.com/errata/RHSA-2026:20612", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "normalized_severity": "Medium", "package": { "id": "", "name": "gnutls", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:3.8.10-4.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "vH+nziLZjIpD4JaIkhx3FA==": { "id": "vH+nziLZjIpD4JaIkhx3FA==", "updater": "rhel-vex", "name": "CVE-2026-51298", "description": "A flaw was found in SQLite. A remote attacker could exploit a use-after-free vulnerability in the JSON extraction function. This occurs when the program attempts to access memory after it has been freed, specifically within the `JsonParse` object. Successful exploitation of this vulnerability can lead to a service crash and a denial of service (DoS) for affected systems.", "issued": "2026-07-27T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-51298 https://bugzilla.redhat.com/show_bug.cgi?id=2507556 https://www.cve.org/CVERecord?id=CVE-2026-51298 https://nvd.nist.gov/vuln/detail/CVE-2026-51298 https://github.com/programmervuln/cveadvisory-/blob/main/CVE-2026-51298 https://github.com/sqlite/sqlite/blob/master/src/json.c https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-51298.json", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "High", "package": { "id": "", "name": "sqlite", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "vKhY2603rcUieT1TILr6/g==": { "id": "vKhY2603rcUieT1TILr6/g==", "updater": "rhel-vex", "name": "CVE-2026-41316", "description": "A flaw was found in ERB, a templating system for Ruby. An attacker who can trigger deserialization of untrusted data in a Ruby application can bypass existing protections. This vulnerability allows for arbitrary code execution by exploiting specific public methods that evaluate template source code, which were not properly guarded against deserialization attacks.", "issued": "2026-04-24T02:35:41Z", "links": "https://access.redhat.com/security/cve/CVE-2026-41316 https://bugzilla.redhat.com/show_bug.cgi?id=2461369 https://www.cve.org/CVERecord?id=CVE-2026-41316 https://nvd.nist.gov/vuln/detail/CVE-2026-41316 https://github.com/ruby/erb/security/advisories/GHSA-q339-8rmv-2mhv https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-41316.json https://access.redhat.com/errata/RHSA-2026:18030", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "normalized_severity": "High", "package": { "id": "", "name": "rubygem-psych", "version": "", "kind": "binary", "normalized_version": "", "module": "ruby:3.3", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "0:5.1.2-6.module+el9.7.0+24248+66578cbb", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "vMgggE6Cjv/N2Jk4Dk6FYw==": { "id": "vMgggE6Cjv/N2Jk4Dk6FYw==", "updater": "rhel-vex", "name": "CVE-2026-11856", "description": "A flaw was found in curl. When `libcurl` performs a transfer to an HTTP origin using Digest authentication and then reuses the same connection handle for a subsequent transfer to a different origin, it may incorrectly send the authentication header intended for the first origin to the second. This could lead to unintended information disclosure, potentially allowing an attacker to gain unauthorized access to sensitive data.", "issued": "2026-07-03T06:13:31Z", "links": "https://access.redhat.com/security/cve/CVE-2026-11856 https://bugzilla.redhat.com/show_bug.cgi?id=2496767 https://www.cve.org/CVERecord?id=CVE-2026-11856 https://nvd.nist.gov/vuln/detail/CVE-2026-11856 https://curl.se/docs/CVE-2026-11856.html https://curl.se/docs/CVE-2026-11856.json https://hackerone.com/reports/3793260 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-11856.json", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "normalized_severity": "Medium", "package": { "id": "", "name": "curl", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "vSLFgRYoehmDve19rxyjcw==": { "id": "vSLFgRYoehmDve19rxyjcw==", "updater": "rhel-vex", "name": "CVE-2026-27171", "description": "A flaw was found in zlib. An attacker providing specially crafted input to the `crc32_combine64` or `crc32_combine_gen64` functions could trigger an infinite loop within the `x2nmodp` function. This leads to excessive CPU consumption, which can result in a Denial of Service (DoS) for the affected system.", "issued": "2026-02-18T02:36:19Z", "links": "https://access.redhat.com/security/cve/CVE-2026-27171 https://bugzilla.redhat.com/show_bug.cgi?id=2440530 https://www.cve.org/CVERecord?id=CVE-2026-27171 https://nvd.nist.gov/vuln/detail/CVE-2026-27171 https://7asecurity.com/blog/2026/02/zlib-7asecurity-audit/ https://7asecurity.com/reports/pentest-report-zlib-RC1.1.pdf https://github.com/madler/zlib/issues/904 https://github.com/madler/zlib/releases/tag/v1.3.2 https://ostif.org/zlib-audit-complete/ https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-27171.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L", "normalized_severity": "Low", "package": { "id": "", "name": "rsync", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "vTajNh0ysqaO8NuTMU//uw==": { "id": "vTajNh0ysqaO8NuTMU//uw==", "updater": "rhel-vex", "name": "CVE-2022-2845", "description": "Improper Validation of Specified Quantity in Input in GitHub repository vim/vim prior to 9.0.0218.", "issued": "2022-08-17T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2022-2845 https://bugzilla.redhat.com/show_bug.cgi?id=2119844 https://www.cve.org/CVERecord?id=CVE-2022-2845 https://nvd.nist.gov/vuln/detail/CVE-2022-2845 https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-2845.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L", "normalized_severity": "Low", "package": { "id": "", "name": "vim", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "vZIHu7rsNO8R8If5mjyTiw==": { "id": "vZIHu7rsNO8R8If5mjyTiw==", "updater": "rhel-vex", "name": "CVE-2025-69644", "description": "A flaw was found in binutils. A local attacker can exploit a logic flaw in the handling of DWARF (Debugging With Attributed Record Formats) location list headers within the objdump utility. By supplying a crafted binary with malformed debug information, the attacker can cause objdump to enter an unbounded loop, leading to excessive resource consumption and a Denial of Service (DoS).", "issued": "2026-03-06T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2025-69644 https://bugzilla.redhat.com/show_bug.cgi?id=2445263 https://www.cve.org/CVERecord?id=CVE-2025-69644 https://nvd.nist.gov/vuln/detail/CVE-2025-69644 https://sourceware.org/bugzilla/show_bug.cgi?id=33639 https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=455446bbdc8675f34808187de2bbad4682016ff7 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-69644.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L", "normalized_severity": "Low", "package": { "id": "", "name": "binutils", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "vkypiN/HZjIiT/S9k2qxvA==": { "id": "vkypiN/HZjIiT/S9k2qxvA==", "updater": "rhel-vex", "name": "CVE-2026-35385", "description": "A flaw was found in OpenSSH. When the `scp` command is used by a root user to download a file with the legacy protocol option (`-O`) and without preserving original file permissions (`-p`), the downloaded file can be installed with elevated privileges (setuid or setgid). This unexpected behavior could allow a malicious file to execute with higher permissions than intended, posing a security risk through potential privilege escalation.", "issued": "2026-04-02T16:30:59Z", "links": "https://access.redhat.com/security/cve/CVE-2026-35385 https://bugzilla.redhat.com/show_bug.cgi?id=2454469 https://www.cve.org/CVERecord?id=CVE-2026-35385 https://nvd.nist.gov/vuln/detail/CVE-2026-35385 https://marc.info/?l=openssh-unix-dev\u0026m=177513443901484\u0026w=2 https://www.openssh.org/releasenotes.html#10.3p1 https://www.openwall.com/lists/oss-security/2026/04/02/3 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-35385.json https://access.redhat.com/errata/RHSA-2026:13381", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "normalized_severity": "High", "package": { "id": "", "name": "openssh-clients", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:8.7p1-49.el9_7", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "vlyMilfR3CdKSdc7LxNzEQ==": { "id": "vlyMilfR3CdKSdc7LxNzEQ==", "updater": "rhel-vex", "name": "CVE-2026-54369", "description": "A flaw was found in the `acl` package, specifically within its `libacl` pathname-based functions. A local attacker could exploit this vulnerability by using a symbolic link to replace a pathname component. This could allow the attacker to redirect access control list (ACL) read or write operations to arbitrary files or directories, leading to unauthorized manipulation of ACLs and ultimately local privilege escalation.", "issued": "2026-06-29T13:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-54369 https://bugzilla.redhat.com/show_bug.cgi?id=2490277 https://www.cve.org/CVERecord?id=CVE-2026-54369 https://nvd.nist.gov/vuln/detail/CVE-2026-54369 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-54369.json https://access.redhat.com/errata/RHSA-2026:42736", "severity": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "normalized_severity": "High", "package": { "id": "", "name": "libacl", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:2.4.0-1.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "vnI8VBZMnSK/Spr6qFIUOA==": { "id": "vnI8VBZMnSK/Spr6qFIUOA==", "updater": "rhel-vex", "name": "CVE-2026-4873", "description": "A flaw was found in curl. A remote attacker could exploit this by initiating an unencrypted connection (via IMAP, SMTP, or POP3) and then making a subsequent request to the same host that requires Transport Layer Security (TLS). Due to incorrect connection reuse, the subsequent request would bypass the TLS requirement, leading to the transmission of sensitive information in cleartext. This vulnerability, categorized as Cleartext Transmission of Sensitive Information (CWE-319), results in information disclosure.", "issued": "2026-04-29T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-4873 https://bugzilla.redhat.com/show_bug.cgi?id=2461200 https://www.cve.org/CVERecord?id=CVE-2026-4873 https://nvd.nist.gov/vuln/detail/CVE-2026-4873 https://curl.se/docs/CVE-2026-4873.html https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-4873.json", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N", "normalized_severity": "Medium", "package": { "id": "", "name": "curl", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "vyw54XHJNXkWpKNGLbf2jQ==": { "id": "vyw54XHJNXkWpKNGLbf2jQ==", "updater": "rhel-vex", "name": "CVE-2025-24294", "description": "A denial of service flaw was found in resolv ruby gem. This flaw allows an attacker to craft a malicious DNS packet containing a highly compressed domain name. When the resolv library parses this packet, the name decompression process consumes a large amount of CPU resources, as the library does not limit the resulting length of the name.", "issued": "2025-07-12T03:30:40Z", "links": "https://access.redhat.com/security/cve/CVE-2025-24294 https://bugzilla.redhat.com/show_bug.cgi?id=2379684 https://www.cve.org/CVERecord?id=CVE-2025-24294 https://nvd.nist.gov/vuln/detail/CVE-2025-24294 https://www.ruby-lang.org/en/news/2025/07/08/dos-resolv-cve-2025-24294/ https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-24294.json https://access.redhat.com/errata/RHSA-2025:23063", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "normalized_severity": "Medium", "package": { "id": "", "name": "ruby-bundled-gems", "version": "", "kind": "binary", "normalized_version": "", "module": "ruby:3.3", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "0:3.3.10-5.module+el9.7.0+23651+15dc1615", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "w1094TrprBpG+5TZJus6FA==": { "id": "w1094TrprBpG+5TZJus6FA==", "updater": "rhel-vex", "name": "CVE-2022-1674", "description": "A NULL pointer dereference flaw was found in vim's vim_regexec_string() function in regexp.c file. The issue occurs when the function tries to match the buffer with an invalid pattern. This flaw allows an attacker to trick a user into opening a specially crafted file, triggering a NULL pointer dereference that causes an application to crash, leading to a denial of service.", "issued": "2022-05-12T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2022-1674 https://bugzilla.redhat.com/show_bug.cgi?id=2085393 https://www.cve.org/CVERecord?id=CVE-2022-1674 https://nvd.nist.gov/vuln/detail/CVE-2022-1674 https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-1674.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "vim", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "w4jLCE7e/XkliXylkG5u7w==": { "id": "w4jLCE7e/XkliXylkG5u7w==", "updater": "rhel-vex", "name": "CVE-2026-48935", "description": "A flaw was found in Node.js. The Permission API allows a local user to modify file metadata on paths that have been explicitly set as read-only. This can lead to unauthorized changes in file properties, impacting the integrity of the file system.", "issued": "2026-06-26T01:14:36Z", "links": "https://access.redhat.com/security/cve/CVE-2026-48935 https://bugzilla.redhat.com/show_bug.cgi?id=2493329 https://www.cve.org/CVERecord?id=CVE-2026-48935 https://nvd.nist.gov/vuln/detail/CVE-2026-48935 https://nodejs.org/en/blog/vulnerability/june-2026-security-releases https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-48935.json https://access.redhat.com/errata/RHSA-2026:35892", "severity": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", "normalized_severity": "Low", "package": { "id": "", "name": "nodejs-libs", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:22.23.1-1.module+el9.8.0+24457+996af7aa", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "w8af/LTYrBLWhYkZBSi2Lg==": { "id": "w8af/LTYrBLWhYkZBSi2Lg==", "updater": "rhel-vex", "name": "CVE-2022-4141", "description": "A heap-based buffer overflow vulnerability was found in Vim due to invalid memory access. This issue could allow an attacker to trick a user into opening a specially crafted file, triggering an out-of-bounds write that causes an application to crash, possibly executing code and corrupting memory.", "issued": "2022-11-25T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2022-4141 https://bugzilla.redhat.com/show_bug.cgi?id=2148991 https://www.cve.org/CVERecord?id=CVE-2022-4141 https://nvd.nist.gov/vuln/detail/CVE-2022-4141 https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-4141.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "vim", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "w8vuCHS+4au/MfXahCBARA==": { "id": "w8vuCHS+4au/MfXahCBARA==", "updater": "rhel-vex", "name": "CVE-2025-13601", "description": "A heap-based buffer overflow problem was found in glib through an incorrect calculation of buffer size in the g_escape_uri_string() function. If the string to escape contains a very large number of unacceptable characters (which would need escaping), the calculation of the length of the escaped string could overflow, leading to a potential write off the end of the newly allocated string.", "issued": "2025-11-24T13:00:15Z", "links": "https://access.redhat.com/security/cve/CVE-2025-13601 https://bugzilla.redhat.com/show_bug.cgi?id=2416741 https://www.cve.org/CVERecord?id=CVE-2025-13601 https://nvd.nist.gov/vuln/detail/CVE-2025-13601 https://gitlab.gnome.org/GNOME/glib/-/issues/3827 https://gitlab.gnome.org/GNOME/glib/-/merge_requests/4914 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-13601.json https://access.redhat.com/errata/RHSA-2026:0936", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "glib2-devel", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "0:2.68.4-18.el9_7.1", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "wM3p6vKgVqUkJtSPSQjDlw==": { "id": "wM3p6vKgVqUkJtSPSQjDlw==", "updater": "rhel-vex", "name": "CVE-2026-55655", "description": "A flaw was found in OpenSSH. A local unprivileged attacker on a Linux client host can hijack client-side X11 forwarding connections. This is possible by pre-binding the preferred abstract X socket name when X11 forwarding is enabled and a local UNIX-domain X socket is used. A successful attack can compromise the confidentiality of forwarded X11 traffic, including sensitive window contents and input, and may allow some manipulation of the forwarded session.", "issued": "2026-06-22T23:22:11Z", "links": "https://access.redhat.com/security/cve/CVE-2026-55655 https://bugzilla.redhat.com/show_bug.cgi?id=2462250 https://www.cve.org/CVERecord?id=CVE-2026-55655 https://nvd.nist.gov/vuln/detail/CVE-2026-55655 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-55655.json https://access.redhat.com/errata/RHSA-2026:47756", "severity": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:L/A:N", "normalized_severity": "Medium", "package": { "id": "", "name": "openssh", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:9.9p1-9.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "wOf+QLuqfByteGwfULI8YA==": { "id": "wOf+QLuqfByteGwfULI8YA==", "updater": "rhel-vex", "name": "CVE-2026-1526", "description": "A flaw was found in undici. A remote attacker can exploit this vulnerability by sending a specially crafted compressed frame, known as a \"decompression bomb,\" during permessage-deflate decompression. The undici WebSocket client does not properly limit the size of decompressed data, leading to unbounded memory consumption. This can cause the Node.js process to exhaust available memory, resulting in a denial of service (DoS) where the process crashes or becomes unresponsive.", "issued": "2026-03-12T20:08:05Z", "links": "https://access.redhat.com/security/cve/CVE-2026-1526 https://bugzilla.redhat.com/show_bug.cgi?id=2447142 https://www.cve.org/CVERecord?id=CVE-2026-1526 https://nvd.nist.gov/vuln/detail/CVE-2026-1526 https://cna.openjsf.org/security-advisories.html https://datatracker.ietf.org/doc/html/rfc7692 https://github.com/nodejs/undici/security/advisories/GHSA-vrm6-8vpv-qv8q https://hackerone.com/reports/3481206 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-1526.json https://access.redhat.com/errata/RHSA-2026:7302", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "High", "package": { "id": "", "name": "nodejs-full-i18n", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:22.22.2-1.module+el9.7.0+24157+8ddb2461", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "wp75ZuWMdeSuJ4xUhgowQA==": { "id": "wp75ZuWMdeSuJ4xUhgowQA==", "updater": "rhel-vex", "name": "CVE-2026-42245", "description": "A flaw was found in Net::IMAP, a Ruby library implementing the Internet Message Access Protocol (IMAP) client functionality. A hostile server can exploit a quadratic time complexity issue in the `Net::IMAP::ResponseReader` when processing large responses containing numerous string literals. This can lead to the client's CPU being exhausted, resulting in a denial of service (DoS) attack.", "issued": "2026-05-09T19:37:08Z", "links": "https://access.redhat.com/security/cve/CVE-2026-42245 https://bugzilla.redhat.com/show_bug.cgi?id=2468495 https://www.cve.org/CVERecord?id=CVE-2026-42245 https://nvd.nist.gov/vuln/detail/CVE-2026-42245 https://github.com/ruby/net-imap/commit/6091f7d6b1f3514cafbfe39c76f2b5d73de3ca96 https://github.com/ruby/net-imap/commit/88d95231fc8afef11c1f074453f7d75b68c9dfda https://github.com/ruby/net-imap/commit/de685f91a4a4cc75eb80da898c2bf8af08d34819 https://github.com/ruby/net-imap/releases/tag/v0.4.24 https://github.com/ruby/net-imap/releases/tag/v0.5.14 https://github.com/ruby/net-imap/releases/tag/v0.6.4 https://github.com/ruby/net-imap/security/advisories/GHSA-q2mw-fvj9-vvcw https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42245.json https://access.redhat.com/errata/RHSA-2026:33576", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "ruby-bundled-gems", "version": "", "kind": "binary", "normalized_version": "", "module": "ruby:3.3", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "0:3.3.10-7.module+el9.8.0+24406+8975e57f", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "wvmpOuM/1L8oJ5qbX5rvJA==": { "id": "wvmpOuM/1L8oJ5qbX5rvJA==", "updater": "rhel-vex", "name": "CVE-2026-48934", "description": "A flaw was found in Node.js. An attacker can exploit a vulnerability in the Transport Layer Security (TLS) host verification process to bypass certification validation. This bypass could allow an attacker to intercept or alter communications, potentially leading to information disclosure or integrity compromise.", "issued": "2026-06-26T01:14:36Z", "links": "https://access.redhat.com/security/cve/CVE-2026-48934 https://bugzilla.redhat.com/show_bug.cgi?id=2493332 https://www.cve.org/CVERecord?id=CVE-2026-48934 https://nvd.nist.gov/vuln/detail/CVE-2026-48934 https://nodejs.org/en/blog/vulnerability/june-2026-security-releases https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-48934.json https://access.redhat.com/errata/RHSA-2026:35892", "severity": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "normalized_severity": "Medium", "package": { "id": "", "name": "nodejs-docs", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "noarch", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:22.23.1-1.module+el9.8.0+24457+996af7aa", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "x0MBdOYdUOYndbRBnoiEzw==": { "id": "x0MBdOYdUOYndbRBnoiEzw==", "updater": "rhel-vex", "name": "CVE-2026-4438", "description": "A flaw was found in the GNU C library (glibc). When applications use the `gethostbyaddr` or `gethostbyaddr_r` functions with a `nsswitch.conf` configuration that specifies glibc's DNS backend, the library may return an invalid DNS hostname. This violates the DNS specification and could lead to applications receiving incorrect hostname information, potentially impacting network operations or security decisions.", "issued": "2026-03-20T19:59:06Z", "links": "https://access.redhat.com/security/cve/CVE-2026-4438 https://bugzilla.redhat.com/show_bug.cgi?id=2449783 https://www.cve.org/CVERecord?id=CVE-2026-4438 https://nvd.nist.gov/vuln/detail/CVE-2026-4438 https://sourceware.org/bugzilla/show_bug.cgi?id=34015 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-4438.json https://access.redhat.com/errata/RHSA-2026:20597", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "normalized_severity": "Low", "package": { "id": "", "name": "glibc-langpack-en", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:2.34-270.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "xC8Y7thfNSAfn5daCQFvgQ==": { "id": "xC8Y7thfNSAfn5daCQFvgQ==", "updater": "rhel-vex", "name": "CVE-2026-7168", "description": "A flaw was found in libcurl. When a user performs a transfer over an HTTP proxy using Digest authentication and then reuses the same handle for a second transfer with a different proxy host, libcurl incorrectly sends the `Proxy-Authorization` header intended for the first proxy to the second proxy. This could lead to the disclosure of sensitive authentication information to an unintended proxy, potentially allowing an attacker to gain unauthorized access or impersonate the user.", "issued": "2026-05-13T08:29:08Z", "links": "https://access.redhat.com/security/cve/CVE-2026-7168 https://bugzilla.redhat.com/show_bug.cgi?id=2476979 https://www.cve.org/CVERecord?id=CVE-2026-7168 https://nvd.nist.gov/vuln/detail/CVE-2026-7168 http://www.openwall.com/lists/oss-security/2026/04/29/14 https://curl.se/docs/CVE-2026-7168.html https://curl.se/docs/CVE-2026-7168.json https://hackerone.com/reports/3697719 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-7168.json", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "normalized_severity": "Medium", "package": { "id": "", "name": "curl", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "xQ6R88+x8IssPvOAavmZXw==": { "id": "xQ6R88+x8IssPvOAavmZXw==", "updater": "rhel-vex", "name": "CVE-2022-0530", "description": "A flaw was found in Unzip. The vulnerability occurs during the conversion of a UTF-8 string to a local string that leads to a segmentation fault. This flaw allows an attacker to input a specially crafted zip file, leading to a crash.", "issued": "2022-01-31T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2022-0530 https://bugzilla.redhat.com/show_bug.cgi?id=2051395 https://www.cve.org/CVERecord?id=CVE-2022-0530 https://nvd.nist.gov/vuln/detail/CVE-2022-0530 https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-0530.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "unzip", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "xRDJz3P8IApYf+UqTsFimg==": { "id": "xRDJz3P8IApYf+UqTsFimg==", "updater": "rhel-vex", "name": "CVE-2026-60001", "description": "A flaw was found in OpenSSH's SSH daemon (sshd). A remote attacker could exploit this vulnerability by repeatedly attempting authentication. The flaw allows the attacker to bypass the intended minimum authentication delay, which can facilitate brute-force attacks. This makes it easier for an attacker to guess valid credentials, potentially leading to unauthorized access or a denial of service.", "issued": "2026-07-08T00:16:15Z", "links": "https://access.redhat.com/security/cve/CVE-2026-60001 https://bugzilla.redhat.com/show_bug.cgi?id=2497938 https://www.cve.org/CVERecord?id=CVE-2026-60001 https://nvd.nist.gov/vuln/detail/CVE-2026-60001 https://marc.info/?l=openssh-unix-dev\u0026m=178333966933090\u0026w=2 https://www.openssh.org/releasenotes.html#10.4p1 https://www.openwall.com/lists/oss-security/2026/07/06/5 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-60001.json", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L", "normalized_severity": "Medium", "package": { "id": "", "name": "openssh", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "xWYQ4aF7Ip3LaKJQzDwx1A==": { "id": "xWYQ4aF7Ip3LaKJQzDwx1A==", "updater": "rhel-vex", "name": "CVE-2026-48935", "description": "A flaw was found in Node.js. The Permission API allows a local user to modify file metadata on paths that have been explicitly set as read-only. This can lead to unauthorized changes in file properties, impacting the integrity of the file system.", "issued": "2026-06-26T01:14:36Z", "links": "https://access.redhat.com/security/cve/CVE-2026-48935 https://bugzilla.redhat.com/show_bug.cgi?id=2493329 https://www.cve.org/CVERecord?id=CVE-2026-48935 https://nvd.nist.gov/vuln/detail/CVE-2026-48935 https://nodejs.org/en/blog/vulnerability/june-2026-security-releases https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-48935.json https://access.redhat.com/errata/RHSA-2026:35892", "severity": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", "normalized_severity": "Low", "package": { "id": "", "name": "nodejs", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "aarch64|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:22.23.1-1.module+el9.8.0+24457+996af7aa", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "xh8zszQflFXgahc/vYUUWQ==": { "id": "xh8zszQflFXgahc/vYUUWQ==", "updater": "rhel-vex", "name": "CVE-2026-32777", "description": "A flaw was found in libexpat. A remote attacker could exploit this vulnerability by providing specially crafted Document Type Definition (DTD) content. This could lead to an infinite loop during parsing, resulting in a Denial of Service (DoS) for the application using libexpat.", "issued": "2026-03-16T06:58:06Z", "links": "https://access.redhat.com/security/cve/CVE-2026-32777 https://bugzilla.redhat.com/show_bug.cgi?id=2447890 https://www.cve.org/CVERecord?id=CVE-2026-32777 https://nvd.nist.gov/vuln/detail/CVE-2026-32777 https://github.com/libexpat/libexpat/issues/1161 https://github.com/libexpat/libexpat/pull/1159 https://github.com/libexpat/libexpat/pull/1162 https://issues.oss-fuzz.com/issues/486993411 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-32777.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "normalized_severity": "Medium", "package": { "id": "", "name": "expat", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "xpncb/4iGS4E4GyJA4P7Vg==": { "id": "xpncb/4iGS4E4GyJA4P7Vg==", "updater": "rhel-vex", "name": "CVE-2026-34181", "description": "A flaw was found in OpenSSL. This vulnerability allows a remote attacker to forge PKCS#12 (Public-Key Cryptography Standards #12) files that use Password-Based Message Authentication Code 1 (PBMAC1) with short HMAC (Hash-based Message Authentication Code) keys. This can lead to a service accepting attacker-controlled certificates and private keys with a 1 in 256 probability, potentially enabling impersonation.", "issued": "2026-06-09T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-34181 https://bugzilla.redhat.com/show_bug.cgi?id=2481882 https://www.cve.org/CVERecord?id=CVE-2026-34181 https://nvd.nist.gov/vuln/detail/CVE-2026-34181 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-34181.json https://access.redhat.com/errata/RHSA-2026:25239", "severity": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N", "normalized_severity": "Low", "package": { "id": "", "name": "openssl-devel", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:3.5.5-4.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "xvCKE5h7HgdGkBMwA/kPeg==": { "id": "xvCKE5h7HgdGkBMwA/kPeg==", "updater": "rhel-vex", "name": "CVE-2026-42338", "description": "A flaw was found in ip-address, a JavaScript library for parsing and manipulating IPv4 and IPv6 addresses. This vulnerability allows a remote attacker to perform cross-site scripting (XSS) by providing untrusted input to the Address6 constructor. When an application renders the output of Address6.group(), Address6.link(), or the AddressError.parseMessage as HTML without proper escaping, the attacker-controlled content can be executed in the user's browser.", "issued": "2026-05-12T19:43:16Z", "links": "https://access.redhat.com/security/cve/CVE-2026-42338 https://bugzilla.redhat.com/show_bug.cgi?id=2476810 https://www.cve.org/CVERecord?id=CVE-2026-42338 https://nvd.nist.gov/vuln/detail/CVE-2026-42338 https://github.com/beaugunderson/ip-address/security/advisories/GHSA-v2v4-37r5-5v8g https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42338.json https://access.redhat.com/errata/RHSA-2026:35892", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N", "normalized_severity": "High", "package": { "id": "", "name": "nodejs", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "aarch64|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:22.23.1-1.module+el9.8.0+24457+996af7aa", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "xxrOMZzPk7ETmnvrIjBo0A==": { "id": "xxrOMZzPk7ETmnvrIjBo0A==", "updater": "rhel-vex", "name": "CVE-2025-60753", "description": "A vulnerability in apply_substitution() function in libarchive's bsdtar allows crafted -s substitution rules to repeatedly match a zero-length substring and append replacements without advancing the input pointer. When the rule uses the global /g flag (or an explicitly empty pattern), this leads to unbounded output allocation and eventual process OOM (Denial of Service). Upgrade to libarchive 3.8.1 or apply a patch that prevents zero-length match loops or rejects empty patterns.", "issued": "2025-11-05T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2025-60753 https://bugzilla.redhat.com/show_bug.cgi?id=2412648 https://www.cve.org/CVERecord?id=CVE-2025-60753 https://nvd.nist.gov/vuln/detail/CVE-2025-60753 https://github.com/Papya-j/CVE/tree/main/CVE-2025-60753 https://github.com/libarchive/libarchive/issues/2725 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-60753.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "libarchive", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "y/3qWQj3xOUQpm2CUr+ftg==": { "id": "y/3qWQj3xOUQpm2CUr+ftg==", "updater": "rhel-vex", "name": "CVE-2025-9820", "description": "A flaw was found in the GnuTLS library, specifically in the gnutls_pkcs11_token_init() function that handles PKCS#11 token initialization. When a token label longer than expected is processed, the function writes past the end of a fixed-size stack buffer. This programming error can cause the application using GnuTLS to crash or, in certain conditions, be exploited for code execution. As a result, systems or applications relying on GnuTLS may be vulnerable to a denial of service or local privilege escalation attacks.", "issued": "2025-11-18T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2025-9820 https://bugzilla.redhat.com/show_bug.cgi?id=2392528 https://www.cve.org/CVERecord?id=CVE-2025-9820 https://nvd.nist.gov/vuln/detail/CVE-2025-9820 https://gitlab.com/gnutls/gnutls/-/commit/1d56f96f6ab5034d677136b9d50b5a75dff0faf5 https://gitlab.com/gnutls/gnutls/-/issues/1732 https://www.gnutls.org/security-new.html#GNUTLS-SA-2025-11-18 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-9820.json https://access.redhat.com/errata/RHSA-2026:4188", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "normalized_severity": "Low", "package": { "id": "", "name": "gnutls", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:3.8.3-10.el9_7", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "y/vNaOETNDNWhjGaBLNhRA==": { "id": "y/vNaOETNDNWhjGaBLNhRA==", "updater": "rhel-vex", "name": "CVE-2026-1502", "description": "A flaw was found in Python. This vulnerability allows for the injection of extra information into HTTP communication. Specifically, the system does not properly prevent special characters (carriage return and line feed) from being included in HTTP client proxy tunnel headers or host fields.", "issued": "2026-04-10T17:54:44Z", "links": "https://access.redhat.com/security/cve/CVE-2026-1502 https://bugzilla.redhat.com/show_bug.cgi?id=2457409 https://www.cve.org/CVERecord?id=CVE-2026-1502 https://nvd.nist.gov/vuln/detail/CVE-2026-1502 https://github.com/python/cpython/commit/05ed7ce7ae9e17c23a04085b2539fe6d6d3cef69 https://github.com/python/cpython/issues/146211 https://github.com/python/cpython/pull/146212 https://mail.python.org/archives/list/security-announce@python.org/thread/2IVPAEQWUJBCTQZEJEVTYCIKSMQPGRZ3/ https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-1502.json", "severity": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:N", "normalized_severity": "Medium", "package": { "id": "", "name": "python3.9", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "y6oEGtDp1H5C2csZKAF6bQ==": { "id": "y6oEGtDp1H5C2csZKAF6bQ==", "updater": "rhel-vex", "name": "CVE-2026-11979", "description": "A flaw was found in libxml2, specifically within the xmlcatalog utility when operating in shell mode. An attacker can exploit multiple stack-based buffer overflows by providing an excessively long input line. This leads to memory corruption, which may cause the application to crash or potentially allow the attacker to execute arbitrary code within the context of the xmlcatalog process.", "issued": "2026-06-29T13:21:42Z", "links": "https://access.redhat.com/security/cve/CVE-2026-11979 https://bugzilla.redhat.com/show_bug.cgi?id=2494191 https://www.cve.org/CVERecord?id=CVE-2026-11979 https://nvd.nist.gov/vuln/detail/CVE-2026-11979 https://cert.pl/en/posts/2026/06/CVE-2026-11979 https://gitlab.gnome.org/GNOME/libxml2/-/commit/c2e233fc1b341685fc99621b2768b503f777a72e https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-11979.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L", "normalized_severity": "Medium", "package": { "id": "", "name": "libxml2", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "y7I268PAr74OoToX85XE8w==": { "id": "y7I268PAr74OoToX85XE8w==", "updater": "rhel-vex", "name": "CVE-2026-22795", "description": "A flaw was found in OpenSSL. This type confusion vulnerability allows a remote attacker to cause a Denial of Service (DoS) by tricking a user or application into processing a maliciously crafted PKCS#12 (Personal Information Exchange Syntax Standard) file. The vulnerability leads to an invalid or NULL pointer dereference, resulting in an application crash.", "issued": "2026-01-27T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2026-22795 https://bugzilla.redhat.com/show_bug.cgi?id=2430389 https://www.cve.org/CVERecord?id=CVE-2026-22795 https://nvd.nist.gov/vuln/detail/CVE-2026-22795 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-22795.json https://access.redhat.com/errata/RHSA-2026:1473", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "openssl-libs", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "1:3.5.1-7.el9_7", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "yNrm+PctJj5AEVwT8bDpBg==": { "id": "yNrm+PctJj5AEVwT8bDpBg==", "updater": "rhel-vex", "name": "CVE-2026-35385", "description": "A flaw was found in OpenSSH. When the `scp` command is used by a root user to download a file with the legacy protocol option (`-O`) and without preserving original file permissions (`-p`), the downloaded file can be installed with elevated privileges (setuid or setgid). This unexpected behavior could allow a malicious file to execute with higher permissions than intended, posing a security risk through potential privilege escalation.", "issued": "2026-04-02T16:30:59Z", "links": "https://access.redhat.com/security/cve/CVE-2026-35385 https://bugzilla.redhat.com/show_bug.cgi?id=2454469 https://www.cve.org/CVERecord?id=CVE-2026-35385 https://nvd.nist.gov/vuln/detail/CVE-2026-35385 https://marc.info/?l=openssh-unix-dev\u0026m=177513443901484\u0026w=2 https://www.openssh.org/releasenotes.html#10.3p1 https://www.openwall.com/lists/oss-security/2026/04/02/3 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-35385.json https://access.redhat.com/errata/RHSA-2026:19219", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "normalized_severity": "High", "package": { "id": "", "name": "openssh", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:9.9p1-7.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "ySo9uDHfIeTwH0aLjgaN9g==": { "id": "ySo9uDHfIeTwH0aLjgaN9g==", "updater": "rhel-vex", "name": "CVE-2026-4046", "description": "A flaw was found in glibc, the GNU C Library. A remote attacker could exploit this vulnerability by providing specially crafted inputs using the IBM1390 or IBM1399 character sets to the `iconv()` function. This could lead to an assertion failure, causing the application to crash and resulting in a Denial of Service (DoS).", "issued": "2026-03-30T17:16:11Z", "links": "https://access.redhat.com/security/cve/CVE-2026-4046 https://bugzilla.redhat.com/show_bug.cgi?id=2453117 https://www.cve.org/CVERecord?id=CVE-2026-4046 https://nvd.nist.gov/vuln/detail/CVE-2026-4046 https://packages.fedoraproject.org/pkgs/glibc/glibc-gconv-extra/ https://sourceware.org/bugzilla/show_bug.cgi?id=33980 https://sourceware.org/git/?p=glibc.git;a=blob_plain;f=advisories/GLIBC-SA-2026-0007;hb=HEAD https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-4046.json https://access.redhat.com/errata/RHSA-2026:20597", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "normalized_severity": "Medium", "package": { "id": "", "name": "glibc-minimal-langpack", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:2.34-270.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "yTSOiGJiuQRZ1n0kXjMC8g==": { "id": "yTSOiGJiuQRZ1n0kXjMC8g==", "updater": "rhel-vex", "name": "CVE-2024-34459", "description": "A flaw was found in the xmllint program distributed by the libxml2 package. A buffer over-read in the xmlHTMLPrintFileContext function in the xmllint.c file may be triggered when a crafted file is processed with the xmllint program using the `--htmlout` command line option, causing an application crash and resulting in a denial of service.", "issued": "2024-05-08T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2024-34459 https://bugzilla.redhat.com/show_bug.cgi?id=2280532 https://www.cve.org/CVERecord?id=CVE-2024-34459 https://nvd.nist.gov/vuln/detail/CVE-2024-34459 https://gitlab.gnome.org/GNOME/libxml2/-/issues/720 https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-34459.json https://access.redhat.com/errata/RHSA-2026:28254", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "libxml2-devel", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "0:2.9.13-14.el9_8.1", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "yXjhPZPggtyVHOPFjmeHOg==": { "id": "yXjhPZPggtyVHOPFjmeHOg==", "updater": "rhel-vex", "name": "CVE-2026-29111", "description": "A flaw was found in systemd, a system and service manager. An unprivileged user can exploit this vulnerability by making an Inter-Process Communication (IPC) API call with spurious data. In older versions (v249 and earlier), this can lead to stack overwriting with attacker-controlled content, potentially enabling arbitrary code execution or privilege escalation. In newer versions (v250 and later), the flaw causes systemd to assert and freeze, resulting in a Denial of Service (DoS).", "issued": "2026-03-23T21:03:56Z", "links": "https://access.redhat.com/security/cve/CVE-2026-29111 https://bugzilla.redhat.com/show_bug.cgi?id=2450505 https://www.cve.org/CVERecord?id=CVE-2026-29111 https://nvd.nist.gov/vuln/detail/CVE-2026-29111 https://github.com/systemd/systemd/commit/1d22f706bd04f45f8422e17fbde3f56ece17758a https://github.com/systemd/systemd/commit/20021e7686426052e3a7505425d7e12085feb2a6 https://github.com/systemd/systemd/commit/21167006574d6b83813c7596759b474f56562412 https://github.com/systemd/systemd/commit/3cee294fe8cf4fa0eff933ab21416d099942cabd https://github.com/systemd/systemd/commit/42aee39107fbdd7db1ccd402a2151822b2805e9f https://github.com/systemd/systemd/commit/54588d2dedff54bfb6036670820650e4ea74628f https://github.com/systemd/systemd/commit/7ac3220213690e8a8d6d2a6e81e43bd1dce01d69 https://github.com/systemd/systemd/commit/80acea4ef80a4bb78560ed970c34952299b890d6 https://github.com/systemd/systemd/commit/b5fd14693057e5f2c9b4a49603be64ec3608ff6c https://github.com/systemd/systemd/commit/efa6ba2ab625aaa160ac435a09e6482fc63bdbe8 https://github.com/systemd/systemd/security/advisories/GHSA-gx6q-6f99-m764 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-29111.json https://access.redhat.com/errata/RHSA-2026:13677", "severity": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "systemd-rpm-macros", "version": "", "kind": "binary", "normalized_version": "", "arch": "noarch", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:252-55.el9_7.9", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "yeUq/7JaeNz2SDn0gWjVQw==": { "id": "yeUq/7JaeNz2SDn0gWjVQw==", "updater": "rhel-vex", "name": "CVE-2026-27135", "description": "A flaw was found in nghttp2. Due to missing internal state validation, the library continues to process incoming data even after a session has been terminated. A remote attacker could exploit this by sending a specially crafted HTTP/2 frame, leading to an assertion failure and a denial of service (DoS).", "issued": "2026-03-18T17:59:02Z", "links": "https://access.redhat.com/security/cve/CVE-2026-27135 https://bugzilla.redhat.com/show_bug.cgi?id=2448754 https://www.cve.org/CVERecord?id=CVE-2026-27135 https://nvd.nist.gov/vuln/detail/CVE-2026-27135 https://github.com/nghttp2/nghttp2/commit/5c7df8fa815ac1004d9ecb9d1f7595c4d37f46e1 https://github.com/nghttp2/nghttp2/security/advisories/GHSA-6933-cjhr-5qg6 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-27135.json https://access.redhat.com/errata/RHSA-2026:7302", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "High", "package": { "id": "", "name": "npm", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:10.9.7-1.22.22.2.1.module+el9.7.0+24157+8ddb2461", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "ylg3k+AtgUcIl3hJiXNMlw==": { "id": "ylg3k+AtgUcIl3hJiXNMlw==", "updater": "rhel-vex", "name": "CVE-2022-2946", "description": "A flaw was found in vim, where it is vulnerable to a use-after-free in the vim_vsnprintf_typval function. This flaw allows a specially crafted file to crash a program, use unexpected values, or execute code.", "issued": "2022-08-23T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2022-2946 https://bugzilla.redhat.com/show_bug.cgi?id=2120993 https://www.cve.org/CVERecord?id=CVE-2022-2946 https://nvd.nist.gov/vuln/detail/CVE-2022-2946 https://huntr.dev/bounties/5d389a18-5026-47df-a5d0-1548a9b555d5 https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-2946.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "vim", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "ymKqobod4xPivmLT/iq9oQ==": { "id": "ymKqobod4xPivmLT/iq9oQ==", "updater": "rhel-vex", "name": "CVE-2026-41990", "description": "A flaw was found in Libgcrypt. During Dilithium signing operations, the library fails to perform a bounds check when writing to a static array. While the data involved is not directly controlled by an attacker, this vulnerability could lead to memory corruption, potentially resulting in a denial of service (DoS) or affecting data integrity.", "issued": "2026-04-23T04:39:04Z", "links": "https://access.redhat.com/security/cve/CVE-2026-41990 https://bugzilla.redhat.com/show_bug.cgi?id=2461068 https://www.cve.org/CVERecord?id=CVE-2026-41990 https://nvd.nist.gov/vuln/detail/CVE-2026-41990 https://dev.gnupg.org/T8208 https://lists.gnupg.org/pipermail/gnupg-announce/2026q2/000503.html https://www.openwall.com/lists/oss-security/2026/04/21/1 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-41990.json", "severity": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:L", "normalized_severity": "Low", "package": { "id": "", "name": "libgcrypt", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "ymZOc8rtV2bmln3PExOD3Q==": { "id": "ymZOc8rtV2bmln3PExOD3Q==", "updater": "rhel-vex", "name": "CVE-2026-59874", "description": "A flaw was found in node-tar, a tar archive manipulation library for Node.js. A remote attacker could exploit this vulnerability by providing a specially crafted tar archive with a negative entry size in its header. This malformed header causes the archive scanner to enter an infinite loop, repeatedly parsing the same header and preventing further processing. This can lead to a denial of service (DoS) condition, making the affected system or application unresponsive.", "issued": "2026-07-08T15:23:47Z", "links": "https://access.redhat.com/security/cve/CVE-2026-59874 https://bugzilla.redhat.com/show_bug.cgi?id=2498116 https://www.cve.org/CVERecord?id=CVE-2026-59874 https://nvd.nist.gov/vuln/detail/CVE-2026-59874 https://github.com/isaacs/node-tar/commit/9e78bf058b2c22dd4d52e00d8922d5c06fc2f7b5 https://github.com/isaacs/node-tar/releases/tag/v7.5.18 https://github.com/isaacs/node-tar/security/advisories/GHSA-8x88-c5mf-7j5w https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59874.json https://access.redhat.com/errata/RHSA-2026:47058", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "High", "package": { "id": "", "name": "nodejs-docs", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "noarch", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:22.23.1-2.module+el9.8.0+24538+3f176d52", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "yyVb0QTi/Vc4LSIxOEuhqA==": { "id": "yyVb0QTi/Vc4LSIxOEuhqA==", "updater": "rhel-vex", "name": "CVE-2026-42246", "description": "A flaw was found in the Ruby net-imap library. When upgrading a cleartext IMAP connection to TLS using the Net::IMAP#starttls method, the library improperly handles certain responses received during STARTTLS negotiation. A man-in-the-middle (MITM) attacker can inject a predicted tagged OK response before the client completes the STARTTLS command, causing the operation to appear successful without establishing a TLS session. As a result, the connection may continue to transmit sensitive information in cleartext and enable modification of data exchanged over the affected connection, while the application incorrectly believes that encryption has been enabled.", "issued": "2026-05-09T19:33:17Z", "links": "https://access.redhat.com/security/cve/CVE-2026-42246 https://bugzilla.redhat.com/show_bug.cgi?id=2468499 https://www.cve.org/CVERecord?id=CVE-2026-42246 https://nvd.nist.gov/vuln/detail/CVE-2026-42246 https://github.com/ruby/net-imap/commit/0ede4c40b1523dfeaf95777b2678e54cc0fd9618 https://github.com/ruby/net-imap/commit/24a4e770b43230286a05aa2a9746cdbb3eb8485e https://github.com/ruby/net-imap/commit/97e2488fb5401a1783bddd959dde007d9fbce42c https://github.com/ruby/net-imap/commit/f79d35bf5833f186e81044c57c843eda30c873da https://github.com/ruby/net-imap/releases/tag/v0.3.10 https://github.com/ruby/net-imap/releases/tag/v0.4.24 https://github.com/ruby/net-imap/releases/tag/v0.5.14 https://github.com/ruby/net-imap/security/advisories/GHSA-vcgp-9326-pqcp https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42246.json https://access.redhat.com/errata/RHSA-2026:33576", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "normalized_severity": "High", "package": { "id": "", "name": "rubygem-psych", "version": "", "kind": "binary", "normalized_version": "", "module": "ruby:3.3", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "0:5.1.2-7.module+el9.8.0+24406+8975e57f", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "yzZzF1vLZmeTiLJMgY7W0Q==": { "id": "yzZzF1vLZmeTiLJMgY7W0Q==", "updater": "rhel-vex", "name": "CVE-2025-7039", "description": "A flaw was found in glib. An integer overflow during temporary file creation leads to an out-of-bounds memory access, allowing an attacker to potentially perform path traversal or access private temporary file content by creating symbolic links. This vulnerability allows a local attacker to manipulate file paths and access unauthorized data. The core issue stems from insufficient validation of file path lengths during temporary file operations.", "issued": "2025-07-02T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2025-7039 https://bugzilla.redhat.com/show_bug.cgi?id=2392423 https://www.cve.org/CVERecord?id=CVE-2025-7039 https://nvd.nist.gov/vuln/detail/CVE-2025-7039 https://gitlab.gnome.org/GNOME/glib/-/issues/3716 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-7039.json", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N", "normalized_severity": "Low", "package": { "id": "", "name": "glib2", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "z6EnRvmkq3BmM0fg3cIFAQ==": { "id": "z6EnRvmkq3BmM0fg3cIFAQ==", "updater": "rhel-vex", "name": "CVE-2025-55131", "description": "A memory exposure flaw has been discovered in Node.js. A flaw in Node.js's buffer allocation logic can expose uninitialized memory when allocations are interrupted, when using the `vm` module with the timeout option. Under specific timing conditions, buffers allocated with `Buffer.alloc` and other `TypedArray` instances like `Uint8Array` may contain leftover data from previous operations, allowing in-process secrets like tokens or passwords to leak or causing data corruption.", "issued": "2026-01-20T20:41:55Z", "links": "https://access.redhat.com/security/cve/CVE-2025-55131 https://bugzilla.redhat.com/show_bug.cgi?id=2431350 https://www.cve.org/CVERecord?id=CVE-2025-55131 https://nvd.nist.gov/vuln/detail/CVE-2025-55131 https://nodejs.org/en/blog/vulnerability/december-2025-security-releases https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-55131.json https://access.redhat.com/errata/RHSA-2026:2782", "severity": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L", "normalized_severity": "High", "package": { "id": "", "name": "nodejs-full-i18n", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:22.22.0-1.module+el9.7.0+23896+b5802de9", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "zAQhwfD+1kpXY0CwZC6HxA==": { "id": "zAQhwfD+1kpXY0CwZC6HxA==", "updater": "rhel-vex", "name": "CVE-2025-24014", "description": "A flaw was found in Vim. In silent Ex mode (-s -e), Vim typically doesn't show a screen and operates silently in batch mode, however, it is possible to trigger the function that handles the scrolling of a GUI version of Vim via binary characters. The function that handles the scrolling may trigger a redraw, which will access the ScreenLines pointer and can cause a segmentation fault condition. This may lead to an application crash or other undefined behavior.", "issued": "2025-01-20T22:53:14Z", "links": "https://access.redhat.com/security/cve/CVE-2025-24014 https://bugzilla.redhat.com/show_bug.cgi?id=2339074 https://www.cve.org/CVERecord?id=CVE-2025-24014 https://nvd.nist.gov/vuln/detail/CVE-2025-24014 https://github.com/vim/vim/commit/9d1bed5eccdbb46a26b8a484f5e9163c40e63919 https://github.com/vim/vim/security/advisories/GHSA-j3g9-wg22-v955 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-24014.json", "severity": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L", "normalized_severity": "Low", "package": { "id": "", "name": "vim", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "zDmU3WG0c3AQYw7NFebUCQ==": { "id": "zDmU3WG0c3AQYw7NFebUCQ==", "updater": "rhel-vex", "name": "CVE-2022-3234", "description": "Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0483.", "issued": "2022-09-18T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2022-3234 https://bugzilla.redhat.com/show_bug.cgi?id=2129370 https://www.cve.org/CVERecord?id=CVE-2022-3234 https://nvd.nist.gov/vuln/detail/CVE-2022-3234 https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-3234.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "vim", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "zE3cPdw4Ma9jQQUVeE/hdg==": { "id": "zE3cPdw4Ma9jQQUVeE/hdg==", "updater": "rhel-vex", "name": "CVE-2026-35414", "description": "A flaw was found in OpenSSH. This vulnerability arises from the incorrect handling of the authorized_keys principals option in uncommon scenarios. Specifically, when a principals list is used with a Certificate Authority that includes comma characters, OpenSSH may misinterpret the input. This could lead to security bypasses, potentially allowing unintended access or information disclosure in specific authentication contexts.", "issued": "2026-04-02T17:08:15Z", "links": "https://access.redhat.com/security/cve/CVE-2026-35414 https://bugzilla.redhat.com/show_bug.cgi?id=2454490 https://www.cve.org/CVERecord?id=CVE-2026-35414 https://nvd.nist.gov/vuln/detail/CVE-2026-35414 https://marc.info/?l=openssh-unix-dev\u0026m=177513443901484\u0026w=2 https://www.openssh.org/releasenotes.html#10.3p1 https://www.openwall.com/lists/oss-security/2026/04/02/3 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-35414.json https://access.redhat.com/errata/RHSA-2026:13381", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N", "normalized_severity": "Medium", "package": { "id": "", "name": "openssh-clients", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:8.7p1-49.el9_7", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "zHSqcJBwH0Go6UqHQ1Fu/Q==": { "id": "zHSqcJBwH0Go6UqHQ1Fu/Q==", "updater": "rhel-vex", "name": "CVE-2026-13346", "description": "A flaw was found in pip. When processing doubly-encoded package URLs from malicious package indexes, pip incorrectly handles the file paths. A remote attacker could exploit this by convincing a user to download or install a package from such an index. This could allow for files to be installed to arbitrary locations on the system, potentially leading to system compromise. This vulnerability primarily affects users utilizing the `pip download` command with the `--only-binary` option.", "issued": "2026-07-29T18:33:50Z", "links": "https://access.redhat.com/security/cve/CVE-2026-13346 https://bugzilla.redhat.com/show_bug.cgi?id=2508514 https://www.cve.org/CVERecord?id=CVE-2026-13346 https://nvd.nist.gov/vuln/detail/CVE-2026-13346 https://github.com/pypa/pip/pull/14110 https://mail.python.org/archives/list/security-announce@python.org/thread/L2BNQGGVQCEV7DROOORQ7WFKKFF2OOQX/ https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-13346.json", "severity": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:H/A:L", "normalized_severity": "Medium", "package": { "id": "", "name": "python-pip", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "zL8cYwtASK3csnxhG4umrQ==": { "id": "zL8cYwtASK3csnxhG4umrQ==", "updater": "rhel-vex", "name": "CVE-2026-1528", "description": "A flaw was found in undici. A remote attacker could exploit this vulnerability by sending a specially crafted WebSocket frame with an extremely large 64-bit length. This causes undici's ByteParser to overflow its internal calculations, leading to an invalid state and a fatal TypeError. The primary consequence is a Denial of Service (DoS), which terminates the process.", "issued": "2026-03-12T20:21:57Z", "links": "https://access.redhat.com/security/cve/CVE-2026-1528 https://bugzilla.redhat.com/show_bug.cgi?id=2447145 https://www.cve.org/CVERecord?id=CVE-2026-1528 https://nvd.nist.gov/vuln/detail/CVE-2026-1528 https://cna.openjsf.org/security-advisories.html https://github.com/nodejs/undici/security/advisories/GHSA-f269-vfmq-vjvj https://hackerone.com/reports/3537648 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-1528.json https://access.redhat.com/errata/RHSA-2026:7302", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "High", "package": { "id": "", "name": "nodejs", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "aarch64|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:22.22.2-1.module+el9.7.0+24157+8ddb2461", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "zXyE3S2RgbWC3bSm5zxzpw==": { "id": "zXyE3S2RgbWC3bSm5zxzpw==", "updater": "rhel-vex", "name": "CVE-2025-58767", "description": "A denial of service flaw has been discovered in the rubygem REXML. Certain input can cause excess cpu usage and given sufficiently large input this can affect program performance.", "issued": "2025-09-17T17:45:58Z", "links": "https://access.redhat.com/security/cve/CVE-2025-58767 https://bugzilla.redhat.com/show_bug.cgi?id=2396186 https://www.cve.org/CVERecord?id=CVE-2025-58767 https://nvd.nist.gov/vuln/detail/CVE-2025-58767 https://github.com/ruby/rexml/commit/5859bdeac792687eaf93d8e8f0b7e3c1e2ed5c23 https://github.com/ruby/rexml/security/advisories/GHSA-c2f4-jgmc-q2r5 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-58767.json https://access.redhat.com/errata/RHSA-2025:23063", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "normalized_severity": "Medium", "package": { "id": "", "name": "ruby", "version": "", "kind": "binary", "normalized_version": "", "module": "ruby:3.3", "arch": "aarch64|i686|ppc64le|s390x|src|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "0:3.3.10-5.module+el9.7.0+23651+15dc1615", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "zY/8tgCkQEbX9yVIGbkTFQ==": { "id": "zY/8tgCkQEbX9yVIGbkTFQ==", "updater": "rhel-vex", "name": "CVE-2026-5450", "description": "A flaw was found in glibc (GNU C Library). This vulnerability occurs when an application uses the `scanf` family of functions with a `%mc` format specifier, which is used for dynamically allocating memory for character input, and provides an explicit width greater than 1024. This specific combination can lead to a one-byte heap buffer overflow, potentially allowing an attacker to corrupt memory.", "issued": "2026-04-20T20:55:41Z", "links": "https://access.redhat.com/security/cve/CVE-2026-5450 https://bugzilla.redhat.com/show_bug.cgi?id=2459853 https://www.cve.org/CVERecord?id=CVE-2026-5450 https://nvd.nist.gov/vuln/detail/CVE-2026-5450 https://inbox.sourceware.org/libc-announce/b11f0003-6ec1-4bd6-b9de-9e38a4efeca3@redhat.com/T/#u https://nvd.nist.gov/vuln/detail/CVE-2026-5450#range-21286997 https://sourceware.org/bugzilla/show_bug.cgi?id=CVE-2026-5450 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-5450.json https://access.redhat.com/errata/RHSA-2026:33226", "severity": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "glibc-devel", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "0:2.34-272.el9_8", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "zY7J45b8Kt4bFIMHib/PGQ==": { "id": "zY7J45b8Kt4bFIMHib/PGQ==", "updater": "rhel-vex", "name": "CVE-2026-21637", "description": "A flaw in Node.js TLS error handling allows remote attackers to crash or exhaust resources of a TLS server when `pskCallback` or `ALPNCallback` are in use. Synchronous exceptions thrown during these callbacks bypass standard TLS error handling paths (tlsClientError and error), causing either immediate process termination or silent file descriptor leaks that eventually lead to denial of service. Because these callbacks process attacker-controlled input during the TLS handshake, a remote client can repeatedly trigger the issue. This vulnerability affects TLS servers using PSK or ALPN callbacks across Node.js versions where these callbacks throw without being safely wrapped.", "issued": "2026-01-20T20:41:55Z", "links": "https://access.redhat.com/security/cve/CVE-2026-21637 https://bugzilla.redhat.com/show_bug.cgi?id=2431340 https://www.cve.org/CVERecord?id=CVE-2026-21637 https://nvd.nist.gov/vuln/detail/CVE-2026-21637 https://nodejs.org/en/blog/vulnerability/december-2025-security-releases https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-21637.json https://access.redhat.com/errata/RHSA-2026:2782", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "npm", "version": "", "kind": "binary", "normalized_version": "", "module": "nodejs:22", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "1:10.9.4-1.22.22.0.1.module+el9.7.0+23896+b5802de9", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "zYQmqjwBNORHvvIZjBy6jg==": { "id": "zYQmqjwBNORHvvIZjBy6jg==", "updater": "rhel-vex", "name": "CVE-2026-25679", "description": "The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.", "issued": "2026-03-06T21:28:14Z", "links": "https://access.redhat.com/security/cve/CVE-2026-25679 https://bugzilla.redhat.com/show_bug.cgi?id=2445356 https://www.cve.org/CVERecord?id=CVE-2026-25679 https://nvd.nist.gov/vuln/detail/CVE-2026-25679 https://go.dev/cl/752180 https://go.dev/issue/77578 https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk https://pkg.go.dev/vuln/GO-2026-4601 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-25679.json https://access.redhat.com/errata/RHSA-2026:8841", "severity": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "normalized_severity": "High", "package": { "id": "", "name": "go-srpm-macros", "version": "", "kind": "binary", "normalized_version": "", "arch": "noarch", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:a:redhat:enterprise_linux:9:*:appstream:*:*:*:*:*" }, "fixed_in_version": "0:3.6.0-14.el9_7", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "zec/1Gm7Idd0fQLOCpU8jA==": { "id": "zec/1Gm7Idd0fQLOCpU8jA==", "updater": "rhel-vex", "name": "CVE-2025-15367", "description": "A flaw was found in the poplib module in the Python standard library. The poplib module does not reject control characters, such as newlines, in user-controlled input passed to POP3 commands. This issue allows an attacker to inject additional commands to be executed in the POP3 server.", "issued": "2026-01-20T21:47:09Z", "links": "https://access.redhat.com/security/cve/CVE-2025-15367 https://bugzilla.redhat.com/show_bug.cgi?id=2431373 https://www.cve.org/CVERecord?id=CVE-2025-15367 https://nvd.nist.gov/vuln/detail/CVE-2025-15367 https://github.com/python/cpython/issues/143923 https://github.com/python/cpython/pull/143924 https://mail.python.org/archives/list/security-announce@python.org/thread/CBFBOWVGGUJFSGITQCCBZS4GEYYZ7ZNE/ https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-15367.json https://access.redhat.com/errata/RHSA-2026:4168", "severity": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N", "normalized_severity": "Medium", "package": { "id": "", "name": "python3", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|i686|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "0:3.9.25-3.el9_7.1", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "zqGJegkbTlVqcHBa6HtRTQ==": { "id": "zqGJegkbTlVqcHBa6HtRTQ==", "updater": "rhel-vex", "name": "CVE-2025-14017", "description": "A flaw was found in curl. When performing multi-threaded LDAPS (Lightweight Directory Access Protocol Secure) transfers, changes to Transport Layer Security (TLS) options in one thread could inadvertently apply globally, affecting other concurrent transfers. This could lead to unintended security posture changes, such as disabling certificate verification for other threads. This vulnerability can result in a security bypass, where expected security checks are not performed.", "issued": "2026-01-08T10:07:05Z", "links": "https://access.redhat.com/security/cve/CVE-2025-14017 https://bugzilla.redhat.com/show_bug.cgi?id=2427870 https://www.cve.org/CVERecord?id=CVE-2025-14017 https://nvd.nist.gov/vuln/detail/CVE-2025-14017 https://curl.se/docs/CVE-2025-14017.html https://curl.se/docs/CVE-2025-14017.json https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-14017.json", "severity": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N", "normalized_severity": "Medium", "package": { "id": "", "name": "curl", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "ztB6Kn+K/mTyhZBUwqsoDw==": { "id": "ztB6Kn+K/mTyhZBUwqsoDw==", "updater": "rhel-vex", "name": "CVE-2026-41411", "description": "A flaw was found in Vim, an open-source command-line text editor. This command injection vulnerability occurs during tag file processing. A local user could craft a malicious tags file containing backtick syntax in the filename field. When Vim resolves a tag from this file, it executes the embedded command via the system shell, leading to arbitrary code execution with the privileges of the running user.", "issued": "2026-04-24T16:51:39Z", "links": "https://access.redhat.com/security/cve/CVE-2026-41411 https://bugzilla.redhat.com/show_bug.cgi?id=2461614 https://www.cve.org/CVERecord?id=CVE-2026-41411 https://nvd.nist.gov/vuln/detail/CVE-2026-41411 https://github.com/vim/vim/commit/c78194e41d5a0b05b0ddf383b6679b1503f977fb https://github.com/vim/vim/releases/tag/v9.2.0357 https://github.com/vim/vim/security/advisories/GHSA-cwgx-gcj7-6qh8 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-41411.json https://access.redhat.com/errata/RHSA-2026:28209", "severity": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H", "normalized_severity": "Medium", "package": { "id": "", "name": "vim-minimal", "version": "", "kind": "binary", "normalized_version": "", "arch": "aarch64|ppc64le|s390x|amd64|x86_64", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*" }, "fixed_in_version": "2:8.2.2637-26.el9_8.6", "arch_op": "pattern match", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false }, "zx97OaxgXH8j+mFWesQySQ==": { "id": "zx97OaxgXH8j+mFWesQySQ==", "updater": "rhel-vex", "name": "CVE-2022-1620", "description": "A flaw was found in vim, which is vulnerable to a NULL pointer dereference in vim_regexec_string() of the regexp.c function. This flaw allows a specially crafted file to crash software when opened in vim.", "issued": "2022-05-08T00:00:00Z", "links": "https://access.redhat.com/security/cve/CVE-2022-1620 https://bugzilla.redhat.com/show_bug.cgi?id=2083029 https://www.cve.org/CVERecord?id=CVE-2022-1620 https://nvd.nist.gov/vuln/detail/CVE-2022-1620 https://huntr.dev/bounties/7a4c59f3-fcc0-4496-995d-5ca6acd2da51/ https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-1620.json", "severity": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "normalized_severity": "Low", "package": { "id": "", "name": "vim", "version": "", "kind": "source", "normalized_version": "", "cpe": "", "detector": null }, "distribution": { "id": "", "did": "", "name": "", "version": "", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "" }, "repository": { "name": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*", "key": "rhel-cpe-repository", "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*" }, "fixed_in_version": "", "Self": { "space": "", "name": "" }, "Aliases": null, "Invert": false } }, "package_vulnerabilities": { "+8b2rLdXTkZ4Ylx7vWU2tQ==": [ "DrIVK8+yvV91OzF2CS9o5A==", "gg6QYPBlPoN8zpwNyr7x6w==", "+mMVfpx9oV/yykDKHrEHwQ==", "QskDoDnTSvrQeDXklM4YOw==" ], "+bwl6UbMaWOBWdHNekJsEw==": [ "LiIvRwi7+1nAVErMH0hoaQ==", "T1g7X8ESyY5xnqSayytC4w==", "7KIsr/dNSaeE3wdgBYfrgQ==" ], "+kdviPHeaPmwEsPQK85KjQ==": [ "2TDjlt2gAEWsLyBBPigFYw==", "5BksN0izCeDRrtFMsNCyvg==", "6hAQW3vY9ZA/8datv1rY4g==", "0E1VjQWdmolR9lr9ElIZZQ==", "M293c+QguJ/aaYP3cMwfyQ==", "mZCCwO//htsOIXazj/SeOw==", "41OUTxSbBLQGne4TzJuTQg==", "Y3fno6fRSl46BTZQlReNKg==", "AF4l+pfrs0Si/0Bf3toHtA==", "BXYBFOm74zXwzmdOdyNhzA==", "VHPIyM/Zt8Ma4iUgT7UsMw==", "5pY8wChj1DLVETzEMa22Ig==", "DW2DUdu8ljrldYoM7Mprtg==", "Teb2ue8GsbLkJUoUyGyGsA==", "b9vpp7YMXEAHYnt8gPj4PA==", "Xnj4Kpl+tPifTh/+xOnglw==", "+20onLS/dWLg9saGZqMvvA==", "5mdxwKcXZHEqEguvWMJQ3w==", "DsZp+BRVz/OTV0jFXHylmA==", "2Apbu80O6R41VOd2ICqODw==", "swCufUgs8xGhLcR4oX101Q==", "7tbcfIdYm3nwAiNQR5eK/Q==", "TvusqX9NwPqfJWjNoF5ThA==", "JYnbFl5uln18531ZOk6t8g==", "6+K4D2mkqcFFftanju984w==", "mgY0OXX1J12mJy1iNllE3A==", "bQ1N5xPGM/wU59iAjdfQ6A==", "40wPd5q9E1sRluf3JeA8hw==", "hbenTywo0l7anle5/bJQBw==", "t/e+iLCKcOMzXEuhRWry6g==", "nZ2DFaqiaft4/Dqj5SJp4Q==", "7d4YdteAff532bV2Gg5lmw==", "+fYUom03o4taYF0LdBwDsg==", "TFhgbPsd17URo8rNJh9SWQ==", "EGiW9TUcKA6dU0wY//GJ7w==", "EmYlXCkWzU0dM5AZphsDzw==" ], "/Bb6eVO+je9kbuIGTvt6Ww==": [ "tbhLz74i3ShwS72WbIsoOA==" ], "/L1kFEoHZTukrNTCQLypFQ==": [ "aOUfuyvyyWEe7Z1IZT+fGw==" ], "/XUXPfxfCal3j0ldx+af3A==": [ "5VGw1oph7DgrzGqxDXSJIA==" ], "/h/TBQhfoSMCmey5oN87jA==": [ "922No9XwoInf4IDk2/SEuA==", "VJENPcmZwV+YJWnk88f2ug==", "0q4mJ3RDNOZ/qRqKXOz7Tg==" ], "/ub7EE8Da46T0x7lRdlVJg==": [ "T+jfDhqJcXwVQ38oWEz/6g==", "e0/Fzu8wfMZp9zX32i9rMQ==", "7CfySs4FmTkWgJPjEar4eg==" ], "1p1wTPVFlokLdC9/X3ksGg==": [ "KHHIjt6Egtc7csaIbQ3mbw==", "xh8zszQflFXgahc/vYUUWQ==", "1geoBO6lBMXVRM+dfApwgw==", "iYahLjRBvYk4Zq4Nz9JtHg==", "4o31bbgKJ2cSqPGCPyFjLQ==", "Hg9hK3dp3A/kFUiUwl8AoQ==", "Hoba3nMTEuYEZMkGsuPdgg==", "Hk8k4qPIhaJI1mipqA9iiw==", "UL/j2Mi69IC+SfjF07J7rg==", "Uk5o/hpaP3fKN3OvrwIC+w==", "BaEDBo8YJd5pwSQNkGzAFg==", "SQcVquEPU3fE4fDQPb3bLQ==", "D/8pir/aXD8E2iIv4dA/Pg==", "rxGz0C3kTCQwThekjofucw==", "3285RkL43CGSYbmius5+sg==" ], "20ttMIcZDyeRDwHLGLpY5g==": [ "ZhTLRTlcbZumWmiritxOAw==", "1NSoxvCfCFl4ic84FsWulA==", "hUsu+oNx2zrpqDVbukPejw==", "/eHyvb2Yvu/vFkWHODEbfw==", "Fw+ArhlgBhD30C7D93vYhg==", "VwRZMkFc1pqkTIff/cjZtQ==", "4TbG63vud59mo+N/aCOqpg==", "B+E5cjNC599y+nmprS3J2Q==", "SfJy5i/9nh3s5fpZxZDQCg==", "Vt9MtkEoE3rKa0ninTNTkg==", "TT6ujth4uzblGI4VcnKBOw==", "2Yo5V5wVVXhJ0VU+H57P9g==", "Lr5d+BjmGHyC+AWnFQJRTA==", "4W4pMj/8K/7jCdYTXT5uEg==", "Dif/+rLLCWjJt5Bzau2zsA==", "4H2TsDPy1XcHidTqNqeZpg==", "4w9ia49tOv0+yiq1lgkH0w==", "YXlS56JkLiuXwjbDNwkvdw==", "Rrms4yDDctk9MqbL4wHXYA==", "eM2mlJEyKuGpc2sJMlq4xA==", "OaLF1hM9BwMPMfYWn9kNEA==", "Ds5dBDqvRggZONNskvuAwg==", "mZC3gBcn6x1aC7q9hXUpKg==", "y/vNaOETNDNWhjGaBLNhRA==", "EFXoHkta9v8NXWXURLTCBw==", "lCc1jyHfsFJK2HfULjN8pA==", "FW+E40XkknH5Jv24oip5Ow==", "GW37uYQxwwgJBIDtA/dT2g==", "d9oy2JiAKtie2N1lu2J6ew==", "m/cpX9gyFETv4B87S/qRxw==", "V2/vsNJeH5BxrzuVis91/A==", "VuDrFzex6yJBFISXUtfUGQ==", "V8tjixCGBsaAWvQP5Hvn+A==", "fuOmX+MQWgJjrWZ2kXbtlQ==", "IPiVFeI45MBrWEz4KZcdQQ==", "ZuhhG1bpyIKZ8+BvJQvoUQ==", "RxiYxX3H5lL8cc7k0ac/mQ==", "4Ir8FDWM4WPrO3dybbfnYQ==" ], "2QUKRSh7NN4cTp6+OOEm8w==": [ "DcyOxGZU+Qt6lxShaMXeig==", "2fxlvvJDIsNRRQuBzDD4oA==", "+ihXD4KFgwxouHTRyQ5EbA==", "1WaijHYxan9df8+fB0SQJQ==", "vSLFgRYoehmDve19rxyjcw==", "czyzjx8xL/qpVEGcPiV7Og==", "SdlHZBjfHlAbNa/I1YXwQA==", "/km0PGGx5jgJEo1YpWisAQ==", "K3SBN066vVckR2wFFfybNw==", "RNhf6Q4lLrEWcaxYFUvj7A==" ], "2gCbp4kt+cF44NF/LqukDg==": [ "S5Dzz9cigoJDCj8s5UcT0g==" ], "2tnKv76FL7fQoypGU9dvWQ==": [ "eiMh0pZiJlWSr3FHHfVKhg==", "FroZeKbNhNx69+bj8o0OqQ==", "vZIHu7rsNO8R8If5mjyTiw==", "tbkEtEs3aa+p2/YQaD8BfQ==", "dcH4AHY4X+K0bO3O9nqJrQ==", "I3+uP7bb+nPtzRYHH2UUgw==", "d+D4c9x4GMdq33+dJrszxQ==", "IeTK1HBLKpS1+gfVSPrpvg==", "ElE6r7xQZAfd5MScs95BXQ==", "lJ8RTw7m+AgAnWW6upSntA==", "lWdVDKK0NI1ECjrQyrQZhA==", "guG+lyS5JQIDSZS6MEfIow==", "/MgFHW097IAGIZkNc/Fltw==", "RRtBD+EuTLmzasgAaBJyZw==", "5kIWJ0hrLSTGTMvu/m2VBg==", "sAlO/t+jkkm59mLcdOgB9w==", "1w+glHHFE32ql3XJuIAYWQ==", "4wegIDtvEZ75QrQWM65auQ==", "MIaYLvbJRWXm7UR3+CJ1PA==", "MMLwOzBcCET4jaa3dPuTwQ==", "q5joCCZ2cOTa0rXBUtiSpQ==", "QaKFgrY/cUPl6Ls/xAwlFQ==", "5C8DQrs9fwpmV8rRYlvfCQ==", "mmFI4mA7exd6BfbwTUwJfQ==", "r4Fu2fNYrl5cfm4zX5YpZQ==", "1CCABRgs/s9xxQcDgxw00A==", "e/bnYsWq3UNe4TO8qzzb8A==", "knUP7wXG3O435cJDvu9Thw==", "rwC2lB0lflNzttbo5Agt3g==", "gNGv6C2nj/tHk2ntVJUOWw==", "4WgtH2AC4w3jDaPCHFqEaw==", "RoQvxPrgcpXyTej834bT2Q==", "oIBUxFCAPk4vRXBwpcmtFw==", "cly/G/AvUZQM2J1YMymkpQ==", "uO3OOEY6W3k9QH/tNVK0LQ==", "4LZWGm07jnOHHBGX2FzAwg==", "oGhsPyoyEtiEHT7/0qF+CQ==", "CQPV/OxtJ+DwYc6C4gniNQ==", "PqOWZHQu7W9hh0UlnMkHAQ==", "Bu9dxnhmsLXDd3x0oRPHfA==", "k9jtJIr2beiO7DTwypDNWw==", "uPUnbuUJlh23l0km8iQ2tA==", "Kr2KcyJfYQ8J1RDorzTofQ==", "8XLKalkulxeAh8qfecmGlA==", "hUC86VV8kD262xFcev0ZiA==", "i2CsObRdsFCFCIvnyVzw5g==", "uEn9qA67O/SoYHOtH/EL2w==" ], "35MvZs/A5NUjD+xZ1Vlnyw==": [ "j7yoSCks+i8LevHtgFwCwQ==" ], "38FdUixzs3eDg/NPZRiJIA==": [ "glhykijCt1euysZQdgNP+A==", "WywM/OB6w5X8T3BuZ5B9Ow==", "2BvFtePbGxsdaSFZvYiVWQ==", "jLwTZ1iGPDmq13+JErDhGQ==", "0+lfA724ypJdmbNfIKjiog==", "q0+0u3TKsGvCBRBK4RgVAw==", "x0MBdOYdUOYndbRBnoiEzw==", "qIUMlexpn07c5Ly85v5AjQ==", "kGY3woMWc1W36Wi2YstJ0Q==" ], "3nZGfOwzhExfw1oIgyJNUg==": [ "Qmv/HFfBCKuu6eMPjatnfw==", "e0/Fzu8wfMZp9zX32i9rMQ==", "7CfySs4FmTkWgJPjEar4eg==" ], "4DALE9qlRQsocTmGTN3jhg==": [ "+yuesL9NY5Qpvu7wv7kHHA==", "UivJsSMDjJ5Fv8zzjiEyGg==", "dzniYI3/1uomz0XJinM4FA==", "LI6QdIyga6/I93JFZfZG6g==", "p1r6Su9OK5/1nhaGskH+Pw==", "OZs5l4RWFkhsw7PWdRXzZg==", "RPAl+kgiy/xyZ/LXXbemyw==" ], "5+tHFkkNi+1rUDSrmgYdkw==": [ "rqKN8+22i5Wi/U+pG39tNg==", "jVOV80BPiMF1EYk2uq9ohg==" ], "5JAFUJWmy04+T6x2oJw2jg==": [ "qFIYjZJeFnLAVC7lR0n6oQ==", "DTApvRZh1HJD5XbbpU3ahw==", "/Q70+j219nLwNP4Phg4sag==", "8kndQj/aRn+NNJdGVP9v4g==", "u0cs09LPRVEEfen4PHM6gA==", "jiVVTQmOtKqVixv7agF/Hg==", "y6oEGtDp1H5C2csZKAF6bQ==", "RHShqbO2hqcBNPYbKDg/3A==", "8ZCpE1M7eqNdy615aO2gLQ==", "br+ShorUFea/O+vyZNDWZQ==", "SGRK/IsCkjX097oRuDhiEQ==" ], "6HUC1/dPziZpbtWEymw0nQ==": [ "AzESlP5N9z0ume0UnpGELg==" ], "7mDaaxs3ev+uNEDYC97U3Q==": [ "1npmxgSnoYj2MyAhQMaE7g==" ], "7oPP0/pHHdyRIJK6pYsCbQ==": [ "H6ZekKRHFt5pG1Ua5PfWzw==", "AwiZctxQMpOexVhl+RZ/eQ==", "g7YHFtZ3mWRLeNfv7s6g4w==", "r2VJfkGmsY6Tx/luoo7BHQ==", "aWSD4ccAhJBO5Heyt5mTxQ==", "J9gq9t3ASg6Sp5n2QRemEA==", "zec/1Gm7Idd0fQLOCpU8jA==", "XL+Z1BeLmN8Pi7RZ6D6z/w==", "58xLQ2pjmhkIctIR/pZ5pw==", "aKS5Pwr8YswsXS77DXcixA==", "A/L5cxR0pUN6sSD1UL7wlw==", "2Cyt+PunG/cjJJ5UZqrqrg==", "siR3bdJZdvZI9snXBeScxA==", "Kso3mzUHoYi+5+CqbHmG2w==", "dOcg60kDi70nJl9Km2ugWQ==", "Rd6dUUcujScJTEeiIRkyqw==", "hLNqQASPtA3T5zDQurOMBA==", "Y7j+Hhv6OMvu2cmEQkev4Q==", "Rrms4yDDctk9MqbL4wHXYA==", "eM2mlJEyKuGpc2sJMlq4xA==", "OaLF1hM9BwMPMfYWn9kNEA==", "Ds5dBDqvRggZONNskvuAwg==", "mZC3gBcn6x1aC7q9hXUpKg==", "y/vNaOETNDNWhjGaBLNhRA==", "EFXoHkta9v8NXWXURLTCBw==", "lCc1jyHfsFJK2HfULjN8pA==", "FW+E40XkknH5Jv24oip5Ow==", "GW37uYQxwwgJBIDtA/dT2g==", "d9oy2JiAKtie2N1lu2J6ew==", "m/cpX9gyFETv4B87S/qRxw==", "V2/vsNJeH5BxrzuVis91/A==", "VuDrFzex6yJBFISXUtfUGQ==", "V8tjixCGBsaAWvQP5Hvn+A==", "fuOmX+MQWgJjrWZ2kXbtlQ==", "IPiVFeI45MBrWEz4KZcdQQ==", "ZuhhG1bpyIKZ8+BvJQvoUQ==", "RxiYxX3H5lL8cc7k0ac/mQ==", "4Ir8FDWM4WPrO3dybbfnYQ==" ], "7qAMBOvJ2FYxpK9n05pI7Q==": [ "GMnASWjZHihDlhJdlv57Iw==", "Xms/F5NRiyBcCNuPxw8aoA==", "v9qMLnWqPbLz+WC1hPhb9g==", "4os+HU28VQ7buZvoEKQ/kg==", "QG/MLFKQxQOk84kYcs5X4A==", "6QirCtH9GCLBepYrxwQRIg==", "qfyF3TC4Vao8jmQ0UiB8kA==", "dXN2fYt7gJPawfay7UcWxA==", "dNLHuLPIX/j9HB0bv6uBww==", "M29Ot9TqS/JJH7ICJCbCog==", "1PA9NgR35/MRqgXqIHuktA==", "KqyZJW2L6JQ2vf0yVMm6jg==", "DNT7Ncyac0R7hltidKFOsA==", "QpRZEOKvwJh9R+ZiKkkeqQ==" ], "7ra56f21gLrcSpBD8a9+NQ==": [ "TccjTp2Y8sTyWrjrm24IKA==", "e0/Fzu8wfMZp9zX32i9rMQ==", "7CfySs4FmTkWgJPjEar4eg==" ], "8/+OIixLXu+fX/6UoQwl/g==": [ "NHJdq5G883S5W8foR85U2A==", "zYQmqjwBNORHvvIZjBy6jg==" ], "87VUAbsTn2cSvq70x9SIKw==": [ "px8rY0l1xijMh1q/wodpIQ==", "/Zbh/oTVYOn4fLQqcvLFNw==", "Xvp9bEwIvwUrD61DySkWgA==", "4IJCXmCxOCf3t6/rsnea/A==", "VvaHtDrsl/vKtefhsm7IUA==", "AKiLQ/xfYs8rccBZaw62bQ==" ], "8OE8ax/E0UXByEoVMTfkbA==": [ "dDPwWBP+ziJTbpE/idIe+w==", "4u3exWl+MPcCOYOgbQLM+A==", "AGwkok3hPLMsQFqdif59+w==", "/s8Q0HsneAZhk9Mgclm/OA==", "eWiVyh/zommMEkP0Gx9Oow==", "HwrQV7Eq97lmWod0H+Mywg==", "L1NHjBKVcGa4hqzsfSCCQg==", "/jvSCV2RwJ6c/Llx9z8uvA==", "e/EuZlSZUQTHCSl8kHuFag==", "/9MMSCBwxCiKjJobh+tDpw==", "NF/ewEROjeKYjnb1lHH2iw==", "2fFhV4f06vNDz4aMbkPOZA==", "D4G1BWjcvupPxJokCdnHGA==", "j/vFtwZCr4ow5q2VPKgR9g==", "D7U85Qc3CYAscEzhSfT76A==", "qh5gUahI9nge5StfpD2Efg==", "GoTAJ6nke0a3zoxJ8lkaAg==", "GWKQvGJTKzyU9GiQECoFhg==", "XPfYdQhyLnN89+qpSA6LWg==", "bjyLMZdYnkrpUxDySiQ34Q==", "ffV5WUu4x4B5YykIdxqFhA==", "Ep1W9j+OJARAHSERuL7J7Q==", "Jrkns8qeStFRPhcitcuZ4w==", "ixD2h349uZz3eCy55KxIlw==", "y7I268PAr74OoToX85XE8w==", "5amguv6OT1njd8r+RXMCQQ==", "mINycH+x60PTfgPLuT1gJw==", "+U7CyAHaY71mhNm2Xnq2uw==", "IDIT7Gfu8E9A+NfUxEcAbQ==", "2TDjlt2gAEWsLyBBPigFYw==", "5BksN0izCeDRrtFMsNCyvg==", "6hAQW3vY9ZA/8datv1rY4g==", "0E1VjQWdmolR9lr9ElIZZQ==", "M293c+QguJ/aaYP3cMwfyQ==", "mZCCwO//htsOIXazj/SeOw==", "41OUTxSbBLQGne4TzJuTQg==" ], "8dKij0lKhp8eGM5ynaMPfg==": [ "ySo9uDHfIeTwH0aLjgaN9g==", "TwbA7fBttKRHAyCkVC4IDQ==", "EUdYVqG8WVFrguzTJcoB9w==", "mNXETDKAQUXFDVp1hgY7fQ==", "v/Rdzpp9xZ3VFXBewTwV0A==", "07xwapz2PAAGV6vMF10zQw==", "t5kXgaRh+bn2vG112hLo2g==", "qIUMlexpn07c5Ly85v5AjQ==", "kGY3woMWc1W36Wi2YstJ0Q==" ], "8n6bVUPPsV3vtnz+vLHqKQ==": [ "PAegHDN7lb4f5q+9sjv8sQ==", "WHfk9C+FqONS5L1MuNtP+g==" ], "8uME+PFu6p/OAD7q+ZTVLw==": [ "ChVC4WOnGJkEsPC5QHmS4Q==", "A2s8gCjK3uaWI7+q7M5Aog==" ], "A5zg77FwqyQ7YbgSi5bkFw==": [ "Bh96oSV9q0619slTJCaM0Q==", "J7eLc/Mh7BobYrDH+tpguA==" ], "AUjudWCWcMUZtLYqynIMkg==": [ "iSzOvPxPGZr2PfJTBTQBCQ==" ], "At9otkYcx2c7gDG/+qxMog==": [ "yTSOiGJiuQRZ1n0kXjMC8g==", "ExqOQ5ldBNUvCH4EdaOK5w==" ], "BUmLEOIviku9guiDM/J5qA==": [ "l1pK1ezh6e0g8I+Dp2iK7w==", "sqtLRwfRzV6y9srK/2QK2Q==", "IFUwSX5dX69QHRHfvOeQDg==", "X7DmUVoCri5i6vdYVBBgXg==", "l6IrI73Pg+lrisEtcgX+0Q==", "mllkaOQAaJYNZpdIF7Bkbw==", "FQwXyPZ+oHyxQZ9RBQXbpw==", "Cpn7PI6CgTg1FJ1Ijp4TIQ==", "vMgggE6Cjv/N2Jk4Dk6FYw==", "6rEIsdyQtCC456AuGwgsDQ==", "+TrS27bZKgEeir9pISurnQ==", "3UNcgW64Eji4iyY2ZDB1cg==", "ctALzLE36TiW3KdxIlF4Mw==", "8MfvwX+dRI6Qt2H+x71rZg==", "d0nPfXoEZybRuV9TMDY3YQ==", "xC8Y7thfNSAfn5daCQFvgQ==", "X4Ym25zfqcH7/samBN+yPw==", "zqGJegkbTlVqcHBa6HtRTQ==", "/rrV/dLSeVDaHUnAvPeh7A==", "6+rn6nrQrafYloJtAeJ2Bg==", "smB1yCGhBb8gDhPAER7odg==", "S0PFhlHzk3DOoPuq+7jmPA==", "H1wshPoazj8pmzsnWAztZA==", "Pza9Y2xtH9MChVMkZwgw2A==", "vnI8VBZMnSK/Spr6qFIUOA==", "kDNo+1U3zj32TNGC/5DIKw==" ], "Cn4UOizx3r/8sEEZ0cgGfw==": [ "cXB5uJOI3UJ7dOyNiQwFDg==", "XPUXyp+BOEJyEGOgXafi8Q==" ], "CpfomSYboaXPZ9yn9NgGgw==": [ "IGF/2G1+7Y+pT7nmmFHvPw==", "e+FXR06J5tPREKXnCKeZWg==", "ajT6YifLzju5PlaUiX+EvA==" ], "DVWG3mWD7odZzCgFCUPZPw==": [ "j7yoSCks+i8LevHtgFwCwQ==" ], "DXPX19bdN5nJbVwnxKFlOA==": [ "JknhMYFxtGMAisBMILMboQ==" ], "EhaFwS5l8+kj0ips0KX28g==": [ "j2qyk9XQmGp7ssMhZKM8jg==", "CQNzMQJa1wEomWRr1m5WUQ==", "/wEypZTr5run3SLjfJxcSA==", "ztB6Kn+K/mTyhZBUwqsoDw==", "XkiVaSOj/tcz5wNKnglN4w==", "mXoGTWRL/KLyEYWh5uyvXQ==", "RATpPhLUqjEbe+XxyYxOOw==", "08ogBuWXS+d72R0TAjgJaQ==", "vTajNh0ysqaO8NuTMU//uw==", "JtGggrfMckWn0xvfWBMJJQ==", "1WQ/LJu/kefEuHRv58l0Lw==", "6LOgJE44rXWziB7/OMO/ig==", "Ob+LJ5zYHnbjt14Yf8W7UA==", "jVeIQzIm92EdkbCIlGT1qA==", "GnBCRP9H+R6do428z3nOkQ==", "2RZ3u6UmceVG9iB/xb73SA==", "0YVxD0vSH+0MhijemP/Jmg==", "6asSIEJz7ggo9QEXpbSOYg==", "HSaKorahiaNwGqqE2DJSaw==", "JmKf//IQj2eMVJFTB1Feyw==", "oVgcRSL89qnSRkMXpV8N8A==", "3WRC4Vl08/leTJ1MFHuCEg==", "+PjI2yN4wCMPyf1oygeT5Q==", "rJljaCTiTdw1uI1lvfy+hw==", "Y6TEBwH0+CoZ50j5sQV23w==", "+uMSPU5jbqI0+jsP/eX6PA==", "Q6H4f5u2pbj98wlSQQLoGg==", "aQGx6Am8fU9TZmcyiMNL4A==", "HlOu0EmTxHkjzmJeJEuJmw==", "5D5WFK01Su4Lrj4hhwDYGQ==", "UBzPfwycyyJOBETwdSTG/w==", "LkJjju2s50oKpBRyBT8s0A==", "r410Z5X0yojDsVg9YVcNqQ==", "rO5a9fYyaqaIZ4bH0M8fdA==", "0v5F4x1W0RxkklLvRs6NKQ==", "nNAYHDwpTrgu1xKD+v9Oww==", "s6kt2DqKLHgzYSGciPtGtQ==", "KsboTEAsiwsdLEKIDivkyA==", "2luu38jiVQvy6qOXHFgpAg==", "QX9gQ7esz1e73iQHmwojXA==", "Q0D37bmhhLGtYILIAMgFXg==", "XQDeROSRzMSiFTbbLCST/A==", "cMY+6QfPqyOZE380Mf5rIQ==", "w8af/LTYrBLWhYkZBSi2Lg==", "cjoCrbQlAeGxtTPUlcMPuA==", "GXMpRf2go/wGEbwpp9BPPQ==", "AwUdH/KSEhHnx1nx0tagUQ==", "JD0llI0bGUOG/VBz+9LeVQ==", "X10PEbhI2yv6KYFUPacecg==", "BS5Qx6nN3HmM64VVoKmayw==", "Ah03jmj/7fQOqUbg05PtZg==", "DNd0sdbW83acQbIl3FDaPw==", "s2uSNGuV+OyVW2eHDGWWKw==", "2UHqEqfMIIn53NkDlDEppQ==", "zAQhwfD+1kpXY0CwZC6HxA==", "g6spFzT6DoopzuQCE0pjRg==", "3Lvdmj//2sze9S8I3n8yrw==", "cxMZ2TEnkk6RdtuU9fDThg==", "o8O4Ttqnv0lQfm1yyfyVsw==", "6MW1lRUdNNc4s+6uD2JNvw==", "qWK7H7gz7e8gS19GJSeIIg==", "zx97OaxgXH8j+mFWesQySQ==", "qYORp6v9x0Jy6S8OKerZvw==", "QgRg8usqYLpC2SzTmhUKsQ==", "lz6O0nYiDpis8SScmTUuSg==", "Rd2hVVbUws+mcvoC7DaoiQ==", "qEhRdzGH44SGjJIcqcIv/g==", "YUwZZ9Cg1FloxBZV60vOCg==", "eekbTUpqIafepE8Hfmhn6g==", "TIcWaTRsDD52irGN4xUQyA==", "KB8w2g8b8sP5A8+iqhqw8A==", "kaUbMItvWrS1leJMEsAk9A==", "7AoZZiCMmvqX9d9WD62FnQ==", "OXr+UvfSDAQbLGP4xOBSMw==", "tLSR0X6hQ7hvyPbBXZslBQ==", "/YcdipQjiqJUDpddwhDiIw==", "0bK7Vo3x9SXQYvDvMmgzXA==", "rR226S9SV4WbmIVotM0CsQ==", "QbgvVzhz2dr5BDvAUM6wFQ==", "oyvtOIVUDqm1ruQx8vhRhA==", "6dwQWrojfQ/1hgTT2PQckg==", "uDfc8ZaPfrhTGcFwVaIvAA==", "BfDjqoaYrd0NKCGGxtokTg==", "6o8ui0RxMttDzkyqTDO5tg==", "SvhQ7tNvl6ANrVnaJ4cBNw==", "I3vwwgMxzxWo15otCOgvAw==", "6LazNwUBgu5kQGKPCQnaOw==", "zDmU3WG0c3AQYw7NFebUCQ==", "8efBqSZ3OYqd+nT8a21FNA==", "bh7RRRlNP555+LOFASdB0w==", "2sm08sXcjWtT2Gtu3CdSug==", "93O9BjbBwz1jYmTNCzgkUw==", "b2xf65/2S45gOxG8Grxy0g==", "BTToHfvg0weSXCH9D0acFA==", "qug1advw8m4TjVAUPEUPiA==", "00cDk2w3qfvdzMbO27c/+w==", "XuMP4XKeqFlYH9jgvFKXXw==", "W0TAw6aTfwXOMlJwloDkZA==", "2I/0B+uXhxpPJWXGwNGlLw==", "HHBOKYlzeD2Busv7btyBAA==", "lHLNxD93t7uUJfmDhNwvCQ==", "dO/rj/SVo/ZlfJAB2ajOEQ==", "SGI/AkdUGrhS5bQBrDpzJg==", "RCLRHWzoL8kWcamW6v1E6w==", "7sGexlbSpX41SOBbWHg8BQ==", "m9ROycwLgAur/M8HFSigEw==", "+hBhqk1qKnkU+nqn6a96qg==", "e7h3lwyDkLbzwbeza9/TWw==", "w1094TrprBpG+5TZJus6FA==", "ylg3k+AtgUcIl3hJiXNMlw==", "MLyBE3p9/9+LMOMl2JBi6w==", "Qe1reyLPtQVZ5wKqKa9jQA==", "Y/6FiFNJ+h2jXNTlPOzrnQ==", "XL1Nv8y45q8aiA92A99YyA==", "GfPY5zBbHJQI4ZGaDcJj2A==", "u1caIbS4Tk6y8c7sz8Hvhw==", "KYv6PwzjV6/5I33cZ9LUmQ==", "kTyfGInwWoCVv7gGPYCF5g==", "Q2616MMrHflQbREkbaxMFg==", "hxluEp8Si16NQcfaJDWcLg==", "8563iLEht/ghMGItALTFUw==", "19Kvl4LS7MCiBo2cRD5fxQ==", "bcO+GuPgyR+iGLy6+mF2Cg==", "NeZAaBfGrzLvaMKrJL7WlA==", "T5Nghm4crNWWnUrYvZZItg==", "gGrGej/Pj6/poAgebFb+dg==", "bACUKZThWu3kcO82NfO4eg==", "h+nOQU6khNxAH7kkGqVqkQ==", "AIlN8RmMOvhBveVuVAyHQQ==" ], "Esfj4A6yCPG0aR5IhgHmUg==": [ "cXB5uJOI3UJ7dOyNiQwFDg==", "XPUXyp+BOEJyEGOgXafi8Q==" ], "F5S3/GN2uyb/+Q/5rj2gBA==": [ "gBKPfFUBWkIoh/DpIktgJA==", "CO6FDlFyRSUjPhv7/gdAAA==", "novhorrUhD5n0pl3qmImIw==", "JLoYxSe6sUCueA3LPfbTLA==", "NxJdA8sdmOpi2KE8EaPazA==", "+CgZKiM2jpLyW2jlIXneLw==" ], "F6sWmqQXkobYs1E0otG8/A==": [ "UG+yX6nADJgJWegetH+HQg==", "xRDJz3P8IApYf+UqTsFimg==", "LUQxjpYcQwxSDC7CX78VUw==", "bf41zTvm6HAv6xdiXpwGWQ==", "EOFhzMVjLzNyQsRKP/y6ag==", "SH2AP7i0ZzGmFbD1kuJsew==", "G/nM9FqgWuICAFy4kMmJlA==", "bpwdCug2xQZhmaazCqwIew==", "j71n+HvL+1UIm3Tw+EUHpw==", "PvgbBaq86gnOp8hffKEHhQ==", "yNrm+PctJj5AEVwT8bDpBg==", "3KVKKCxdWl+iCbo/o6cUCw==", "Ur6VVwVyUIHSLLbySiZhfA==", "oED190j69/of7CStGTEa5A==", "YgehfkOilPM31dosmRXxDA==", "OwBRDeukhCJw3hE9ZsCdCg==", "lNSOU9e0rQLWWUuG6KmS+w==", "Vm1exr1mz0tcpwIoZQ3ySQ==", "BtU7U8JaAB8UA19RIrHuHQ==", "wM3p6vKgVqUkJtSPSQjDlw==", "uLJc9xWoMs4KcjASTFLV/A==", "aK9Mq6KdK8L3Pl0r1rTwYA==", "dtQx2uUyC6Kj72i0o1bELQ==", "kxWAVe7EWU20jParQphcRA==", "3R40oInfBrzPyywU8VZGOA==", "JAlZO0sgdy1FBW5F7Zj+Pg==", "ZCLP8N4soyt53A9I5VdxcA==" ], "FDdpwYO23GZzR/6AZCdQZA==": [ "HveCNT+j0lknlUOFTaqgtg==" ], "FEW4+DY0GhovHIdRCyqYhg==": [ "QZ8ts+eZBnwTfp8wZbfpwg==", "vFpvBSl3ZcIap1nZTTjWsg==", "AvmIxq5EDqjW4mtnnlw9lA==", "G1BYG6YufGP4p88wdWeAgg==", "6pxKX6FKH4aTek+6noKFjQ==", "Go9bB5Mq4W4FHPvmZKBhCg==", "RARCK1i4HMZsevzlwavFtw==", "LXM9CbBE9eK3grkTD73h+g==", "y/3qWQj3xOUQpm2CUr+ftg==", "4Ocx5vfc88FjutK1oBwpCQ==", "qN6ac9Xwm6AOaO1fAB7fOQ==", "5ZeuGlt87r+CNRRQDhU5uw==", "W+GZex0uR6OUn0BnVKDRXQ==", "f6oGdnhZomBa/bs3snB3kA==", "EJqYggmJ1CPHdE/+zAY7WA==" ], "Gfvf4LQKHStcGqbzaAe/lA==": [ "1cpz1Hzz2hsR9fx5YrxP3g==" ], "GrPCC9ybwOy98qwLdeCX6A==": [ "YQGeiQ1baJrwVuNrCjd79A==", "nicOe0HMeoCrfaBInGMpgA==", "mwfwMX3+sIJWibPk7jkY/Q==", "N5EbMRV7FNySo/Sn3CmU+w==", "SC1Dy3taETcbAxJ5m5vXqQ==", "zL8cYwtASK3csnxhG4umrQ==", "oGYbR6FNz1KIQ8VJiypCZg==", "txqyo4HZxt82KZ1LFkOAcA==", "cQ4uQyL9nbrYK9Ka1PjEaQ==", "VgtQ3XmdoIWt3qbuW7WZzQ==", "cI+dz7I9kKgyQoTuHBA+4Q==", "xvCKE5h7HgdGkBMwA/kPeg==", "SIuaHC7QSLhT9Coo7Xm2hA==", "J/M93jueASHywmph2g+HMg==", "9DXLRStQLAgyQnNJqYTJEA==", "4kuxrTpUDtZ3uFOEEztq9g==", "NfiEOtFyxMslIq3QwoTtjQ==", "mXtaaJBTQTZ/zl5a00GqaA==", "EOZFP6ki76xUja7Br+mpEw==", "q59Dz6hmc7o1qITDwl3CCw==", "cQHSxL+ZfKCYmJnTVIzcRw==", "OXJFeTFLsi8lSYgzBz58BA==", "uMTgzWnvZecD0kujuKPIMw==", "jJU1rFjbneT5RWmoUr6uxw==", "NrATYvL+2i2gY4ol+szT+g==", "2d2KejA0Nrz6tVNnB1dB5A==", "xWYQ4aF7Ip3LaKJQzDwx1A==", "qpxeH+3MOciW1z6wxEwYBw==", "N6zpVUumTTQTvmCVOXvHPQ==", "Tp2zZ0uvWY7vBbgviQPk7w==", "Y1YZsYV7ls1vsluhREpXlw==" ], "HF0BuzgGNjLOUKqVyjw0oA==": [ "6G2lzRj8p7v2QJ3GPO3i9Q==", "JpVSLeyNGU9aXWuvL1lvmw==", "sROfYAX8Ekl+9at4JgS5Lg==", "bCZjE4S4e+JRkpJeCZ485w==", "bbylqjYpcbE9/Bm4AdduVQ==", "qn72KaShSoWOaJmw6qKS3Q==" ], "HKlRsQZtXaa3HoNDv500tg==": [ "2w9brA/+oZ5OEdpav+Dkzw==", "+R/6bpHEFR4SpBeguCorTQ==" ], "HQLCuUiHA+476ax5LmI78Q==": [ "PX5l1wv6H6/jl5nGaxFp+w==", "haEbUAG+u1TE1V7073rUjA==", "4ardx/cPJA31l/GjZ5ssvw==", "mCbTv5P9L2CaDsmaEWknNw==", "ALEb7ClqbpU4flidf9/9Vg==", "Ly8YGlWm8+S4CYtF8Y/Htw==" ], "HyWYXl8ZaOY6wtr4mKF7qA==": [ "fSeU4QTAs+fY+ihLpgdM9A==", "XW4X9/W6MfETfE/VICA4Jw==", "n39YhRffL6tFFAy/S18A8Q==", "R1x4adkbkgVhxc9hzgUZcA==" ], "HyjfzS7o9NZj6mKbOA36wA==": [ "+JlLlfOobk7OBriIdQRELQ==", "FAhn0w8CyRA5pQLzx0KOLg==", "ZRSF+MayCxLJlIAPWIqUVA==", "RbYTnX5KpMQtsQJE/xjcFA==", "5snUlx7ztOquC9N7WioMbg==", "MqEiWiJF+vNoM9tbeG6KSw==" ], "I4xeNeKgfXcsAYIlRhjPiQ==": [ "gET5R3f4XDkfL+cBxb3pJQ==", "zY/8tgCkQEbX9yVIGbkTFQ==", "9PkDHwckTpMGddf70S7UIA==", "DSX8U+5pHixx0pf+XijnCw==", "MS/0MdicPKEzcrADakYBYA==", "MrkZWekwMOpCZnSllV83tw==", "doax1FtBT8uwFLYDyWb1Bg==" ], "IG/inuDbgBm/XuY2u/Aumw==": [ "mEw7dcF5jpuxJvu2G3JEew==", "RATpPhLUqjEbe+XxyYxOOw==", "08ogBuWXS+d72R0TAjgJaQ==", "vTajNh0ysqaO8NuTMU//uw==", "JtGggrfMckWn0xvfWBMJJQ==", "1WQ/LJu/kefEuHRv58l0Lw==", "6LOgJE44rXWziB7/OMO/ig==", "Ob+LJ5zYHnbjt14Yf8W7UA==", "jVeIQzIm92EdkbCIlGT1qA==", "GnBCRP9H+R6do428z3nOkQ==", "2RZ3u6UmceVG9iB/xb73SA==", "0YVxD0vSH+0MhijemP/Jmg==", "6asSIEJz7ggo9QEXpbSOYg==", "HSaKorahiaNwGqqE2DJSaw==", "JmKf//IQj2eMVJFTB1Feyw==", "oVgcRSL89qnSRkMXpV8N8A==", "3WRC4Vl08/leTJ1MFHuCEg==", "+PjI2yN4wCMPyf1oygeT5Q==", "rJljaCTiTdw1uI1lvfy+hw==", "Y6TEBwH0+CoZ50j5sQV23w==", "+uMSPU5jbqI0+jsP/eX6PA==", "Q6H4f5u2pbj98wlSQQLoGg==", "aQGx6Am8fU9TZmcyiMNL4A==", "HlOu0EmTxHkjzmJeJEuJmw==", "5D5WFK01Su4Lrj4hhwDYGQ==", "UBzPfwycyyJOBETwdSTG/w==", "LkJjju2s50oKpBRyBT8s0A==", "r410Z5X0yojDsVg9YVcNqQ==", "rO5a9fYyaqaIZ4bH0M8fdA==", "0v5F4x1W0RxkklLvRs6NKQ==", "nNAYHDwpTrgu1xKD+v9Oww==", "s6kt2DqKLHgzYSGciPtGtQ==", "KsboTEAsiwsdLEKIDivkyA==", "2luu38jiVQvy6qOXHFgpAg==", "QX9gQ7esz1e73iQHmwojXA==", "Q0D37bmhhLGtYILIAMgFXg==", "XQDeROSRzMSiFTbbLCST/A==", "cMY+6QfPqyOZE380Mf5rIQ==", "w8af/LTYrBLWhYkZBSi2Lg==", "cjoCrbQlAeGxtTPUlcMPuA==", "GXMpRf2go/wGEbwpp9BPPQ==", "AwUdH/KSEhHnx1nx0tagUQ==", "JD0llI0bGUOG/VBz+9LeVQ==", "X10PEbhI2yv6KYFUPacecg==", "BS5Qx6nN3HmM64VVoKmayw==", "Ah03jmj/7fQOqUbg05PtZg==", "DNd0sdbW83acQbIl3FDaPw==", "s2uSNGuV+OyVW2eHDGWWKw==", "2UHqEqfMIIn53NkDlDEppQ==", "zAQhwfD+1kpXY0CwZC6HxA==", "g6spFzT6DoopzuQCE0pjRg==", "3Lvdmj//2sze9S8I3n8yrw==", "cxMZ2TEnkk6RdtuU9fDThg==", "o8O4Ttqnv0lQfm1yyfyVsw==", "6MW1lRUdNNc4s+6uD2JNvw==", "qWK7H7gz7e8gS19GJSeIIg==", "zx97OaxgXH8j+mFWesQySQ==", "qYORp6v9x0Jy6S8OKerZvw==", "QgRg8usqYLpC2SzTmhUKsQ==", "lz6O0nYiDpis8SScmTUuSg==", "Rd2hVVbUws+mcvoC7DaoiQ==", "qEhRdzGH44SGjJIcqcIv/g==", "YUwZZ9Cg1FloxBZV60vOCg==", "eekbTUpqIafepE8Hfmhn6g==", "TIcWaTRsDD52irGN4xUQyA==", "KB8w2g8b8sP5A8+iqhqw8A==", "kaUbMItvWrS1leJMEsAk9A==", "7AoZZiCMmvqX9d9WD62FnQ==", "OXr+UvfSDAQbLGP4xOBSMw==", "tLSR0X6hQ7hvyPbBXZslBQ==", "/YcdipQjiqJUDpddwhDiIw==", "0bK7Vo3x9SXQYvDvMmgzXA==", "rR226S9SV4WbmIVotM0CsQ==", "QbgvVzhz2dr5BDvAUM6wFQ==", "oyvtOIVUDqm1ruQx8vhRhA==", "6dwQWrojfQ/1hgTT2PQckg==", "uDfc8ZaPfrhTGcFwVaIvAA==", "BfDjqoaYrd0NKCGGxtokTg==", "6o8ui0RxMttDzkyqTDO5tg==", "SvhQ7tNvl6ANrVnaJ4cBNw==", "I3vwwgMxzxWo15otCOgvAw==", "6LazNwUBgu5kQGKPCQnaOw==", "zDmU3WG0c3AQYw7NFebUCQ==", "8efBqSZ3OYqd+nT8a21FNA==", "bh7RRRlNP555+LOFASdB0w==", "2sm08sXcjWtT2Gtu3CdSug==", "93O9BjbBwz1jYmTNCzgkUw==", "b2xf65/2S45gOxG8Grxy0g==", "BTToHfvg0weSXCH9D0acFA==", "qug1advw8m4TjVAUPEUPiA==", "00cDk2w3qfvdzMbO27c/+w==", "XuMP4XKeqFlYH9jgvFKXXw==", "W0TAw6aTfwXOMlJwloDkZA==", "2I/0B+uXhxpPJWXGwNGlLw==", "HHBOKYlzeD2Busv7btyBAA==", "lHLNxD93t7uUJfmDhNwvCQ==", "dO/rj/SVo/ZlfJAB2ajOEQ==", "SGI/AkdUGrhS5bQBrDpzJg==", "RCLRHWzoL8kWcamW6v1E6w==", "7sGexlbSpX41SOBbWHg8BQ==", "m9ROycwLgAur/M8HFSigEw==", "+hBhqk1qKnkU+nqn6a96qg==", "e7h3lwyDkLbzwbeza9/TWw==", "w1094TrprBpG+5TZJus6FA==", "ylg3k+AtgUcIl3hJiXNMlw==", "MLyBE3p9/9+LMOMl2JBi6w==", "Qe1reyLPtQVZ5wKqKa9jQA==", "Y/6FiFNJ+h2jXNTlPOzrnQ==", "XL1Nv8y45q8aiA92A99YyA==", "GfPY5zBbHJQI4ZGaDcJj2A==", "u1caIbS4Tk6y8c7sz8Hvhw==", "KYv6PwzjV6/5I33cZ9LUmQ==", "kTyfGInwWoCVv7gGPYCF5g==", "Q2616MMrHflQbREkbaxMFg==", "hxluEp8Si16NQcfaJDWcLg==", "8563iLEht/ghMGItALTFUw==", "19Kvl4LS7MCiBo2cRD5fxQ==", "bcO+GuPgyR+iGLy6+mF2Cg==", "NeZAaBfGrzLvaMKrJL7WlA==", "T5Nghm4crNWWnUrYvZZItg==", "gGrGej/Pj6/poAgebFb+dg==", "bACUKZThWu3kcO82NfO4eg==", "h+nOQU6khNxAH7kkGqVqkQ==", "AIlN8RmMOvhBveVuVAyHQQ==" ], "IZ65O3ZOapykHwhaOX1/YA==": [ "d3Z1riL6AkoWkk27zYoWCw==", "hHDtCxiuvJ9VSCSwnEG0Fw==" ], "J9Ac2zSOxpvD4YQ2MZMs6w==": [ "bHbadSMaYCdCzwHNWG3fzw==", "oeQZicbrugL5hg8G7dVmSw==", "TZnGp6lc5MuTXKrvF6Ln8Q==", "mZpS2ltu6/QRC8uFk/t2ag==", "su1aceqBKJzyQhYk4DtG5w==", "P8nRZINGxkoETGXvn0vWdQ==", "38nk80Avdc96iwBjm0zdqA==", "VL0JOGDvBKQkxcjlKcpvoA==", "KWRSi8vxblrZIdlqIEG3zA==", "Gv9SmnUKqHUi+G3vQah9BA==", "ENmG+VyULoyY7sa0jIk/uw==", "IF/pusRwq2cM2AL083HZhw==", "A1ZQfTMMpQF7G100W1c/Rg==", "PInmzCd2elAZed8XII2H3A==", "LIhAM4tPNTZzvy57RdTFgQ==", "pL5xLi7HF+fZxJQ9yVoHHw==", "ymZOc8rtV2bmln3PExOD3Q==", "hxsQAGbTfRAveju4VaX/RA==", "gRH01HjqQn159522OfR71A==", "XIh88yJoOK2Ff8cGZL7F+g==", "hMMTiPhU7F2ErldK8mMkDQ==", "Q2JaEcNprQzczHwEGMbXgA==", "F2zbkAiOFT3iZ5Dx0+MHfA==", "WiJ6DYPst5oap7CBdVnD1A==", "wvmpOuM/1L8oJ5qbX5rvJA==", "iCq8lbTZO3yBSlU4d4JPMQ==", "UIYVfnZoS2Er3ahTNsELrg==", "GdB2cJ8S1OqnHKM7G6grQA==", "RiAwHTFYpWhzZETb+CSE0Q==", "+ba3qhqho8lfMXJQtKiMwQ==", "5Wx/BMcr6FkgwAbn3tdwLA==" ], "JFKff4xqwvXPuYTu9WPwUQ==": [ "FroZeKbNhNx69+bj8o0OqQ==", "vZIHu7rsNO8R8If5mjyTiw==", "tbkEtEs3aa+p2/YQaD8BfQ==", "dcH4AHY4X+K0bO3O9nqJrQ==", "I3+uP7bb+nPtzRYHH2UUgw==", "d+D4c9x4GMdq33+dJrszxQ==", "IeTK1HBLKpS1+gfVSPrpvg==", "ElE6r7xQZAfd5MScs95BXQ==", "lJ8RTw7m+AgAnWW6upSntA==", "lWdVDKK0NI1ECjrQyrQZhA==", "guG+lyS5JQIDSZS6MEfIow==", "/MgFHW097IAGIZkNc/Fltw==", "RRtBD+EuTLmzasgAaBJyZw==", "5kIWJ0hrLSTGTMvu/m2VBg==", "sAlO/t+jkkm59mLcdOgB9w==", "1w+glHHFE32ql3XJuIAYWQ==", "4wegIDtvEZ75QrQWM65auQ==", "MIaYLvbJRWXm7UR3+CJ1PA==", "MMLwOzBcCET4jaa3dPuTwQ==", "q5joCCZ2cOTa0rXBUtiSpQ==", "QaKFgrY/cUPl6Ls/xAwlFQ==", "5C8DQrs9fwpmV8rRYlvfCQ==", "mmFI4mA7exd6BfbwTUwJfQ==", "r4Fu2fNYrl5cfm4zX5YpZQ==", "1CCABRgs/s9xxQcDgxw00A==", "e/bnYsWq3UNe4TO8qzzb8A==", "knUP7wXG3O435cJDvu9Thw==", "rwC2lB0lflNzttbo5Agt3g==", "gNGv6C2nj/tHk2ntVJUOWw==", "4WgtH2AC4w3jDaPCHFqEaw==", "RoQvxPrgcpXyTej834bT2Q==", "oIBUxFCAPk4vRXBwpcmtFw==", "cly/G/AvUZQM2J1YMymkpQ==", "uO3OOEY6W3k9QH/tNVK0LQ==", "4LZWGm07jnOHHBGX2FzAwg==", "oGhsPyoyEtiEHT7/0qF+CQ==", "CQPV/OxtJ+DwYc6C4gniNQ==", "PqOWZHQu7W9hh0UlnMkHAQ==", "Bu9dxnhmsLXDd3x0oRPHfA==", "k9jtJIr2beiO7DTwypDNWw==", "uPUnbuUJlh23l0km8iQ2tA==", "Kr2KcyJfYQ8J1RDorzTofQ==", "8XLKalkulxeAh8qfecmGlA==", "hUC86VV8kD262xFcev0ZiA==", "i2CsObRdsFCFCIvnyVzw5g==", "uEn9qA67O/SoYHOtH/EL2w==", "ZNpRshLHRo06/00CGV605Q==" ], "KS0gfrpBqK77mtupKmitjw==": [ "qIUMlexpn07c5Ly85v5AjQ==", "kGY3woMWc1W36Wi2YstJ0Q==", "aMOKwSAvMIKqreq1+gZ2ow==", "sJNoOKrtqJYf9M2tWcTlqg==", "IrRjtVOpf04EO7iAKFAznQ==", "8gSzZr+GPWdWrD28SEc1Pg==", "/pEYCNwBz8VXiXwXl+mS3w==", "eaoaQZQXOAlAomwMnyNLSQ==", "+UOyQgpOAnrWS+mVMK5k1Q==", "Iv6wxIYqSLEjaMJTKmJ+Pw==", "ZMqtUXBs3IUyb3eHhTEM+Q==", "uDqtDPBJb3KaOc2STze05w==" ], "L2RUW2Fm5EOgoqwyitY3bg==": [ "9uC93Z+i1x3p9QMz1A1vlA==" ], "LW/iN16rWtvIqrNuZRqrvA==": [ "NKSXZUie8BGH5nwjKc1B6A==", "PAKBAYCAtIg8PKEYWQkTzQ==", "edQImQW6OalMt0U0nrXR2Q==", "qkPjlqaV2EZ52NAHd/IgfQ==", "kHJ1B6H/qaZ/vmirvtTenQ==", "KRZBmtp/oO0gwwF8PmGh2g==", "+p1B+LZP5hvhPeU88puOfg==", "HVxGZgwvlrVpgAxKx4gRlA==", "TSYnGqVe9WLIg9cR9McW7A==", "b1aMkFsUYzQ15fp9A4JV2w==", "4BI9AbtF5Vb7puMudQmp2w==", "RI2wKrfD1EyE3/UfHBEmcA==", "c76DQiDMr2npmMChLqBaow==", "MEeKHFVdv0EwpaMPKCy3Sw==", "egAiHhCEkMFVMFqpyh1hdw==", "Bl8VfXimE6raefu05cOS8w==", "iFdXYPdbzmitrrthD7u8yA==", "zY7J45b8Kt4bFIMHib/PGQ==", "T76LK9MUa3lwsxSAw540ZA==", "a8Muru+syePTNtU2/rVrUg==", "4aJ6IaFsuGhRpz+mkfUGqQ==", "rT7Zl5hqfT/SFXkQlgRUqg==", "sZ07/WOVHRgnOtPAXhah8Q==", "yeUq/7JaeNz2SDn0gWjVQw==", "Nh6DgKTo1EEcTUg+VgZK9Q==", "1cSKTg9cjDeVqfRjC+3dyA==", "F8lGQFeTGfg63gSPRvjBBA==", "K2GE6n8fwvl9qlLu7U38Fg==", "QOF3F7DIkILMx0gIrkLxgw==", "Qvh4esOhPMDkhhNZaEzAtg==", "pOKoOa+tppgNwBAEgYrxlg==" ], "Lwqn0aweLQLZmo12VvYcog==": [ "Rk5ia3x816rxtSUtbpOMnw==", "rhaCfU7pM1FgApTAw4PpPA==" ], "MvInuV8lMA+9LBSzIEvv5g==": [ "YoLm41YhtgLxKYJ1/exB9g==", "A+Jv9uRM/keGEYgIGq4WhQ==", "YR9IlxlHBBSlj3ZLdc6/eQ==", "RBuf8b62KyhEUrkIKRG/3A==", "9k9GsZftBlKIenK0IOSwoQ==", "Pml3cIw2PYIOjBurBs3LFQ==" ], "NSiprMdkK5/5pxuNNJOh2A==": [ "+R/6bpHEFR4SpBeguCorTQ==", "2eh/JThmMghcGbhP7jHOJw==" ], "O6NCE8KkqNnnBGJrWxfPwA==": [ "cXB5uJOI3UJ7dOyNiQwFDg==", "XPUXyp+BOEJyEGOgXafi8Q==" ], "OCIjbR16ktOEiFK36r0WNw==": [ "AzUHhCngmr5YuLLD/fQQEA==" ], "Ol1YWxU11Z64v1nA/zb/5w==": [ "j7yoSCks+i8LevHtgFwCwQ==" ], "OvOSK0YS4U6j2gyFBATNXg==": [ "aOUfuyvyyWEe7Z1IZT+fGw==" ], "P5Om9zCJ/QZ+hnrEvj6fGw==": [ "ymKqobod4xPivmLT/iq9oQ==", "lzB4zyDZ+L/0TgHu+34IeA==" ], "PIk2BBAWexCFofMi5q03RA==": [ "S5Dzz9cigoJDCj8s5UcT0g==" ], "QG9+UTOvnb8kW+im/fjlJQ==": [ "+Jox86Lr4olzZZpeF2W5Cg==", "0rfFR2EPlCkjUqAxx57NoA==" ], "QbZd82FdnCLBtn8fUkWn0A==": [ "kR9Bs/gd2Qm09J0HnMmVzg==", "lFfYg6015iTLGI5pZVMU7w==", "WjQCog+GPmCa3VQIGXKhRg==", "U6rJ6LmaVlYRjI8Lq/aM/A==", "fPh6cJ7fj6ecJeD/S/iyJg==", "dz5oxhJicudEulHfFUUHJw==", "svCt47J2Zwa45xj8gn3U/w==", "NrTzMmbWyM5UeSvnQVNLOg==", "5JPRWlHhzvwdgcYt2OnpZg==", "+DR5Qfe30tw0byM4w3zykQ==", "ixc06f0H9vqMfsbwQSwwvA==", "VYGbkY0i6P3tRJd9mM1wNg==", "yzZzF1vLZmeTiLJMgY7W0Q==", "UwZunDPz4Z/GxKWN3p1+/Q==", "klH60uFrR0WkawaSlcOEKg==", "9ANhoIvfhYS2Fj0QOQtcOg==", "HZ0OAEgNf1utcoh9whd4EA==", "C5z0AxIvQN3JdMLvMYB+qg==", "49x+aBSIi92s9+9k0YBLsA==", "Eh3WlvVSpgyvj1kaA5So7g==", "YSP3jWIJP4TspvpKDx/wvA==" ], "S8p9UGak1oycptcpYp/1eg==": [ "d/522T+B/ARMNSG+3QfAWA==" ], "SjQtW3gQmgt+Qj8JlnY4Mg==": [ "uu3d3lIlYVCZwOjqoNec3g==", "e0/Fzu8wfMZp9zX32i9rMQ==", "7CfySs4FmTkWgJPjEar4eg==" ], "Su8bfW9ijc0V5CiAum2V1g==": [ "5VGw1oph7DgrzGqxDXSJIA==" ], "ULrmZHuHE64atjgQOV1lWQ==": [ "axpLUf/WfpliDV7UixDwiQ==", "f0N8ZEj6GTGaAo1R6vDhMw==", "fKu2JVqQCl/zwzvO3uUkJw==", "p0umWDpPMiOz8HPGPopybw==", "v3PTZuvRGvqZW5kgzYKjFA==", "3khZTPo1sdTxnkTY+5ATQg==", "aJsQ4a3gp8/jsNBVC56QHw==", "jyKmIhGp11jpJBCY83RPQA==", "0hc+Z9xWtVy4dEgLyf7GUQ==", "RzrQmVvfhyaExSlpoLqDzg==", "3mM/O83kCBM7c1h3oioXHw==", "QmXO38HGjUD9lc3XwducGg==", "T7eVCD5Gwe0DXPZP59mQUQ==", "TL19l7Dr/wLwmp6malQ4FQ==", "Qi/s8gqjz2kgI+pAtQ5t9w==", "MciappbjqbiRE2dg7PbMSg==", "tUTc+tWHx1wVpIbeqTmR0w==", "Z/nuiLo/kSAcxolOXcSWYw==", "O912x64ev1faikrIaaOp6w==", "NXO5f9Vv38zu/sOzuqBB9Q==", "J1e16b0P6Tp2x5sVgsqutQ==", "71C1Nt6KoL1+Dpr0rTxWwA==", "gjKjRZqPuBXFD+3YZ4GvNg==", "Hd38sct1pK5WIzmx83J/eA==", "MDVosfib/bnNAm4m647vLA==", "LdeUngez6mnzZ7ugJzuAmQ==", "w4jLCE7e/XkliXylkG5u7w==", "gFKfr+coMvRSD0OxrJHXPQ==", "5QvPKgPa787NiewytO5Aqg==", "0RDuhfilAG8dJEO2Fvk46w==", "+Kc8jbRzLLDVqPaeFngWtQ==" ], "VPMvwiwbrTXjPkPpxmP3sw==": [ "WwAqpmlCgSYKoG1knafv5A==" ], "Vk7Abr1qzxUEVjteKWWX5g==": [ "/DjJHQ4LUqD/kDDEZQnGMQ==", "E9ztZ/MyJW/b90Qruzzb/A==", "+81WHs4+NlxNNP8OWMLJ2g==", "3xFSeDOxGkdisnqW9w6B+Q==", "Ywdulqdw8k75jjL2qb8gPg==", "poe+ZOEeV2eDvTqSL2bcHA==", "dKzgwwkG/spsYd8PVvrk6A==", "rmKqD8ZR5vrHqnZkFulqdg==", "BrupyHHgUisGe91mdtTkog==", "55p6NGxCWjOVcUCBGiCPzw==" ], "W7uBqJb8l9AhSXjNg1JZQg==": [ "tbhLz74i3ShwS72WbIsoOA==" ], "WCQtqHWXoTXna7IAIUuLVg==": [ "4g6F/e8mwPh04jP3QYJj0w==", "boWBDvSNZPI7kiGalqeu1g==", "f6JDKuVN2cqa3h32gmRjXA==", "6Mz5HTJNfyHd+tBxi8A32w==", "N6nQdxnBzns6IrsJM+Xsuw==", "lFQcTCheSGIjEbZVivulnA==" ], "WKbv3dOPjWYMO8/3E5KlHQ==": [ "b+WKHvVRvScXQjTpsI/dQA==" ], "WzYxymAFFZiduGsTG/o8gA==": [ "kGC5RaOJSDDnqCSoiLqrIA==" ], "XG5+bW8np2NedSy/od6z8Q==": [ "vlyMilfR3CdKSdc7LxNzEQ==" ], "XIcr6HdP94Dud7DtFrfMZg==": [ "DXoWfwXPN9ZCvCU/obObKQ==", "+vYcckG24NBhOrHM/LGq8A==" ], "XTnX2VddNvCYpYt/meLgYA==": [ "i6aHe7Qjo768bvS9xSorFw==", "N9dwh+Df2etJCiT3zY4CJw==" ], "YMB2ro5tOcEm81D0RjHxXA==": [ "2EHc3aND0ui/TYRnIdJ/WA==", "Kpg8AKRn9eUVlQlRye20Tg==", "yyVb0QTi/Vc4LSIxOEuhqA==", "vKhY2603rcUieT1TILr6/g==", "DVhbZtpHlSM2ukk3QurV1w==", "jw+r2jbroWxBcAHcFZs/eg==" ], "YwobqP8raRKIH+wXi7ZS4g==": [ "Lhc4n2a9ma6eRDB/RCRmLQ==", "sqtLRwfRzV6y9srK/2QK2Q==", "IFUwSX5dX69QHRHfvOeQDg==", "X7DmUVoCri5i6vdYVBBgXg==", "l6IrI73Pg+lrisEtcgX+0Q==", "mllkaOQAaJYNZpdIF7Bkbw==", "FQwXyPZ+oHyxQZ9RBQXbpw==", "Cpn7PI6CgTg1FJ1Ijp4TIQ==", "vMgggE6Cjv/N2Jk4Dk6FYw==", "6rEIsdyQtCC456AuGwgsDQ==", "+TrS27bZKgEeir9pISurnQ==", "3UNcgW64Eji4iyY2ZDB1cg==", "ctALzLE36TiW3KdxIlF4Mw==", "8MfvwX+dRI6Qt2H+x71rZg==", "d0nPfXoEZybRuV9TMDY3YQ==", "xC8Y7thfNSAfn5daCQFvgQ==", "X4Ym25zfqcH7/samBN+yPw==", "zqGJegkbTlVqcHBa6HtRTQ==", "/rrV/dLSeVDaHUnAvPeh7A==", "6+rn6nrQrafYloJtAeJ2Bg==", "smB1yCGhBb8gDhPAER7odg==", "S0PFhlHzk3DOoPuq+7jmPA==", "H1wshPoazj8pmzsnWAztZA==", "Pza9Y2xtH9MChVMkZwgw2A==", "vnI8VBZMnSK/Spr6qFIUOA==", "kDNo+1U3zj32TNGC/5DIKw==" ], "Z+lO9FXEjKlmAeYPAHGorA==": [ "n30+9otRNHBUO3IOHvF3kA==" ], "cHAJILwEV0OAQcBBnKqncg==": [ "fSeU4QTAs+fY+ihLpgdM9A==", "XW4X9/W6MfETfE/VICA4Jw==", "n39YhRffL6tFFAy/S18A8Q==", "R1x4adkbkgVhxc9hzgUZcA==" ], "cZtZpGQDMJ8/qYUdQbgb3Q==": [ "GKtRNrhu6jQDTa3SPO81Kg==", "YfN4DMNLaz3lIsbsDdrsLA==", "W9ATeYhnrC0UlelRIXFecQ==", "UsEuyAuS2VCokppecP9FXw==", "5d35KoGqN7hqoORJbRxrzg==", "6ULb2hTeXRKRWDAjQMdnAQ==", "mt2uKyaY1pD5PD0HEI8sFg==" ], "dBKXgz7fNBsMAqmGTkj8sQ==": [ "BBVHDYnqIwi0Vk9ZX1yGIw==" ], "dC9CoYt17eaqinGSVCfCxw==": [ "kGC5RaOJSDDnqCSoiLqrIA==" ], "e40n/77uWc/t2R+0m7WchA==": [ "W/xTZXt8arFxTmTRnfh2+g==", "1I5Zdk3zr6CO9kf+WEea4Q==", "76eg4nI+WwZq6jvunMGVEQ==", "YwrNcgB1VRavvqQXhCICXg==", "uJJdxHNbejxspD7yZE5qWA==", "8hlo60BBnOd97TpyGOfaLA==", "/M50+nAheHXCE2atpE2VJA==", "qIUMlexpn07c5Ly85v5AjQ==", "kGY3woMWc1W36Wi2YstJ0Q==" ], "e9e6iwwufr2qvMYpuZgq7Q==": [ "fSeU4QTAs+fY+ihLpgdM9A==", "XW4X9/W6MfETfE/VICA4Jw==", "n39YhRffL6tFFAy/S18A8Q==", "R1x4adkbkgVhxc9hzgUZcA==" ], "ev4LjEwclLnf3ehIi3l8oA==": [ "HxI42iSjURjRki+uV6q/9w==", "vH+nziLZjIpD4JaIkhx3FA==", "bugTfOdgCaATW4vTnuXTSQ==" ], "ewbqmzgK8Rzf739yT7IKUQ==": [ "tbhLz74i3ShwS72WbIsoOA==" ], "fDuwmXmKOYEK5h1q2eODXQ==": [ "/rKG82d/RCig7yYmsr6Kpg==", "bJGGlc8FG/c2T93ktUh6Ig==", "75iSdAKFlPvTmCAp8d99YQ==", "YdpqbsRbo4xx71CiWUF39Q==", "8zIRit7VqNRaBPLxL/+VAg==" ], "fVq3Liql8bu1Y+KmIvpQoA==": [ "e57+W7idPeSI15OIacmH5Q==", "q7c6mw4iAmau1l6sfNLk8w==", "9GliauANgklOt4mKxwOygQ==", "haC60dPgMQIFAnJX4zid+A==", "Sygyk9+T2DbXETLWiB21dA==", "352rQmt68kXSxd4G583XXA==" ], "fao+yXdp7lvp4+d732rCkw==": [ "5LplZpuSZzAiOH2fmk3HWg==" ], "gihIEYR/lLwr4ndjyvVROA==": [ "9B4gl+qnaOhRLjmkdKMYbw==", "U8pdHlQlr/x1RsdiZ3YQOg==", "eZAX5+dryNgqi55C7fN1LQ==", "FFVNPAck6QPQFhxf4KhO3g==", "zXyE3S2RgbWC3bSm5zxzpw==", "rzmoKvIFGvuPP0SzaH7s9w==" ], "gjJq4XQiX28zDnKvnb0/jg==": [ "MdEybCUhVKCoyI/dXRvNlA==", "e0/Fzu8wfMZp9zX32i9rMQ==", "7CfySs4FmTkWgJPjEar4eg==" ], "hWZOSd0A+iLGAwoMoW6sgw==": [ "QskDoDnTSvrQeDXklM4YOw==", "bZGx+ktPNqzyr9hXBoIOTA==", "dZ7ryQ0b1w50+eNxXX/Jcg==", "QZ+YDQI7XEpbDFIIv4hUIw==" ], "hktk4wXij5O6pY5X6Pdp/Q==": [ "fSeU4QTAs+fY+ihLpgdM9A==", "XW4X9/W6MfETfE/VICA4Jw==", "n39YhRffL6tFFAy/S18A8Q==", "R1x4adkbkgVhxc9hzgUZcA==" ], "izKk4aK07ZN99JT+tBsSBg==": [ "ST+HmAso4vf4Hnu6TuBXXQ==", "bXKnVRmmXzNE9gSoSjNlOQ==" ], "jDR7o2j2gfJePh/5YNDLjw==": [ "3FpQibjt3OzhrwoSJ9I0Mg==", "DjqCxCryg8LYvAZ67mAiSQ==", "nCQ2LebiZFodYZ8OrVfuXw==", "QskDoDnTSvrQeDXklM4YOw==" ], "lNWcYbl6h71sUZV6B4E+bw==": [ "j7yoSCks+i8LevHtgFwCwQ==" ], "lV2MRz2nTh21rS47LJ6XIQ==": [ "gpPTgXxcA95Uk2vaf3/2dw==", "jGwIyHTli8TFB8vvlYRLgQ==", "o16kBwzDyL2DXuhbCPWX9Q==", "9iADtyaox0PEZ/SbvPWJcw==", "DtkRUkQTzcJrj8ZsC36kqQ==", "zHSqcJBwH0Go6UqHQ1Fu/Q==", "ScOp6HuJxBp54FxFpTVDnA==", "TsVNXuAeF3PhiRZhIOjjtQ==" ], "mqINnrlOZQGPnpnT9GZG5w==": [ "S1vpC2/S8eBK717462wBrQ==", "CKAla6xchD1gy0q9ML/2xg==", "rWO0jZdArYZ9zSTLMe8r8w==", "rVRinaBex/zPmHE0cI9QNQ==", "qIj6aIlqGJtvbX658qTpDQ==", "aN7J4vjcApPz2ZabMR0Irg==" ], "mx/6FfeunMu7M9pQ9cRKkQ==": [ "ZkozpC3UXStcW3ZbPMbsTA==", "2wdtg9odVWp21dq/2MNviQ==", "tuPGTYWKd0OWuEIwEsNtuA==", "fzE91AQotuZJ8swhDTTd+g==", "w8vuCHS+4au/MfXahCBARA==", "+X2XfuAS28uyjxaPoK8Ysw==" ], "n9GoYS9J7jkIET4QDQWijA==": [ "xpncb/4iGS4E4GyJA4P7Vg==", "041SU8x5Wrw6mRfaRurHIg==", "3mZTUjJt0v6SBGf7lIXm2Q==", "lPpQZfWnRR1kvdFRKr34Kg==", "9K1bGbpJNlcAkIrOMal8Gw==", "bS47R6kjzBYQaQepU2dXHw==", "MZUC9kv5PI1Xlt1QOYz1SQ==", "2Jpm8Zc5oiON+VhscwC/4w==", "6+TrxTb+GrNbsX7xQgQW9Q==", "bg8JYRcvY0wFh5b8Bl6Gmw==", "dQM2EJNgLlaaPe53GlhnMg==", "XKTHMaJwDxmLjk9FkUhg8Q==", "3lmx9lr/AS2B0oQRtI5gOA==", "269Lb6JhyjdTwif2gzpsMQ==", "mESXtMr2XIcnFGpdxMD0iA==", "DAEgBJ6jpEvrKn3TAPAfVQ==", "orI4WDU+1BLBSEG99OS8MA==", "Py++HyN8+aNZZa9dPe2rDQ==", "bNVewgNMQNWC+EwlyIyTlA==", "WhQSrxicq09HlEU8PxUQSQ==", "dw03VWGdtImJ58988UyhtQ==", "pgBZKIeBAAyMOCe6qVOUxg==", "WhY0uvyUG/ImjnbaewZftw==", "/h81Nr0GSz2fO9zGO8rpYw==", "pzONVbRfZmj1lkGaWtUucQ==", "KFwkHKkJGVyJAn2RsW13sw==", "B5DU5CG3Y0pIFFmMM3RU1A==", "gPjSjC7XxsCvs5w6EQPViQ==", "po1D239o+AaKFXhspYJxNw==" ], "niOKQxfAYGHJ3oUq3VHjdA==": [ "0HbetX2gSM32682C6raRqA==", "chGqAT1jYixNKwXlctnUeg==", "R7olSy1x/HelcHgr9AjG7A==", "ayJ94QRlWYBn8mXMxBDr+Q==", "P0gqeMXeqGecgv5yzB/trQ==", "ZA3vHdd4PXjvIsTBPl1mxg==", "1r+syFhyATToDtkOkMLqDw==", "4XO5TL/zvh/gBT0sz3RSYw==", "i9sUrKKUObLH200e/JvjcA==", "E69qsmSRl4PzNiueJkPUDw==", "4FPYx+QEdkXz09AmCNB74A==", "Qvw0/zOlMy3n6XUCrN6SmQ==", "0u4nnKNMeZ58/8R+sWLPSQ==", "CfMK+8nnfjDlpiJ86nDqnQ==", "OB+gdUis8HhIN+YuJZ0d3w==", "VpM36keMJ87mG4yZ97wQdw==", "9v8e/1gKgcwShm3I7m4SiQ==", "0nKksdratD87mbqRPBOINQ==", "Pi9su0FguY3j1GBpXhwKIA==", "fqP9GV2+ELPjUr/DY2avpQ==", "d28O4EsS+H4v4JSsIykoOg==", "j9OVo/jK62GKOQBSgKgJGw==", "nxtlAyA33msfy3ysIKdYBg==", "jAAGS0/fgd26tdTkBYM5+w==", "FeNPPUXNvPHMFZ28E13Mog==", "DwTrtZS+niTc7qfIVCIZAQ==", "3zxG1J6bDKAhZ9wlUE9Y4g==", "z6EnRvmkq3BmM0fg3cIFAQ==", "BB1IXjQVr93It/qGF51Vqg==", "wOf+QLuqfByteGwfULI8YA==", "bk6ikdg+f6vAFzgypr0cOw==" ], "nzQEyt4JfkGeZIIHPiBhog==": [ "bOC69k4Gpn8Av1w/ra2Tdw==", "e0/Fzu8wfMZp9zX32i9rMQ==", "7CfySs4FmTkWgJPjEar4eg==" ], "q8h8ag3Ho33Zc/60lMOvVA==": [ "Z0bbSkX8e3OUKdJa86CbBw==", "r3RLKNYtYvKarBqnnrlrew==", "xQ6R88+x8IssPvOAavmZXw==" ], "qGKV3oqLguMWpyzvjv1+wg==": [ "tvq/gvjGf6pzxLuMOglBaw==", "TrnW8DIZgc2e/W4a1+ccJw==", "YodqYykSYwoW2Z78DZNfRA==" ], "qc0Yt1AzZC+CY6qdjO+fZA==": [ "Di0hwt0owko/VaT8i7ICOw==" ], "rY/kE/V4JnxYoqV+lmc9mg==": [ "X8OJykaOJlN5EhVA7Y11uQ==", "DDxCHnX+kCqcRQj9b90/cg==", "R5XnexvMFgBiw/v8sY0BOA==", "iwe2PkNe91EUwDENn+pmew==" ], "s6wkZ09Eozv3vmfwsPHUvQ==": [ "AILk1bhdEUQriiNdRe9Buw==", "yXjhPZPggtyVHOPFjmeHOg==", "4ugLfuPhGpzb4ohYABxG+w==", "QskDoDnTSvrQeDXklM4YOw==" ], "sJhS0sL3jXf+ZUi4oTiojw==": [ "vyw54XHJNXkWpKNGLbf2jQ==", "V1rPWqhvOrQycOtSN8Ve9g==", "hLbfRT5oTN6ilWiJVmH5Uw==", "05N5Len6XyuiKITeFewI+A==", "WbtmlW8SfW38NUPRnGwbsA==", "wp75ZuWMdeSuJ4xUhgowQA==" ], "sREtPFILPccNXLGF49Cnmw==": [ "XKuZX/r+YD1eQ8+4f77NQQ==" ], "ssPaV1VLDu6d5ZJ6Rrmh3A==": [ "XwLJYEytIMCdc6/A4MTJHg==" ], "tGPn3pK3U8y547XMf1WmhQ==": [ "14Ky/IzCleKAYRnLtZIRFw==", "6F1zSnZjp7g1twFO1AhdxA==", "UUa5vuAfloHekZLBPCTvFQ==", "+Ny4TpLzLiX1vAXKrYuRkg==", "rSxPRb6y8rOV71QNzjYBEA==", "J/9bEF16NjSRIAmmzZMBkQ==", "pDJ3Xpebdx7KToS5V5VZDQ==", "qIUMlexpn07c5Ly85v5AjQ==", "kGY3woMWc1W36Wi2YstJ0Q==" ], "u3thu0wHuvY+STb8TrhkKQ==": [ "vkypiN/HZjIiT/S9k2qxvA==", "tOOsPkEJCdO66XvUUd+xnQ==", "j3PAipb/hCxnbdoUmJvkNQ==", "oxSfxLnytv2y2gHjvplCuw==", "0lUHXQNoRQLden1OTY/5/w==", "D17rv5OxhiqZrK+otc1Xcg==", "kuuz4akZvpNKTf2txpaWog==", "PD08BQc1tUldC8QSScd1aA==", "NrNei+pIM0R36v4Js8XxAg==", "p8wzfQhvimCzJ24LCz0qSQ==", "rjcajgsmKA8I5yMLMT8DHg==", "YKgthSAonF3epY42eqsMRw==", "O+92Gg/bs8C9EjretuiP8A==", "zE3cPdw4Ma9jQQUVeE/hdg==", "idDdN00zXJT8ntMCqQfdkA==", "j8SFSR8BZ09zBKgRkzC7Jg==", "FInGJTEa3gToUzpaoDNNQw==", "rlHsuoluzmy30odv/xIILA==", "UG+yX6nADJgJWegetH+HQg==", "xRDJz3P8IApYf+UqTsFimg==", "LUQxjpYcQwxSDC7CX78VUw==", "bf41zTvm6HAv6xdiXpwGWQ==", "EOFhzMVjLzNyQsRKP/y6ag==", "SH2AP7i0ZzGmFbD1kuJsew==", "G/nM9FqgWuICAFy4kMmJlA==", "bpwdCug2xQZhmaazCqwIew==", "j71n+HvL+1UIm3Tw+EUHpw==" ], "v3i4ez5juML2ZWwR+6dFFg==": [ "AUiFITCnRjRxctzqqbDeeA==", "iF/o4aDbQf1DAw7R+LiVQw==", "9iigvnuYDaC8UzcOIDLjIQ==", "2F6XtsAYpNWm5w+Rwl/tuQ==", "GAn7gWUe2pFr7PbwechqxA==", "76z9Mpn8Jp7lhZSPsHTHug==" ], "vtNcuXyRth8r8K/W3sfqrQ==": [ "SJA+1v6mehbGh4JXJ2n5jA==", "2No3jCnnmCwOEpCbk+TZGA==", "BDC/Jijmwb4kfsAYqG7t2Q==", "aKcPzJFDOswSNCIlBX5/jQ==", "0n2Q+dTJnzCs850WQs7VXA==", "MtOwgWyogkVoNGuQavHN8g==", "Uwj2IeJYZ6kg0JLABYAJ/Q==", "JPakAMrmBlullQ47gJ/fkw==", "//8buewiV8gb20qv4g1cqQ==", "gn3bQe/78AdzPhooNm1KQw==" ], "wYIIhtw19AhoRPO0XAvoxw==": [ "qSRGSB2uV6n5bH1pdu2LUQ==", "nS3gw6C5KX889pH0DdnXbQ==", "FzTxCzGYtLmJVoQ1syBiUQ==", "f2M9JeIe3F0Fc9CFbQ6bTQ==" ], "wfJGCqOH8d+IYg/dAepx1A==": [ "lQBARBTddFvexevUD04GZA==", "Kqq2xlybjD/tOLmQWu2xPw==", "xxrOMZzPk7ETmnvrIjBo0A==", "/GP9UYzgnUNp/vOMMDf7mw==", "sykv+pGN4TXggZNIwL/H4g==", "Ez8lHT2uV9Tf9vJC/T4WXg==", "76mWuVYhbmIFsc4DNorK9A==", "uaetuJImncB6wudykQLpEA==", "o/v8DGswQXGkB45uD8rRUw==", "mJw+LvAbCoVMIOZXCXNFpg==", "VWEbeFnFOHy1IkG21b5a5g==", "YX2rGofSXHBcNhTOGpNkAA==", "LxYgcRll4fEnbCHHZWt4BA==", "KMGV9rbVZ/vVUNSX6f+JqA==", "O3XylFvGObsPmzTrCuhV8A==" ], "xMqWNWDJot/UVGgOoRsUVQ==": [ "9VSflkDgRQsGPkKM4aVDHw==", "W3SNJz91vyAPBvH2kz/itQ==", "FMWVyBjC/IhzfdU57RFV5A==", "gt3d97KykHIhCqEzLKzqHQ==", "c2gL4Z8Tbc2Ge5iwCDCV9Q==", "iT0wLV5um6Novvux5XEDSA==" ], "xTea8RVD9wez5DTFDIkCYg==": [ "QNrS4atSfp1tFVuWE/Cnqg==", "cebQbn0Dg58LegYW4JDjIA==", "kXRjhXGDLvcaf9UDToCwQQ==" ], "xuRjbnwW5VkRHg0Huc5RCg==": [ "e0/Fzu8wfMZp9zX32i9rMQ==", "7CfySs4FmTkWgJPjEar4eg==", "+4boUUXSpak/++mwJDcv/A==" ], "znACbAN0JGBPtCXNh1d0Ng==": [ "+usEQpepP7UaLaTDZ7AUHQ==", "dTHv7xNEey4Rvi0jaC90Ng==", "pe4Shj+F17XwL0468/ASsg==", "jZO++vSydJTiCIbVesbXEQ==", "gSYlqWWhsq36L2EzWb/x+w==", "Dl7D7r3bnERvJ1K3e9T3bQ==" ] }, "enrichments": { "message/vnd.clair.map.vulnerability; enricher=clair.cvss schema=https://csrc.nist.gov/schema/nvd/api/2.0/cve_api_json_2.0.schema": [ { "+81WHs4+NlxNNP8OWMLJ2g==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "baseScore": 6.5, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "availabilityImpact": "NONE" } ], "+CgZKiM2jpLyW2jlIXneLw==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "+Kc8jbRzLLDVqPaeFngWtQ==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "baseScore": 6.5, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "availabilityImpact": "NONE" } ], "+PjI2yN4wCMPyf1oygeT5Q==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "baseScore": 4.3, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "LOW" } ], "+TrS27bZKgEeir9pISurnQ==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "availabilityImpact": "NONE" } ], "+X2XfuAS28uyjxaPoK8Ysw==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "baseScore": 9.1, "baseSeverity": "CRITICAL", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "+hBhqk1qKnkU+nqn6a96qg==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "baseScore": 4.3, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "LOW" } ], "+ihXD4KFgwxouHTRyQ5EbA==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L", "baseScore": 3.7, "baseSeverity": "LOW", "attackVector": "NETWORK", "attackComplexity": "HIGH", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "LOW" } ], "+p1B+LZP5hvhPeU88puOfg==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 9.8, "baseSeverity": "CRITICAL", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } ], "+uMSPU5jbqI0+jsP/eX6PA==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } ], "+vYcckG24NBhOrHM/LGq8A==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "baseScore": 7.0, "baseSeverity": "HIGH", "attackVector": "LOCAL", "attackComplexity": "HIGH", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } ], "/MgFHW097IAGIZkNc/Fltw==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } ], "/Q70+j219nLwNP4Phg4sag==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 9.8, "baseSeverity": "CRITICAL", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } ], "/YcdipQjiqJUDpddwhDiIw==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } ], "/Zbh/oTVYOn4fLQqcvLFNw==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:L", "baseScore": 5.3, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "HIGH", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "availabilityImpact": "LOW" } ], "/h81Nr0GSz2fO9zGO8rpYw==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "/rKG82d/RCig7yYmsr6Kpg==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "00cDk2w3qfvdzMbO27c/+w==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } ], "08ogBuWXS+d72R0TAjgJaQ==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H", "baseScore": 8.2, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "0E1VjQWdmolR9lr9ElIZZQ==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "0HbetX2gSM32682C6raRqA==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "baseScore": 5.3, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "availabilityImpact": "NONE" } ], "0YVxD0vSH+0MhijemP/Jmg==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "HIGH", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } ], "0bK7Vo3x9SXQYvDvMmgzXA==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "baseScore": 5.5, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "0hc+Z9xWtVy4dEgLyf7GUQ==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "0nKksdratD87mbqRPBOINQ==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "0u4nnKNMeZ58/8R+sWLPSQ==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N", "baseScore": 5.4, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "availabilityImpact": "NONE" } ], "0v5F4x1W0RxkklLvRs6NKQ==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } ], "19Kvl4LS7MCiBo2cRD5fxQ==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } ], "1WQ/LJu/kefEuHRv58l0Lw==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } ], "1WaijHYxan9df8+fB0SQJQ==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "baseScore": 5.5, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "1cSKTg9cjDeVqfRjC+3dyA==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "1geoBO6lBMXVRM+dfApwgw==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "baseScore": 5.5, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "1npmxgSnoYj2MyAhQMaE7g==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "baseScore": 5.5, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "1r+syFhyATToDtkOkMLqDw==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 9.8, "baseSeverity": "CRITICAL", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } ], "2I/0B+uXhxpPJWXGwNGlLw==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "2No3jCnnmCwOEpCbk+TZGA==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 8.1, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "HIGH", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } ], "2RZ3u6UmceVG9iB/xb73SA==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } ], "2UHqEqfMIIn53NkDlDEppQ==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "baseScore": 5.5, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "2d2KejA0Nrz6tVNnB1dB5A==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "2fFhV4f06vNDz4aMbkPOZA==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "2luu38jiVQvy6qOXHFgpAg==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } ], "2sm08sXcjWtT2Gtu3CdSug==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "baseScore": 5.5, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "3285RkL43CGSYbmius5+sg==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "352rQmt68kXSxd4G583XXA==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "38nk80Avdc96iwBjm0zdqA==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 9.8, "baseSeverity": "CRITICAL", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } ], "3Lvdmj//2sze9S8I3n8yrw==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } ], "3WRC4Vl08/leTJ1MFHuCEg==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } ], "3xFSeDOxGkdisnqW9w6B+Q==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "baseScore": 5.5, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "availabilityImpact": "NONE" } ], "49x+aBSIi92s9+9k0YBLsA==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 9.8, "baseSeverity": "CRITICAL", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } ], "4H2TsDPy1XcHidTqNqeZpg==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "baseScore": 3.3, "baseSeverity": "LOW", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "availabilityImpact": "NONE" } ], "4Ir8FDWM4WPrO3dybbfnYQ==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "baseScore": 5.5, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "4LZWGm07jnOHHBGX2FzAwg==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 5.9, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "HIGH", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "4WgtH2AC4w3jDaPCHFqEaw==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "baseScore": 5.5, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "4aJ6IaFsuGhRpz+mkfUGqQ==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "availabilityImpact": "NONE" } ], "4ardx/cPJA31l/GjZ5ssvw==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "baseScore": 7.4, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "HIGH", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "NONE" } ], "4o31bbgKJ2cSqPGCPyFjLQ==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L", "baseScore": 6.9, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "HIGH", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "LOW" } ], "4os+HU28VQ7buZvoEKQ/kg==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N", "baseScore": 4.4, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "availabilityImpact": "NONE" } ], "4w9ia49tOv0+yiq1lgkH0w==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "4wegIDtvEZ75QrQWM65auQ==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "5D5WFK01Su4Lrj4hhwDYGQ==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H", "baseScore": 4.7, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "HIGH", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "5JPRWlHhzvwdgcYt2OnpZg==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H", "baseScore": 8.2, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "5Wx/BMcr6FkgwAbn3tdwLA==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "baseScore": 6.5, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "availabilityImpact": "NONE" } ], "5snUlx7ztOquC9N7WioMbg==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "baseScore": 5.3, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "LOW" } ], "6LazNwUBgu5kQGKPCQnaOw==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "HIGH", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } ], "6MW1lRUdNNc4s+6uD2JNvw==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } ], "6QirCtH9GCLBepYrxwQRIg==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 8.1, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "HIGH", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } ], "6asSIEJz7ggo9QEXpbSOYg==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "baseScore": 4.3, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "LOW" } ], "6dwQWrojfQ/1hgTT2PQckg==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } ], "6o8ui0RxMttDzkyqTDO5tg==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } ], "75iSdAKFlPvTmCAp8d99YQ==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "baseScore": 5.3, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "availabilityImpact": "NONE" } ], "76mWuVYhbmIFsc4DNorK9A==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H", "baseScore": 5.0, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "76z9Mpn8Jp7lhZSPsHTHug==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "baseScore": 7.0, "baseSeverity": "HIGH", "attackVector": "LOCAL", "attackComplexity": "HIGH", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } ], "7AoZZiCMmvqX9d9WD62FnQ==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } ], "7CfySs4FmTkWgJPjEar4eg==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H", "baseScore": 5.3, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "HIGH", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "7sGexlbSpX41SOBbWHg8BQ==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } ], "8563iLEht/ghMGItALTFUw==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H", "baseScore": 6.6, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "availabilityImpact": "HIGH" } ], "8efBqSZ3OYqd+nT8a21FNA==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H", "baseScore": 7.1, "baseSeverity": "HIGH", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "8kndQj/aRn+NNJdGVP9v4g==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "baseScore": 6.5, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "8zIRit7VqNRaBPLxL/+VAg==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "93O9BjbBwz1jYmTNCzgkUw==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } ], "9GliauANgklOt4mKxwOygQ==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "baseScore": 7.4, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "HIGH", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "NONE" } ], "9iADtyaox0PEZ/SbvPWJcw==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "baseScore": 5.3, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "LOW" } ], "9iigvnuYDaC8UzcOIDLjIQ==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "baseScore": 5.5, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "9k9GsZftBlKIenK0IOSwoQ==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "baseScore": 5.3, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "LOW" } ], "9v8e/1gKgcwShm3I7m4SiQ==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "A+Jv9uRM/keGEYgIGq4WhQ==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:L", "baseScore": 5.3, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "HIGH", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "availabilityImpact": "LOW" } ], "A/L5cxR0pUN6sSD1UL7wlw==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "baseScore": 5.3, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "LOW" } ], "A1ZQfTMMpQF7G100W1c/Rg==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N", "baseScore": 5.4, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "availabilityImpact": "NONE" } ], "A2s8gCjK3uaWI7+q7M5Aog==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "AIlN8RmMOvhBveVuVAyHQQ==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "baseScore": 5.5, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "AKiLQ/xfYs8rccBZaw62bQ==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "ALEb7ClqbpU4flidf9/9Vg==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "baseScore": 5.3, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "LOW" } ], "AUiFITCnRjRxctzqqbDeeA==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L", "baseScore": 3.3, "baseSeverity": "LOW", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "LOW" } ], "Ah03jmj/7fQOqUbg05PtZg==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } ], "AwUdH/KSEhHnx1nx0tagUQ==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } ], "AzESlP5N9z0ume0UnpGELg==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N", "baseScore": 4.7, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "HIGH", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "availabilityImpact": "NONE" } ], "BS5Qx6nN3HmM64VVoKmayw==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } ], "BTToHfvg0weSXCH9D0acFA==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L", "baseScore": 4.4, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "availabilityImpact": "LOW" } ], "BaEDBo8YJd5pwSQNkGzAFg==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L", "baseScore": 6.9, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "HIGH", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "LOW" } ], "BfDjqoaYrd0NKCGGxtokTg==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "baseScore": 4.3, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "LOW" } ], "Bh96oSV9q0619slTJCaM0Q==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "baseScore": 6.5, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "availabilityImpact": "NONE" } ], "BrupyHHgUisGe91mdtTkog==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "BtU7U8JaAB8UA19RIrHuHQ==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N", "baseScore": 6.5, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "HIGH", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "LOW", "availabilityImpact": "NONE" } ], "Bu9dxnhmsLXDd3x0oRPHfA==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "baseScore": 5.5, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "C5z0AxIvQN3JdMLvMYB+qg==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 9.8, "baseSeverity": "CRITICAL", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } ], "CKAla6xchD1gy0q9ML/2xg==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:L", "baseScore": 5.3, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "HIGH", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "availabilityImpact": "LOW" } ], "CO6FDlFyRSUjPhv7/gdAAA==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:L", "baseScore": 5.3, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "HIGH", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "availabilityImpact": "LOW" } ], "CQPV/OxtJ+DwYc6C4gniNQ==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "baseScore": 5.5, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "CfMK+8nnfjDlpiJ86nDqnQ==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "D17rv5OxhiqZrK+otc1Xcg==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 8.1, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "HIGH", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } ], "DDxCHnX+kCqcRQj9b90/cg==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H", "baseScore": 7.1, "baseSeverity": "HIGH", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "DNd0sdbW83acQbIl3FDaPw==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } ], "DVhbZtpHlSM2ukk3QurV1w==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "baseScore": 5.3, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "LOW" } ], "DXoWfwXPN9ZCvCU/obObKQ==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "baseScore": 7.0, "baseSeverity": "HIGH", "attackVector": "LOCAL", "attackComplexity": "HIGH", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } ], "Di0hwt0owko/VaT8i7ICOw==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "baseScore": 5.3, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "LOW" } ], "Dif/+rLLCWjJt5Bzau2zsA==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "baseScore": 3.3, "baseSeverity": "LOW", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "availabilityImpact": "NONE" } ], "Dl7D7r3bnERvJ1K3e9T3bQ==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "Ds5dBDqvRggZONNskvuAwg==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "baseScore": 6.1, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "CHANGED", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "availabilityImpact": "NONE" } ], "DsZp+BRVz/OTV0jFXHylmA==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "DtkRUkQTzcJrj8ZsC36kqQ==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "baseScore": 6.1, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "CHANGED", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "availabilityImpact": "NONE" } ], "DwTrtZS+niTc7qfIVCIZAQ==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "E69qsmSRl4PzNiueJkPUDw==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "baseScore": 9.1, "baseSeverity": "CRITICAL", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "NONE" } ], "EOFhzMVjLzNyQsRKP/y6ag==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "baseScore": 6.5, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "availabilityImpact": "NONE" } ], "ElE6r7xQZAfd5MScs95BXQ==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "baseScore": 5.5, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "ExqOQ5ldBNUvCH4EdaOK5w==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L", "baseScore": 2.5, "baseSeverity": "LOW", "attackVector": "LOCAL", "attackComplexity": "HIGH", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "LOW" } ], "FAhn0w8CyRA5pQLzx0KOLg==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:L", "baseScore": 5.3, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "HIGH", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "availabilityImpact": "LOW" } ], "FInGJTEa3gToUzpaoDNNQw==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N", "baseScore": 2.5, "baseSeverity": "LOW", "attackVector": "LOCAL", "attackComplexity": "HIGH", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "availabilityImpact": "NONE" } ], "FMWVyBjC/IhzfdU57RFV5A==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "baseScore": 7.4, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "HIGH", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "NONE" } ], "FW+E40XkknH5Jv24oip5Ow==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "baseScore": 5.3, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "availabilityImpact": "NONE" } ], "FroZeKbNhNx69+bj8o0OqQ==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } ], "G/nM9FqgWuICAFy4kMmJlA==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L", "baseScore": 5.4, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "availabilityImpact": "LOW" } ], "GAn7gWUe2pFr7PbwechqxA==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H", "baseScore": 4.7, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "HIGH", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "GXMpRf2go/wGEbwpp9BPPQ==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H", "baseScore": 6.6, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "availabilityImpact": "HIGH" } ], "GfPY5zBbHJQI4ZGaDcJj2A==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "baseScore": 5.5, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "GnBCRP9H+R6do428z3nOkQ==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } ], "Go9bB5Mq4W4FHPvmZKBhCg==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 9.8, "baseSeverity": "CRITICAL", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } ], "Gv9SmnUKqHUi+G3vQah9BA==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "baseScore": 9.1, "baseSeverity": "CRITICAL", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "NONE" } ], "H1wshPoazj8pmzsnWAztZA==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "HHBOKYlzeD2Busv7btyBAA==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "baseScore": 4.3, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "LOW" } ], "HSaKorahiaNwGqqE2DJSaw==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } ], "HlOu0EmTxHkjzmJeJEuJmw==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } ], "Hoba3nMTEuYEZMkGsuPdgg==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "baseScore": 5.9, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "availabilityImpact": "LOW" } ], "HxI42iSjURjRki+uV6q/9w==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "baseScore": 5.5, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "I3+uP7bb+nPtzRYHH2UUgw==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "baseScore": 6.5, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "I3vwwgMxzxWo15otCOgvAw==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } ], "IF/pusRwq2cM2AL083HZhw==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "baseScore": 6.1, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "CHANGED", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "availabilityImpact": "NONE" } ], "IGF/2G1+7Y+pT7nmmFHvPw==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "IPiVFeI45MBrWEz4KZcdQQ==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "baseScore": 5.5, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "IeTK1HBLKpS1+gfVSPrpvg==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "baseScore": 5.5, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "J/M93jueASHywmph2g+HMg==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "J1e16b0P6Tp2x5sVgsqutQ==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "availabilityImpact": "NONE" } ], "J9gq9t3ASg6Sp5n2QRemEA==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "baseScore": 5.5, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "JAlZO0sgdy1FBW5F7Zj+Pg==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N", "baseScore": 2.5, "baseSeverity": "LOW", "attackVector": "LOCAL", "attackComplexity": "HIGH", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "availabilityImpact": "NONE" } ], "JD0llI0bGUOG/VBz+9LeVQ==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "baseScore": 4.3, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "LOW" } ], "JmKf//IQj2eMVJFTB1Feyw==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "baseScore": 4.3, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "LOW" } ], "JpVSLeyNGU9aXWuvL1lvmw==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:L", "baseScore": 5.3, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "HIGH", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "availabilityImpact": "LOW" } ], "JtGggrfMckWn0xvfWBMJJQ==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } ], "K3SBN066vVckR2wFFfybNw==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } ], "KB8w2g8b8sP5A8+iqhqw8A==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "baseScore": 5.5, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "KHHIjt6Egtc7csaIbQ3mbw==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "baseScore": 5.5, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "KWRSi8vxblrZIdlqIEG3zA==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "KYv6PwzjV6/5I33cZ9LUmQ==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } ], "Kpg8AKRn9eUVlQlRye20Tg==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:L", "baseScore": 5.3, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "HIGH", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "availabilityImpact": "LOW" } ], "Kqq2xlybjD/tOLmQWu2xPw==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:H", "baseScore": 6.6, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "Kr2KcyJfYQ8J1RDorzTofQ==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "baseScore": 5.5, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "KsboTEAsiwsdLEKIDivkyA==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } ], "LUQxjpYcQwxSDC7CX78VUw==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "LdeUngez6mnzZ7ugJzuAmQ==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "LkJjju2s50oKpBRyBT8s0A==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L", "baseScore": 4.2, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "HIGH", "privilegesRequired": "LOW", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "availabilityImpact": "LOW" } ], "Ly8YGlWm8+S4CYtF8Y/Htw==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "M293c+QguJ/aaYP3cMwfyQ==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "M29Ot9TqS/JJH7ICJCbCog==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } ], "MEeKHFVdv0EwpaMPKCy3Sw==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "MIaYLvbJRWXm7UR3+CJ1PA==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "MLyBE3p9/9+LMOMl2JBi6w==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } ], "MMLwOzBcCET4jaa3dPuTwQ==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "baseScore": 5.5, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "MqEiWiJF+vNoM9tbeG6KSw==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "MtOwgWyogkVoNGuQavHN8g==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } ], "N6nQdxnBzns6IrsJM+Xsuw==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "baseScore": 5.3, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "LOW" } ], "NKSXZUie8BGH5nwjKc1B6A==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "baseScore": 5.3, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "availabilityImpact": "NONE" } ], "NXO5f9Vv38zu/sOzuqBB9Q==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 9.8, "baseSeverity": "CRITICAL", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } ], "NeZAaBfGrzLvaMKrJL7WlA==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "baseScore": 5.5, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "NfiEOtFyxMslIq3QwoTtjQ==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "NrNei+pIM0R36v4Js8XxAg==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N", "baseScore": 6.5, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "HIGH", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "LOW", "availabilityImpact": "NONE" } ], "NxJdA8sdmOpi2KE8EaPazA==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "baseScore": 5.3, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "LOW" } ], "O+92Gg/bs8C9EjretuiP8A==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "baseScore": 6.5, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "OXr+UvfSDAQbLGP4xOBSMw==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } ], "Ob+LJ5zYHnbjt14Yf8W7UA==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } ], "OwBRDeukhCJw3hE9ZsCdCg==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 8.1, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "HIGH", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } ], "PD08BQc1tUldC8QSScd1aA==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L", "baseScore": 9.4, "baseSeverity": "CRITICAL", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "LOW" } ], "PInmzCd2elAZed8XII2H3A==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "Pml3cIw2PYIOjBurBs3LFQ==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "PvgbBaq86gnOp8hffKEHhQ==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 8.1, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "HIGH", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } ], "Pza9Y2xtH9MChVMkZwgw2A==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "baseScore": 6.5, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "Q0D37bmhhLGtYILIAMgFXg==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } ], "Q2616MMrHflQbREkbaxMFg==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L", "baseScore": 5.3, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "availabilityImpact": "LOW" } ], "Q6H4f5u2pbj98wlSQQLoGg==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H", "baseScore": 6.1, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "QG/MLFKQxQOk84kYcs5X4A==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H", "baseScore": 7.1, "baseSeverity": "HIGH", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "QX9gQ7esz1e73iQHmwojXA==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } ], "QaKFgrY/cUPl6Ls/xAwlFQ==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "baseScore": 5.5, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "QbgvVzhz2dr5BDvAUM6wFQ==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } ], "Qe1reyLPtQVZ5wKqKa9jQA==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H", "baseScore": 6.6, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "availabilityImpact": "HIGH" } ], "QgRg8usqYLpC2SzTmhUKsQ==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "baseScore": 5.5, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "QmXO38HGjUD9lc3XwducGg==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "baseScore": 6.1, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "CHANGED", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "availabilityImpact": "NONE" } ], "Qvw0/zOlMy3n6XUCrN6SmQ==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "baseScore": 6.1, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "CHANGED", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "availabilityImpact": "NONE" } ], "R5XnexvMFgBiw/v8sY0BOA==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" }, { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "R7olSy1x/HelcHgr9AjG7A==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "RATpPhLUqjEbe+XxyYxOOw==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } ], "RHShqbO2hqcBNPYbKDg/3A==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "RI2wKrfD1EyE3/UfHBEmcA==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "baseScore": 6.1, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "CHANGED", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "availabilityImpact": "NONE" } ], "RRtBD+EuTLmzasgAaBJyZw==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "baseScore": 5.5, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "Rd2hVVbUws+mcvoC7DaoiQ==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } ], "Rd6dUUcujScJTEeiIRkyqw==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "baseScore": 3.3, "baseSeverity": "LOW", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "availabilityImpact": "NONE" } ], "RzrQmVvfhyaExSlpoLqDzg==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "baseScore": 9.1, "baseSeverity": "CRITICAL", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "NONE" } ], "S5Dzz9cigoJDCj8s5UcT0g==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "SGRK/IsCkjX097oRuDhiEQ==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L", "baseScore": 2.5, "baseSeverity": "LOW", "attackVector": "LOCAL", "attackComplexity": "HIGH", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "LOW" } ], "SIuaHC7QSLhT9Coo7Xm2hA==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N", "baseScore": 5.4, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "availabilityImpact": "NONE" } ], "SJA+1v6mehbGh4JXJ2n5jA==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H", "baseScore": 7.1, "baseSeverity": "HIGH", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "SQcVquEPU3fE4fDQPb3bLQ==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L", "baseScore": 2.5, "baseSeverity": "LOW", "attackVector": "LOCAL", "attackComplexity": "HIGH", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "LOW" } ], "ScOp6HuJxBp54FxFpTVDnA==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N", "baseScore": 5.5, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "availabilityImpact": "NONE" } ], "SvhQ7tNvl6ANrVnaJ4cBNw==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } ], "Sygyk9+T2DbXETLWiB21dA==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "baseScore": 5.3, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "LOW" } ], "T5Nghm4crNWWnUrYvZZItg==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } ], "T7eVCD5Gwe0DXPZP59mQUQ==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N", "baseScore": 5.4, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "availabilityImpact": "NONE" } ], "TIcWaTRsDD52irGN4xUQyA==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } ], "TL19l7Dr/wLwmp6malQ4FQ==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "TSYnGqVe9WLIg9cR9McW7A==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "TT6ujth4uzblGI4VcnKBOw==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "baseScore": 5.3, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "LOW" } ], "TZnGp6lc5MuTXKrvF6Ln8Q==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "TsVNXuAeF3PhiRZhIOjjtQ==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "baseScore": 6.1, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "CHANGED", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "availabilityImpact": "NONE" } ], "U6rJ6LmaVlYRjI8Lq/aM/A==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "U8pdHlQlr/x1RsdiZ3YQOg==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:L", "baseScore": 5.3, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "HIGH", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "availabilityImpact": "LOW" } ], "UBzPfwycyyJOBETwdSTG/w==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H", "baseScore": 4.7, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "HIGH", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "UG+yX6nADJgJWegetH+HQg==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N", "baseScore": 5.4, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "availabilityImpact": "NONE" } ], "Uk5o/hpaP3fKN3OvrwIC+w==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "baseScore": 5.9, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "availabilityImpact": "LOW" } ], "Ur6VVwVyUIHSLLbySiZhfA==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L", "baseScore": 5.4, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "availabilityImpact": "LOW" } ], "V1rPWqhvOrQycOtSN8Ve9g==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:L", "baseScore": 5.3, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "HIGH", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "availabilityImpact": "LOW" } ], "VJENPcmZwV+YJWnk88f2ug==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "baseScore": 6.5, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "VWEbeFnFOHy1IkG21b5a5g==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H", "baseScore": 5.3, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "HIGH", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "availabilityImpact": "HIGH" } ], "VgtQ3XmdoIWt3qbuW7WZzQ==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "baseScore": 9.1, "baseSeverity": "CRITICAL", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "NONE" } ], "Vm1exr1mz0tcpwIoZQ3ySQ==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N", "baseScore": 6.5, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "HIGH", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "LOW", "availabilityImpact": "NONE" } ], "VuDrFzex6yJBFISXUtfUGQ==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", "baseScore": 3.3, "baseSeverity": "LOW", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "availabilityImpact": "NONE" } ], "VvaHtDrsl/vKtefhsm7IUA==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "baseScore": 5.3, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "LOW" } ], "VwRZMkFc1pqkTIff/cjZtQ==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "baseScore": 5.5, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "W0TAw6aTfwXOMlJwloDkZA==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } ], "W3SNJz91vyAPBvH2kz/itQ==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:L", "baseScore": 5.3, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "HIGH", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "availabilityImpact": "LOW" } ], "WbtmlW8SfW38NUPRnGwbsA==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "baseScore": 5.3, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "LOW" } ], "WjQCog+GPmCa3VQIGXKhRg==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H", "baseScore": 8.2, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "X10PEbhI2yv6KYFUPacecg==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } ], "X4Ym25zfqcH7/samBN+yPw==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N", "baseScore": 6.5, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "HIGH", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "LOW", "integrityImpact": "HIGH", "availabilityImpact": "NONE" } ], "X8OJykaOJlN5EhVA7Y11uQ==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "XIh88yJoOK2Ff8cGZL7F+g==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 9.8, "baseSeverity": "CRITICAL", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } ], "XKTHMaJwDxmLjk9FkUhg8Q==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "XL1Nv8y45q8aiA92A99YyA==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } ], "XPUXyp+BOEJyEGOgXafi8Q==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "baseScore": 5.5, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "XQDeROSRzMSiFTbbLCST/A==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "baseScore": 5.5, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "XW4X9/W6MfETfE/VICA4Jw==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H", "baseScore": 4.7, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "HIGH", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "XkiVaSOj/tcz5wNKnglN4w==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H", "baseScore": 7.3, "baseSeverity": "HIGH", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } ], "XuMP4XKeqFlYH9jgvFKXXw==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "baseScore": 5.5, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "Xvp9bEwIvwUrD61DySkWgA==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "baseScore": 7.4, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "HIGH", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "NONE" } ], "Y/6FiFNJ+h2jXNTlPOzrnQ==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } ], "Y1YZsYV7ls1vsluhREpXlw==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "baseScore": 6.5, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "availabilityImpact": "NONE" } ], "Y6TEBwH0+CoZ50j5sQV23w==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H", "baseScore": 8.0, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } ], "YKgthSAonF3epY42eqsMRw==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "YQGeiQ1baJrwVuNrCjd79A==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "baseScore": 5.3, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "availabilityImpact": "NONE" } ], "YR9IlxlHBBSlj3ZLdc6/eQ==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "baseScore": 7.4, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "HIGH", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "NONE" } ], "YSP3jWIJP4TspvpKDx/wvA==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "baseScore": 9.1, "baseSeverity": "CRITICAL", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "YUwZZ9Cg1FloxBZV60vOCg==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } ], "YdpqbsRbo4xx71CiWUF39Q==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "YgehfkOilPM31dosmRXxDA==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 8.1, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "HIGH", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } ], "Ywdulqdw8k75jjL2qb8gPg==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "baseScore": 5.5, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "availabilityImpact": "NONE" } ], "Z/nuiLo/kSAcxolOXcSWYw==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "Z0bbSkX8e3OUKdJa86CbBw==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "baseScore": 3.3, "baseSeverity": "LOW", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "LOW" } ], "ZCLP8N4soyt53A9I5VdxcA==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N", "baseScore": 2.5, "baseSeverity": "LOW", "attackVector": "LOCAL", "attackComplexity": "HIGH", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "availabilityImpact": "NONE" } ], "ZNpRshLHRo06/00CGV605Q==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } ], "ZRSF+MayCxLJlIAPWIqUVA==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "baseScore": 7.4, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "HIGH", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "NONE" } ], "ZuhhG1bpyIKZ8+BvJQvoUQ==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "a8Muru+syePTNtU2/rVrUg==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 9.8, "baseSeverity": "CRITICAL", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } ], "aJsQ4a3gp8/jsNBVC56QHw==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 9.8, "baseSeverity": "CRITICAL", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } ], "aK9Mq6KdK8L3Pl0r1rTwYA==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "baseScore": 6.5, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "aN7J4vjcApPz2ZabMR0Irg==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "aOUfuyvyyWEe7Z1IZT+fGw==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "baseScore": 5.3, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "LOW" } ], "axpLUf/WfpliDV7UixDwiQ==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "baseScore": 5.3, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "availabilityImpact": "NONE" } ], "b1aMkFsUYzQ15fp9A4JV2w==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "baseScore": 9.1, "baseSeverity": "CRITICAL", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "NONE" } ], "b2xf65/2S45gOxG8Grxy0g==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "baseScore": 5.5, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "bACUKZThWu3kcO82NfO4eg==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "baseScore": 5.5, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "bHbadSMaYCdCzwHNWG3fzw==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "baseScore": 5.3, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "availabilityImpact": "NONE" } ], "bJGGlc8FG/c2T93ktUh6Ig==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "bbylqjYpcbE9/Bm4AdduVQ==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "baseScore": 5.3, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "LOW" } ], "bf41zTvm6HAv6xdiXpwGWQ==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N", "baseScore": 3.8, "baseSeverity": "LOW", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "CHANGED", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "availabilityImpact": "NONE" } ], "bh7RRRlNP555+LOFASdB0w==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "baseScore": 5.5, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "bk6ikdg+f6vAFzgypr0cOw==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "baseScore": 6.5, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "availabilityImpact": "NONE" } ], "boWBDvSNZPI7kiGalqeu1g==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:L", "baseScore": 5.3, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "HIGH", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "availabilityImpact": "LOW" } ], "bpwdCug2xQZhmaazCqwIew==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "baseScore": 7.0, "baseSeverity": "HIGH", "attackVector": "LOCAL", "attackComplexity": "HIGH", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } ], "c2gL4Z8Tbc2Ge5iwCDCV9Q==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "baseScore": 5.3, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "LOW" } ], "c76DQiDMr2npmMChLqBaow==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N", "baseScore": 5.4, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "availabilityImpact": "NONE" } ], "cMY+6QfPqyOZE380Mf5rIQ==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } ], "cQ4uQyL9nbrYK9Ka1PjEaQ==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "cQHSxL+ZfKCYmJnTVIzcRw==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "availabilityImpact": "NONE" } ], "cXB5uJOI3UJ7dOyNiQwFDg==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "baseScore": 5.5, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "cly/G/AvUZQM2J1YMymkpQ==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "cxMZ2TEnkk6RdtuU9fDThg==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } ], "czyzjx8xL/qpVEGcPiV7Og==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N", "baseScore": 6.8, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "HIGH", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "CHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "availabilityImpact": "NONE" } ], "d28O4EsS+H4v4JSsIykoOg==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "availabilityImpact": "NONE" } ], "d9oy2JiAKtie2N1lu2J6ew==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "dO/rj/SVo/ZlfJAB2ajOEQ==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } ], "dOcg60kDi70nJl9Km2ugWQ==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "baseScore": 3.3, "baseSeverity": "LOW", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "availabilityImpact": "NONE" } ], "dTHv7xNEey4Rvi0jaC90Ng==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:L", "baseScore": 5.3, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "HIGH", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "availabilityImpact": "LOW" } ], "dtQx2uUyC6Kj72i0o1bELQ==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 8.1, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "HIGH", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } ], "e+FXR06J5tPREKXnCKeZWg==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "e/bnYsWq3UNe4TO8qzzb8A==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "baseScore": 5.5, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "e7h3lwyDkLbzwbeza9/TWw==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "baseScore": 5.5, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "eZAX5+dryNgqi55C7fN1LQ==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "baseScore": 7.4, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "HIGH", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "NONE" } ], "edQImQW6OalMt0U0nrXR2Q==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "eekbTUpqIafepE8Hfmhn6g==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } ], "eiMh0pZiJlWSr3FHHfVKhg==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } ], "f6JDKuVN2cqa3h32gmRjXA==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "baseScore": 7.4, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "HIGH", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "NONE" } ], "fKu2JVqQCl/zwzvO3uUkJw==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "fPh6cJ7fj6ecJeD/S/iyJg==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "availabilityImpact": "NONE" } ], "fSeU4QTAs+fY+ihLpgdM9A==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "baseScore": 5.5, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "fqP9GV2+ELPjUr/DY2avpQ==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 9.8, "baseSeverity": "CRITICAL", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } ], "fzE91AQotuZJ8swhDTTd+g==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 9.8, "baseSeverity": "CRITICAL", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } ], "g6spFzT6DoopzuQCE0pjRg==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } ], "gGrGej/Pj6/poAgebFb+dg==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } ], "gNGv6C2nj/tHk2ntVJUOWw==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "baseScore": 5.5, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "gSYlqWWhsq36L2EzWb/x+w==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "baseScore": 5.3, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "LOW" } ], "gpPTgXxcA95Uk2vaf3/2dw==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N", "baseScore": 4.2, "baseSeverity": "MEDIUM", "attackVector": "ADJACENT_NETWORK", "attackComplexity": "HIGH", "privilegesRequired": "HIGH", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "availabilityImpact": "NONE" } ], "guG+lyS5JQIDSZS6MEfIow==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "baseScore": 5.5, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "h+nOQU6khNxAH7kkGqVqkQ==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } ], "hLNqQASPtA3T5zDQurOMBA==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "hLbfRT5oTN6ilWiJVmH5Uw==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "baseScore": 7.4, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "HIGH", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "NONE" } ], "hMMTiPhU7F2ErldK8mMkDQ==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "availabilityImpact": "NONE" } ], "hUC86VV8kD262xFcev0ZiA==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "baseScore": 5.5, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "haEbUAG+u1TE1V7073rUjA==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:L", "baseScore": 5.3, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "HIGH", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "availabilityImpact": "LOW" } ], "hxluEp8Si16NQcfaJDWcLg==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } ], "hxsQAGbTfRAveju4VaX/RA==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "i6aHe7Qjo768bvS9xSorFw==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "baseScore": 6.5, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "availabilityImpact": "NONE" } ], "i9sUrKKUObLH200e/JvjcA==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "iCq8lbTZO3yBSlU4d4JPMQ==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "iF/o4aDbQf1DAw7R+LiVQw==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N", "baseScore": 4.7, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "HIGH", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "availabilityImpact": "NONE" } ], "iFdXYPdbzmitrrthD7u8yA==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "iT0wLV5um6Novvux5XEDSA==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "iYahLjRBvYk4Zq4Nz9JtHg==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "baseScore": 5.5, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "idDdN00zXJT8ntMCqQfdkA==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 8.1, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "HIGH", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } ], "iwe2PkNe91EUwDENn+pmew==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" }, { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H", "baseScore": 9.1, "baseSeverity": "CRITICAL", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } ], "ixD2h349uZz3eCy55KxIlw==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "ixc06f0H9vqMfsbwQSwwvA==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "j71n+HvL+1UIm3Tw+EUHpw==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "availabilityImpact": "NONE" } ], "j7yoSCks+i8LevHtgFwCwQ==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "baseScore": 5.5, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "jVOV80BPiMF1EYk2uq9ohg==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "jVeIQzIm92EdkbCIlGT1qA==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "baseScore": 5.5, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "jiVVTQmOtKqVixv7agF/Hg==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "jw+r2jbroWxBcAHcFZs/eg==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "kR9Bs/gd2Qm09J0HnMmVzg==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H", "baseScore": 8.6, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "availabilityImpact": "HIGH" } ], "kTyfGInwWoCVv7gGPYCF5g==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } ], "kaUbMItvWrS1leJMEsAk9A==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } ], "kuuz4akZvpNKTf2txpaWog==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 8.1, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "HIGH", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } ], "kxWAVe7EWU20jParQphcRA==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 8.1, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "HIGH", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } ], "lCc1jyHfsFJK2HfULjN8pA==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "baseScore": 5.3, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "availabilityImpact": "NONE" } ], "lFQcTCheSGIjEbZVivulnA==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "lFfYg6015iTLGI5pZVMU7w==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H", "baseScore": 8.2, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "lHLNxD93t7uUJfmDhNwvCQ==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } ], "lJ8RTw7m+AgAnWW6upSntA==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } ], "lNSOU9e0rQLWWUuG6KmS+w==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L", "baseScore": 9.4, "baseSeverity": "CRITICAL", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "LOW" } ], "lWdVDKK0NI1ECjrQyrQZhA==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "baseScore": 5.5, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "lz6O0nYiDpis8SScmTUuSg==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } ], "m9ROycwLgAur/M8HFSigEw==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "baseScore": 5.5, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "mJw+LvAbCoVMIOZXCXNFpg==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:H", "baseScore": 5.6, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "mXoGTWRL/KLyEYWh5uyvXQ==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } ], "mXtaaJBTQTZ/zl5a00GqaA==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "mZC3gBcn6x1aC7q9hXUpKg==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "availabilityImpact": "NONE" } ], "mZCCwO//htsOIXazj/SeOw==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 9.8, "baseSeverity": "CRITICAL", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } ], "mllkaOQAaJYNZpdIF7Bkbw==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L", "baseScore": 6.5, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "HIGH", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "availabilityImpact": "LOW" } ], "mmFI4mA7exd6BfbwTUwJfQ==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N", "baseScore": 6.3, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "HIGH", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "NONE" } ], "mwfwMX3+sIJWibPk7jkY/Q==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "n39YhRffL6tFFAy/S18A8Q==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "baseScore": 5.5, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "nZ2DFaqiaft4/Dqj5SJp4Q==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "novhorrUhD5n0pl3qmImIw==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "baseScore": 7.4, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "HIGH", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "NONE" } ], "o16kBwzDyL2DXuhbCPWX9Q==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N", "baseScore": 5.7, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "availabilityImpact": "NONE" } ], "o8O4Ttqnv0lQfm1yyfyVsw==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } ], "oGYbR6FNz1KIQ8VJiypCZg==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 9.8, "baseSeverity": "CRITICAL", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } ], "oGhsPyoyEtiEHT7/0qF+CQ==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } ], "oIBUxFCAPk4vRXBwpcmtFw==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } ], "oVgcRSL89qnSRkMXpV8N8A==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } ], "oxSfxLnytv2y2gHjvplCuw==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L", "baseScore": 5.4, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "availabilityImpact": "LOW" } ], "oyvtOIVUDqm1ruQx8vhRhA==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } ], "p8wzfQhvimCzJ24LCz0qSQ==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N", "baseScore": 6.5, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "HIGH", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "LOW", "availabilityImpact": "NONE" } ], "pOKoOa+tppgNwBAEgYrxlg==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "baseScore": 6.5, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "availabilityImpact": "NONE" } ], "pe4Shj+F17XwL0468/ASsg==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "baseScore": 7.4, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "HIGH", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "NONE" } ], "q59Dz6hmc7o1qITDwl3CCw==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 9.8, "baseSeverity": "CRITICAL", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } ], "q5joCCZ2cOTa0rXBUtiSpQ==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "baseScore": 5.5, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "q7c6mw4iAmau1l6sfNLk8w==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:L", "baseScore": 5.3, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "HIGH", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "availabilityImpact": "LOW" } ], "qEhRdzGH44SGjJIcqcIv/g==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } ], "qIj6aIlqGJtvbX658qTpDQ==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "baseScore": 5.3, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "LOW" } ], "qN6ac9Xwm6AOaO1fAB7fOQ==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "baseScore": 9.1, "baseSeverity": "CRITICAL", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "qWK7H7gz7e8gS19GJSeIIg==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } ], "qYORp6v9x0Jy6S8OKerZvw==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } ], "qn72KaShSoWOaJmw6qKS3Q==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "qug1advw8m4TjVAUPEUPiA==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } ], "r3RLKNYtYvKarBqnnrlrew==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "baseScore": 5.5, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "r410Z5X0yojDsVg9YVcNqQ==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } ], "rJljaCTiTdw1uI1lvfy+hw==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H", "baseScore": 6.6, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "availabilityImpact": "HIGH" } ], "rO5a9fYyaqaIZ4bH0M8fdA==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } ], "rR226S9SV4WbmIVotM0CsQ==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "baseScore": 5.5, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "rWO0jZdArYZ9zSTLMe8r8w==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "baseScore": 7.4, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "HIGH", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "NONE" } ], "rjcajgsmKA8I5yMLMT8DHg==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N", "baseScore": 6.1, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "LOW", "availabilityImpact": "NONE" } ], "rlHsuoluzmy30odv/xIILA==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N", "baseScore": 2.5, "baseSeverity": "LOW", "attackVector": "LOCAL", "attackComplexity": "HIGH", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "availabilityImpact": "NONE" } ], "rxGz0C3kTCQwThekjofucw==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L", "baseScore": 6.9, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "HIGH", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "LOW" } ], "rzmoKvIFGvuPP0SzaH7s9w==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "s2uSNGuV+OyVW2eHDGWWKw==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N", "baseScore": 4.4, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "availabilityImpact": "NONE" } ], "s6kt2DqKLHgzYSGciPtGtQ==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H", "baseScore": 7.1, "baseSeverity": "HIGH", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "sROfYAX8Ekl+9at4JgS5Lg==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "baseScore": 7.4, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "HIGH", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "NONE" } ], "tLSR0X6hQ7hvyPbBXZslBQ==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } ], "tOOsPkEJCdO66XvUUd+xnQ==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 8.1, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "HIGH", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } ], "tUTc+tWHx1wVpIbeqTmR0w==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "tbhLz74i3ShwS72WbIsoOA==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "baseScore": 6.5, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "tbkEtEs3aa+p2/YQaD8BfQ==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "baseScore": 6.5, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "tuPGTYWKd0OWuEIwEsNtuA==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 9.8, "baseSeverity": "CRITICAL", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } ], "u1caIbS4Tk6y8c7sz8Hvhw==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L", "baseScore": 5.3, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "availabilityImpact": "LOW" } ], "uDfc8ZaPfrhTGcFwVaIvAA==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H", "baseScore": 4.7, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "HIGH", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "uEn9qA67O/SoYHOtH/EL2w==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L", "baseScore": 3.1, "baseSeverity": "LOW", "attackVector": "NETWORK", "attackComplexity": "HIGH", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "LOW" } ], "uLJc9xWoMs4KcjASTFLV/A==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "uO3OOEY6W3k9QH/tNVK0LQ==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L", "baseScore": 3.7, "baseSeverity": "LOW", "attackVector": "NETWORK", "attackComplexity": "HIGH", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "LOW" } ], "uPUnbuUJlh23l0km8iQ2tA==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "uaetuJImncB6wudykQLpEA==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "baseScore": 5.5, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "vFpvBSl3ZcIap1nZTTjWsg==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "baseScore": 7.4, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "HIGH", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "NONE" } ], "vSLFgRYoehmDve19rxyjcw==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "baseScore": 5.5, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "vTajNh0ysqaO8NuTMU//uw==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } ], "vkypiN/HZjIiT/S9k2qxvA==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 8.1, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "HIGH", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } ], "w1094TrprBpG+5TZJus6FA==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "baseScore": 5.5, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "w8af/LTYrBLWhYkZBSi2Lg==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } ], "wM3p6vKgVqUkJtSPSQjDlw==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N", "baseScore": 6.1, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "LOW", "availabilityImpact": "NONE" } ], "wp75ZuWMdeSuJ4xUhgowQA==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "xC8Y7thfNSAfn5daCQFvgQ==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "baseScore": 5.3, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "availabilityImpact": "NONE" } ], "xQ6R88+x8IssPvOAavmZXw==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "baseScore": 5.5, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "xh8zszQflFXgahc/vYUUWQ==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "baseScore": 5.5, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "xvCKE5h7HgdGkBMwA/kPeg==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "baseScore": 6.1, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "CHANGED", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "availabilityImpact": "NONE" } ], "y6oEGtDp1H5C2csZKAF6bQ==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } ], "yNrm+PctJj5AEVwT8bDpBg==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 8.1, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "HIGH", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } ], "ylg3k+AtgUcIl3hJiXNMlw==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } ], "ymZOc8rtV2bmln3PExOD3Q==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "yyVb0QTi/Vc4LSIxOEuhqA==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "baseScore": 7.4, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "HIGH", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "NONE" } ], "zAQhwfD+1kpXY0CwZC6HxA==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:H", "baseScore": 5.5, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "HIGH", "privilegesRequired": "LOW", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "availabilityImpact": "HIGH" } ], "zDmU3WG0c3AQYw7NFebUCQ==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } ], "zE3cPdw4Ma9jQQUVeE/hdg==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 8.1, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "HIGH", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } ], "zXyE3S2RgbWC3bSm5zxzpw==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "baseScore": 5.3, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "LOW" } ], "zY7J45b8Kt4bFIMHib/PGQ==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ], "zx97OaxgXH8j+mFWesQySQ==": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } ] } ] }, "PackageNotVulnerable": {} } pod: component-prefetch-bundler-on-pull-request-ncd7p-clair-scan-pod | container step-oci-attach-report: Selecting auth Using token for quay.io/redhat-appstudio-qe/build-e2e-prefetch-bundler/component-prefetch-bundler Using token for quay.io/redhat-appstudio-qe/build-e2e-prefetch-bundler/component-prefetch-bundler Attaching clair-report-amd64.json to quay.io/redhat-appstudio-qe/build-e2e-prefetch-bundler/component-prefetch-bundler@sha256:1806486990f86738e26ea4751f25cd961b841d64af0fffe4c91affa4f2d116f9 [retry] executing: oras attach --no-tty --format go-template=\{\{.digest\}\} --registry-config /tmp/auth/config.json --artifact-type application/vnd.redhat.clair-report+json quay.io/redhat-appstudio-qe/build-e2e-prefetch-bundler/component-prefetch-bundler@sha256:1806486990f86738e26ea4751f25cd961b841d64af0fffe4c91affa4f2d116f9 clair-report-amd64.json:application/vnd.redhat.clair-report+json pod: component-prefetch-bundler-on-pull-request-ncd7p-clair-scan-pod | container step-conftest-vulnerabilities: [ { "filename": "/tekton/home/clair-result-amd64.json", "namespace": "required_checks", "successes": 4, "warnings": [ { "msg": "Found packages with high vulnerabilities associated with RHSA fixes. Consider updating to a newer version of those packages, they may no longer be affected by the reported CVEs.", "metadata": { "details": { "description": "Vulnerabilities found: libpq-devel-13.20-1.el9_5 (CVE-2026-6477), nodejs-full-i18n-1:22.19.0-2.module+el9.6.0+23473+45664c2d (CVE-2025-55130, CVE-2025-55131, CVE-2025-59465, CVE-2026-12151, CVE-2026-13149, CVE-2026-1526, CVE-2026-1528, CVE-2026-21710, CVE-2026-2229, CVE-2026-27135, CVE-2026-42338, CVE-2026-48618, CVE-2026-48933, CVE-2026-59873, CVE-2026-59874), gnutls-3.8.3-9.el9 (CVE-2026-33845, CVE-2026-33846, CVE-2026-42009, CVE-2026-42010), npm-1:10.9.3-1.22.19.0.2.module+el9.6.0+23473+45664c2d (CVE-2025-55130, CVE-2025-55131, CVE-2025-59465, CVE-2026-12151, CVE-2026-13149, CVE-2026-1526, CVE-2026-1528, CVE-2026-21710, CVE-2026-2229, CVE-2026-27135, CVE-2026-42338, CVE-2026-48618, CVE-2026-48933, CVE-2026-59873, CVE-2026-59874), ruby-libs-3.3.8-4.module+el9.7.0+23096+6a95897f (CVE-2026-41316, CVE-2026-42246, CVE-2026-42258), ruby-default-gems-3.3.8-4.module+el9.7.0+23096+6a95897f (CVE-2026-41316, CVE-2026-42246, CVE-2026-42258), nodejs-1:22.19.0-2.module+el9.6.0+23473+45664c2d (CVE-2025-55130, CVE-2025-55131, CVE-2025-59465, CVE-2026-12151, CVE-2026-13149, CVE-2026-1526, CVE-2026-1528, CVE-2026-21710, CVE-2026-2229, CVE-2026-27135, CVE-2026-42338, CVE-2026-48618, CVE-2026-48933, CVE-2026-59873, CVE-2026-59874), libbrotli-1.0.9-7.el9_5 (CVE-2025-6176), rubygem-irb-1.13.1-4.module+el9.7.0+23096+6a95897f (CVE-2026-41316, CVE-2026-42246, CVE-2026-42258), glib2-2.68.4-18.el9_7 (CVE-2026-58016), libnghttp2-1.43.0-6.el9 (CVE-2026-27135), glib2-devel-2.68.4-18.el9_7 (CVE-2026-58016), bsdtar-3.5.3-6.el9_6 (CVE-2026-4111, CVE-2026-4424), go-srpm-macros-3.6.0-12.el9_7 (CVE-2025-61726, CVE-2026-25679), vim-minimal-2:8.2.2637-23.el9_7 (CVE-2026-33412, CVE-2026-34982), ruby-3.3.8-4.module+el9.7.0+23096+6a95897f (CVE-2026-41316, CVE-2026-42246, CVE-2026-42258), libtiff-4.4.0-15.el9_7.2 (CVE-2026-12912, CVE-2026-4775), rubygem-io-console-0.7.1-4.module+el9.7.0+23096+6a95897f (CVE-2026-41316, CVE-2026-42246, CVE-2026-42258), nodejs-docs-1:22.19.0-2.module+el9.6.0+23473+45664c2d (CVE-2025-55130, CVE-2025-55131, CVE-2025-59465, CVE-2026-12151, CVE-2026-13149, CVE-2026-1526, CVE-2026-1528, CVE-2026-21710, CVE-2026-2229, CVE-2026-27135, CVE-2026-42338, CVE-2026-48618, CVE-2026-48933, CVE-2026-59873, CVE-2026-59874), openssh-clients-8.7p1-46.el9 (CVE-2026-3497, CVE-2026-35385, CVE-2026-60002), rubygem-bigdecimal-3.1.5-4.module+el9.7.0+23096+6a95897f (CVE-2026-41316, CVE-2026-42246, CVE-2026-42258), rubygem-rdoc-6.6.3.1-4.module+el9.7.0+23096+6a95897f (CVE-2026-41316, CVE-2026-42246, CVE-2026-42258), openssl-libs-1:3.5.1-4.el9_7 (CVE-2025-15467, CVE-2026-45447), nodejs-libs-1:22.19.0-2.module+el9.6.0+23473+45664c2d (CVE-2025-55130, CVE-2025-55131, CVE-2025-59465, CVE-2026-12151, CVE-2026-13149, CVE-2026-1526, CVE-2026-1528, CVE-2026-21710, CVE-2026-2229, CVE-2026-27135, CVE-2026-42338, CVE-2026-48618, CVE-2026-48933, CVE-2026-59873, CVE-2026-59874), expat-2.5.0-5.el9_7.1 (CVE-2026-45186), libpng-2:1.6.37-12.el9 (CVE-2025-64720, CVE-2025-65018, CVE-2025-66293, CVE-2026-25646), rubygem-json-2.7.2-4.module+el9.7.0+23096+6a95897f (CVE-2026-41316, CVE-2026-42246, CVE-2026-42258), libpq-13.20-1.el9_5 (CVE-2026-6477), libacl-2.3.1-4.el9 (CVE-2026-54369), rubygem-bundler-2.5.22-4.module+el9.7.0+23096+6a95897f (CVE-2026-41316, CVE-2026-42246, CVE-2026-42258), vim-filesystem-2:8.2.2637-23.el9_7 (CVE-2026-34982), rubygem-rake-13.1.0-4.module+el9.7.0+23096+6a95897f (CVE-2026-41316, CVE-2026-42246, CVE-2026-42258), libcap-2.48-10.el9 (CVE-2026-4878), libpng-devel-2:1.6.37-12.el9 (CVE-2025-64720, CVE-2025-65018, CVE-2025-66293, CVE-2026-25646), python3-libs-3.9.23-2.el9 (CVE-2026-11940, CVE-2026-15308, CVE-2026-4519, CVE-2026-4786, CVE-2026-6100), brotli-devel-1.0.9-7.el9_5 (CVE-2025-6176), brotli-1.0.9-7.el9_5 (CVE-2025-6176), openssl-devel-1:3.5.1-4.el9_7 (CVE-2025-15467, CVE-2026-45447), rubygem-psych-5.1.2-4.module+el9.7.0+23096+6a95897f (CVE-2026-41316, CVE-2026-42246, CVE-2026-42258), python3-3.9.23-2.el9 (CVE-2026-11940, CVE-2026-15308, CVE-2026-4519, CVE-2026-4786, CVE-2026-6100), python3-urllib3-1.26.5-6.el9 (CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, CVE-2026-44432), libtiff-devel-4.4.0-15.el9_7.2 (CVE-2026-12912, CVE-2026-4775), ruby-bundled-gems-3.3.8-4.module+el9.7.0+23096+6a95897f (CVE-2026-41316, CVE-2026-42246, CVE-2026-42258), openssh-8.7p1-46.el9 (CVE-2026-3497, CVE-2026-35385, CVE-2026-60002), rsync-3.2.5-3.el9 (CVE-2026-29518, CVE-2026-41035, CVE-2026-43618), gnupg2-2.3.3-4.el9 (CVE-2025-68973), ruby-devel-3.3.8-4.module+el9.7.0+23096+6a95897f (CVE-2026-41316, CVE-2026-42246, CVE-2026-42258), libarchive-3.5.3-6.el9_6 (CVE-2026-4111, CVE-2026-4424), openssl-1:3.5.1-4.el9_7 (CVE-2025-15467, CVE-2026-45447), rubygems-3.5.22-4.module+el9.7.0+23096+6a95897f (CVE-2026-41316, CVE-2026-42246, CVE-2026-42258)", "name": "clair_high_vulnerabilities", "url": "https://access.redhat.com/articles/red_hat_vulnerability_tutorial" }, "vulnerabilities_number": 183 } }, { "msg": "Found packages with unpatched high vulnerabilities. These vulnerabilities don't have a known fix at this time.", "metadata": { "details": { "description": "Vulnerabilities found: curl-minimal-7.76.1-34.el9 (CVE-2026-8286, CVE-2026-8458, CVE-2026-8927, CVE-2026-9547), vim-minimal-2:8.2.2637-23.el9_7 (CVE-2026-73078), sqlite-libs-3.34.1-9.el9_7 (CVE-2026-51298), openssh-clients-8.7p1-46.el9 (CVE-2026-59999), vim-filesystem-2:8.2.2637-23.el9_7 (CVE-2026-73078), libcurl-minimal-7.76.1-34.el9 (CVE-2026-8286, CVE-2026-8458, CVE-2026-8927, CVE-2026-9547), openssh-8.7p1-46.el9 (CVE-2026-59999)", "name": "clair_unpatched_high_vulnerabilities", "url": "https://access.redhat.com/articles/red_hat_vulnerability_tutorial" }, "vulnerabilities_number": 13 } }, { "msg": "Found packages with medium vulnerabilities associated with RHSA fixes. Consider updating to a newer version of those packages, they may no longer be affected by the reported CVEs.", "metadata": { "details": { "description": "Vulnerabilities found: libpq-devel-13.20-1.el9_5 (CVE-2025-12818), nodejs-full-i18n-1:22.19.0-2.module+el9.6.0+23473+45664c2d (CVE-2025-55132, CVE-2025-59466, CVE-2026-1525, CVE-2026-21637, CVE-2026-25547, CVE-2026-26996, CVE-2026-27904, CVE-2026-48615, CVE-2026-48619, CVE-2026-48928, CVE-2026-48930, CVE-2026-48934, CVE-2026-9678), glibc-langpack-en-2.34-231.el9_7.2 (CVE-2026-4046, CVE-2026-4437, CVE-2026-5435, CVE-2026-5450, CVE-2026-5928, CVE-2026-6238), gnutls-3.8.3-9.el9 (CVE-2025-14831, CVE-2026-3833, CVE-2026-42011, CVE-2026-42012, CVE-2026-42013, CVE-2026-42014, CVE-2026-42015, CVE-2026-5260), libmount-devel-2.37.4-21.el9 (CVE-2025-14104), npm-1:10.9.3-1.22.19.0.2.module+el9.6.0+23473+45664c2d (CVE-2025-55132, CVE-2025-59466, CVE-2026-1525, CVE-2026-21637, CVE-2026-25547, CVE-2026-26996, CVE-2026-27904, CVE-2026-48615, CVE-2026-48619, CVE-2026-48928, CVE-2026-48930, CVE-2026-48934, CVE-2026-9678), ruby-libs-3.3.8-4.module+el9.7.0+23096+6a95897f (CVE-2025-24294, CVE-2025-58767, CVE-2026-42245), ruby-default-gems-3.3.8-4.module+el9.7.0+23096+6a95897f (CVE-2025-24294, CVE-2025-58767, CVE-2026-42245), libxslt-1.1.34-13.el9_6 (CVE-2023-40403, CVE-2025-10911), libxslt-devel-1.1.34-13.el9_6 (CVE-2023-40403, CVE-2025-10911), nodejs-1:22.19.0-2.module+el9.6.0+23473+45664c2d (CVE-2025-55132, CVE-2025-59466, CVE-2026-1525, CVE-2026-21637, CVE-2026-25547, CVE-2026-26996, CVE-2026-27904, CVE-2026-48615, CVE-2026-48619, CVE-2026-48928, CVE-2026-48930, CVE-2026-48934, CVE-2026-9678), glibc-2.34-231.el9_7.2 (CVE-2026-0915, CVE-2026-4046, CVE-2026-4437, CVE-2026-5435, CVE-2026-5450, CVE-2026-5928, CVE-2026-6238), curl-minimal-7.76.1-34.el9 (CVE-2025-9086), glibc-headers-2.34-231.el9_7.2 (CVE-2026-4046, CVE-2026-4437, CVE-2026-5435, CVE-2026-5450, CVE-2026-5928, CVE-2026-6238), libblkid-2.37.4-21.el9 (CVE-2025-14104), glibc-locale-source-2.34-231.el9_7.2 (CVE-2026-4046, CVE-2026-4437, CVE-2026-5435, CVE-2026-5450, CVE-2026-5928, CVE-2026-6238), p11-kit-trust-0.25.3-3.el9_5 (CVE-2026-13757, CVE-2026-2100), rubygem-irb-1.13.1-4.module+el9.7.0+23096+6a95897f (CVE-2025-24294, CVE-2025-58767, CVE-2026-42245), glib2-2.68.4-18.el9_7 (CVE-2025-13601, CVE-2025-14087, CVE-2025-14512), libnghttp2-1.43.0-6.el9 (CVE-2026-58055), systemd-252-55.el9_7.2 (CVE-2025-4598, CVE-2026-29111), glib2-devel-2.68.4-18.el9_7 (CVE-2025-13601, CVE-2025-14087, CVE-2025-14512), bsdtar-3.5.3-6.el9_6 (CVE-2026-14164, CVE-2026-5121), libsolv-0.7.24-3.el9 (CVE-2026-48864), vim-minimal-2:8.2.2637-23.el9_7 (CVE-2026-25749, CVE-2026-28421, CVE-2026-41411), ruby-3.3.8-4.module+el9.7.0+23096+6a95897f (CVE-2025-24294, CVE-2025-58767, CVE-2026-42245), util-linux-2.37.4-21.el9 (CVE-2025-14104), krb5-libs-1.21.1-8.el9_6 (CVE-2026-40355, CVE-2026-40356), libfdisk-2.37.4-21.el9 (CVE-2025-14104), rubygem-io-console-0.7.1-4.module+el9.7.0+23096+6a95897f (CVE-2025-24294, CVE-2025-58767, CVE-2026-42245), nodejs-docs-1:22.19.0-2.module+el9.6.0+23473+45664c2d (CVE-2025-55132, CVE-2025-59466, CVE-2026-1525, CVE-2026-21637, CVE-2026-25547, CVE-2026-26996, CVE-2026-27904, CVE-2026-48615, CVE-2026-48619, CVE-2026-48928, CVE-2026-48930, CVE-2026-48934, CVE-2026-9678), openssl-fips-provider-3.0.7-8.el9 (CVE-2026-31790), binutils-gold-2.35.2-67.el9 (CVE-2025-11083), binutils-2.35.2-67.el9 (CVE-2025-11083), libcurl-devel-7.76.1-34.el9 (CVE-2025-9086), openssh-clients-8.7p1-46.el9 (CVE-2025-61984, CVE-2025-61985, CVE-2026-35414, CVE-2026-55653, CVE-2026-55655, CVE-2026-59996), rubygem-bigdecimal-3.1.5-4.module+el9.7.0+23096+6a95897f (CVE-2025-24294, CVE-2025-58767, CVE-2026-42245), rubygem-rdoc-6.6.3.1-4.module+el9.7.0+23096+6a95897f (CVE-2025-24294, CVE-2025-58767, CVE-2026-42245), openssl-libs-1:3.5.1-4.el9_7 (CVE-2025-11187, CVE-2025-69419, CVE-2026-28390, CVE-2026-31790, CVE-2026-34182, CVE-2026-34183, CVE-2026-42764, CVE-2026-45445), libgcrypt-1.10.0-11.el9 (CVE-2026-41989), nodejs-libs-1:22.19.0-2.module+el9.6.0+23473+45664c2d (CVE-2025-55132, CVE-2025-59466, CVE-2026-1525, CVE-2026-21637, CVE-2026-25547, CVE-2026-26996, CVE-2026-27904, CVE-2026-48615, CVE-2026-48619, CVE-2026-48928, CVE-2026-48930, CVE-2026-48934, CVE-2026-9678), libblkid-devel-2.37.4-21.el9 (CVE-2025-14104), systemd-rpm-macros-252-55.el9_7.2 (CVE-2025-4598, CVE-2026-29111), libsmartcols-2.37.4-21.el9 (CVE-2025-14104), libpng-2:1.6.37-12.el9 (CVE-2026-22695, CVE-2026-22801, CVE-2026-33416, CVE-2026-33636), rubygem-json-2.7.2-4.module+el9.7.0+23096+6a95897f (CVE-2025-24294, CVE-2025-58767, CVE-2026-42245), libpq-13.20-1.el9_5 (CVE-2025-12818), glibc-minimal-langpack-2.34-231.el9_7.2 (CVE-2026-4046, CVE-2026-4437, CVE-2026-5435, CVE-2026-5450, CVE-2026-5928, CVE-2026-6238), rubygem-bundler-2.5.22-4.module+el9.7.0+23096+6a95897f (CVE-2025-24294, CVE-2025-58767, CVE-2026-42245), libmount-2.37.4-21.el9 (CVE-2025-14104), rubygem-rake-13.1.0-4.module+el9.7.0+23096+6a95897f (CVE-2025-24294, CVE-2025-58767, CVE-2026-42245), libpng-devel-2:1.6.37-12.el9 (CVE-2026-22695, CVE-2026-22801, CVE-2026-33416, CVE-2026-33636), libcurl-minimal-7.76.1-34.el9 (CVE-2025-9086), python3-libs-3.9.23-2.el9 (CVE-2025-12084, CVE-2025-15366, CVE-2025-15367, CVE-2025-6069, CVE-2025-8291, CVE-2026-0865, CVE-2026-1299), acl-2.3.1-4.el9 (CVE-2026-54370), glibc-common-2.34-231.el9_7.2 (CVE-2026-4046, CVE-2026-4437, CVE-2026-5435, CVE-2026-5450, CVE-2026-5928, CVE-2026-6238), glibc-devel-2.34-231.el9_7.2 (CVE-2026-4046, CVE-2026-4437, CVE-2026-5435, CVE-2026-5450, CVE-2026-5928, CVE-2026-6238), util-linux-core-2.37.4-21.el9 (CVE-2025-14104), glibc-gconv-extra-2.34-231.el9_7.2 (CVE-2026-4046, CVE-2026-4437, CVE-2026-5435, CVE-2026-5450, CVE-2026-5928, CVE-2026-6238), openssl-devel-1:3.5.1-4.el9_7 (CVE-2025-11187, CVE-2025-69419, CVE-2026-28390, CVE-2026-31790, CVE-2026-34182, CVE-2026-34183, CVE-2026-42764, CVE-2026-45445), rubygem-psych-5.1.2-4.module+el9.7.0+23096+6a95897f (CVE-2025-24294, CVE-2025-58767, CVE-2026-42245), python3-3.9.23-2.el9 (CVE-2025-12084, CVE-2025-15366, CVE-2025-15367, CVE-2025-6069, CVE-2025-8291, CVE-2026-0865, CVE-2026-1299), python3-urllib3-1.26.5-6.el9 (CVE-2026-44431), ruby-bundled-gems-3.3.8-4.module+el9.7.0+23096+6a95897f (CVE-2025-24294, CVE-2025-58767, CVE-2026-42245), openssh-8.7p1-46.el9 (CVE-2025-61984, CVE-2025-61985, CVE-2026-35414, CVE-2026-55653, CVE-2026-55655, CVE-2026-59996), libuuid-2.37.4-21.el9 (CVE-2025-14104), python3-idna-2.10-7.el9_4.1 (CVE-2026-45409), rsync-3.2.5-3.el9 (CVE-2024-12086, CVE-2025-10158), systemd-libs-252-55.el9_7.2 (CVE-2025-4598, CVE-2026-29111), coreutils-single-8.32-39.el9 (CVE-2025-5278), tar-2:1.34-7.el9 (CVE-2025-45582), p11-kit-0.25.3-3.el9_5 (CVE-2026-13757, CVE-2026-2100), ruby-devel-3.3.8-4.module+el9.7.0+23096+6a95897f (CVE-2025-24294, CVE-2025-58767, CVE-2026-42245), systemd-pam-252-55.el9_7.2 (CVE-2025-4598, CVE-2026-29111), libarchive-3.5.3-6.el9_6 (CVE-2026-14164, CVE-2026-5121), openssl-1:3.5.1-4.el9_7 (CVE-2025-11187, CVE-2025-69419, CVE-2026-28390, CVE-2026-31790, CVE-2026-34182, CVE-2026-34183, CVE-2026-42764, CVE-2026-45445), openssl-fips-provider-so-3.0.7-8.el9 (CVE-2026-31790), rubygems-3.5.22-4.module+el9.7.0+23096+6a95897f (CVE-2025-24294, CVE-2025-58767, CVE-2026-42245)", "name": "clair_medium_vulnerabilities", "url": "https://access.redhat.com/articles/red_hat_vulnerability_tutorial" }, "vulnerabilities_number": 281 } }, { "msg": "Found packages with unpatched medium vulnerabilities. These vulnerabilities don't have a known fix at this time.", "metadata": { "details": { "description": "Vulnerabilities found: xz-libs-5.2.5-8.el9_0 (CVE-2026-34743), glibc-langpack-en-2.34-231.el9_7.2 (CVE-2026-6368, CVE-2026-6791), python3-pip-wheel-21.3.1-1.el9 (CVE-2023-45803, CVE-2025-50181, CVE-2025-50182, CVE-2026-13346, CVE-2026-25645, CVE-2026-32284, CVE-2026-45409), glibc-2.34-231.el9_7.2 (CVE-2026-6368, CVE-2026-6791), curl-minimal-7.76.1-34.el9 (CVE-2025-13034, CVE-2025-14017, CVE-2026-11856, CVE-2026-1965, CVE-2026-3783, CVE-2026-3784, CVE-2026-4873, CVE-2026-5545, CVE-2026-5773, CVE-2026-6253, CVE-2026-6429, CVE-2026-7168, CVE-2026-8924, CVE-2026-8932), libblkid-2.37.4-21.el9 (CVE-2026-13595, CVE-2026-27456), glib2-2.68.4-18.el9_7 (CVE-2026-1484, CVE-2026-1489, CVE-2026-15588, CVE-2026-16118, CVE-2026-58010, CVE-2026-58011, CVE-2026-58012, CVE-2026-58013, CVE-2026-58014, CVE-2026-58015), systemd-252-55.el9_7.2 (CVE-2026-4105), harfbuzz-2.7.4-10.el9 (CVE-2026-22693), gawk-5.1.0-6.el9 (CVE-2026-40467, CVE-2026-40468, CVE-2026-40553), libsolv-0.7.24-3.el9 (CVE-2026-9149, CVE-2026-9150), vim-minimal-2:8.2.2637-23.el9_7 (CVE-2025-29768, CVE-2026-28418, CVE-2026-28419, CVE-2026-28420, CVE-2026-39881, CVE-2026-42307, CVE-2026-44656, CVE-2026-45130, CVE-2026-52859, CVE-2026-55892, CVE-2026-57451, CVE-2026-57452, CVE-2026-59857), util-linux-2.37.4-21.el9 (CVE-2026-13595, CVE-2026-27456), krb5-libs-1.21.1-8.el9_6 (CVE-2026-11850), libfdisk-2.37.4-21.el9 (CVE-2026-13595, CVE-2026-27456), openssl-fips-provider-3.0.7-8.el9 (CVE-2026-2673), binutils-gold-2.35.2-67.el9 (CVE-2021-20197, CVE-2021-45078, CVE-2025-11081, CVE-2025-11082, CVE-2025-5245, CVE-2025-7545, CVE-2026-15003, CVE-2026-19548, CVE-2026-6844, CVE-2026-6845), binutils-2.35.2-67.el9 (CVE-2021-20197, CVE-2021-45078, CVE-2025-11081, CVE-2025-11082, CVE-2025-5245, CVE-2025-7545, CVE-2026-15003, CVE-2026-19548, CVE-2026-6844, CVE-2026-6845), openssh-clients-8.7p1-46.el9 (CVE-2023-51767, CVE-2025-32728, CVE-2026-59995, CVE-2026-59997, CVE-2026-59998, CVE-2026-60000, CVE-2026-60001), openssl-libs-1:3.5.1-4.el9_7 (CVE-2026-2673), libxml2-2.9.13-14.el9_7 (CVE-2026-0990, CVE-2026-11979, CVE-2026-1757, CVE-2026-6653, CVE-2026-6732), gzip-1.12-1.el9 (CVE-2026-41991), expat-2.5.0-5.el9_7.1 (CVE-2026-32776, CVE-2026-32777, CVE-2026-32778, CVE-2026-50219, CVE-2026-56131, CVE-2026-56132, CVE-2026-56404, CVE-2026-56405, CVE-2026-56406, CVE-2026-56407, CVE-2026-56412), bzip2-1.0.8-10.el9_5 (CVE-2026-42250), systemd-rpm-macros-252-55.el9_7.2 (CVE-2026-4105), libsmartcols-2.37.4-21.el9 (CVE-2026-13595, CVE-2026-27456), libpng-2:1.6.37-12.el9 (CVE-2025-28164, CVE-2025-64505, CVE-2025-64506, CVE-2026-34757), glibc-minimal-langpack-2.34-231.el9_7.2 (CVE-2026-6368, CVE-2026-6791), attr-2.5.1-3.el9 (CVE-2026-54371), libmount-2.37.4-21.el9 (CVE-2026-13595, CVE-2026-27456), vim-filesystem-2:8.2.2637-23.el9_7 (CVE-2025-29768, CVE-2026-28418, CVE-2026-28419, CVE-2026-28420, CVE-2026-39881, CVE-2026-42307, CVE-2026-44656, CVE-2026-45130, CVE-2026-52859, CVE-2026-55892, CVE-2026-57451, CVE-2026-57452, CVE-2026-59857), sed-4.8-9.el9 (CVE-2026-5958), libcurl-minimal-7.76.1-34.el9 (CVE-2025-13034, CVE-2025-14017, CVE-2026-11856, CVE-2026-1965, CVE-2026-3783, CVE-2026-3784, CVE-2026-4873, CVE-2026-5545, CVE-2026-5773, CVE-2026-6253, CVE-2026-6429, CVE-2026-7168, CVE-2026-8924, CVE-2026-8932), python3-libs-3.9.23-2.el9 (CVE-2025-11468, CVE-2025-12781, CVE-2025-13837, CVE-2025-15282, CVE-2025-4516, CVE-2026-0672, CVE-2026-11972, CVE-2026-1502, CVE-2026-3276, CVE-2026-3644, CVE-2026-4224, CVE-2026-42308, CVE-2026-4360, CVE-2026-5713, CVE-2026-6019, CVE-2026-7210), xz-5.2.5-8.el9_0 (CVE-2026-34743), glibc-common-2.34-231.el9_7.2 (CVE-2026-6368, CVE-2026-6791), tpm2-tss-3.2.3-1.el9 (CVE-2024-29040), util-linux-core-2.37.4-21.el9 (CVE-2026-13595, CVE-2026-27456), glibc-gconv-extra-2.34-231.el9_7.2 (CVE-2026-6368, CVE-2026-6791), pam-1.5.1-26.el9_6 (CVE-2026-12610, CVE-2026-54411), python3-3.9.23-2.el9 (CVE-2025-11468, CVE-2025-12781, CVE-2025-13837, CVE-2025-15282, CVE-2025-4516, CVE-2026-0672, CVE-2026-11972, CVE-2026-1502, CVE-2026-3276, CVE-2026-3644, CVE-2026-4224, CVE-2026-42308, CVE-2026-4360, CVE-2026-5713, CVE-2026-6019, CVE-2026-7210), openssh-8.7p1-46.el9 (CVE-2023-51767, CVE-2025-32728, CVE-2026-59995, CVE-2026-59997, CVE-2026-59998, CVE-2026-60000, CVE-2026-60001), libuuid-2.37.4-21.el9 (CVE-2026-13595, CVE-2026-27456), bzip2-libs-1.0.8-10.el9_5 (CVE-2026-42250), freetype-2.10.4-10.el9_5 (CVE-2026-23865), rsync-3.2.5-3.el9 (CVE-2026-43617, CVE-2026-43619, CVE-2026-43620, CVE-2026-45232), gnupg2-2.3.3-4.el9 (CVE-2025-68972), systemd-libs-252-55.el9_7.2 (CVE-2026-4105), coreutils-single-8.32-39.el9 (CVE-2026-56391, CVE-2026-56392), tar-2:1.34-7.el9 (CVE-2025-64118, CVE-2026-18477, CVE-2026-18508, CVE-2026-33056, CVE-2026-53655, CVE-2026-5704, CVE-2026-59871, CVE-2026-59875), openldap-2.6.8-4.el9 (CVE-2026-22185), systemd-pam-252-55.el9_7.2 (CVE-2026-4105), dbus-broker-28-7.el9 (CVE-2026-16730), libarchive-3.5.3-6.el9_6 (CVE-2023-30571, CVE-2025-60753, CVE-2026-4426, CVE-2026-5745), openssl-1:3.5.1-4.el9_7 (CVE-2026-2673), openssl-fips-provider-so-3.0.7-8.el9 (CVE-2026-2673), libattr-2.5.1-3.el9 (CVE-2026-54371)", "name": "clair_unpatched_medium_vulnerabilities", "url": "https://access.redhat.com/articles/red_hat_vulnerability_tutorial" }, "vulnerabilities_number": 229 } }, { "msg": "Found packages with low/negligible vulnerabilities associated with RHSA fixes. Consider updating to a newer version of those packages, they may no longer be affected by the reported CVEs.", "metadata": { "details": { "description": "Vulnerabilities found: nodejs-full-i18n-1:22.19.0-2.module+el9.6.0+23473+45664c2d (CVE-2026-11525, CVE-2026-48935, CVE-2026-6733), glibc-langpack-en-2.34-231.el9_7.2 (CVE-2026-4438), gnutls-3.8.3-9.el9 (CVE-2025-9820, CVE-2026-3832, CVE-2026-5419), npm-1:10.9.3-1.22.19.0.2.module+el9.6.0+23473+45664c2d (CVE-2026-11525, CVE-2026-48935, CVE-2026-6733), nodejs-1:22.19.0-2.module+el9.6.0+23473+45664c2d (CVE-2026-11525, CVE-2026-48935, CVE-2026-6733), glibc-2.34-231.el9_7.2 (CVE-2025-15281, CVE-2026-0861, CVE-2026-4438), glibc-headers-2.34-231.el9_7.2 (CVE-2026-4438), glibc-locale-source-2.34-231.el9_7.2 (CVE-2026-4438), nodejs-docs-1:22.19.0-2.module+el9.6.0+23473+45664c2d (CVE-2026-11525, CVE-2026-48935, CVE-2026-6733), openssh-clients-8.7p1-46.el9 (CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-55654), openssl-libs-1:3.5.1-4.el9_7 (CVE-2025-15468, CVE-2025-15469, CVE-2025-66199, CVE-2025-68160, CVE-2025-69418, CVE-2025-69420, CVE-2025-69421, CVE-2026-22795, CVE-2026-22796, CVE-2026-34180, CVE-2026-34181, CVE-2026-42766, CVE-2026-42767, CVE-2026-42768, CVE-2026-42769, CVE-2026-42770, CVE-2026-45446, CVE-2026-7383, CVE-2026-9076), nodejs-libs-1:22.19.0-2.module+el9.6.0+23473+45664c2d (CVE-2026-11525, CVE-2026-48935, CVE-2026-6733), libxml2-2.9.13-14.el9_7 (CVE-2024-34459, CVE-2025-6170), libxml2-devel-2.9.13-14.el9_7 (CVE-2024-34459, CVE-2025-6170), glibc-minimal-langpack-2.34-231.el9_7.2 (CVE-2026-4438), python3-libs-3.9.23-2.el9 (CVE-2024-5642, CVE-2025-6075), libtasn1-4.16.0-9.el9 (CVE-2025-13151), glibc-common-2.34-231.el9_7.2 (CVE-2026-4438), glibc-devel-2.34-231.el9_7.2 (CVE-2026-4438), glibc-gconv-extra-2.34-231.el9_7.2 (CVE-2026-4438), openssl-devel-1:3.5.1-4.el9_7 (CVE-2025-15468, CVE-2025-15469, CVE-2025-66199, CVE-2025-68160, CVE-2025-69418, CVE-2025-69420, CVE-2025-69421, CVE-2026-22795, CVE-2026-22796, CVE-2026-34180, CVE-2026-34181, CVE-2026-42766, CVE-2026-42767, CVE-2026-42768, CVE-2026-42769, CVE-2026-42770, CVE-2026-45446, CVE-2026-7383, CVE-2026-9076), python3-3.9.23-2.el9 (CVE-2024-5642, CVE-2025-6075), openssh-8.7p1-46.el9 (CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-55654), openssl-1:3.5.1-4.el9_7 (CVE-2025-15468, CVE-2025-15469, CVE-2025-66199, CVE-2025-68160, CVE-2025-69418, CVE-2025-69420, CVE-2025-69421, CVE-2026-22795, CVE-2026-22796, CVE-2026-34180, CVE-2026-34181, CVE-2026-42766, CVE-2026-42767, CVE-2026-42768, CVE-2026-42769, CVE-2026-42770, CVE-2026-45446, CVE-2026-7383, CVE-2026-9076)", "name": "clair_low_vulnerabilities", "url": "https://access.redhat.com/articles/red_hat_vulnerability_tutorial" }, "vulnerabilities_number": 102 } }, { "msg": "Found packages with unpatched low/negligible vulnerabilities. These vulnerabilities don't have a known fix at this time.", "metadata": { "details": { "description": "Vulnerabilities found: ncurses-base-6.2-12.20210508.el9 (CVE-2023-50495), popt-1.18-8.el9 (CVE-2026-18739, CVE-2026-18839), python3-pip-wheel-21.3.1-1.el9 (CVE-2021-3572), curl-minimal-7.76.1-34.el9 (CVE-2024-11053, CVE-2024-7264, CVE-2024-9681, CVE-2025-14524, CVE-2025-15079, CVE-2025-15224, CVE-2026-6276), pkgconf-pkg-config-1.7.3-10.el9 (CVE-2023-24056), pkgconf-m4-1.7.3-10.el9 (CVE-2023-24056), elfutils-debuginfod-client-0.193-1.el9 (CVE-2024-25260, CVE-2025-1371, CVE-2025-1376, CVE-2025-1377), zlib-1.2.11-40.el9 (CVE-2026-27171), ncurses-6.2-12.20210508.el9 (CVE-2023-50495), glib2-2.68.4-18.el9_7 (CVE-2023-32636, CVE-2025-3360, CVE-2025-7039, CVE-2026-0988, CVE-2026-1485), gawk-5.1.0-6.el9 (CVE-2023-4156), vim-minimal-2:8.2.2637-23.el9_7 (CVE-2021-3927, CVE-2021-3928, CVE-2021-3968, CVE-2021-3973, CVE-2021-3974, CVE-2021-4136, CVE-2021-4166, CVE-2021-4173, CVE-2021-4187, CVE-2022-0213, CVE-2022-0351, CVE-2022-1616, CVE-2022-1619, CVE-2022-1620, CVE-2022-1674, CVE-2022-1720, CVE-2022-1725, CVE-2022-2042, CVE-2022-2124, CVE-2022-2125, CVE-2022-2126, CVE-2022-2129, CVE-2022-2175, CVE-2022-2182, CVE-2022-2183, CVE-2022-2206, CVE-2022-2207, CVE-2022-2208, CVE-2022-2210, CVE-2022-2257, CVE-2022-2284, CVE-2022-2285, CVE-2022-2286, CVE-2022-2287, CVE-2022-2304, CVE-2022-2343, CVE-2022-2344, CVE-2022-2345, CVE-2022-2522, CVE-2022-2817, CVE-2022-2819, CVE-2022-2845, CVE-2022-2849, CVE-2022-2862, CVE-2022-2874, CVE-2022-2889, CVE-2022-2923, CVE-2022-2946, CVE-2022-2980, CVE-2022-2982, CVE-2022-3016, CVE-2022-3037, CVE-2022-3099, CVE-2022-3134, CVE-2022-3153, CVE-2022-3234, CVE-2022-3235, CVE-2022-3256, CVE-2022-3278, CVE-2022-3296, CVE-2022-3297, CVE-2022-3324, CVE-2022-3352, CVE-2022-3705, CVE-2022-4141, CVE-2022-4292, CVE-2022-4293, CVE-2023-0049, CVE-2023-0051, CVE-2023-0054, CVE-2023-0288, CVE-2023-0433, CVE-2023-0512, CVE-2023-1127, CVE-2023-1170, CVE-2023-1175, CVE-2023-1264, CVE-2023-2609, CVE-2023-2610, CVE-2023-46246, CVE-2023-4734, CVE-2023-4735, CVE-2023-4738, CVE-2023-4751, CVE-2023-4781, CVE-2023-48231, CVE-2023-48232, CVE-2023-48233, CVE-2023-48234, CVE-2023-48235, CVE-2023-48236, CVE-2023-48237, CVE-2023-48706, CVE-2023-5344, CVE-2023-5441, CVE-2023-5535, CVE-2024-22667, CVE-2024-41957, CVE-2024-41965, CVE-2024-43374, CVE-2024-43802, CVE-2024-45306, CVE-2024-47814, CVE-2025-1215, CVE-2025-22134, CVE-2025-24014, CVE-2025-26603, CVE-2026-26269, CVE-2026-28422), sqlite-libs-3.34.1-9.el9_7 (CVE-2024-0232, CVE-2025-70873), libgomp-11.5.0-11.el9 (CVE-2021-46195, CVE-2022-27943), pkgconf-1.7.3-10.el9 (CVE-2023-24056), libgcc-11.5.0-11.el9 (CVE-2021-46195, CVE-2022-27943), binutils-gold-2.35.2-67.el9 (CVE-2021-3826, CVE-2022-38533, CVE-2022-44840, CVE-2022-47007, CVE-2022-47008, CVE-2022-47010, CVE-2022-47011, CVE-2023-1972, CVE-2024-57360, CVE-2025-11412, CVE-2025-11413, CVE-2025-11414, CVE-2025-11494, CVE-2025-11495, CVE-2025-1150, CVE-2025-1151, CVE-2025-1152, CVE-2025-1153, CVE-2025-11839, CVE-2025-11840, CVE-2025-3198, CVE-2025-66861, CVE-2025-66862, CVE-2025-66863, CVE-2025-66864, CVE-2025-66865, CVE-2025-66866, CVE-2025-69644, CVE-2025-69645, CVE-2025-69646, CVE-2025-69647, CVE-2025-69648, CVE-2025-69649, CVE-2025-69650, CVE-2025-69651, CVE-2025-69652), binutils-2.35.2-67.el9 (CVE-2021-3826, CVE-2022-38533, CVE-2022-44840, CVE-2022-47007, CVE-2022-47008, CVE-2022-47010, CVE-2022-47011, CVE-2023-1972, CVE-2024-57360, CVE-2025-11412, CVE-2025-11413, CVE-2025-11414, CVE-2025-11494, CVE-2025-11495, CVE-2025-1150, CVE-2025-1151, CVE-2025-1152, CVE-2025-1153, CVE-2025-11839, CVE-2025-11840, CVE-2025-3198, CVE-2025-66861, CVE-2025-66862, CVE-2025-66863, CVE-2025-66864, CVE-2025-66865, CVE-2025-66866, CVE-2025-69644, CVE-2025-69645, CVE-2025-69646, CVE-2025-69647, CVE-2025-69648, CVE-2025-69649, CVE-2025-69650, CVE-2025-69651, CVE-2025-69652), openssh-clients-8.7p1-46.el9 (CVE-2026-73281), openssl-libs-1:3.5.1-4.el9_7 (CVE-2024-13176, CVE-2024-41996, CVE-2025-9232, CVE-2026-28388, CVE-2026-28389, CVE-2026-31789), libgcrypt-1.10.0-11.el9 (CVE-2026-41990), pcre2-syntax-10.40-6.el9 (CVE-2022-41409), libxml2-2.9.13-14.el9_7 (CVE-2023-45322, CVE-2025-27113, CVE-2026-0989, CVE-2026-0992), expat-2.5.0-5.el9_7.1 (CVE-2025-66382, CVE-2026-24515, CVE-2026-41080), elfutils-libs-0.193-1.el9 (CVE-2024-25260, CVE-2025-1371, CVE-2025-1376, CVE-2025-1377), pcre2-10.40-6.el9 (CVE-2022-41409), elfutils-libelf-0.193-1.el9 (CVE-2024-25260, CVE-2025-1371, CVE-2025-1376, CVE-2025-1377), ncurses-libs-6.2-12.20210508.el9 (CVE-2023-50495), vim-filesystem-2:8.2.2637-23.el9_7 (CVE-2021-3927, CVE-2021-3928, CVE-2021-3968, CVE-2021-3973, CVE-2021-3974, CVE-2021-4136, CVE-2021-4166, CVE-2021-4173, CVE-2021-4187, CVE-2022-0213, CVE-2022-0351, CVE-2022-1616, CVE-2022-1619, CVE-2022-1620, CVE-2022-1674, CVE-2022-1720, CVE-2022-1725, CVE-2022-2042, CVE-2022-2124, CVE-2022-2125, CVE-2022-2126, CVE-2022-2129, CVE-2022-2175, CVE-2022-2182, CVE-2022-2183, CVE-2022-2206, CVE-2022-2207, CVE-2022-2208, CVE-2022-2210, CVE-2022-2257, CVE-2022-2284, CVE-2022-2285, CVE-2022-2286, CVE-2022-2287, CVE-2022-2304, CVE-2022-2343, CVE-2022-2344, CVE-2022-2345, CVE-2022-2522, CVE-2022-2817, CVE-2022-2819, CVE-2022-2845, CVE-2022-2849, CVE-2022-2862, CVE-2022-2874, CVE-2022-2889, CVE-2022-2923, CVE-2022-2946, CVE-2022-2980, CVE-2022-2982, CVE-2022-3016, CVE-2022-3037, CVE-2022-3099, CVE-2022-3134, CVE-2022-3153, CVE-2022-3234, CVE-2022-3235, CVE-2022-3256, CVE-2022-3278, CVE-2022-3296, CVE-2022-3297, CVE-2022-3324, CVE-2022-3352, CVE-2022-3705, CVE-2022-4141, CVE-2022-4292, CVE-2022-4293, CVE-2023-0049, CVE-2023-0051, CVE-2023-0054, CVE-2023-0288, CVE-2023-0433, CVE-2023-0512, CVE-2023-1127, CVE-2023-1170, CVE-2023-1175, CVE-2023-1264, CVE-2023-2609, CVE-2023-2610, CVE-2023-46246, CVE-2023-4734, CVE-2023-4735, CVE-2023-4738, CVE-2023-4751, CVE-2023-4781, CVE-2023-48231, CVE-2023-48232, CVE-2023-48233, CVE-2023-48234, CVE-2023-48235, CVE-2023-48236, CVE-2023-48237, CVE-2023-48706, CVE-2023-5344, CVE-2023-5441, CVE-2023-5535, CVE-2024-22667, CVE-2024-41957, CVE-2024-41965, CVE-2024-43374, CVE-2024-43802, CVE-2024-45306, CVE-2024-47814, CVE-2025-1215, CVE-2025-22134, CVE-2025-24014, CVE-2025-26603, CVE-2026-26269, CVE-2026-28422), libcurl-minimal-7.76.1-34.el9 (CVE-2024-11053, CVE-2024-7264, CVE-2024-9681, CVE-2025-14524, CVE-2025-15079, CVE-2025-15224, CVE-2026-6276), python3-libs-3.9.23-2.el9 (CVE-2025-13462, CVE-2025-1795, CVE-2026-2297, CVE-2026-3479), unzip-6.0-59.el9 (CVE-2021-4217, CVE-2022-0529, CVE-2022-0530), elfutils-default-yama-scope-0.193-1.el9 (CVE-2024-25260, CVE-2025-1371, CVE-2025-1376, CVE-2025-1377), python3-3.9.23-2.el9 (CVE-2025-13462, CVE-2025-1795, CVE-2026-2297, CVE-2026-3479), libpkgconf-1.7.3-10.el9 (CVE-2023-24056), openssh-8.7p1-46.el9 (CVE-2026-73281), libstdc++-11.5.0-11.el9 (CVE-2021-46195, CVE-2022-27943), rsync-3.2.5-3.el9 (CVE-2026-27171), gnupg2-2.3.3-4.el9 (CVE-2022-3219, CVE-2025-30258, CVE-2026-24883, CVE-2026-57062), tar-2:1.34-7.el9 (CVE-2023-39804), libarchive-3.5.3-6.el9_6 (CVE-2025-1632, CVE-2025-5915, CVE-2025-5916, CVE-2025-5917, CVE-2025-5918, CVE-2026-15028, CVE-2026-16517), openssl-1:3.5.1-4.el9_7 (CVE-2024-13176, CVE-2024-41996, CVE-2025-9232, CVE-2026-28388, CVE-2026-28389, CVE-2026-31789)", "name": "clair_unpatched_low_vulnerabilities", "url": "https://access.redhat.com/articles/red_hat_vulnerability_tutorial" }, "vulnerabilities_number": 393 } } ] } ] {"vulnerabilities":{"critical":0,"high":183,"medium":281,"low":102,"unknown":0},"unpatched_vulnerabilities":{"critical":0,"high":13,"medium":229,"low":393,"unknown":0}} {"image": {"pullspec": "quay.io/redhat-appstudio-qe/build-e2e-prefetch-bundler/component-prefetch-bundler:on-pr-cd88ba9cbcd358acc1785329ed6ce0c60587e84c", "digests": ["sha256:1806486990f86738e26ea4751f25cd961b841d64af0fffe4c91affa4f2d116f9"]}} {"result":"SUCCESS","timestamp":"2026-08-14T13:22:15+00:00","note":"Task clair-scan completed: Refer to Tekton task result SCAN_OUTPUT for vulnerabilities scanned by Clair.","namespace":"default","successes":0,"failures":0,"warnings":0} pod: component-prefetch-bundler-on-pull-request-ncd7p-init-pod | init container: prepare 2026/08/14 13:13:01 Entrypoint initialization pod: component-prefetch-bundler-on-pull-request-ncd7p-init-pod | container step-init: time="2026-08-14T13:13:20Z" level=info msg="[param] enable: false" time="2026-08-14T13:13:20Z" level=info msg="[param] default-http-proxy: squid.caching.svc.cluster.local:3128" time="2026-08-14T13:13:20Z" level=info msg="[param] default-no-proxy: brew.registry.redhat.io,docker.io,gcr.io,ghcr.io,images.paas.redhat.com,mirror.gcr.io,nvcr.io,quay.io,registry-proxy.engineering.redhat.com,registry.access.redhat.com,registry.ci.openshift.org,registry.fedoraproject.org,registry.redhat.io,registry.stage.redhat.io,vault.habana.ai" time="2026-08-14T13:13:20Z" level=info msg="[param] http-proxy-result-path: /tekton/results/http-proxy" time="2026-08-14T13:13:20Z" level=info msg="[param] no-proxy-result-path: /tekton/results/no-proxy" time="2026-08-14T13:13:20Z" level=info msg="Using in-cluster config" logger=KubeClient time="2026-08-14T13:13:20Z" level=info msg="Cache proxy is disabled via param" time="2026-08-14T13:13:20Z" level=info msg="[result] HTTP PROXY: " time="2026-08-14T13:13:20Z" level=info msg="[result] NO PROXY: " New PipelineRun component-prefetch-bundler-on-pull-request-94mj6 found after retrigger for component build-e2e-prefetch-bundler/component-prefetch-bundler PipelineRun component-prefetch-bundler-on-pull-request-94mj6 found for Component build-e2e-prefetch-bundler/component-prefetch-bundler PipelineRun component-prefetch-bundler-on-pull-request-94mj6 reason: ResolvingTaskRef PipelineRun component-prefetch-bundler-on-pull-request-94mj6 reason: Running PipelineRun component-prefetch-bundler-on-pull-request-94mj6 reason: Running PipelineRun component-prefetch-bundler-on-pull-request-94mj6 reason: Running PipelineRun component-prefetch-bundler-on-pull-request-94mj6 reason: Running PipelineRun component-prefetch-bundler-on-pull-request-94mj6 reason: Running PipelineRun component-prefetch-bundler-on-pull-request-94mj6 reason: Running PipelineRun component-prefetch-bundler-on-pull-request-94mj6 reason: Running PipelineRun component-prefetch-bundler-on-pull-request-94mj6 reason: Running PipelineRun component-prefetch-bundler-on-pull-request-94mj6 reason: Running PipelineRun component-prefetch-bundler-on-pull-request-94mj6 reason: Running PipelineRun component-prefetch-bundler-on-pull-request-94mj6 reason: Running PipelineRun component-prefetch-bundler-on-pull-request-94mj6 reason: Running PipelineRun component-prefetch-bundler-on-pull-request-94mj6 reason: Running PipelineRun component-prefetch-bundler-on-pull-request-94mj6 reason: Running PipelineRun component-prefetch-bundler-on-pull-request-94mj6 reason: Completed < Exit [It] the PipelineRun should eventually finish - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:103 @ 08/14/26 13:27:37.951 (14m36.084s) > Enter [It] should push Dockerfile to registry - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:123 @ 08/14/26 13:27:37.987 < Exit [It] should push Dockerfile to registry - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:123 @ 08/14/26 13:27:39.179 (1.193s) > Enter [It] should validate tekton taskrun test results - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:130 @ 08/14/26 13:27:39.18 < Exit [It] should validate tekton taskrun test results - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:130 @ 08/14/26 13:27:39.586 (406ms) > Enter [It] floating tags are created successfully - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:137 @ 08/14/26 13:27:39.587 [SKIPPED] floating tag validation is not needed for: prefetch-bundler In [It] at: /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:139 @ 08/14/26 13:27:39.587 < Exit [It] floating tags are created successfully - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:137 @ 08/14/26 13:27:39.587 (0s) > Enter [It] image manifest mediaType is correct - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:153 @ 08/14/26 13:27:39.588 < Exit [It] image manifest mediaType is correct - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:153 @ 08/14/26 13:27:39.894 (307ms) > Enter [It] should have Hermeto content in the SBOM in case the build was hermetic - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:180 @ 08/14/26 13:27:39.895 < Exit [It] should have Hermeto content in the SBOM in case the build was hermetic - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:180 @ 08/14/26 13:27:40.217 (322ms) > Enter [It] check for source images if enabled in pipeline - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:214 @ 08/14/26 13:27:40.217 Source build is enabled: false [SKIPPED] Skipping source image check since it is not enabled in the pipeline In [It] at: /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:223 @ 08/14/26 13:27:40.218 < Exit [It] check for source images if enabled in pipeline - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:214 @ 08/14/26 13:27:40.218 (0s) > Enter [AfterAll] scenario "prefetch-bundler" - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:55 @ 08/14/26 13:27:40.218 < Exit [AfterAll] scenario "prefetch-bundler" - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:55 @ 08/14/26 13:27:41.272 (1.054s) > Enter [BeforeAll] scenario "prefetch-npm" - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:38 @ 08/14/26 13:27:41.273 Image repository for component component-prefetch-npm in namespace build-e2e-prefetch-npm do not have right state ('' != 'ready') yet but it has status { { } {<nil> } []}. Created component for scenario: prefetch-npm RUNNING SCENARIO: prefetch-npm < Exit [BeforeAll] scenario "prefetch-npm" - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:38 @ 08/14/26 13:27:54.333 (13.06s) > Enter [It] triggers a PipelineRun - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:89 @ 08/14/26 13:27:54.333 PipelineRun has not been created yet for the component build-e2e-prefetch-npm/component-prefetch-npm < Exit [It] triggers a PipelineRun - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:89 @ 08/14/26 13:28:14.527 (20.195s) > Enter [It] the PipelineRun should eventually finish - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:103 @ 08/14/26 13:28:14.528 PipelineRun component-prefetch-npm-on-pull-request-k6fkm found for Component build-e2e-prefetch-npm/component-prefetch-npm PipelineRun component-prefetch-npm-on-pull-request-k6fkm reason: Running PipelineRun component-prefetch-npm-on-pull-request-k6fkm reason: Running PipelineRun component-prefetch-npm-on-pull-request-k6fkm reason: Running PipelineRun component-prefetch-npm-on-pull-request-k6fkm reason: Running PipelineRun component-prefetch-npm-on-pull-request-k6fkm reason: Running PipelineRun component-prefetch-npm-on-pull-request-k6fkm reason: Running PipelineRun component-prefetch-npm-on-pull-request-k6fkm reason: Running PipelineRun component-prefetch-npm-on-pull-request-k6fkm reason: Running PipelineRun component-prefetch-npm-on-pull-request-k6fkm reason: Running PipelineRun component-prefetch-npm-on-pull-request-k6fkm reason: Running PipelineRun component-prefetch-npm-on-pull-request-k6fkm reason: Running PipelineRun component-prefetch-npm-on-pull-request-k6fkm reason: Running PipelineRun component-prefetch-npm-on-pull-request-k6fkm reason: Running PipelineRun component-prefetch-npm-on-pull-request-k6fkm reason: Running PipelineRun component-prefetch-npm-on-pull-request-k6fkm reason: Running PipelineRun component-prefetch-npm-on-pull-request-k6fkm reason: Completed < Exit [It] the PipelineRun should eventually finish - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:103 @ 08/14/26 13:33:14.722 (5m0.193s) > Enter [It] should push Dockerfile to registry - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:123 @ 08/14/26 13:33:14.722 < Exit [It] should push Dockerfile to registry - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:123 @ 08/14/26 13:33:16.036 (1.313s) > Enter [It] should validate tekton taskrun test results - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:130 @ 08/14/26 13:33:16.036 < Exit [It] should validate tekton taskrun test results - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:130 @ 08/14/26 13:33:16.643 (606ms) > Enter [It] floating tags are created successfully - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:137 @ 08/14/26 13:33:16.643 [SKIPPED] floating tag validation is not needed for: prefetch-npm In [It] at: /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:139 @ 08/14/26 13:33:16.644 < Exit [It] floating tags are created successfully - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:137 @ 08/14/26 13:33:16.644 (0s) > Enter [It] image manifest mediaType is correct - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:153 @ 08/14/26 13:33:16.644 < Exit [It] image manifest mediaType is correct - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:153 @ 08/14/26 13:33:16.944 (300ms) > Enter [It] should have Hermeto content in the SBOM in case the build was hermetic - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:180 @ 08/14/26 13:33:16.945 < Exit [It] should have Hermeto content in the SBOM in case the build was hermetic - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:180 @ 08/14/26 13:33:17.241 (296ms) > Enter [It] check for source images if enabled in pipeline - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:214 @ 08/14/26 13:33:17.242 Source build is enabled: false [SKIPPED] Skipping source image check since it is not enabled in the pipeline In [It] at: /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:223 @ 08/14/26 13:33:17.242 < Exit [It] check for source images if enabled in pipeline - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:214 @ 08/14/26 13:33:17.242 (0s) > Enter [AfterAll] scenario "prefetch-npm" - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:55 @ 08/14/26 13:33:17.242 < Exit [AfterAll] scenario "prefetch-npm" - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:55 @ 08/14/26 13:33:18.63 (1.388s) > Enter [BeforeAll] scenario "prefetch-yarn-classic" - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:38 @ 08/14/26 13:33:18.631 Image repository for component component-prefetch-yarn-classic in namespace build-e2e-prefetch-yarn-classic do not have right state ('' != 'ready') yet but it has status { { } {<nil> } []}. Created component for scenario: prefetch-yarn-classic RUNNING SCENARIO: prefetch-yarn-classic < Exit [BeforeAll] scenario "prefetch-yarn-classic" - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:38 @ 08/14/26 13:33:31.761 (13.13s) > Enter [It] triggers a PipelineRun - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:89 @ 08/14/26 13:33:31.761 PipelineRun has not been created yet for the component build-e2e-prefetch-yarn-classic/component-prefetch-yarn-classic < Exit [It] triggers a PipelineRun - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:89 @ 08/14/26 13:33:51.955 (20.194s) > Enter [It] the PipelineRun should eventually finish - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:103 @ 08/14/26 13:33:51.956 PipelineRun component-prefetch-yarn-classic-on-pull-request-cd4tm found for Component build-e2e-prefetch-yarn-classic/component-prefetch-yarn-classic PipelineRun component-prefetch-yarn-classic-on-pull-request-cd4tm reason: Running PipelineRun component-prefetch-yarn-classic-on-pull-request-cd4tm reason: Running PipelineRun component-prefetch-yarn-classic-on-pull-request-cd4tm reason: Running PipelineRun component-prefetch-yarn-classic-on-pull-request-cd4tm reason: Running PipelineRun component-prefetch-yarn-classic-on-pull-request-cd4tm reason: Running PipelineRun component-prefetch-yarn-classic-on-pull-request-cd4tm reason: Running PipelineRun component-prefetch-yarn-classic-on-pull-request-cd4tm reason: Running PipelineRun component-prefetch-yarn-classic-on-pull-request-cd4tm reason: Running PipelineRun component-prefetch-yarn-classic-on-pull-request-cd4tm reason: Running PipelineRun component-prefetch-yarn-classic-on-pull-request-cd4tm reason: Running PipelineRun component-prefetch-yarn-classic-on-pull-request-cd4tm reason: Running PipelineRun component-prefetch-yarn-classic-on-pull-request-cd4tm reason: Running PipelineRun component-prefetch-yarn-classic-on-pull-request-cd4tm reason: Running PipelineRun component-prefetch-yarn-classic-on-pull-request-cd4tm reason: Running PipelineRun component-prefetch-yarn-classic-on-pull-request-cd4tm reason: Running PipelineRun component-prefetch-yarn-classic-on-pull-request-cd4tm reason: Running PipelineRun component-prefetch-yarn-classic-on-pull-request-cd4tm reason: Running PipelineRun component-prefetch-yarn-classic-on-pull-request-cd4tm reason: Running PipelineRun component-prefetch-yarn-classic-on-pull-request-cd4tm reason: Running PipelineRun component-prefetch-yarn-classic-on-pull-request-cd4tm reason: Running PipelineRun component-prefetch-yarn-classic-on-pull-request-cd4tm reason: Running PipelineRun component-prefetch-yarn-classic-on-pull-request-cd4tm reason: Running PipelineRun component-prefetch-yarn-classic-on-pull-request-cd4tm reason: Running PipelineRun component-prefetch-yarn-classic-on-pull-request-cd4tm reason: Running PipelineRun component-prefetch-yarn-classic-on-pull-request-cd4tm reason: Completed < Exit [It] the PipelineRun should eventually finish - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:103 @ 08/14/26 13:41:52.168 (8m0.212s) > Enter [It] should push Dockerfile to registry - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:123 @ 08/14/26 13:41:52.168 < Exit [It] should push Dockerfile to registry - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:123 @ 08/14/26 13:41:53.29 (1.121s) > Enter [It] should validate tekton taskrun test results - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:130 @ 08/14/26 13:41:53.29 < Exit [It] should validate tekton taskrun test results - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:130 @ 08/14/26 13:41:53.87 (579ms) > Enter [It] floating tags are created successfully - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:137 @ 08/14/26 13:41:53.87 [SKIPPED] floating tag validation is not needed for: prefetch-yarn-classic In [It] at: /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:139 @ 08/14/26 13:41:53.871 < Exit [It] floating tags are created successfully - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:137 @ 08/14/26 13:41:53.871 (0s) > Enter [It] image manifest mediaType is correct - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:153 @ 08/14/26 13:41:53.871 < Exit [It] image manifest mediaType is correct - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:153 @ 08/14/26 13:41:54.218 (346ms) > Enter [It] should have Hermeto content in the SBOM in case the build was hermetic - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:180 @ 08/14/26 13:41:54.218 < Exit [It] should have Hermeto content in the SBOM in case the build was hermetic - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:180 @ 08/14/26 13:41:54.529 (311ms) > Enter [It] check for source images if enabled in pipeline - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:214 @ 08/14/26 13:41:54.53 Source build is enabled: false [SKIPPED] Skipping source image check since it is not enabled in the pipeline In [It] at: /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:223 @ 08/14/26 13:41:54.53 < Exit [It] check for source images if enabled in pipeline - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:214 @ 08/14/26 13:41:54.53 (0s) > Enter [AfterAll] scenario "prefetch-yarn-classic" - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:55 @ 08/14/26 13:41:54.53 < Exit [AfterAll] scenario "prefetch-yarn-classic" - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:55 @ 08/14/26 13:41:55.957 (1.427s) > Enter [BeforeAll] scenario "sample-python-basic-oci-docker-build" - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:38 @ 08/14/26 13:41:55.958 Image repository for component component-sample-python-basic-oci-docker-build in namespace build-e2e-sample-python-basic-oci-docker-build do not have right state ('' != 'ready') yet but it has status { { } {<nil> } []}. Created component for scenario: sample-python-basic-oci-docker-build RUNNING SCENARIO: sample-python-basic-oci-docker-build < Exit [BeforeAll] scenario "sample-python-basic-oci-docker-build" - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:38 @ 08/14/26 13:42:08.938 (12.98s) > Enter [It] triggers a PipelineRun - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:89 @ 08/14/26 13:42:08.939 PipelineRun has not been created yet for the component build-e2e-sample-python-basic-oci-docker-build/component-sample-python-basic-oci-docker-build < Exit [It] triggers a PipelineRun - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:89 @ 08/14/26 13:42:29.155 (20.216s) > Enter [It] the PipelineRun should eventually finish - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:103 @ 08/14/26 13:42:29.156 PipelineRun component-sample-python-basic-oci-docker-build-on-pull-reqclb9l found for Component build-e2e-sample-python-basic-oci-docker-build/component-sample-python-basic-oci-docker-build PipelineRun component-sample-python-basic-oci-docker-build-on-pull-reqclb9l reason: Running PipelineRun component-sample-python-basic-oci-docker-build-on-pull-reqclb9l reason: Running PipelineRun component-sample-python-basic-oci-docker-build-on-pull-reqclb9l reason: Running PipelineRun component-sample-python-basic-oci-docker-build-on-pull-reqclb9l reason: Running PipelineRun component-sample-python-basic-oci-docker-build-on-pull-reqclb9l reason: Running PipelineRun component-sample-python-basic-oci-docker-build-on-pull-reqclb9l reason: Running PipelineRun component-sample-python-basic-oci-docker-build-on-pull-reqclb9l reason: Running PipelineRun component-sample-python-basic-oci-docker-build-on-pull-reqclb9l reason: Running PipelineRun component-sample-python-basic-oci-docker-build-on-pull-reqclb9l reason: Running PipelineRun component-sample-python-basic-oci-docker-build-on-pull-reqclb9l reason: Running PipelineRun component-sample-python-basic-oci-docker-build-on-pull-reqclb9l reason: Completed < Exit [It] the PipelineRun should eventually finish - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:103 @ 08/14/26 13:45:49.371 (3m20.215s) > Enter [It] should push Dockerfile to registry - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:123 @ 08/14/26 13:45:49.371 < Exit [It] should push Dockerfile to registry - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:123 @ 08/14/26 13:45:54.124 (4.752s) > Enter [It] should validate tekton taskrun test results - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:130 @ 08/14/26 13:45:54.125 < Exit [It] should validate tekton taskrun test results - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:130 @ 08/14/26 13:45:54.814 (689ms) > Enter [It] floating tags are created successfully - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:137 @ 08/14/26 13:45:54.815 [SKIPPED] floating tag validation is not needed for: sample-python-basic-oci-docker-build In [It] at: /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:139 @ 08/14/26 13:45:54.815 < Exit [It] floating tags are created successfully - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:137 @ 08/14/26 13:45:54.815 (0s) > Enter [It] image manifest mediaType is correct - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:153 @ 08/14/26 13:45:54.815 < Exit [It] image manifest mediaType is correct - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:153 @ 08/14/26 13:45:55.107 (292ms) > Enter [It] should have Hermeto content in the SBOM in case the build was hermetic - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:180 @ 08/14/26 13:45:55.108 [SKIPPED] Hermetic build is not enabled, skipping the test In [It] at: /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:182 @ 08/14/26 13:45:55.108 < Exit [It] should have Hermeto content in the SBOM in case the build was hermetic - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:180 @ 08/14/26 13:45:55.108 (0s) > Enter [It] check for source images if enabled in pipeline - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:214 @ 08/14/26 13:45:55.109 Source build is enabled: false [SKIPPED] Skipping source image check since it is not enabled in the pipeline In [It] at: /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:223 @ 08/14/26 13:45:55.109 < Exit [It] check for source images if enabled in pipeline - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:214 @ 08/14/26 13:45:55.109 (0s) > Enter [AfterAll] scenario "sample-python-basic-oci-docker-build" - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:55 @ 08/14/26 13:45:55.109 < Exit [AfterAll] scenario "sample-python-basic-oci-docker-build" - /workspace/source/e2e-tests/tests/build/build_pipeline_tests.go:55 @ 08/14/26 13:45:57.217 (2.108s)