Inspecting raw image manifest quay.io/rhtap_qe/default-tenant/tsf-demo-comp@sha256:408b0c6b78351825acf8cff33d216f36866790db769bafcc8f90a800a55c4c2e.
Selecting auth
Using token for quay.io/rhtap_qe/default-tenant/tsf-demo-comp
Selecting auth
Using token for quay.io/rhtap_qe/default-tenant/tsf-demo-comp
WARNING: SBOM attachments are deprecated and support will be removed in a Cosign release soon after 2024-02-22 (see https://github.com/sigstore/cosign/issues/2755). Instead, please use SBOM attestations.
WARNING: Downloading SBOMs this way does not ensure its authenticity. If you want to ensure a tamper-proof SBOM, download it using 'cosign download attestation <image uri>'.
Found SBOM of media type: text/spdx+json
Running TPA scan on amd64 image manifest...
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed

  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0
100  588k    0     0  100  588k      0   693k --:--:-- --:--:-- --:--:--  692k{
  "scanned" : {
    "total" : 228,
    "direct" : 52,
    "transitive" : 176
  },
  "providers" : {
    "rhtpa" : {
      "status" : {
        "ok" : true,
        "name" : "rhtpa",
        "code" : 200,
        "message" : "OK",
        "warnings" : { }
      },
      "sources" : {
        "osv-github" : {
          "summary" : {
            "direct" : 14,
            "transitive" : 0,
            "total" : 14,
            "dependencies" : 4,
            "critical" : 0,
            "high" : 3,
            "medium" : 11,
            "low" : 0,
            "remediations" : 0,
            "recommendations" : 0,
            "unscanned" : 0
          },
          "dependencies" : [ {
            "ref" : "pkg:pypi/setuptools@39.2.0",
            "issues" : [ {
              "id" : "CVE-2024-6345",
              "source" : "osv-github",
              "cvssScore" : 8.8,
              "severity" : "HIGH",
              "cves" : [ "CVE-2024-6345" ],
              "unique" : false
            }, {
              "id" : "CVE-2022-40897",
              "source" : "osv-github",
              "cvssScore" : 7.5,
              "severity" : "HIGH",
              "cves" : [ "CVE-2022-40897" ],
              "unique" : false
            } ],
            "transitive" : [ ],
            "highestVulnerability" : {
              "id" : "CVE-2024-6345",
              "source" : "osv-github",
              "cvssScore" : 8.8,
              "severity" : "HIGH",
              "cves" : [ "CVE-2024-6345" ],
              "unique" : false
            }
          }, {
            "ref" : "pkg:pypi/urllib3@1.24.2",
            "issues" : [ {
              "id" : "CVE-2026-21441",
              "source" : "osv-github",
              "cvssScore" : 7.5,
              "severity" : "HIGH",
              "cves" : [ "CVE-2026-21441" ],
              "unique" : false
            }, {
              "id" : "CVE-2020-26137",
              "title" : "urllib3 before 1.25.9 allows CRLF injection if the attacker controls the HTTP request method, as demonstrated by inserting CR and LF control characters in the first argument of putrequest(). NOTE: this is similar to CVE-2020-26116.",
              "source" : "osv-github",
              "cvssScore" : 6.5,
              "severity" : "MEDIUM",
              "cves" : [ "CVE-2020-26137" ],
              "unique" : false
            }, {
              "id" : "CVE-2019-11236",
              "title" : "In the urllib3 library through 1.24.1 for Python, CRLF injection is possible if the attacker controls the request parameter.",
              "source" : "osv-github",
              "cvssScore" : 6.1,
              "severity" : "MEDIUM",
              "cves" : [ "CVE-2019-11236" ],
              "unique" : false
            }, {
              "id" : "CVE-2023-43804",
              "source" : "osv-github",
              "cvssScore" : 5.9,
              "severity" : "MEDIUM",
              "cves" : [ "CVE-2023-43804" ],
              "unique" : false
            }, {
              "id" : "CVE-2025-50181",
              "source" : "osv-github",
              "cvssScore" : 5.3,
              "severity" : "MEDIUM",
              "cves" : [ "CVE-2025-50181" ],
              "unique" : false
            }, {
              "id" : "CVE-2024-37891",
              "source" : "osv-github",
              "cvssScore" : 4.4,
              "severity" : "MEDIUM",
              "cves" : [ "CVE-2024-37891" ],
              "unique" : false
            }, {
              "id" : "CVE-2023-45803",
              "source" : "osv-github",
              "cvssScore" : 4.2,
              "severity" : "MEDIUM",
              "cves" : [ "CVE-2023-45803" ],
              "unique" : false
            } ],
            "transitive" : [ ],
            "highestVulnerability" : {
              "id" : "CVE-2026-21441",
              "source" : "osv-github",
              "cvssScore" : 7.5,
              "severity" : "HIGH",
              "cves" : [ "CVE-2026-21441" ],
              "unique" : false
            }
          }, {
            "ref" : "pkg:pypi/idna@2.5",
            "issues" : [ {
              "id" : "CVE-2024-3651",
              "source" : "osv-github",
              "cvssScore" : 6.2,
              "severity" : "MEDIUM",
              "cves" : [ "CVE-2024-3651" ],
              "unique" : false
            } ],
            "transitive" : [ ],
            "highestVulnerability" : {
              "id" : "CVE-2024-3651",
              "source" : "osv-github",
              "cvssScore" : 6.2,
              "severity" : "MEDIUM",
              "cves" : [ "CVE-2024-3651" ],
              "unique" : false
            }
          }, {
            "ref" : "pkg:pypi/requests@2.20.0",
            "issues" : [ {
              "id" : "CVE-2023-32681",
              "title" : "Unintended leak of Proxy-Authorization header in requests",
              "source" : "osv-github",
              "cvssScore" : 6.1,
              "severity" : "MEDIUM",
              "cves" : [ "CVE-2023-32681" ],
              "unique" : false
            }, {
              "id" : "CVE-2024-35195",
              "title" : "Requests `Session` object does not verify requests after making first request with verify=False",
              "source" : "osv-github",
              "cvssScore" : 5.6,
              "severity" : "MEDIUM",
              "cves" : [ "CVE-2024-35195" ],
              "unique" : false
            }, {
              "id" : "CVE-2024-47081",
              "title" : "Requests vulnerable to .netrc credentials leak via malicious URLs",
              "source" : "osv-github",
              "cvssScore" : 5.3,
              "severity" : "MEDIUM",
              "cves" : [ "CVE-2024-47081" ],
              "unique" : false
            }, {
              "id" : "CVE-2026-25645",
              "title" : "Requests has Insecure Temp File Reuse in its extract_zipped_paths() utility function",
              "source" : "osv-github",
              "cvssScore" : 4.4,
              "severity" : "MEDIUM",
              "cves" : [ "CVE-2026-25645" ],
              "unique" : false
            } ],
            "transitive" : [ ],
            "highestVulnerability" : {
              "id" : "CVE-2023-32681",
              "title" : "Unintended leak of Proxy-Authorization header in requests",
              "source" : "osv-github",
              "cvssScore" : 6.1,
              "severity" : "MEDIUM",
              "cves" : [ "CVE-2023-32681" ],
              "unique" : false
            }
          } ]
        },
        "redhat-csaf" : {
          "summary" : {
            "direct" : 84,
            "transitive" : 468,
            "total" : 552,
            "dependencies" : 79,
            "critical" : 7,
            "high" : 218,
            "medium" : 298,
            "low" : 29,
            "remediations" : 0,
            "recommendations" : 0,
            "unscanned" : 0
          },
          "dependencies" : [ {
            "ref" : "pkg:rpm/redhat/python3-libs@3.6.8-75.el8_10?arch=x86_64&distro=rhel-8.10&upstream=python3-3.6.8-75.el8_10.src.rpm",
            "issues" : [ {
              "id" : "CVE-2023-40217",
              "source" : "redhat-csaf",
              "cvssScore" : 8.6,
              "severity" : "HIGH",
              "cves" : [ "CVE-2023-40217" ],
              "unique" : false
            }, {
              "id" : "CVE-2022-42919",
              "source" : "redhat-csaf",
              "cvssScore" : 7.8,
              "severity" : "HIGH",
              "cves" : [ "CVE-2022-42919" ],
              "unique" : false
            }, {
              "id" : "CVE-2023-6597",
              "source" : "redhat-csaf",
              "cvssScore" : 7.8,
              "severity" : "HIGH",
              "cves" : [ "CVE-2023-6597" ],
              "unique" : false
            }, {
              "id" : "CVE-2015-20107",
              "source" : "redhat-csaf",
              "cvssScore" : 7.6,
              "severity" : "HIGH",
              "cves" : [ "CVE-2015-20107" ],
              "unique" : false
            }, {
              "id" : "CVE-2024-12718",
              "title" : "Bypass extraction filter to modify file metadata outside extraction directory",
              "source" : "redhat-csaf",
              "cvssScore" : 7.6,
              "severity" : "HIGH",
              "cves" : [ "CVE-2024-12718" ],
              "unique" : false
            }, {
              "id" : "CVE-2025-4517",
              "title" : "Arbitrary writes via tarfile realpath overflow",
              "source" : "redhat-csaf",
              "cvssScore" : 7.6,
              "severity" : "HIGH",
              "cves" : [ "CVE-2025-4517" ],
              "unique" : false
            }, {
              "id" : "CVE-2020-10735",
              "source" : "redhat-csaf",
              "cvssScore" : 7.5,
              "severity" : "HIGH",
              "cves" : [ "CVE-2020-10735" ],
              "unique" : false
            }, {
              "id" : "CVE-2022-45061",
              "source" : "redhat-csaf",
              "cvssScore" : 7.5,
              "severity" : "HIGH",
              "cves" : [ "CVE-2022-45061" ],
              "unique" : false
            }, {
              "id" : "CVE-2023-24329",
              "source" : "redhat-csaf",
              "cvssScore" : 7.5,
              "severity" : "HIGH",
              "cves" : [ "CVE-2023-24329" ],
              "unique" : false
            }, {
              "id" : "CVE-2024-6232",
              "source" : "redhat-csaf",
              "cvssScore" : 7.5,
              "severity" : "HIGH",
              "cves" : [ "CVE-2024-6232" ],
              "unique" : false
            }, {
              "id" : "CVE-2025-12084",
              "source" : "redhat-csaf",
              "cvssScore" : 7.5,
              "severity" : "HIGH",
              "cves" : [ "CVE-2025-12084" ],
              "unique" : false
            }, {
              "id" : "CVE-2025-4138",
              "title" : "Bypassing extraction filter to create symlinks to arbitrary targets outside extraction directory",
              "source" : "redhat-csaf",
              "cvssScore" : 7.5,
              "severity" : "HIGH",
              "cves" : [ "CVE-2025-4138" ],
              "unique" : false
            }, {
              "id" : "CVE-2025-4435",
              "title" : "Tarfile extracts filtered members when errorlevel=0",
              "source" : "redhat-csaf",
              "cvssScore" : 7.5,
              "severity" : "HIGH",
              "cves" : [ "CVE-2025-4435" ],
              "unique" : false
            }, {
              "id" : "CVE-2025-8194",
              "source" : "redhat-csaf",
              "cvssScore" : 7.5,
              "severity" : "HIGH",
              "cves" : [ "CVE-2025-8194" ],
              "unique" : false
            }, {
              "id" : "CVE-2021-28861",
              "source" : "redhat-csaf",
              "cvssScore" : 7.4,
              "severity" : "HIGH",
              "cves" : [ "CVE-2021-28861" ],
              "unique" : false
            }, {
              "id" : "CVE-2025-4330",
              "title" : "Extraction filter bypass for linking outside extraction directory",
              "source" : "redhat-csaf",
              "cvssScore" : 7.3,
              "severity" : "HIGH",
              "cves" : [ "CVE-2025-4330" ],
              "unique" : false
            }, {
              "id" : "CVE-2025-15366",
              "source" : "redhat-csaf",
              "cvssScore" : 7.1,
              "severity" : "HIGH",
              "cves" : [ "CVE-2025-15366" ],
              "unique" : false
            }, {
              "id" : "CVE-2025-15367",
              "source" : "redhat-csaf",
              "cvssScore" : 7.1,
              "severity" : "HIGH",
              "cves" : [ "CVE-2025-15367" ],
              "unique" : false
            }, {
              "id" : "CVE-2026-1299",
              "source" : "redhat-csaf",
              "cvssScore" : 7.1,
              "severity" : "HIGH",
              "cves" : [ "CVE-2026-1299" ],
              "unique" : false
            }, {
              "id" : "CVE-2026-4519",
              "title" : "webbrowser.open() allows leading dashes in URLs",
              "source" : "redhat-csaf",
              "cvssScore" : 7.1,
              "severity" : "HIGH",
              "cves" : [ "CVE-2026-4519" ],
              "unique" : false
            }, {
              "id" : "CVE-2024-6923",
              "source" : "redhat-csaf",
              "cvssScore" : 6.8,
              "severity" : "MEDIUM",
              "cves" : [ "CVE-2024-6923" ],
              "unique" : false
            }, {
              "id" : "CVE-2025-0938",
              "source" : "redhat-csaf",
              "cvssScore" : 6.8,
              "severity" : "MEDIUM",
              "cves" : [ "CVE-2025-0938" ],
              "unique" : false
            }, {
              "id" : "CVE-2025-13836",
              "source" : "redhat-csaf",
              "cvssScore" : 6.8,
              "severity" : "MEDIUM",
              "cves" : [ "CVE-2025-13836" ],
              "unique" : false
            }, {
              "id" : "CVE-2024-9287",
              "source" : "redhat-csaf",
              "cvssScore" : 6.3,
              "severity" : "MEDIUM",
              "cves" : [ "CVE-2024-9287" ],
              "unique" : false
            }, {
              "id" : "CVE-2024-0450",
              "source" : "redhat-csaf",
              "cvssScore" : 6.2,
              "severity" : "MEDIUM",
              "cves" : [ "CVE-2024-0450" ],
              "unique" : false
            }, {
              "id" : "CVE-2007-4559",
              "title" : "Directory traversal vulnerability in the (1) extract and (2) extractall functions in the tarfile module in Python allows user-assisted remote attackers to overwrite arbitrary files via a .. (dot dot) sequence in filenames in a TAR archive, a related issue to CVE-2001-1267.",
              "source" : "redhat-csaf",
              "cvssScore" : 5.5,
              "severity" : "MEDIUM",
              "cves" : [ "CVE-2007-4559" ],
              "unique" : false
            }, {
              "id" : "CVE-2023-27043",
              "source" : "redhat-csaf",
              "cvssScore" : 5.3,
              "severity" : "MEDIUM",
              "cves" : [ "CVE-2023-27043" ],
              "unique" : false
            }, {
              "id" : "CVE-2024-8088",
              "source" : "redhat-csaf",
              "cvssScore" : 5.3,
              "severity" : "MEDIUM",
              "cves" : [ "CVE-2024-8088" ],
              "unique" : false
            }, {
              "id" : "CVE-2024-0397",
              "source" : "redhat-csaf",
              "cvssScore" : 5.0,
              "severity" : "MEDIUM",
              "cves" : [ "CVE-2024-0397" ],
              "unique" : false
            }, {
              "id" : "CVE-2024-7592",
              "source" : "redhat-csaf",
              "cvssScore" : 4.8,
              "severity" : "MEDIUM",
              "cves" : [ "CVE-2024-7592" ],
              "unique" : false
            }, {
              "id" : "CVE-2026-0865",
              "source" : "redhat-csaf",
              "cvssScore" : 4.5,
              "severity" : "MEDIUM",
              "cves" : [ "CVE-2026-0865" ],
              "unique" : false
            }, {
              "id" : "CVE-2025-6069",
              "title" : "HTMLParser quadratic complexity when processing malformed inputs",
              "source" : "redhat-csaf",
              "cvssScore" : 4.3,
              "severity" : "MEDIUM",
              "cves" : [ "CVE-2025-6069" ],
              "unique" : false
            }, {
              "id" : "CVE-2025-8291",
              "source" : "redhat-csaf",
              "cvssScore" : 4.3,
              "severity" : "MEDIUM",
              "cves" : [ "CVE-2025-8291" ],
              "unique" : false
            }, {
              "id" : "CVE-2025-6075",
              "source" : "redhat-csaf",
              "cvssScore" : 4.0,
              "severity" : "MEDIUM",
              "cves" : [ "CVE-2025-6075" ],
              "unique" : false
            }, {
              "id" : "CVE-2024-11168",
              "source" : "redhat-csaf",
              "cvssScore" : 3.7,
              "severity" : "LOW",
              "cves" : [ "CVE-2024-11168" ],
              "unique" : false
            }, {
              "id" : "CVE-2024-4032",
              "source" : "redhat-csaf",
              "cvssScore" : 3.7,
              "severity" : "LOW",
              "cves" : [ "CVE-2024-4032" ],
              "unique" : false
            }, {
              "id" : "CVE-2024-5642",
              "title" : "Buffer overread when using an empty list with SSLContext.set_npn_protocols()",
              "source" : "redhat-csaf",
              "cvssScore" : 2.7,
              "severity" : "LOW",
              "cves" : [ "CVE-2024-5642" ],
              "unique" : false
            } ],
            "transitive" : [ {
              "ref" : "pkg:rpm/redhat/openssl-libs@1.1.1k-15.el8_6?arch=x86_64&distro=rhel-8.10&epoch=1&upstream=openssl-1.1.1k-15.el8_6.src.rpm",
              "issues" : [ {
                "id" : "CVE-2025-15467",
                "title" : "Stack buffer overflow in CMS (Auth)EnvelopedData parsing",
                "source" : "redhat-csaf",
                "cvssScore" : 9.8,
                "severity" : "CRITICAL",
                "cves" : [ "CVE-2025-15467" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-1473",
                "title" : "Resource leakage when decoding certificates and keys",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-1473" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-3358",
                "title" : "Using a Custom Cipher with NID_undef may lead to NULL encryption",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-3358" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-3602",
                "title" : "X.509 Email Address 4-byte Buffer Overflow",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-3602" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-3786",
                "title" : "X.509 Email Address Variable Length Buffer Overflow",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-3786" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-4450",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-4450" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-0215",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-0215" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-0216",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-0216" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-0217",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-0217" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-0401",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-0401" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-5363",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-5363" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-0286",
                "source" : "redhat-csaf",
                "cvssScore" : 7.4,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-0286" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-12797",
                "title" : "RFC7250 handshakes with unauthenticated servers don't abort as expected",
                "source" : "redhat-csaf",
                "cvssScore" : 7.4,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-12797" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-69419",
                "source" : "redhat-csaf",
                "cvssScore" : 7.4,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-69419" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-1292",
                "source" : "redhat-csaf",
                "cvssScore" : 6.7,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-1292" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-2068",
                "source" : "redhat-csaf",
                "cvssScore" : 6.7,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-2068" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-2650",
                "title" : "Possible DoS translating ASN.1 object identifiers",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-2650" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-6129",
                "title" : "POLY1305 MAC implementation corrupts vector registers on PowerPC",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-6129" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-69421",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-69421" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-11187",
                "title" : "Improper validation of PBMAC1 parameters in PKCS#12 MAC verification",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-11187" ],
                "unique" : false
              }, {
                "id" : "CVE-2020-1971",
                "title" : "EDIPARTYNAME NULL pointer dereference",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2020-1971" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-4304",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-4304" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-0464",
                "title" : "Excessive Resource Usage Verifying X.509 Policy Constraints",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-0464" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-6237",
                "title" : "Excessive time spent checking invalid RSA public keys",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-6237" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-5535",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-5535" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-6119",
                "title" : "Possible denial of service in X.509 name checks",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-6119" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-15468",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-15468" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-66199",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-66199" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-69420",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-69420" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-22796",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-22796" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-4741",
                "source" : "redhat-csaf",
                "cvssScore" : 5.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-4741" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-9230",
                "source" : "redhat-csaf",
                "cvssScore" : 5.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-9230" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-0727",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-0727" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-15469",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-15469" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-22795",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-22795" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-1343",
                "title" : "OCSP_basic_verify may incorrectly verify the response signing certificate",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-1343" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-2097",
                "title" : "AES OCB fails to encrypt some bytes",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-2097" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-0465",
                "title" : "Invalid certificate policies in leaf certificates are silently ignored",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-0465" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-0466",
                "title" : "Certificate policy check not enabled",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-0466" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-2975",
                "title" : "AES-SIV implementation ignores empty associated data entries",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-2975" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-3446",
                "title" : "Excessive time spent checking DH keys and parameters",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-3446" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-3817",
                "title" : "Excessive time spent checking DH q parameter value",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-3817" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-5678",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-5678" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-4603",
                "title" : "Excessive time spent checking DSA keys and parameters",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-4603" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-1255",
                "title" : "Input buffer over-read in AES-XTS implementation on 64 bit ARM",
                "source" : "redhat-csaf",
                "cvssScore" : 5.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-1255" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-4203",
                "source" : "redhat-csaf",
                "cvssScore" : 4.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-4203" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-68160",
                "source" : "redhat-csaf",
                "cvssScore" : 4.7,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-68160" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-69418",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-69418" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-2511",
                "source" : "redhat-csaf",
                "cvssScore" : 3.7,
                "severity" : "LOW",
                "cves" : [ "CVE-2024-2511" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2025-15467",
                "title" : "Stack buffer overflow in CMS (Auth)EnvelopedData parsing",
                "source" : "redhat-csaf",
                "cvssScore" : 9.8,
                "severity" : "CRITICAL",
                "cves" : [ "CVE-2025-15467" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/krb5-libs@1.18.2-32.el8_10?arch=x86_64&distro=rhel-8.10&upstream=krb5-1.18.2-32.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2024-3596",
                "source" : "redhat-csaf",
                "cvssScore" : 9.0,
                "severity" : "CRITICAL",
                "cves" : [ "CVE-2024-3596" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-42898",
                "title" : "PAC parsing in MIT Kerberos 5 (aka krb5) before 1.19.4 and 1.20.x before 1.20.1 has integer overflows that may lead to remote code execution (in KDC, kadmind, or a GSS or Kerberos application server) on 32-bit platforms (which have a resultant heap-based buffer overflow), and cause a denial of service on other platforms. This occurs in krb5_pac_parse in lib/krb5/krb/pac.c. Heimdal before 7.7.1 has \"a similar bug.\"",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-42898" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-39975",
                "title" : "kdc/do_tgs_req.c in MIT Kerberos 5 (aka krb5) 1.21 before 1.21.2 has a double free that is reachable if an authenticated user can trigger an authorization-data handling failure. Incorrect data is copied from one ticket to another.",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-39975" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-26462",
                "title" : "Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/kdc/ndr.c.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-26462" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-37370",
                "title" : "In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can modify the plaintext Extra Count field of a confidential GSS krb5 wrap token, causing the unwrapped token to appear truncated to the application.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-37370" ],
                "unique" : false
              }, {
                "id" : "CVE-2020-17049",
                "title" : "Kerberos KDC Security Feature Bypass Vulnerability",
                "source" : "redhat-csaf",
                "cvssScore" : 7.2,
                "severity" : "HIGH",
                "cves" : [ "CVE-2020-17049" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-36054",
                "title" : "lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) before 1.20.2 and 1.21.x before 1.21.1 frees an uninitialized pointer. A remote authenticated user can trigger a kadmind crash. This occurs because _xdr_kadm5_principal_ent_rec does not validate the relationship between n_key_data and the key_data array count.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-36054" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-37371",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-37371" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-24528",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-24528" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-26458",
                "title" : "Kerberos 5 (aka krb5) 1.21.2 contains a memory leak in /krb5/src/lib/rpc/pmap_rmt.c.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-26458" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-26461",
                "title" : "Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/lib/gssapi/krb5/k5sealv3.c.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-26461" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-3576",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-3576" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2024-3596",
                "source" : "redhat-csaf",
                "cvssScore" : 9.0,
                "severity" : "CRITICAL",
                "cves" : [ "CVE-2024-3596" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/python3-setuptools-wheel@39.2.0-9.el8_10?arch=noarch&distro=rhel-8.10&upstream=python-setuptools-39.2.0-9.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2024-6345",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-6345" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-47273",
                "title" : "setuptools has a path traversal vulnerability in PackageIndex.download that leads to Arbitrary File Write",
                "source" : "redhat-csaf",
                "cvssScore" : 7.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-47273" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-40897",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-40897" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2024-6345",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-6345" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/glibc-minimal-langpack@2.28-251.el8_10.31?arch=x86_64&distro=rhel-8.10&upstream=glibc-2.28-251.el8_10.31.src.rpm",
              "issues" : [ {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0861",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-0861" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4911",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-4911" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33599",
                "title" : "nscd: Stack-based buffer overflow in netgroup cache",
                "source" : "redhat-csaf",
                "cvssScore" : 7.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-33599" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-4802",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-4802" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4527",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4527" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4806",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4806" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4813",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4813" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-5702",
                "title" : "The strcmp implementation optimized for the Power10 processor in the GNU C Library version 2.39 and later writes to vector registers v20 to v31 without saving contents from the caller (those registers are defined as non-volatile registers by the powerpc64le ABI), resulting in overwriting of its contents and potentially altering control flow of the caller, or leaking the input strings to the function to other parts of the program.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-5702" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-0395",
                "title" : "When the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-0395" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33600",
                "title" : "nscd: Null pointer crashes after notfound response",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33600" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0915",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-0915" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-8058",
                "source" : "redhat-csaf",
                "cvssScore" : 4.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-8058" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33601",
                "title" : "nscd: netgroup cache may terminate daemon on memory allocation failure",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33601" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33602",
                "title" : "nscd: netgroup cache assumes NSS callback uses in-buffer strings",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33602" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/glibc@2.28-251.el8_10.31?arch=x86_64&distro=rhel-8.10&upstream=glibc-2.28-251.el8_10.31.src.rpm",
              "issues" : [ {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0861",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-0861" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4911",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-4911" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33599",
                "title" : "nscd: Stack-based buffer overflow in netgroup cache",
                "source" : "redhat-csaf",
                "cvssScore" : 7.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-33599" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-4802",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-4802" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4527",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4527" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4806",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4806" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4813",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4813" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-15281",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-15281" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-5702",
                "title" : "The strcmp implementation optimized for the Power10 processor in the GNU C Library version 2.39 and later writes to vector registers v20 to v31 without saving contents from the caller (those registers are defined as non-volatile registers by the powerpc64le ABI), resulting in overwriting of its contents and potentially altering control flow of the caller, or leaking the input strings to the function to other parts of the program.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-5702" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-0395",
                "title" : "When the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-0395" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33600",
                "title" : "nscd: Null pointer crashes after notfound response",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33600" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0915",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-0915" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-8058",
                "source" : "redhat-csaf",
                "cvssScore" : 4.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-8058" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33601",
                "title" : "nscd: netgroup cache may terminate daemon on memory allocation failure",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33601" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33602",
                "title" : "nscd: netgroup cache assumes NSS callback uses in-buffer strings",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33602" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/glibc-common@2.28-251.el8_10.31?arch=x86_64&distro=rhel-8.10&upstream=glibc-2.28-251.el8_10.31.src.rpm",
              "issues" : [ {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0861",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-0861" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4911",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-4911" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33599",
                "title" : "nscd: Stack-based buffer overflow in netgroup cache",
                "source" : "redhat-csaf",
                "cvssScore" : 7.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-33599" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-4802",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-4802" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4527",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4527" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4806",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4806" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4813",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4813" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-5702",
                "title" : "The strcmp implementation optimized for the Power10 processor in the GNU C Library version 2.39 and later writes to vector registers v20 to v31 without saving contents from the caller (those registers are defined as non-volatile registers by the powerpc64le ABI), resulting in overwriting of its contents and potentially altering control flow of the caller, or leaking the input strings to the function to other parts of the program.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-5702" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-0395",
                "title" : "When the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-0395" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33600",
                "title" : "nscd: Null pointer crashes after notfound response",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33600" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0915",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-0915" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-8058",
                "source" : "redhat-csaf",
                "cvssScore" : 4.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-8058" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33601",
                "title" : "nscd: netgroup cache may terminate daemon on memory allocation failure",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33601" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33602",
                "title" : "nscd: netgroup cache assumes NSS callback uses in-buffer strings",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33602" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/xz-libs@5.2.4-4.el8_6?arch=x86_64&distro=rhel-8.10&upstream=xz-5.2.4-4.el8_6.src.rpm",
              "issues" : [ {
                "id" : "CVE-2022-1271",
                "title" : "An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is applied on the attacker's chosen file name (for example, a crafted file name), this can overwrite an attacker's content to an arbitrary attacker-selected file. This flaw occurs due to insufficient validation when processing filenames with two or more newlines where selected content and the target file names are embedded in crafted multi-line file names. This flaw allows a remote, low privileged attacker to force zgrep to write arbitrary files on the system.",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-1271" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-31115",
                "title" : "XZ has a heap-use-after-free bug in threaded .xz decoder",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-31115" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2022-1271",
                "title" : "An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is applied on the attacker's chosen file name (for example, a crafted file name), this can overwrite an attacker's content to an arbitrary attacker-selected file. This flaw occurs due to insufficient validation when processing filenames with two or more newlines where selected content and the target file names are embedded in crafted multi-line file names. This flaw allows a remote, low privileged attacker to force zgrep to write arbitrary files on the system.",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-1271" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/python3-libs@3.6.8-75.el8_10?arch=x86_64&distro=rhel-8.10&upstream=python3-3.6.8-75.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2023-40217",
                "source" : "redhat-csaf",
                "cvssScore" : 8.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-40217" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-42919",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-42919" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-6597",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-6597" ],
                "unique" : false
              }, {
                "id" : "CVE-2015-20107",
                "source" : "redhat-csaf",
                "cvssScore" : 7.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2015-20107" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-12718",
                "title" : "Bypass extraction filter to modify file metadata outside extraction directory",
                "source" : "redhat-csaf",
                "cvssScore" : 7.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-12718" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-4517",
                "title" : "Arbitrary writes via tarfile realpath overflow",
                "source" : "redhat-csaf",
                "cvssScore" : 7.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-4517" ],
                "unique" : false
              }, {
                "id" : "CVE-2020-10735",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2020-10735" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-45061",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-45061" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-24329",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-24329" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-6232",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-6232" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-12084",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-12084" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-4138",
                "title" : "Bypassing extraction filter to create symlinks to arbitrary targets outside extraction directory",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-4138" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-4435",
                "title" : "Tarfile extracts filtered members when errorlevel=0",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-4435" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-8194",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-8194" ],
                "unique" : false
              }, {
                "id" : "CVE-2021-28861",
                "source" : "redhat-csaf",
                "cvssScore" : 7.4,
                "severity" : "HIGH",
                "cves" : [ "CVE-2021-28861" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-4330",
                "title" : "Extraction filter bypass for linking outside extraction directory",
                "source" : "redhat-csaf",
                "cvssScore" : 7.3,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-4330" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-15366",
                "source" : "redhat-csaf",
                "cvssScore" : 7.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-15366" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-15367",
                "source" : "redhat-csaf",
                "cvssScore" : 7.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-15367" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-1299",
                "source" : "redhat-csaf",
                "cvssScore" : 7.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-1299" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-4519",
                "title" : "webbrowser.open() allows leading dashes in URLs",
                "source" : "redhat-csaf",
                "cvssScore" : 7.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-4519" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-6923",
                "source" : "redhat-csaf",
                "cvssScore" : 6.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-6923" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-0938",
                "source" : "redhat-csaf",
                "cvssScore" : 6.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-0938" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-13836",
                "source" : "redhat-csaf",
                "cvssScore" : 6.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-13836" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-9287",
                "source" : "redhat-csaf",
                "cvssScore" : 6.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-9287" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-0450",
                "source" : "redhat-csaf",
                "cvssScore" : 6.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-0450" ],
                "unique" : false
              }, {
                "id" : "CVE-2007-4559",
                "title" : "Directory traversal vulnerability in the (1) extract and (2) extractall functions in the tarfile module in Python allows user-assisted remote attackers to overwrite arbitrary files via a .. (dot dot) sequence in filenames in a TAR archive, a related issue to CVE-2001-1267.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2007-4559" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-27043",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-27043" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-8088",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-8088" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-0397",
                "source" : "redhat-csaf",
                "cvssScore" : 5.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-0397" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-7592",
                "source" : "redhat-csaf",
                "cvssScore" : 4.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-7592" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0865",
                "source" : "redhat-csaf",
                "cvssScore" : 4.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-0865" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-6069",
                "title" : "HTMLParser quadratic complexity when processing malformed inputs",
                "source" : "redhat-csaf",
                "cvssScore" : 4.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-6069" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-8291",
                "source" : "redhat-csaf",
                "cvssScore" : 4.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-8291" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-6075",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-6075" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-11168",
                "source" : "redhat-csaf",
                "cvssScore" : 3.7,
                "severity" : "LOW",
                "cves" : [ "CVE-2024-11168" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-4032",
                "source" : "redhat-csaf",
                "cvssScore" : 3.7,
                "severity" : "LOW",
                "cves" : [ "CVE-2024-4032" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-5642",
                "title" : "Buffer overread when using an empty list with SSLContext.set_npn_protocols()",
                "source" : "redhat-csaf",
                "cvssScore" : 2.7,
                "severity" : "LOW",
                "cves" : [ "CVE-2024-5642" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2023-40217",
                "source" : "redhat-csaf",
                "cvssScore" : 8.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-40217" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/zlib@1.2.11-25.el8?arch=x86_64&distro=rhel-8.10&upstream=zlib-1.2.11-25.el8.src.rpm",
              "issues" : [ {
                "id" : "CVE-2018-25032",
                "title" : "zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.",
                "source" : "redhat-csaf",
                "cvssScore" : 8.2,
                "severity" : "HIGH",
                "cves" : [ "CVE-2018-25032" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-37434",
                "title" : "zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference).",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-37434" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2018-25032",
                "title" : "zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.",
                "source" : "redhat-csaf",
                "cvssScore" : 8.2,
                "severity" : "HIGH",
                "cves" : [ "CVE-2018-25032" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libcap@2.48-6.el8_9?arch=x86_64&distro=rhel-8.10&upstream=libcap-2.48-6.el8_9.src.rpm",
              "issues" : [ {
                "id" : "CVE-2023-2603",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-2603" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-2602",
                "title" : "A vulnerability was found in the pthread_create() function in libcap. This issue may allow a malicious actor to use cause __real_pthread_create() to return an error, which can exhaust the process memory.",
                "source" : "redhat-csaf",
                "cvssScore" : 3.3,
                "severity" : "LOW",
                "cves" : [ "CVE-2023-2602" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2023-2603",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-2603" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/ncurses-base@6.1-10.20180224.el8?arch=noarch&distro=rhel-8.10&upstream=ncurses-6.1-10.20180224.el8.src.rpm",
              "issues" : [ {
                "id" : "CVE-2023-29491",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-29491" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-69720",
                "title" : "The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-69720" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-29458",
                "title" : "ncurses 6.3 before patch 20220416 has an out-of-bounds read and segmentation violation in convert_strings in tinfo/read_entry.c in the terminfo library.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-29458" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2023-29491",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-29491" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/ncurses-libs@6.1-10.20180224.el8?arch=x86_64&distro=rhel-8.10&upstream=ncurses-6.1-10.20180224.el8.src.rpm",
              "issues" : [ {
                "id" : "CVE-2023-29491",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-29491" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-69720",
                "title" : "The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-69720" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-29458",
                "title" : "ncurses 6.3 before patch 20220416 has an out-of-bounds read and segmentation violation in convert_strings in tinfo/read_entry.c in the terminfo library.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-29458" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2023-29491",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-29491" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/sqlite-libs@3.26.0-20.el8_10?arch=x86_64&distro=rhel-8.10&upstream=sqlite-3.26.0-20.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2025-6965",
                "title" : "Integer Truncation on SQLite",
                "source" : "redhat-csaf",
                "cvssScore" : 7.7,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-6965" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-7104",
                "source" : "redhat-csaf",
                "cvssScore" : 7.3,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-7104" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-3277",
                "title" : "An integer overflow can be triggered in SQLite’s `concat_ws()` function. The resulting, truncated integer is then used to allocate a buffer. When SQLite then writes the resulting string to the buffer, it uses the original, untruncated size and thus a wild Heap Buffer overflow of size ~4GB can be triggered. This can result in arbitrary code execution.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.3,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-3277" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-35737",
                "title" : "SQLite 1.0.12 through 3.39.x before 3.39.2 sometimes allows an array-bounds overflow if billions of bytes are used in a string argument to a C API.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-35737" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2025-6965",
                "title" : "Integer Truncation on SQLite",
                "source" : "redhat-csaf",
                "cvssScore" : 7.7,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-6965" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/expat@2.5.0-1.el8_10?arch=x86_64&distro=rhel-8.10&upstream=expat-2.5.0-1.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2023-52425",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-52425" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-28757",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-28757" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-45490",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-45490" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-45491",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-45491" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-8176",
                "title" : "Libexpat: expat: improper restriction of xml entity expansion depth in libexpat",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-8176" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-45492",
                "source" : "redhat-csaf",
                "cvssScore" : 6.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-45492" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-50602",
                "title" : "An issue was discovered in libexpat before 2.6.4. There is a crash within the XML_ResumeParser function because XML_StopParser can stop/suspend an unstarted parser.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-50602" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-59375",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-59375" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2023-52425",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-52425" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libtirpc@1.1.4-12.el8_10?arch=x86_64&distro=rhel-8.10&upstream=libtirpc-1.1.4-12.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2021-46828",
                "title" : "In libtirpc before 1.3.3rc1, remote attackers could exhaust the file descriptors of a process that uses libtirpc because idle TCP connections are mishandled. This can, in turn, lead to an svc_run infinite loop without accepting new connections.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2021-46828" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2021-46828",
                "title" : "In libtirpc before 1.3.3rc1, remote attackers could exhaust the file descriptors of a process that uses libtirpc because idle TCP connections are mishandled. This can, in turn, lead to an svc_run infinite loop without accepting new connections.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2021-46828" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/pcre2@10.32-3.el8_6?arch=x86_64&distro=rhel-8.10&upstream=pcre2-10.32-3.el8_6.src.rpm",
              "issues" : [ {
                "id" : "CVE-2022-1586",
                "title" : "An out-of-bounds read vulnerability was discovered in the PCRE2 library in the compile_xclass_matchingpath() function of the pcre2_jit_compile.c file. This involves a unicode property matching issue in JIT-compiled regular expressions. The issue occurs because the character was not fully read in case-less matching within JIT.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-1586" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-1587",
                "title" : "An out-of-bounds read vulnerability was discovered in the PCRE2 library in the get_recurse_data_length() function of the pcre2_jit_compile.c file. This issue affects recursions in JIT-compiled regular expressions caused by duplicate data transfers.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-1587" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2022-1586",
                "title" : "An out-of-bounds read vulnerability was discovered in the PCRE2 library in the compile_xclass_matchingpath() function of the pcre2_jit_compile.c file. This involves a unicode property matching issue in JIT-compiled regular expressions. The issue occurs because the character was not fully read in case-less matching within JIT.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-1586" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/bash@4.4.20-6.el8_10?arch=x86_64&distro=rhel-8.10&upstream=bash-4.4.20-6.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2022-3715",
                "source" : "redhat-csaf",
                "cvssScore" : 6.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-3715" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2022-3715",
                "source" : "redhat-csaf",
                "cvssScore" : 6.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-3715" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/gmp@6.1.2-11.el8?arch=x86_64&distro=rhel-8.10&epoch=1&upstream=gmp-6.1.2-11.el8.src.rpm",
              "issues" : [ {
                "id" : "CVE-2021-43618",
                "title" : "GNU Multiple Precision Arithmetic Library (GMP) through 6.2.1 has an mpz/inp_raw.c integer overflow and resultant buffer overflow via crafted input, leading to a segmentation fault on 32-bit platforms.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2021-43618" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2021-43618",
                "title" : "GNU Multiple Precision Arithmetic Library (GMP) through 6.2.1 has an mpz/inp_raw.c integer overflow and resultant buffer overflow via crafted input, leading to a segmentation fault on 32-bit platforms.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2021-43618" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libgcc@8.5.0-28.el8_10?arch=x86_64&distro=rhel-8.10&upstream=gcc-8.5.0-28.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2020-11023",
                "title" : "Potential XSS vulnerability in jQuery",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2020-11023" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2020-11023",
                "title" : "Potential XSS vulnerability in jQuery",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2020-11023" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libtasn1@4.13-5.el8_10?arch=x86_64&distro=rhel-8.10&upstream=libtasn1-4.13-5.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2021-46848",
                "title" : "GNU Libtasn1 before 4.19.0 has an ETYPE_OK off-by-one array size check that affects asn1_encode_simple_der.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2021-46848" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-12133",
                "title" : "Libtasn1: inefficient der decoding in libtasn1 leading to potential remote dos",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-12133" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2021-46848",
                "title" : "GNU Libtasn1 before 4.19.0 has an ETYPE_OK off-by-one array size check that affects asn1_encode_simple_der.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2021-46848" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libcom_err@1.45.6-7.el8_10?arch=x86_64&distro=rhel-8.10&upstream=e2fsprogs-1.45.6-7.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2022-1304",
                "title" : "An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a segmentation fault and possibly arbitrary code execution via a specially crafted filesystem.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-1304" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2022-1304",
                "title" : "An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a segmentation fault and possibly arbitrary code execution via a specially crafted filesystem.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-1304" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/python3-pip-wheel@9.0.3-24.el8?arch=noarch&distro=rhel-8.10&upstream=python-pip-9.0.3-24.el8.src.rpm",
              "issues" : [ {
                "id" : "CVE-2007-4559",
                "title" : "Directory traversal vulnerability in the (1) extract and (2) extractall functions in the tarfile module in Python allows user-assisted remote attackers to overwrite arbitrary files via a .. (dot dot) sequence in filenames in a TAR archive, a related issue to CVE-2001-1267.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2007-4559" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2007-4559",
                "title" : "Directory traversal vulnerability in the (1) extract and (2) extractall functions in the tarfile module in Python allows user-assisted remote attackers to overwrite arbitrary files via a .. (dot dot) sequence in filenames in a TAR archive, a related issue to CVE-2001-1267.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2007-4559" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/bzip2-libs@1.0.6-28.el8_10?arch=x86_64&distro=rhel-8.10&upstream=bzip2-1.0.6-28.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2019-12900",
                "title" : "BZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many selectors.",
                "source" : "redhat-csaf",
                "cvssScore" : 4.4,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2019-12900" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2019-12900",
                "title" : "BZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many selectors.",
                "source" : "redhat-csaf",
                "cvssScore" : 4.4,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2019-12900" ],
                "unique" : false
              }
            } ],
            "highestVulnerability" : {
              "id" : "CVE-2025-15467",
              "title" : "Stack buffer overflow in CMS (Auth)EnvelopedData parsing",
              "source" : "redhat-csaf",
              "cvssScore" : 9.8,
              "severity" : "CRITICAL",
              "cves" : [ "CVE-2025-15467" ],
              "unique" : false
            }
          }, {
            "ref" : "pkg:rpm/redhat/yum@4.7.0-21.el8_10?arch=noarch&distro=rhel-8.10&upstream=dnf-4.7.0-21.el8_10.src.rpm",
            "transitive" : [ {
              "ref" : "pkg:rpm/redhat/openssl-libs@1.1.1k-15.el8_6?arch=x86_64&distro=rhel-8.10&epoch=1&upstream=openssl-1.1.1k-15.el8_6.src.rpm",
              "issues" : [ {
                "id" : "CVE-2025-15467",
                "title" : "Stack buffer overflow in CMS (Auth)EnvelopedData parsing",
                "source" : "redhat-csaf",
                "cvssScore" : 9.8,
                "severity" : "CRITICAL",
                "cves" : [ "CVE-2025-15467" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-1473",
                "title" : "Resource leakage when decoding certificates and keys",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-1473" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-3358",
                "title" : "Using a Custom Cipher with NID_undef may lead to NULL encryption",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-3358" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-3602",
                "title" : "X.509 Email Address 4-byte Buffer Overflow",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-3602" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-3786",
                "title" : "X.509 Email Address Variable Length Buffer Overflow",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-3786" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-4450",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-4450" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-0215",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-0215" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-0216",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-0216" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-0217",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-0217" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-0401",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-0401" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-5363",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-5363" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-0286",
                "source" : "redhat-csaf",
                "cvssScore" : 7.4,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-0286" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-12797",
                "title" : "RFC7250 handshakes with unauthenticated servers don't abort as expected",
                "source" : "redhat-csaf",
                "cvssScore" : 7.4,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-12797" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-69419",
                "source" : "redhat-csaf",
                "cvssScore" : 7.4,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-69419" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-1292",
                "source" : "redhat-csaf",
                "cvssScore" : 6.7,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-1292" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-2068",
                "source" : "redhat-csaf",
                "cvssScore" : 6.7,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-2068" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-2650",
                "title" : "Possible DoS translating ASN.1 object identifiers",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-2650" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-6129",
                "title" : "POLY1305 MAC implementation corrupts vector registers on PowerPC",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-6129" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-69421",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-69421" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-11187",
                "title" : "Improper validation of PBMAC1 parameters in PKCS#12 MAC verification",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-11187" ],
                "unique" : false
              }, {
                "id" : "CVE-2020-1971",
                "title" : "EDIPARTYNAME NULL pointer dereference",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2020-1971" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-4304",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-4304" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-0464",
                "title" : "Excessive Resource Usage Verifying X.509 Policy Constraints",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-0464" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-6237",
                "title" : "Excessive time spent checking invalid RSA public keys",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-6237" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-5535",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-5535" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-6119",
                "title" : "Possible denial of service in X.509 name checks",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-6119" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-15468",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-15468" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-66199",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-66199" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-69420",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-69420" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-22796",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-22796" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-4741",
                "source" : "redhat-csaf",
                "cvssScore" : 5.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-4741" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-9230",
                "source" : "redhat-csaf",
                "cvssScore" : 5.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-9230" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-0727",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-0727" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-15469",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-15469" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-22795",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-22795" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-1343",
                "title" : "OCSP_basic_verify may incorrectly verify the response signing certificate",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-1343" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-2097",
                "title" : "AES OCB fails to encrypt some bytes",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-2097" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-0465",
                "title" : "Invalid certificate policies in leaf certificates are silently ignored",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-0465" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-0466",
                "title" : "Certificate policy check not enabled",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-0466" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-2975",
                "title" : "AES-SIV implementation ignores empty associated data entries",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-2975" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-3446",
                "title" : "Excessive time spent checking DH keys and parameters",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-3446" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-3817",
                "title" : "Excessive time spent checking DH q parameter value",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-3817" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-5678",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-5678" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-4603",
                "title" : "Excessive time spent checking DSA keys and parameters",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-4603" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-1255",
                "title" : "Input buffer over-read in AES-XTS implementation on 64 bit ARM",
                "source" : "redhat-csaf",
                "cvssScore" : 5.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-1255" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-4203",
                "source" : "redhat-csaf",
                "cvssScore" : 4.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-4203" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-68160",
                "source" : "redhat-csaf",
                "cvssScore" : 4.7,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-68160" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-69418",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-69418" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-2511",
                "source" : "redhat-csaf",
                "cvssScore" : 3.7,
                "severity" : "LOW",
                "cves" : [ "CVE-2024-2511" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2025-15467",
                "title" : "Stack buffer overflow in CMS (Auth)EnvelopedData parsing",
                "source" : "redhat-csaf",
                "cvssScore" : 9.8,
                "severity" : "CRITICAL",
                "cves" : [ "CVE-2025-15467" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libcurl@7.61.1-34.el8_10.11?arch=x86_64&distro=rhel-8.10&upstream=curl-7.61.1-34.el8_10.11.src.rpm",
              "issues" : [ {
                "id" : "CVE-2022-32207",
                "title" : "When curl < 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes the operation atomic by finalizing the operation with a rename from a temporary name to the final target file name.In that rename operation, it might accidentally *widen* the permissions for the target file, leaving the updated file accessible to more users than intended.",
                "source" : "redhat-csaf",
                "cvssScore" : 9.8,
                "severity" : "CRITICAL",
                "cves" : [ "CVE-2022-32207" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-22576",
                "title" : "An improper authentication vulnerability exists in curl 7.33.0 to and including 7.82.0 which might allow reuse OAUTH2-authenticated connections without properly making sure that the connection was authenticated with the same credentials as set for this transfer. This affects SASL-enabled protocols: SMPTP(S), IMAP(S), POP3(S) and LDAP(S) (openldap only).",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-22576" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-38545",
                "title" : "This flaw makes curl overflow a heap based buffer in the SOCKS5 proxy\nhandshake.\n\nWhen curl is asked to pass along the host name to the SOCKS5 proxy to allow\nthat to resolve the address instead of it getting done by curl itself, the\nmaximum length that host name can be is 255 bytes.\n\nIf the host name is detected to be longer, curl switches to local name\nresolving and instead passes on the resolved address only. Due to this bug,\nthe local variable that means \"let the host resolve the name\" could get the\nwrong value during a slow SOCKS5 handshake, and contrary to the intention,\ncopy the too long host name to the target buffer instead of copying just the\nresolved address there.\n\nThe target buffer being a heap based buffer, and the host name coming from the\nURL that curl has been told to operate with.",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-38545" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-27775",
                "title" : "An information disclosure vulnerability exists in curl 7.65.0 to 7.82.0 are vulnerable that by using an IPv6 address that was in the connection pool but with a different zone id it could reuse a connection instead.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-27775" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-27782",
                "title" : "libcurl would reuse a previously created connection even when a TLS or SSHrelated option had been changed that should have prohibited reuse.libcurl keeps previously used connections in a connection pool for subsequenttransfers to reuse if one of them matches the setup. However, several TLS andSSH settings were left out from the configuration match checks, making themmatch too easily.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-27782" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-2398",
                "title" : "HTTP/2 push headers memory-leak",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2398" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-32206",
                "title" : "curl < 7.84.0 supports \"chained\" HTTP compression algorithms, meaning that a serverresponse can be compressed multiple times and potentially with different algorithms. The number of acceptable \"links\" in this \"decompression chain\" was unbounded, allowing a malicious server to insert a virtually unlimited number of compression steps.The use of such a decompression chain could result in a \"malloc bomb\", makingcurl end up spending enormous amounts of allocated heap memory, or trying toand returning out of memory errors.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-32206" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-23916",
                "title" : "An allocation of resources without limits or throttling vulnerability exists in curl <v7.88.0 based on the \"chained\" HTTP compression algorithms, meaning that a server response can be compressed multiple times and potentially with differentalgorithms. The number of acceptable \"links\" in this \"decompression chain\" wascapped, but the cap was implemented on a per-header basis allowing a maliciousserver to insert a virtually unlimited number of compression steps simply byusing many headers. The use of such a decompression chain could result in a \"malloc bomb\", making curl end up spending enormous amounts of allocated heap memory, or trying to and returning out of memory errors.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-23916" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-43552",
                "title" : "A use after free vulnerability exists in curl <7.87.0. Curl can be asked to *tunnel* virtually all protocols it supports through an HTTP proxy. HTTP proxies can (and often do) deny such tunnel operations. When getting denied to tunnel the specific protocols SMB or TELNET, curl would use a heap-allocated struct after it had been freed, in its transfer shutdown code path.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-43552" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-27535",
                "title" : "An authentication bypass vulnerability exists in libcurl <8.0.0 in the FTP connection reuse feature that can result in wrong credentials being used during subsequent transfers. Previously created connections are kept in a connection pool for reuse if they match the current setup. However, certain FTP settings such as CURLOPT_FTP_ACCOUNT, CURLOPT_FTP_ALTERNATIVE_TO_USER, CURLOPT_FTP_SSL_CCC, and CURLOPT_USE_SSL were not included in the configuration match checks, causing them to match too easily. This could lead to libcurl using the wrong credentials when performing a transfer, potentially allowing unauthorized access to sensitive information.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-27535" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-27536",
                "title" : "An authentication bypass vulnerability exists libcurl <8.0.0 in the connection reuse feature which can reuse previously established connections with incorrect user permissions due to a failure to check for changes in the CURLOPT_GSSAPI_DELEGATION option. This vulnerability affects krb5/kerberos/negotiate/GSSAPI transfers and could potentially result in unauthorized access to sensitive information. The safest option is to not reuse connections if the CURLOPT_GSSAPI_DELEGATION option has been changed.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-27536" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-28321",
                "title" : "An improper certificate validation vulnerability exists in curl <v8.1.0 in the way it supports matching of wildcard patterns when listed as \"Subject Alternative Name\" in TLS server certificates. curl can be built to use its own name matching function for TLS rather than one provided by a TLS library. This private wildcard matching function would match IDN (International Domain Name) hosts incorrectly and could as a result accept patterns that otherwise should mismatch. IDN hostnames are converted to puny code before used for certificate checks. Puny coded names always start with `xn--` and should not be allowed to pattern match, but the wildcard check in curl could still check for `x*`, which would match even though the IDN name most likely contained nothing even resembling an `x`.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-28321" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-27538",
                "title" : "An authentication bypass vulnerability exists in libcurl prior to v8.0.0 where it reuses a previously established SSH connection despite the fact that an SSH option was modified, which should have prevented reuse. libcurl maintains a pool of previously used connections to reuse them for subsequent transfers if the configurations match. However, two SSH settings were omitted from the configuration check, allowing them to match easily, potentially leading to the reuse of an inappropriate connection.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-27538" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-32208",
                "title" : "When curl < 7.84.0 does FTP transfers secured by krb5, it handles message verification failures wrongly. This flaw makes it possible for a Man-In-The-Middle attack to go unnoticed and even allows it to inject data to the client.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-32208" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-46218",
                "title" : "This flaw allows a malicious HTTP server to set \"super cookies\" in curl that\nare then passed back to more origins than what is otherwise allowed or\npossible. This allows a site to set cookies that then would get sent to\ndifferent and unrelated sites and domains.\n\nIt could do this by exploiting a mixed case flaw in curl's function that\nverifies a given cookie domain against the Public Suffix List (PSL). For\nexample a cookie could be set with `domain=co.UK` when the URL used a lower\ncase hostname `curl.co.uk`, even though `co.uk` is listed as a PSL domain.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-46218" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-9086",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-9086" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-27774",
                "title" : "An insufficiently protected credentials vulnerability exists in curl 4.9 to and include curl 7.82.0 are affected that could allow an attacker to extract credentials when follows HTTP(S) redirects is used with authentication could leak credentials to other services that exist on different protocols or port numbers.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-27774" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-32221",
                "title" : "When doing HTTP(S) transfers, libcurl might erroneously use the read callback (`CURLOPT_READFUNCTION`) to ask for data to send, even when the `CURLOPT_POSTFIELDS` option has been set, if the same handle previously was used to issue a `PUT` request which used that callback. This flaw may surprise the application and cause it to misbehave and either send off the wrong data or use memory after free or similar in the subsequent `POST` request. The problem exists in the logic for a reused handle when it is changed from a PUT to a POST.",
                "source" : "redhat-csaf",
                "cvssScore" : 4.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-32221" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-27776",
                "title" : "A insufficiently protected credentials vulnerability in fixed in curl 7.83.0 might leak authentication or cookie header data on HTTP redirects to the same host but another port number.",
                "source" : "redhat-csaf",
                "cvssScore" : 4.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-27776" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-27533",
                "title" : "A vulnerability in input validation exists in curl <8.0 during communication using the TELNET protocol may allow an attacker to pass on maliciously crafted user name and \"telnet options\" during server negotiation. The lack of proper input scrubbing allows an attacker to send content or perform option negotiation without the application's intent. This vulnerability could be exploited if an application allows user input, thereby enabling attackers to execute arbitrary code on the system.",
                "source" : "redhat-csaf",
                "cvssScore" : 4.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-27533" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-27534",
                "title" : "A path traversal vulnerability exists in curl <8.0.0 SFTP implementation causes the tilde (~) character to be wrongly replaced when used as a prefix in the first path element, in addition to its intended use as the first element to indicate a path relative to the user's home directory. Attackers can exploit this flaw to bypass filtering or execute arbitrary code by crafting a path like /~2/foo while accessing a server with a specific user.",
                "source" : "redhat-csaf",
                "cvssScore" : 3.7,
                "severity" : "LOW",
                "cves" : [ "CVE-2023-27534" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-28322",
                "title" : "An information disclosure vulnerability exists in curl <v8.1.0 when doing HTTP(S) transfers, libcurl might erroneously use the read callback (`CURLOPT_READFUNCTION`) to ask for data to send, even when the `CURLOPT_POSTFIELDS` option has been set, if the same handle previously wasused to issue a `PUT` request which used that callback. This flaw may surprise the application and cause it to misbehave and either send off the wrong data or use memory after free or similar in the second transfer. The problem exists in the logic for a reused handle when it is (expected to be) changed from a PUT to a POST.",
                "source" : "redhat-csaf",
                "cvssScore" : 3.7,
                "severity" : "LOW",
                "cves" : [ "CVE-2023-28322" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-38546",
                "source" : "redhat-csaf",
                "cvssScore" : 3.7,
                "severity" : "LOW",
                "cves" : [ "CVE-2023-38546" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-35252",
                "title" : "When curl is used to retrieve and parse cookies from a HTTP(S) server, itaccepts cookies using control codes that when later are sent back to a HTTPserver might make the server return 400 responses. Effectively allowing a\"sister site\" to deny service to all siblings.",
                "source" : "redhat-csaf",
                "cvssScore" : 3.1,
                "severity" : "LOW",
                "cves" : [ "CVE-2022-35252" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2022-32207",
                "title" : "When curl < 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes the operation atomic by finalizing the operation with a rename from a temporary name to the final target file name.In that rename operation, it might accidentally *widen* the permissions for the target file, leaving the updated file accessible to more users than intended.",
                "source" : "redhat-csaf",
                "cvssScore" : 9.8,
                "severity" : "CRITICAL",
                "cves" : [ "CVE-2022-32207" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/curl@7.61.1-34.el8_10.11?arch=x86_64&distro=rhel-8.10&upstream=curl-7.61.1-34.el8_10.11.src.rpm",
              "issues" : [ {
                "id" : "CVE-2022-32207",
                "title" : "When curl < 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes the operation atomic by finalizing the operation with a rename from a temporary name to the final target file name.In that rename operation, it might accidentally *widen* the permissions for the target file, leaving the updated file accessible to more users than intended.",
                "source" : "redhat-csaf",
                "cvssScore" : 9.8,
                "severity" : "CRITICAL",
                "cves" : [ "CVE-2022-32207" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-22576",
                "title" : "An improper authentication vulnerability exists in curl 7.33.0 to and including 7.82.0 which might allow reuse OAUTH2-authenticated connections without properly making sure that the connection was authenticated with the same credentials as set for this transfer. This affects SASL-enabled protocols: SMPTP(S), IMAP(S), POP3(S) and LDAP(S) (openldap only).",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-22576" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-38545",
                "title" : "This flaw makes curl overflow a heap based buffer in the SOCKS5 proxy\nhandshake.\n\nWhen curl is asked to pass along the host name to the SOCKS5 proxy to allow\nthat to resolve the address instead of it getting done by curl itself, the\nmaximum length that host name can be is 255 bytes.\n\nIf the host name is detected to be longer, curl switches to local name\nresolving and instead passes on the resolved address only. Due to this bug,\nthe local variable that means \"let the host resolve the name\" could get the\nwrong value during a slow SOCKS5 handshake, and contrary to the intention,\ncopy the too long host name to the target buffer instead of copying just the\nresolved address there.\n\nThe target buffer being a heap based buffer, and the host name coming from the\nURL that curl has been told to operate with.",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-38545" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-15079",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-15079" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-27775",
                "title" : "An information disclosure vulnerability exists in curl 7.65.0 to 7.82.0 are vulnerable that by using an IPv6 address that was in the connection pool but with a different zone id it could reuse a connection instead.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-27775" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-27782",
                "title" : "libcurl would reuse a previously created connection even when a TLS or SSHrelated option had been changed that should have prohibited reuse.libcurl keeps previously used connections in a connection pool for subsequenttransfers to reuse if one of them matches the setup. However, several TLS andSSH settings were left out from the configuration match checks, making themmatch too easily.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-27782" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-2398",
                "title" : "HTTP/2 push headers memory-leak",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2398" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-13034",
                "source" : "redhat-csaf",
                "cvssScore" : 6.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-13034" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-14819",
                "source" : "redhat-csaf",
                "cvssScore" : 6.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-14819" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-1965",
                "source" : "redhat-csaf",
                "cvssScore" : 6.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-1965" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-32206",
                "title" : "curl < 7.84.0 supports \"chained\" HTTP compression algorithms, meaning that a serverresponse can be compressed multiple times and potentially with different algorithms. The number of acceptable \"links\" in this \"decompression chain\" was unbounded, allowing a malicious server to insert a virtually unlimited number of compression steps.The use of such a decompression chain could result in a \"malloc bomb\", makingcurl end up spending enormous amounts of allocated heap memory, or trying toand returning out of memory errors.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-32206" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-23916",
                "title" : "An allocation of resources without limits or throttling vulnerability exists in curl <v7.88.0 based on the \"chained\" HTTP compression algorithms, meaning that a server response can be compressed multiple times and potentially with differentalgorithms. The number of acceptable \"links\" in this \"decompression chain\" wascapped, but the cap was implemented on a per-header basis allowing a maliciousserver to insert a virtually unlimited number of compression steps simply byusing many headers. The use of such a decompression chain could result in a \"malloc bomb\", making curl end up spending enormous amounts of allocated heap memory, or trying to and returning out of memory errors.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-23916" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-14524",
                "title" : "bearer token leak on cross-protocol redirect",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-14524" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-3784",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-3784" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-3805",
                "source" : "redhat-csaf",
                "cvssScore" : 6.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-3805" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-43552",
                "title" : "A use after free vulnerability exists in curl <7.87.0. Curl can be asked to *tunnel* virtually all protocols it supports through an HTTP proxy. HTTP proxies can (and often do) deny such tunnel operations. When getting denied to tunnel the specific protocols SMB or TELNET, curl would use a heap-allocated struct after it had been freed, in its transfer shutdown code path.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-43552" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-27535",
                "title" : "An authentication bypass vulnerability exists in libcurl <8.0.0 in the FTP connection reuse feature that can result in wrong credentials being used during subsequent transfers. Previously created connections are kept in a connection pool for reuse if they match the current setup. However, certain FTP settings such as CURLOPT_FTP_ACCOUNT, CURLOPT_FTP_ALTERNATIVE_TO_USER, CURLOPT_FTP_SSL_CCC, and CURLOPT_USE_SSL were not included in the configuration match checks, causing them to match too easily. This could lead to libcurl using the wrong credentials when performing a transfer, potentially allowing unauthorized access to sensitive information.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-27535" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-27536",
                "title" : "An authentication bypass vulnerability exists libcurl <8.0.0 in the connection reuse feature which can reuse previously established connections with incorrect user permissions due to a failure to check for changes in the CURLOPT_GSSAPI_DELEGATION option. This vulnerability affects krb5/kerberos/negotiate/GSSAPI transfers and could potentially result in unauthorized access to sensitive information. The safest option is to not reuse connections if the CURLOPT_GSSAPI_DELEGATION option has been changed.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-27536" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-28321",
                "title" : "An improper certificate validation vulnerability exists in curl <v8.1.0 in the way it supports matching of wildcard patterns when listed as \"Subject Alternative Name\" in TLS server certificates. curl can be built to use its own name matching function for TLS rather than one provided by a TLS library. This private wildcard matching function would match IDN (International Domain Name) hosts incorrectly and could as a result accept patterns that otherwise should mismatch. IDN hostnames are converted to puny code before used for certificate checks. Puny coded names always start with `xn--` and should not be allowed to pattern match, but the wildcard check in curl could still check for `x*`, which would match even though the IDN name most likely contained nothing even resembling an `x`.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-28321" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-10966",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-10966" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-3783",
                "source" : "redhat-csaf",
                "cvssScore" : 5.7,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-3783" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-27538",
                "title" : "An authentication bypass vulnerability exists in libcurl prior to v8.0.0 where it reuses a previously established SSH connection despite the fact that an SSH option was modified, which should have prevented reuse. libcurl maintains a pool of previously used connections to reuse them for subsequent transfers if the configurations match. However, two SSH settings were omitted from the configuration check, allowing them to match easily, potentially leading to the reuse of an inappropriate connection.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-27538" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-32208",
                "title" : "When curl < 7.84.0 does FTP transfers secured by krb5, it handles message verification failures wrongly. This flaw makes it possible for a Man-In-The-Middle attack to go unnoticed and even allows it to inject data to the client.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-32208" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-46218",
                "title" : "This flaw allows a malicious HTTP server to set \"super cookies\" in curl that\nare then passed back to more origins than what is otherwise allowed or\npossible. This allows a site to set cookies that then would get sent to\ndifferent and unrelated sites and domains.\n\nIt could do this by exploiting a mixed case flaw in curl's function that\nverifies a given cookie domain against the Public Suffix List (PSL). For\nexample a cookie could be set with `domain=co.UK` when the URL used a lower\ncase hostname `curl.co.uk`, even though `co.uk` is listed as a PSL domain.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-46218" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-9086",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-9086" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-27774",
                "title" : "An insufficiently protected credentials vulnerability exists in curl 4.9 to and include curl 7.82.0 are affected that could allow an attacker to extract credentials when follows HTTP(S) redirects is used with authentication could leak credentials to other services that exist on different protocols or port numbers.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-27774" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-32221",
                "title" : "When doing HTTP(S) transfers, libcurl might erroneously use the read callback (`CURLOPT_READFUNCTION`) to ask for data to send, even when the `CURLOPT_POSTFIELDS` option has been set, if the same handle previously was used to issue a `PUT` request which used that callback. This flaw may surprise the application and cause it to misbehave and either send off the wrong data or use memory after free or similar in the subsequent `POST` request. The problem exists in the logic for a reused handle when it is changed from a PUT to a POST.",
                "source" : "redhat-csaf",
                "cvssScore" : 4.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-32221" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-10148",
                "source" : "redhat-csaf",
                "cvssScore" : 4.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-10148" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-14017",
                "source" : "redhat-csaf",
                "cvssScore" : 4.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-14017" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-15224",
                "source" : "redhat-csaf",
                "cvssScore" : 4.7,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-15224" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-27776",
                "title" : "A insufficiently protected credentials vulnerability in fixed in curl 7.83.0 might leak authentication or cookie header data on HTTP redirects to the same host but another port number.",
                "source" : "redhat-csaf",
                "cvssScore" : 4.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-27776" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-27533",
                "title" : "A vulnerability in input validation exists in curl <8.0 during communication using the TELNET protocol may allow an attacker to pass on maliciously crafted user name and \"telnet options\" during server negotiation. The lack of proper input scrubbing allows an attacker to send content or perform option negotiation without the application's intent. This vulnerability could be exploited if an application allows user input, thereby enabling attackers to execute arbitrary code on the system.",
                "source" : "redhat-csaf",
                "cvssScore" : 4.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-27533" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-27534",
                "title" : "A path traversal vulnerability exists in curl <8.0.0 SFTP implementation causes the tilde (~) character to be wrongly replaced when used as a prefix in the first path element, in addition to its intended use as the first element to indicate a path relative to the user's home directory. Attackers can exploit this flaw to bypass filtering or execute arbitrary code by crafting a path like /~2/foo while accessing a server with a specific user.",
                "source" : "redhat-csaf",
                "cvssScore" : 3.7,
                "severity" : "LOW",
                "cves" : [ "CVE-2023-27534" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-28322",
                "title" : "An information disclosure vulnerability exists in curl <v8.1.0 when doing HTTP(S) transfers, libcurl might erroneously use the read callback (`CURLOPT_READFUNCTION`) to ask for data to send, even when the `CURLOPT_POSTFIELDS` option has been set, if the same handle previously wasused to issue a `PUT` request which used that callback. This flaw may surprise the application and cause it to misbehave and either send off the wrong data or use memory after free or similar in the second transfer. The problem exists in the logic for a reused handle when it is (expected to be) changed from a PUT to a POST.",
                "source" : "redhat-csaf",
                "cvssScore" : 3.7,
                "severity" : "LOW",
                "cves" : [ "CVE-2023-28322" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-38546",
                "source" : "redhat-csaf",
                "cvssScore" : 3.7,
                "severity" : "LOW",
                "cves" : [ "CVE-2023-38546" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-35252",
                "title" : "When curl is used to retrieve and parse cookies from a HTTP(S) server, itaccepts cookies using control codes that when later are sent back to a HTTPserver might make the server return 400 responses. Effectively allowing a\"sister site\" to deny service to all siblings.",
                "source" : "redhat-csaf",
                "cvssScore" : 3.1,
                "severity" : "LOW",
                "cves" : [ "CVE-2022-35252" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2022-32207",
                "title" : "When curl < 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes the operation atomic by finalizing the operation with a rename from a temporary name to the final target file name.In that rename operation, it might accidentally *widen* the permissions for the target file, leaving the updated file accessible to more users than intended.",
                "source" : "redhat-csaf",
                "cvssScore" : 9.8,
                "severity" : "CRITICAL",
                "cves" : [ "CVE-2022-32207" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libxml2@2.9.7-21.el8_10.3?arch=x86_64&distro=rhel-8.10&upstream=libxml2-2.9.7-21.el8_10.3.src.rpm",
              "issues" : [ {
                "id" : "CVE-2024-40896",
                "title" : "In libxml2 2.11 before 2.11.9, 2.12 before 2.12.9, and 2.13 before 2.13.3, the SAX parser can produce events for external entities even if custom SAX handlers try to override entity content (by setting \"checked\"). This makes classic XXE attacks possible.",
                "source" : "redhat-csaf",
                "cvssScore" : 9.1,
                "severity" : "CRITICAL",
                "cves" : [ "CVE-2024-40896" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-49794",
                "title" : "Libxml: heap use after free (uaf) leads to denial of service (dos)",
                "source" : "redhat-csaf",
                "cvssScore" : 9.1,
                "severity" : "CRITICAL",
                "cves" : [ "CVE-2025-49794" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-49796",
                "title" : "Libxml: type confusion leads to denial of service (dos)",
                "source" : "redhat-csaf",
                "cvssScore" : 9.1,
                "severity" : "CRITICAL",
                "cves" : [ "CVE-2025-49796" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-56171",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-56171" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-40304",
                "title" : "An issue was discovered in libxml2 before 2.10.3. Certain invalid XML entity definitions can corrupt a hash table key, potentially leading to subsequent logic errors. In one case, a double-free can be provoked.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-40304" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-24928",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-24928" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-7425",
                "title" : "Libxslt: heap use-after-free in libxslt caused by atype corruption in xmlattrptr",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-7425" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-40303",
                "title" : "An issue was discovered in libxml2 before 2.10.3. When parsing a multi-gigabyte XML document with the XML_PARSE_HUGE parser option enabled, several integer counters can overflow. This results in an attempt to access an array at a negative 2GB offset, typically leading to a segmentation fault.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-40303" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-25062",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-25062" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-32415",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-32415" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-49795",
                "title" : "Libxml: null pointer dereference leads to denial of service (dos)",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-49795" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-6021",
                "title" : "Libxml2: integer overflow in xmlbuildqname() leads to stack buffer overflow in libxml2",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-6021" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-7424",
                "title" : "Libxslt: type confusion in xmlnode.psvi between stylesheet and source nodes",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-7424" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-29824",
                "title" : "In libxml2 before 2.9.14, several buffer handling functions in buf.c (xmlBuf*) and tree.c (xmlBuffer*) don't check for integer overflows. This can result in out-of-bounds memory writes. Exploitation requires a victim to open a crafted, multi-gigabyte XML file. Other software using libxml2's buffer functions, for example libxslt through 1.1.35, is affected as well.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.4,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-29824" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-39615",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-39615" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-9714",
                "source" : "redhat-csaf",
                "cvssScore" : 6.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-9714" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-49043",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-49043" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-28484",
                "title" : "In libxml2 before 2.10.4, parsing of certain invalid XSD schemas can lead to a NULL pointer dereference and subsequently a segfault. This occurs in xmlSchemaFixupComplexType in xmlschemas.c.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-28484" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-29469",
                "title" : "An issue was discovered in libxml2 before 2.10.4. When hashing empty dict strings in a crafted XML document, xmlDictComputeFastKey in dict.c can produce non-deterministic values, leading to various logic and memory errors, such as a double free. This behavior occurs because there is an attempt to use the first byte of an empty string, and any value is possible (not solely the '\\0' value).",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-29469" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-32414",
                "source" : "redhat-csaf",
                "cvssScore" : 5.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-32414" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-6170",
                "title" : "Libxml2: stack buffer overflow in xmllint interactive shell command handling",
                "source" : "redhat-csaf",
                "cvssScore" : 2.5,
                "severity" : "LOW",
                "cves" : [ "CVE-2025-6170" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2024-40896",
                "title" : "In libxml2 2.11 before 2.11.9, 2.12 before 2.12.9, and 2.13 before 2.13.3, the SAX parser can produce events for external entities even if custom SAX handlers try to override entity content (by setting \"checked\"). This makes classic XXE attacks possible.",
                "source" : "redhat-csaf",
                "cvssScore" : 9.1,
                "severity" : "CRITICAL",
                "cves" : [ "CVE-2024-40896" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/krb5-libs@1.18.2-32.el8_10?arch=x86_64&distro=rhel-8.10&upstream=krb5-1.18.2-32.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2024-3596",
                "source" : "redhat-csaf",
                "cvssScore" : 9.0,
                "severity" : "CRITICAL",
                "cves" : [ "CVE-2024-3596" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-42898",
                "title" : "PAC parsing in MIT Kerberos 5 (aka krb5) before 1.19.4 and 1.20.x before 1.20.1 has integer overflows that may lead to remote code execution (in KDC, kadmind, or a GSS or Kerberos application server) on 32-bit platforms (which have a resultant heap-based buffer overflow), and cause a denial of service on other platforms. This occurs in krb5_pac_parse in lib/krb5/krb/pac.c. Heimdal before 7.7.1 has \"a similar bug.\"",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-42898" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-39975",
                "title" : "kdc/do_tgs_req.c in MIT Kerberos 5 (aka krb5) 1.21 before 1.21.2 has a double free that is reachable if an authenticated user can trigger an authorization-data handling failure. Incorrect data is copied from one ticket to another.",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-39975" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-26462",
                "title" : "Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/kdc/ndr.c.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-26462" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-37370",
                "title" : "In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can modify the plaintext Extra Count field of a confidential GSS krb5 wrap token, causing the unwrapped token to appear truncated to the application.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-37370" ],
                "unique" : false
              }, {
                "id" : "CVE-2020-17049",
                "title" : "Kerberos KDC Security Feature Bypass Vulnerability",
                "source" : "redhat-csaf",
                "cvssScore" : 7.2,
                "severity" : "HIGH",
                "cves" : [ "CVE-2020-17049" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-36054",
                "title" : "lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) before 1.20.2 and 1.21.x before 1.21.1 frees an uninitialized pointer. A remote authenticated user can trigger a kadmind crash. This occurs because _xdr_kadm5_principal_ent_rec does not validate the relationship between n_key_data and the key_data array count.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-36054" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-37371",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-37371" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-24528",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-24528" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-26458",
                "title" : "Kerberos 5 (aka krb5) 1.21.2 contains a memory leak in /krb5/src/lib/rpc/pmap_rmt.c.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-26458" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-26461",
                "title" : "Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/lib/gssapi/krb5/k5sealv3.c.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-26461" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-3576",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-3576" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2024-3596",
                "source" : "redhat-csaf",
                "cvssScore" : 9.0,
                "severity" : "CRITICAL",
                "cves" : [ "CVE-2024-3596" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/python3-setuptools-wheel@39.2.0-9.el8_10?arch=noarch&distro=rhel-8.10&upstream=python-setuptools-39.2.0-9.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2024-6345",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-6345" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-47273",
                "title" : "setuptools has a path traversal vulnerability in PackageIndex.download that leads to Arbitrary File Write",
                "source" : "redhat-csaf",
                "cvssScore" : 7.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-47273" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-40897",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-40897" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2024-6345",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-6345" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/glibc-minimal-langpack@2.28-251.el8_10.31?arch=x86_64&distro=rhel-8.10&upstream=glibc-2.28-251.el8_10.31.src.rpm",
              "issues" : [ {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0861",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-0861" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4911",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-4911" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33599",
                "title" : "nscd: Stack-based buffer overflow in netgroup cache",
                "source" : "redhat-csaf",
                "cvssScore" : 7.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-33599" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-4802",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-4802" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4527",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4527" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4806",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4806" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4813",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4813" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-5702",
                "title" : "The strcmp implementation optimized for the Power10 processor in the GNU C Library version 2.39 and later writes to vector registers v20 to v31 without saving contents from the caller (those registers are defined as non-volatile registers by the powerpc64le ABI), resulting in overwriting of its contents and potentially altering control flow of the caller, or leaking the input strings to the function to other parts of the program.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-5702" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-0395",
                "title" : "When the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-0395" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33600",
                "title" : "nscd: Null pointer crashes after notfound response",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33600" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0915",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-0915" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-8058",
                "source" : "redhat-csaf",
                "cvssScore" : 4.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-8058" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33601",
                "title" : "nscd: netgroup cache may terminate daemon on memory allocation failure",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33601" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33602",
                "title" : "nscd: netgroup cache assumes NSS callback uses in-buffer strings",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33602" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/glibc@2.28-251.el8_10.31?arch=x86_64&distro=rhel-8.10&upstream=glibc-2.28-251.el8_10.31.src.rpm",
              "issues" : [ {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0861",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-0861" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4911",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-4911" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33599",
                "title" : "nscd: Stack-based buffer overflow in netgroup cache",
                "source" : "redhat-csaf",
                "cvssScore" : 7.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-33599" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-4802",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-4802" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4527",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4527" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4806",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4806" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4813",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4813" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-15281",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-15281" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-5702",
                "title" : "The strcmp implementation optimized for the Power10 processor in the GNU C Library version 2.39 and later writes to vector registers v20 to v31 without saving contents from the caller (those registers are defined as non-volatile registers by the powerpc64le ABI), resulting in overwriting of its contents and potentially altering control flow of the caller, or leaking the input strings to the function to other parts of the program.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-5702" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-0395",
                "title" : "When the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-0395" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33600",
                "title" : "nscd: Null pointer crashes after notfound response",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33600" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0915",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-0915" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-8058",
                "source" : "redhat-csaf",
                "cvssScore" : 4.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-8058" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33601",
                "title" : "nscd: netgroup cache may terminate daemon on memory allocation failure",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33601" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33602",
                "title" : "nscd: netgroup cache assumes NSS callback uses in-buffer strings",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33602" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/glibc-common@2.28-251.el8_10.31?arch=x86_64&distro=rhel-8.10&upstream=glibc-2.28-251.el8_10.31.src.rpm",
              "issues" : [ {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0861",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-0861" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4911",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-4911" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33599",
                "title" : "nscd: Stack-based buffer overflow in netgroup cache",
                "source" : "redhat-csaf",
                "cvssScore" : 7.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-33599" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-4802",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-4802" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4527",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4527" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4806",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4806" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4813",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4813" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-5702",
                "title" : "The strcmp implementation optimized for the Power10 processor in the GNU C Library version 2.39 and later writes to vector registers v20 to v31 without saving contents from the caller (those registers are defined as non-volatile registers by the powerpc64le ABI), resulting in overwriting of its contents and potentially altering control flow of the caller, or leaking the input strings to the function to other parts of the program.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-5702" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-0395",
                "title" : "When the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-0395" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33600",
                "title" : "nscd: Null pointer crashes after notfound response",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33600" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0915",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-0915" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-8058",
                "source" : "redhat-csaf",
                "cvssScore" : 4.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-8058" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33601",
                "title" : "nscd: netgroup cache may terminate daemon on memory allocation failure",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33601" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33602",
                "title" : "nscd: netgroup cache assumes NSS callback uses in-buffer strings",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33602" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/xz-libs@5.2.4-4.el8_6?arch=x86_64&distro=rhel-8.10&upstream=xz-5.2.4-4.el8_6.src.rpm",
              "issues" : [ {
                "id" : "CVE-2022-1271",
                "title" : "An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is applied on the attacker's chosen file name (for example, a crafted file name), this can overwrite an attacker's content to an arbitrary attacker-selected file. This flaw occurs due to insufficient validation when processing filenames with two or more newlines where selected content and the target file names are embedded in crafted multi-line file names. This flaw allows a remote, low privileged attacker to force zgrep to write arbitrary files on the system.",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-1271" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-31115",
                "title" : "XZ has a heap-use-after-free bug in threaded .xz decoder",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-31115" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2022-1271",
                "title" : "An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is applied on the attacker's chosen file name (for example, a crafted file name), this can overwrite an attacker's content to an arbitrary attacker-selected file. This flaw occurs due to insufficient validation when processing filenames with two or more newlines where selected content and the target file names are embedded in crafted multi-line file names. This flaw allows a remote, low privileged attacker to force zgrep to write arbitrary files on the system.",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-1271" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/python3-libs@3.6.8-75.el8_10?arch=x86_64&distro=rhel-8.10&upstream=python3-3.6.8-75.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2023-40217",
                "source" : "redhat-csaf",
                "cvssScore" : 8.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-40217" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-42919",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-42919" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-6597",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-6597" ],
                "unique" : false
              }, {
                "id" : "CVE-2015-20107",
                "source" : "redhat-csaf",
                "cvssScore" : 7.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2015-20107" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-12718",
                "title" : "Bypass extraction filter to modify file metadata outside extraction directory",
                "source" : "redhat-csaf",
                "cvssScore" : 7.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-12718" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-4517",
                "title" : "Arbitrary writes via tarfile realpath overflow",
                "source" : "redhat-csaf",
                "cvssScore" : 7.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-4517" ],
                "unique" : false
              }, {
                "id" : "CVE-2020-10735",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2020-10735" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-45061",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-45061" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-24329",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-24329" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-6232",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-6232" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-12084",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-12084" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-4138",
                "title" : "Bypassing extraction filter to create symlinks to arbitrary targets outside extraction directory",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-4138" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-4435",
                "title" : "Tarfile extracts filtered members when errorlevel=0",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-4435" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-8194",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-8194" ],
                "unique" : false
              }, {
                "id" : "CVE-2021-28861",
                "source" : "redhat-csaf",
                "cvssScore" : 7.4,
                "severity" : "HIGH",
                "cves" : [ "CVE-2021-28861" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-4330",
                "title" : "Extraction filter bypass for linking outside extraction directory",
                "source" : "redhat-csaf",
                "cvssScore" : 7.3,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-4330" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-15366",
                "source" : "redhat-csaf",
                "cvssScore" : 7.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-15366" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-15367",
                "source" : "redhat-csaf",
                "cvssScore" : 7.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-15367" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-1299",
                "source" : "redhat-csaf",
                "cvssScore" : 7.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-1299" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-4519",
                "title" : "webbrowser.open() allows leading dashes in URLs",
                "source" : "redhat-csaf",
                "cvssScore" : 7.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-4519" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-6923",
                "source" : "redhat-csaf",
                "cvssScore" : 6.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-6923" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-0938",
                "source" : "redhat-csaf",
                "cvssScore" : 6.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-0938" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-13836",
                "source" : "redhat-csaf",
                "cvssScore" : 6.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-13836" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-9287",
                "source" : "redhat-csaf",
                "cvssScore" : 6.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-9287" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-0450",
                "source" : "redhat-csaf",
                "cvssScore" : 6.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-0450" ],
                "unique" : false
              }, {
                "id" : "CVE-2007-4559",
                "title" : "Directory traversal vulnerability in the (1) extract and (2) extractall functions in the tarfile module in Python allows user-assisted remote attackers to overwrite arbitrary files via a .. (dot dot) sequence in filenames in a TAR archive, a related issue to CVE-2001-1267.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2007-4559" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-27043",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-27043" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-8088",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-8088" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-0397",
                "source" : "redhat-csaf",
                "cvssScore" : 5.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-0397" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-7592",
                "source" : "redhat-csaf",
                "cvssScore" : 4.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-7592" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0865",
                "source" : "redhat-csaf",
                "cvssScore" : 4.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-0865" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-6069",
                "title" : "HTMLParser quadratic complexity when processing malformed inputs",
                "source" : "redhat-csaf",
                "cvssScore" : 4.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-6069" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-8291",
                "source" : "redhat-csaf",
                "cvssScore" : 4.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-8291" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-6075",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-6075" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-11168",
                "source" : "redhat-csaf",
                "cvssScore" : 3.7,
                "severity" : "LOW",
                "cves" : [ "CVE-2024-11168" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-4032",
                "source" : "redhat-csaf",
                "cvssScore" : 3.7,
                "severity" : "LOW",
                "cves" : [ "CVE-2024-4032" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-5642",
                "title" : "Buffer overread when using an empty list with SSLContext.set_npn_protocols()",
                "source" : "redhat-csaf",
                "cvssScore" : 2.7,
                "severity" : "LOW",
                "cves" : [ "CVE-2024-5642" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2023-40217",
                "source" : "redhat-csaf",
                "cvssScore" : 8.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-40217" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libksba@1.3.5-9.el8_7?arch=x86_64&distro=rhel-8.10&upstream=libksba-1.3.5-9.el8_7.src.rpm",
              "issues" : [ {
                "id" : "CVE-2022-3515",
                "title" : "A vulnerability was found in the Libksba library due to an integer overflow within the CRL parser. The vulnerability can be exploited remotely for code execution on the target system by passing specially crafted data to the application, for example, a malicious S/MIME attachment.",
                "source" : "redhat-csaf",
                "cvssScore" : 8.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-3515" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-47629",
                "title" : "Libksba before 1.6.3 is prone to an integer overflow vulnerability in the CRL signature parser.",
                "source" : "redhat-csaf",
                "cvssScore" : 8.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-47629" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2022-3515",
                "title" : "A vulnerability was found in the Libksba library due to an integer overflow within the CRL parser. The vulnerability can be exploited remotely for code execution on the target system by passing specially crafted data to the application, for example, a malicious S/MIME attachment.",
                "source" : "redhat-csaf",
                "cvssScore" : 8.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-3515" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/python3-libcomps@0.1.18-1.el8?arch=x86_64&distro=rhel-8.10&upstream=libcomps-0.1.18-1.el8.src.rpm",
              "issues" : [ {
                "id" : "CVE-2026-1312",
                "source" : "redhat-csaf",
                "cvssScore" : 8.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-1312" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0980",
                "title" : "Rubyipmi: red hat satellite: remote code execution in rubyipmi via malicious bmc username",
                "source" : "redhat-csaf",
                "cvssScore" : 8.3,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-0980" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-1207",
                "source" : "redhat-csaf",
                "cvssScore" : 8.3,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-1207" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-1287",
                "source" : "redhat-csaf",
                "cvssScore" : 8.3,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-1287" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-1530",
                "title" : "Fog-kubevirt: fog-kubevirt: man-in-the-middle vulnerability due to disabled certificate validation",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-1530" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-1531",
                "title" : "Foreman-kubevirt: foreman_kubevirt: man-in-the-middle due to insecure default ssl verification",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-1531" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-1961",
                "title" : "Forman: foreman: remote code execution via command injection in websocket proxy",
                "source" : "redhat-csaf",
                "cvssScore" : 8.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-1961" ],
                "unique" : false
              }, {
                "id" : "CVE-2021-46877",
                "title" : "jackson-databind 2.10.x through 2.12.x before 2.12.6 and 2.13.x before 2.13.1 allows attackers to cause a denial of service (2 GB transient heap usage per read) in uncommon situations involving JsonNode JDK serialization.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2021-46877" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-14550",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-14550" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-6176",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-6176" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-1285",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-1285" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-68121",
                "source" : "redhat-csaf",
                "cvssScore" : 7.4,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-68121" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-28863",
                "title" : "node-tar vulnerable to denial of service while parsing a tar file due to lack of folders count validation",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-28863" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-4324",
                "title" : "Rubygem-katello: katello: denial of service and potential information disclosure via sql injection",
                "source" : "redhat-csaf",
                "cvssScore" : 5.4,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-4324" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2026-1312",
                "source" : "redhat-csaf",
                "cvssScore" : 8.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-1312" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libcomps@0.1.18-1.el8?arch=x86_64&distro=rhel-8.10&upstream=libcomps-0.1.18-1.el8.src.rpm",
              "issues" : [ {
                "id" : "CVE-2026-1312",
                "source" : "redhat-csaf",
                "cvssScore" : 8.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-1312" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0980",
                "title" : "Rubyipmi: red hat satellite: remote code execution in rubyipmi via malicious bmc username",
                "source" : "redhat-csaf",
                "cvssScore" : 8.3,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-0980" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-1207",
                "source" : "redhat-csaf",
                "cvssScore" : 8.3,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-1207" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-1287",
                "source" : "redhat-csaf",
                "cvssScore" : 8.3,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-1287" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-1530",
                "title" : "Fog-kubevirt: fog-kubevirt: man-in-the-middle vulnerability due to disabled certificate validation",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-1530" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-1531",
                "title" : "Foreman-kubevirt: foreman_kubevirt: man-in-the-middle due to insecure default ssl verification",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-1531" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-1961",
                "title" : "Forman: foreman: remote code execution via command injection in websocket proxy",
                "source" : "redhat-csaf",
                "cvssScore" : 8.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-1961" ],
                "unique" : false
              }, {
                "id" : "CVE-2021-46877",
                "title" : "jackson-databind 2.10.x through 2.12.x before 2.12.6 and 2.13.x before 2.13.1 allows attackers to cause a denial of service (2 GB transient heap usage per read) in uncommon situations involving JsonNode JDK serialization.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2021-46877" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-14550",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-14550" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-6176",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-6176" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-1285",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-1285" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-68121",
                "source" : "redhat-csaf",
                "cvssScore" : 7.4,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-68121" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-28863",
                "title" : "node-tar vulnerable to denial of service while parsing a tar file due to lack of folders count validation",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-28863" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-4324",
                "title" : "Rubygem-katello: katello: denial of service and potential information disclosure via sql injection",
                "source" : "redhat-csaf",
                "cvssScore" : 5.4,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-4324" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2026-1312",
                "source" : "redhat-csaf",
                "cvssScore" : 8.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-1312" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/gnupg2@2.2.20-4.el8_10?arch=x86_64&distro=rhel-8.10&upstream=gnupg2-2.2.20-4.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2026-24882",
                "source" : "redhat-csaf",
                "cvssScore" : 8.4,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-24882" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-68973",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-68973" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-34903",
                "title" : "GnuPG through 2.3.6, in unusual situations where an attacker possesses any secret-key information from a victim's keyring and other constraints (e.g., use of GPGME) are met, allows signature forgery via injection into the status line.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-34903" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2026-24882",
                "source" : "redhat-csaf",
                "cvssScore" : 8.4,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-24882" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/zlib@1.2.11-25.el8?arch=x86_64&distro=rhel-8.10&upstream=zlib-1.2.11-25.el8.src.rpm",
              "issues" : [ {
                "id" : "CVE-2018-25032",
                "title" : "zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.",
                "source" : "redhat-csaf",
                "cvssScore" : 8.2,
                "severity" : "HIGH",
                "cves" : [ "CVE-2018-25032" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-37434",
                "title" : "zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference).",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-37434" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2018-25032",
                "title" : "zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.",
                "source" : "redhat-csaf",
                "cvssScore" : 8.2,
                "severity" : "HIGH",
                "cves" : [ "CVE-2018-25032" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libssh-config@0.9.6-16.el8_10?arch=noarch&distro=rhel-8.10&upstream=libssh-0.9.6-16.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2025-5318",
                "title" : "Libssh: out-of-bounds read in sftp_handle()",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-5318" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-5987",
                "title" : "Libssh: invalid return code for chacha20 poly1305 with openssl backend",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-5987" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-48795",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-48795" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-2283",
                "source" : "redhat-csaf",
                "cvssScore" : 4.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-2283" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-6004",
                "source" : "redhat-csaf",
                "cvssScore" : 4.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-6004" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-1667",
                "title" : "A NULL pointer dereference was found In libssh during re-keying with algorithm guessing. This issue may allow an authenticated client to cause a denial of service.",
                "source" : "redhat-csaf",
                "cvssScore" : 4.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-1667" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-6918",
                "source" : "redhat-csaf",
                "cvssScore" : 3.7,
                "severity" : "LOW",
                "cves" : [ "CVE-2023-6918" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2025-5318",
                "title" : "Libssh: out-of-bounds read in sftp_handle()",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-5318" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libssh@0.9.6-16.el8_10?arch=x86_64&distro=rhel-8.10&upstream=libssh-0.9.6-16.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2025-5318",
                "title" : "Libssh: out-of-bounds read in sftp_handle()",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-5318" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-5987",
                "title" : "Libssh: invalid return code for chacha20 poly1305 with openssl backend",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-5987" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-48795",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-48795" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-2283",
                "source" : "redhat-csaf",
                "cvssScore" : 4.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-2283" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-6004",
                "source" : "redhat-csaf",
                "cvssScore" : 4.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-6004" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-1667",
                "title" : "A NULL pointer dereference was found In libssh during re-keying with algorithm guessing. This issue may allow an authenticated client to cause a denial of service.",
                "source" : "redhat-csaf",
                "cvssScore" : 4.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-1667" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-6918",
                "source" : "redhat-csaf",
                "cvssScore" : 3.7,
                "severity" : "LOW",
                "cves" : [ "CVE-2023-6918" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2025-5318",
                "title" : "Libssh: out-of-bounds read in sftp_handle()",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-5318" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libcap@2.48-6.el8_9?arch=x86_64&distro=rhel-8.10&upstream=libcap-2.48-6.el8_9.src.rpm",
              "issues" : [ {
                "id" : "CVE-2023-2603",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-2603" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-2602",
                "title" : "A vulnerability was found in the pthread_create() function in libcap. This issue may allow a malicious actor to use cause __real_pthread_create() to return an error, which can exhaust the process memory.",
                "source" : "redhat-csaf",
                "cvssScore" : 3.3,
                "severity" : "LOW",
                "cves" : [ "CVE-2023-2602" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2023-2603",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-2603" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/ncurses-base@6.1-10.20180224.el8?arch=noarch&distro=rhel-8.10&upstream=ncurses-6.1-10.20180224.el8.src.rpm",
              "issues" : [ {
                "id" : "CVE-2023-29491",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-29491" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-69720",
                "title" : "The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-69720" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-29458",
                "title" : "ncurses 6.3 before patch 20220416 has an out-of-bounds read and segmentation violation in convert_strings in tinfo/read_entry.c in the terminfo library.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-29458" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2023-29491",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-29491" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/ncurses-libs@6.1-10.20180224.el8?arch=x86_64&distro=rhel-8.10&upstream=ncurses-6.1-10.20180224.el8.src.rpm",
              "issues" : [ {
                "id" : "CVE-2023-29491",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-29491" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-69720",
                "title" : "The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-69720" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-29458",
                "title" : "ncurses 6.3 before patch 20220416 has an out-of-bounds read and segmentation violation in convert_strings in tinfo/read_entry.c in the terminfo library.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-29458" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2023-29491",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-29491" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libarchive@3.3.3-6.el8_10?arch=x86_64&distro=rhel-8.10&upstream=libarchive-3.3.3-6.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2025-5914",
                "title" : "Libarchive: double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-5914" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-4111",
                "title" : "Libarchive: infinite loop denial of service in rar5 decompression via archive_read_data() in libarchive",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-4111" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-4424",
                "title" : "Libarchive: libarchive: information disclosure via heap out-of-bounds read in rar archive processing",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-4424" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-5121",
                "title" : "Libarchive: libarchive: arbitrary code execution via integer overflow in iso9660 image processing",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-5121" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-26280",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-26280" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-36227",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-36227" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-57970",
                "title" : "libarchive through 3.7.7 has a heap-based buffer over-read in header_gnu_longlink in archive_read_support_format_tar.c via a TAR archive because it mishandles truncation in the middle of a GNU long linkname.",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-57970" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-25724",
                "title" : "list_item_verbose in tar/util.c in libarchive through 3.7.7 does not check an strftime return value, which can lead to a denial of service or unspecified other impact via a crafted TAR archive that is read with a verbose value of 2. For example, the 100-byte buffer may not be sufficient for a custom locale.",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-25724" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2025-5914",
                "title" : "Libarchive: double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-5914" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/glib2@2.56.4-168.el8_10?arch=x86_64&distro=rhel-8.10&upstream=glib2-2.56.4-168.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2025-13601",
                "title" : "Glib: integer overflow in in g_escape_uri_string()",
                "source" : "redhat-csaf",
                "cvssScore" : 7.7,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-13601" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-52533",
                "title" : "gio/gsocks4aproxy.c in GNOME GLib before 2.82.1 has an off-by-one error and resultant buffer overflow because SOCKS4_CONN_MSG_LEN is not sufficient for a trailing '\\0' character.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-52533" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-32611",
                "title" : "G_variant_byteswap() can take a long time with some non-normal inputs",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-32611" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-32665",
                "title" : "Gvariant deserialisation does not match spec for non-normal data",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-32665" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-14512",
                "title" : "Glib: integer overflow in glib gio attribute escaping causes heap buffer overflow",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-14512" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-29499",
                "source" : "redhat-csaf",
                "cvssScore" : 6.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-29499" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-14087",
                "title" : "Glib: glib: buffer underflow in gvariant parser leads to heap corruption",
                "source" : "redhat-csaf",
                "cvssScore" : 5.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-14087" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-4373",
                "source" : "redhat-csaf",
                "cvssScore" : 4.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-4373" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-34397",
                "source" : "redhat-csaf",
                "cvssScore" : 3.8,
                "severity" : "LOW",
                "cves" : [ "CVE-2024-34397" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2025-13601",
                "title" : "Glib: integer overflow in in g_escape_uri_string()",
                "source" : "redhat-csaf",
                "cvssScore" : 7.7,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-13601" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/sqlite-libs@3.26.0-20.el8_10?arch=x86_64&distro=rhel-8.10&upstream=sqlite-3.26.0-20.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2025-6965",
                "title" : "Integer Truncation on SQLite",
                "source" : "redhat-csaf",
                "cvssScore" : 7.7,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-6965" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-7104",
                "source" : "redhat-csaf",
                "cvssScore" : 7.3,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-7104" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-3277",
                "title" : "An integer overflow can be triggered in SQLite’s `concat_ws()` function. The resulting, truncated integer is then used to allocate a buffer. When SQLite then writes the resulting string to the buffer, it uses the original, untruncated size and thus a wild Heap Buffer overflow of size ~4GB can be triggered. This can result in arbitrary code execution.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.3,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-3277" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-35737",
                "title" : "SQLite 1.0.12 through 3.39.x before 3.39.2 sometimes allows an array-bounds overflow if billions of bytes are used in a string argument to a C API.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-35737" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2025-6965",
                "title" : "Integer Truncation on SQLite",
                "source" : "redhat-csaf",
                "cvssScore" : 7.7,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-6965" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/expat@2.5.0-1.el8_10?arch=x86_64&distro=rhel-8.10&upstream=expat-2.5.0-1.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2023-52425",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-52425" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-28757",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-28757" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-45490",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-45490" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-45491",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-45491" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-8176",
                "title" : "Libexpat: expat: improper restriction of xml entity expansion depth in libexpat",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-8176" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-45492",
                "source" : "redhat-csaf",
                "cvssScore" : 6.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-45492" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-50602",
                "title" : "An issue was discovered in libexpat before 2.6.4. There is a crash within the XML_ResumeParser function because XML_StopParser can stop/suspend an unstarted parser.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-50602" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-59375",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-59375" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2023-52425",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-52425" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libsolv@0.7.20-6.el8?arch=x86_64&distro=rhel-8.10&upstream=libsolv-0.7.20-6.el8.src.rpm",
              "issues" : [ {
                "id" : "CVE-2021-33928",
                "title" : "Buffer overflow vulnerability in function pool_installable in src/repo.h in libsolv before 0.7.17 allows attackers to cause a Denial of Service.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2021-33928" ],
                "unique" : false
              }, {
                "id" : "CVE-2021-33929",
                "title" : "Buffer overflow vulnerability in function pool_disabled_solvable in src/repo.h in libsolv before 0.7.17 allows attackers to cause a Denial of Service.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2021-33929" ],
                "unique" : false
              }, {
                "id" : "CVE-2021-33930",
                "title" : "Buffer overflow vulnerability in function pool_installable_whatprovides in src/repo.h in libsolv before 0.7.17 allows attackers to cause a Denial of Service.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2021-33930" ],
                "unique" : false
              }, {
                "id" : "CVE-2021-33938",
                "title" : "Buffer overflow vulnerability in function prune_to_recommended in src/policy.c in libsolv before 0.7.17 allows attackers to cause a Denial of Service.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2021-33938" ],
                "unique" : false
              }, {
                "id" : "CVE-2021-46877",
                "title" : "jackson-databind 2.10.x through 2.12.x before 2.12.6 and 2.13.x before 2.13.1 allows attackers to cause a denial of service (2 GB transient heap usage per read) in uncommon situations involving JsonNode JDK serialization.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2021-46877" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-28863",
                "title" : "node-tar vulnerable to denial of service while parsing a tar file due to lack of folders count validation",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-28863" ],
                "unique" : false
              }, {
                "id" : "CVE-2021-44568",
                "title" : "Two heap-overflow vulnerabilities exist in openSUSE/libsolv libsolv through 13 Dec 2020 in the decisionmap variable via the resolve_dependencies function at src/solver.c (line 1940 & line 1995), which could cause a remote Denial of Service.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2021-44568" ],
                "unique" : false
              }, {
                "id" : "CVE-2021-3200",
                "title" : "Buffer overflow vulnerability in libsolv 2020-12-13 via the Solver * testcase_read(Pool *pool, FILE *fp, const char *testcase, Queue *job, char **resultp, int *resultflagsp function at src/testcase.c: line 2334, which could cause a denial of service",
                "source" : "redhat-csaf",
                "cvssScore" : 3.3,
                "severity" : "LOW",
                "cves" : [ "CVE-2021-3200" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2021-33928",
                "title" : "Buffer overflow vulnerability in function pool_installable in src/repo.h in libsolv before 0.7.17 allows attackers to cause a Denial of Service.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2021-33928" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/brotli@1.0.6-4.el8_10?arch=x86_64&distro=rhel-8.10&upstream=brotli-1.0.6-4.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2025-6176",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-6176" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2025-6176",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-6176" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/gnutls@3.6.16-8.el8_10.5?arch=x86_64&distro=rhel-8.10&upstream=gnutls-3.6.16-8.el8_10.5.src.rpm",
              "issues" : [ {
                "id" : "CVE-2022-2509",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-2509" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-0553",
                "title" : "Gnutls: incomplete fix for cve-2023-5981",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-0553" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-0567",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-0567" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-0361",
                "title" : "A timing side-channel in the handling of RSA ClientKeyExchange messages was discovered in GnuTLS. This side-channel can be sufficient to recover the key encrypted in the RSA ciphertext across a network in a Bleichenbacher style attack. To achieve a successful decryption the attacker would need to send a large amount of specially crafted messages to the vulnerable server. By recovering the secret from the ClientKeyExchange message, the attacker would be able to decrypt the application data exchanged over that connection.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.4,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-0361" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-32988",
                "title" : "Gnutls: vulnerability in gnutls othername san export",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-32988" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-32990",
                "title" : "Gnutls: vulnerability in gnutls certtool template parsing",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-32990" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-6395",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-6395" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-5981",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-5981" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-12243",
                "title" : "Gnutls: gnutls impacted by inefficient der decoding in libtasn1 leading to remote dos",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-12243" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-28834",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-28834" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-14831",
                "title" : "Gnutls: gnutls: denial of service via excessive resource consumption during certificate verification",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-14831" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-32989",
                "title" : "Gnutls: vulnerability in gnutls sct extension parsing",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-32989" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-28835",
                "source" : "redhat-csaf",
                "cvssScore" : 5.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-28835" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-9820",
                "title" : "Gnutls: stack-based buffer overflow in gnutls_pkcs11_token_init() function",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-9820" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2022-2509",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-2509" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libnghttp2@1.33.0-6.el8_10.2?arch=x86_64&distro=rhel-8.10&upstream=nghttp2-1.33.0-6.el8_10.2.src.rpm",
              "issues" : [ {
                "id" : "CVE-2023-44487",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-44487" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-27135",
                "title" : "nghttp2 Denial of service: Assertion failure due to the missing state validation",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-27135" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-28182",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-28182" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2023-44487",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-44487" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libtirpc@1.1.4-12.el8_10?arch=x86_64&distro=rhel-8.10&upstream=libtirpc-1.1.4-12.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2021-46828",
                "title" : "In libtirpc before 1.3.3rc1, remote attackers could exhaust the file descriptors of a process that uses libtirpc because idle TCP connections are mishandled. This can, in turn, lead to an svc_run infinite loop without accepting new connections.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2021-46828" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2021-46828",
                "title" : "In libtirpc before 1.3.3rc1, remote attackers could exhaust the file descriptors of a process that uses libtirpc because idle TCP connections are mishandled. This can, in turn, lead to an svc_run infinite loop without accepting new connections.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2021-46828" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/pcre2@10.32-3.el8_6?arch=x86_64&distro=rhel-8.10&upstream=pcre2-10.32-3.el8_6.src.rpm",
              "issues" : [ {
                "id" : "CVE-2022-1586",
                "title" : "An out-of-bounds read vulnerability was discovered in the PCRE2 library in the compile_xclass_matchingpath() function of the pcre2_jit_compile.c file. This involves a unicode property matching issue in JIT-compiled regular expressions. The issue occurs because the character was not fully read in case-less matching within JIT.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-1586" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-1587",
                "title" : "An out-of-bounds read vulnerability was discovered in the PCRE2 library in the get_recurse_data_length() function of the pcre2_jit_compile.c file. This issue affects recursions in JIT-compiled regular expressions caused by duplicate data transfers.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-1587" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2022-1586",
                "title" : "An out-of-bounds read vulnerability was discovered in the PCRE2 library in the compile_xclass_matchingpath() function of the pcre2_jit_compile.c file. This involves a unicode property matching issue in JIT-compiled regular expressions. The issue occurs because the character was not fully read in case-less matching within JIT.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-1586" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/openldap@2.4.46-21.el8_10?arch=x86_64&distro=rhel-8.10&upstream=openldap-2.4.46-21.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2023-2953",
                "title" : "A vulnerability was found in openldap. This security flaw causes a null pointer dereference in ber_memalloc_x() function.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-2953" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2023-2953",
                "title" : "A vulnerability was found in openldap. This security flaw causes a null pointer dereference in ber_memalloc_x() function.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-2953" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/lua-libs@5.3.4-12.el8?arch=x86_64&distro=rhel-8.10&upstream=lua-5.3.4-12.el8.src.rpm",
              "issues" : [ {
                "id" : "CVE-2021-44964",
                "title" : "Use after free in garbage collector and finalizer of lgc.c in Lua interpreter 5.4.0~5.4.3 allows attackers to perform Sandbox Escape via a crafted script file.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2021-44964" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-33099",
                "title" : "An issue in the component luaG_runerror of Lua v5.4.4 and below leads to a heap-buffer overflow when a recursive error occurs.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-33099" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-28805",
                "title" : "singlevar in lparser.c in Lua from (including) 5.4.0 up to (excluding) 5.4.4 lacks a certain luaK_exp2anyregup call, leading to a heap-based buffer over-read that might affect a system that compiles untrusted Lua code.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-28805" ],
                "unique" : false
              }, {
                "id" : "CVE-2021-43519",
                "title" : "Stack overflow in lua_resume of ldo.c in Lua Interpreter 5.1.0~5.4.4 allows attackers to perform a Denial of Service via a crafted script file.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2021-43519" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2021-44964",
                "title" : "Use after free in garbage collector and finalizer of lgc.c in Lua interpreter 5.4.0~5.4.3 allows attackers to perform Sandbox Escape via a crafted script file.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2021-44964" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/bash@4.4.20-6.el8_10?arch=x86_64&distro=rhel-8.10&upstream=bash-4.4.20-6.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2022-3715",
                "source" : "redhat-csaf",
                "cvssScore" : 6.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-3715" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2022-3715",
                "source" : "redhat-csaf",
                "cvssScore" : 6.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-3715" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/rpm-libs@4.14.3-32.el8_10?arch=x86_64&distro=rhel-8.10&upstream=rpm-4.14.3-32.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2021-35938",
                "title" : "A symbolic link issue was found in rpm. It occurs when rpm sets the desired permissions and credentials after installing a file. A local unprivileged user could use this flaw to exchange the original file with a symbolic link to a security-critical file and escalate their privileges on the system. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2021-35938" ],
                "unique" : false
              }, {
                "id" : "CVE-2021-35939",
                "title" : "It was found that the fix for CVE-2017-7500 and CVE-2017-7501 was incomplete: the check was only implemented for the parent directory of the file to be created. A local unprivileged user who owns another ancestor directory could potentially use this flaw to gain root privileges. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2021-35939" ],
                "unique" : false
              }, {
                "id" : "CVE-2021-35937",
                "title" : "A race condition vulnerability was found in rpm. A local unprivileged user could use this flaw to bypass the checks that were introduced in response to CVE-2017-7500 and CVE-2017-7501, potentially gaining root privileges. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2021-35937" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2021-35938",
                "title" : "A symbolic link issue was found in rpm. It occurs when rpm sets the desired permissions and credentials after installing a file. A local unprivileged user could use this flaw to exchange the original file with a symbolic link to a security-critical file and escalate their privileges on the system. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2021-35938" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/python3-rpm@4.14.3-32.el8_10?arch=x86_64&distro=rhel-8.10&upstream=rpm-4.14.3-32.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2021-35938",
                "title" : "A symbolic link issue was found in rpm. It occurs when rpm sets the desired permissions and credentials after installing a file. A local unprivileged user could use this flaw to exchange the original file with a symbolic link to a security-critical file and escalate their privileges on the system. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2021-35938" ],
                "unique" : false
              }, {
                "id" : "CVE-2021-35939",
                "title" : "It was found that the fix for CVE-2017-7500 and CVE-2017-7501 was incomplete: the check was only implemented for the parent directory of the file to be created. A local unprivileged user who owns another ancestor directory could potentially use this flaw to gain root privileges. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2021-35939" ],
                "unique" : false
              }, {
                "id" : "CVE-2021-35937",
                "title" : "A race condition vulnerability was found in rpm. A local unprivileged user could use this flaw to bypass the checks that were introduced in response to CVE-2017-7500 and CVE-2017-7501, potentially gaining root privileges. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2021-35937" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2021-35938",
                "title" : "A symbolic link issue was found in rpm. It occurs when rpm sets the desired permissions and credentials after installing a file. A local unprivileged user could use this flaw to exchange the original file with a symbolic link to a security-critical file and escalate their privileges on the system. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2021-35938" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/rpm-build-libs@4.14.3-32.el8_10?arch=x86_64&distro=rhel-8.10&upstream=rpm-4.14.3-32.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2021-35938",
                "title" : "A symbolic link issue was found in rpm. It occurs when rpm sets the desired permissions and credentials after installing a file. A local unprivileged user could use this flaw to exchange the original file with a symbolic link to a security-critical file and escalate their privileges on the system. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2021-35938" ],
                "unique" : false
              }, {
                "id" : "CVE-2021-35939",
                "title" : "It was found that the fix for CVE-2017-7500 and CVE-2017-7501 was incomplete: the check was only implemented for the parent directory of the file to be created. A local unprivileged user who owns another ancestor directory could potentially use this flaw to gain root privileges. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2021-35939" ],
                "unique" : false
              }, {
                "id" : "CVE-2021-35937",
                "title" : "A race condition vulnerability was found in rpm. A local unprivileged user could use this flaw to bypass the checks that were introduced in response to CVE-2017-7500 and CVE-2017-7501, potentially gaining root privileges. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2021-35937" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2021-35938",
                "title" : "A symbolic link issue was found in rpm. It occurs when rpm sets the desired permissions and credentials after installing a file. A local unprivileged user could use this flaw to exchange the original file with a symbolic link to a security-critical file and escalate their privileges on the system. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2021-35938" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/rpm@4.14.3-32.el8_10?arch=x86_64&distro=rhel-8.10&upstream=rpm-4.14.3-32.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2021-35938",
                "title" : "A symbolic link issue was found in rpm. It occurs when rpm sets the desired permissions and credentials after installing a file. A local unprivileged user could use this flaw to exchange the original file with a symbolic link to a security-critical file and escalate their privileges on the system. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2021-35938" ],
                "unique" : false
              }, {
                "id" : "CVE-2021-35939",
                "title" : "It was found that the fix for CVE-2017-7500 and CVE-2017-7501 was incomplete: the check was only implemented for the parent directory of the file to be created. A local unprivileged user who owns another ancestor directory could potentially use this flaw to gain root privileges. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2021-35939" ],
                "unique" : false
              }, {
                "id" : "CVE-2021-35937",
                "title" : "A race condition vulnerability was found in rpm. A local unprivileged user could use this flaw to bypass the checks that were introduced in response to CVE-2017-7500 and CVE-2017-7501, potentially gaining root privileges. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2021-35937" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2021-35938",
                "title" : "A symbolic link issue was found in rpm. It occurs when rpm sets the desired permissions and credentials after installing a file. A local unprivileged user could use this flaw to exchange the original file with a symbolic link to a security-critical file and escalate their privileges on the system. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2021-35938" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/tpm2-tss@2.3.2-6.el8?arch=x86_64&distro=rhel-8.10&upstream=tpm2-tss-2.3.2-6.el8.src.rpm",
              "issues" : [ {
                "id" : "CVE-2023-22745",
                "source" : "redhat-csaf",
                "cvssScore" : 6.4,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-22745" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2023-22745",
                "source" : "redhat-csaf",
                "cvssScore" : 6.4,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-22745" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/gmp@6.1.2-11.el8?arch=x86_64&distro=rhel-8.10&epoch=1&upstream=gmp-6.1.2-11.el8.src.rpm",
              "issues" : [ {
                "id" : "CVE-2021-43618",
                "title" : "GNU Multiple Precision Arithmetic Library (GMP) through 6.2.1 has an mpz/inp_raw.c integer overflow and resultant buffer overflow via crafted input, leading to a segmentation fault on 32-bit platforms.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2021-43618" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2021-43618",
                "title" : "GNU Multiple Precision Arithmetic Library (GMP) through 6.2.1 has an mpz/inp_raw.c integer overflow and resultant buffer overflow via crafted input, leading to a segmentation fault on 32-bit platforms.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2021-43618" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libsmartcols@2.32.1-48.el8_10?arch=x86_64&distro=rhel-8.10&upstream=util-linux-2.32.1-48.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2025-14104",
                "title" : "Util-linux: util-linux: heap buffer overread in setpwnam() when processing 256-byte usernames",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-14104" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2025-14104",
                "title" : "Util-linux: util-linux: heap buffer overread in setpwnam() when processing 256-byte usernames",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-14104" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libgcc@8.5.0-28.el8_10?arch=x86_64&distro=rhel-8.10&upstream=gcc-8.5.0-28.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2020-11023",
                "title" : "Potential XSS vulnerability in jQuery",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2020-11023" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2020-11023",
                "title" : "Potential XSS vulnerability in jQuery",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2020-11023" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libmount@2.32.1-48.el8_10?arch=x86_64&distro=rhel-8.10&upstream=util-linux-2.32.1-48.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2025-14104",
                "title" : "Util-linux: util-linux: heap buffer overread in setpwnam() when processing 256-byte usernames",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-14104" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2025-14104",
                "title" : "Util-linux: util-linux: heap buffer overread in setpwnam() when processing 256-byte usernames",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-14104" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libuuid@2.32.1-48.el8_10?arch=x86_64&distro=rhel-8.10&upstream=util-linux-2.32.1-48.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2025-14104",
                "title" : "Util-linux: util-linux: heap buffer overread in setpwnam() when processing 256-byte usernames",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-14104" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2025-14104",
                "title" : "Util-linux: util-linux: heap buffer overread in setpwnam() when processing 256-byte usernames",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-14104" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libblkid@2.32.1-48.el8_10?arch=x86_64&distro=rhel-8.10&upstream=util-linux-2.32.1-48.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2025-14104",
                "title" : "Util-linux: util-linux: heap buffer overread in setpwnam() when processing 256-byte usernames",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-14104" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-27456",
                "title" : "util-linux: TOCTOU Race Condition in util-linux mount(8) - Loop Device Setup",
                "source" : "redhat-csaf",
                "cvssScore" : 4.7,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-27456" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2025-14104",
                "title" : "Util-linux: util-linux: heap buffer overread in setpwnam() when processing 256-byte usernames",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-14104" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libstdc%2B%2B@8.5.0-28.el8_10?arch=x86_64&distro=rhel-8.10&upstream=gcc-8.5.0-28.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2020-11023",
                "title" : "Potential XSS vulnerability in jQuery",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2020-11023" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2020-11023",
                "title" : "Potential XSS vulnerability in jQuery",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2020-11023" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libtasn1@4.13-5.el8_10?arch=x86_64&distro=rhel-8.10&upstream=libtasn1-4.13-5.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2021-46848",
                "title" : "GNU Libtasn1 before 4.19.0 has an ETYPE_OK off-by-one array size check that affects asn1_encode_simple_der.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2021-46848" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-12133",
                "title" : "Libtasn1: inefficient der decoding in libtasn1 leading to potential remote dos",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-12133" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2021-46848",
                "title" : "GNU Libtasn1 before 4.19.0 has an ETYPE_OK off-by-one array size check that affects asn1_encode_simple_der.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2021-46848" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libgcrypt@1.8.5-7.el8_6?arch=x86_64&distro=rhel-8.10&upstream=libgcrypt-1.8.5-7.el8_6.src.rpm",
              "issues" : [ {
                "id" : "CVE-2024-2236",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-2236" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2024-2236",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-2236" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/systemd-libs@239-82.el8_10.15?arch=x86_64&distro=rhel-8.10&upstream=systemd-239-82.el8_10.15.src.rpm",
              "issues" : [ {
                "id" : "CVE-2023-7008",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-7008" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-3821",
                "title" : "An off-by-one Error issue was discovered in Systemd in format_timespan() function of time-util.c. An attacker could supply specific values for time and accuracy that leads to buffer overrun in format_timespan(), leading to a Denial of Service.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-3821" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-4415",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-4415" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-45873",
                "title" : "systemd 250 and 251 allows local users to achieve a systemd-coredump deadlock by triggering a crash that has a long backtrace. This occurs in parse_elf_object in shared/elf-util.c. The exploitation methodology is to crash a binary calling the same function recursively, and put it in a deeply nested directory to make its backtrace large enough to cause the deadlock. This must be done 16 times when MaxConnections=16 is set for the systemd/units/systemd-coredump.socket file.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-45873" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-4598",
                "source" : "redhat-csaf",
                "cvssScore" : 4.7,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-4598" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2023-7008",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-7008" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libcom_err@1.45.6-7.el8_10?arch=x86_64&distro=rhel-8.10&upstream=e2fsprogs-1.45.6-7.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2022-1304",
                "title" : "An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a segmentation fault and possibly arbitrary code execution via a specially crafted filesystem.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-1304" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2022-1304",
                "title" : "An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a segmentation fault and possibly arbitrary code execution via a specially crafted filesystem.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-1304" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/python3-pip-wheel@9.0.3-24.el8?arch=noarch&distro=rhel-8.10&upstream=python-pip-9.0.3-24.el8.src.rpm",
              "issues" : [ {
                "id" : "CVE-2007-4559",
                "title" : "Directory traversal vulnerability in the (1) extract and (2) extractall functions in the tarfile module in Python allows user-assisted remote attackers to overwrite arbitrary files via a .. (dot dot) sequence in filenames in a TAR archive, a related issue to CVE-2001-1267.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2007-4559" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2007-4559",
                "title" : "Directory traversal vulnerability in the (1) extract and (2) extractall functions in the tarfile module in Python allows user-assisted remote attackers to overwrite arbitrary files via a .. (dot dot) sequence in filenames in a TAR archive, a related issue to CVE-2001-1267.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2007-4559" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/file-libs@5.33-27.el8_10?arch=x86_64&distro=rhel-8.10&upstream=file-5.33-27.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2022-48554",
                "title" : "File before 5.43 has an stack-based buffer over-read in file_copystr in funcs.c. NOTE: \"File\" is the name of an Open Source project.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-48554" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2022-48554",
                "title" : "File before 5.43 has an stack-based buffer over-read in file_copystr in funcs.c. NOTE: \"File\" is the name of an Open Source project.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-48554" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/shadow-utils@4.6-23.el8_10?arch=x86_64&distro=rhel-8.10&epoch=2&upstream=shadow-utils-4.6-23.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2023-4641",
                "source" : "redhat-csaf",
                "cvssScore" : 4.7,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4641" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-56433",
                "title" : "shadow-utils (aka shadow) 4.4 through 4.17.0 establishes a default /etc/subuid behavior (e.g., uid 100000 through 165535 for the first user account) that can realistically conflict with the uids of users defined on locally administered networks, potentially leading to account takeover, e.g., by leveraging newuidmap for access to an NFS home directory (or same-host resources in the case of remote logins by these local network users). NOTE: it may also be argued that system administrators should not have assigned uids, within local networks, that are within the range that can occur in /etc/subuid.",
                "source" : "redhat-csaf",
                "cvssScore" : 3.6,
                "severity" : "LOW",
                "cves" : [ "CVE-2024-56433" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2023-4641",
                "source" : "redhat-csaf",
                "cvssScore" : 4.7,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4641" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/bzip2-libs@1.0.6-28.el8_10?arch=x86_64&distro=rhel-8.10&upstream=bzip2-1.0.6-28.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2019-12900",
                "title" : "BZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many selectors.",
                "source" : "redhat-csaf",
                "cvssScore" : 4.4,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2019-12900" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2019-12900",
                "title" : "BZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many selectors.",
                "source" : "redhat-csaf",
                "cvssScore" : 4.4,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2019-12900" ],
                "unique" : false
              }
            } ],
            "highestVulnerability" : {
              "id" : "CVE-2025-15467",
              "title" : "Stack buffer overflow in CMS (Auth)EnvelopedData parsing",
              "source" : "redhat-csaf",
              "cvssScore" : 9.8,
              "severity" : "CRITICAL",
              "cves" : [ "CVE-2025-15467" ],
              "unique" : false
            }
          }, {
            "ref" : "pkg:rpm/redhat/ima-evm-utils@1.3.2-12.el8?arch=x86_64&distro=rhel-8.10&upstream=ima-evm-utils-1.3.2-12.el8.src.rpm",
            "transitive" : [ {
              "ref" : "pkg:rpm/redhat/openssl-libs@1.1.1k-15.el8_6?arch=x86_64&distro=rhel-8.10&epoch=1&upstream=openssl-1.1.1k-15.el8_6.src.rpm",
              "issues" : [ {
                "id" : "CVE-2025-15467",
                "title" : "Stack buffer overflow in CMS (Auth)EnvelopedData parsing",
                "source" : "redhat-csaf",
                "cvssScore" : 9.8,
                "severity" : "CRITICAL",
                "cves" : [ "CVE-2025-15467" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-1473",
                "title" : "Resource leakage when decoding certificates and keys",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-1473" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-3358",
                "title" : "Using a Custom Cipher with NID_undef may lead to NULL encryption",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-3358" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-3602",
                "title" : "X.509 Email Address 4-byte Buffer Overflow",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-3602" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-3786",
                "title" : "X.509 Email Address Variable Length Buffer Overflow",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-3786" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-4450",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-4450" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-0215",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-0215" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-0216",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-0216" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-0217",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-0217" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-0401",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-0401" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-5363",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-5363" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-0286",
                "source" : "redhat-csaf",
                "cvssScore" : 7.4,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-0286" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-12797",
                "title" : "RFC7250 handshakes with unauthenticated servers don't abort as expected",
                "source" : "redhat-csaf",
                "cvssScore" : 7.4,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-12797" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-69419",
                "source" : "redhat-csaf",
                "cvssScore" : 7.4,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-69419" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-1292",
                "source" : "redhat-csaf",
                "cvssScore" : 6.7,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-1292" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-2068",
                "source" : "redhat-csaf",
                "cvssScore" : 6.7,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-2068" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-2650",
                "title" : "Possible DoS translating ASN.1 object identifiers",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-2650" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-6129",
                "title" : "POLY1305 MAC implementation corrupts vector registers on PowerPC",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-6129" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-69421",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-69421" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-11187",
                "title" : "Improper validation of PBMAC1 parameters in PKCS#12 MAC verification",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-11187" ],
                "unique" : false
              }, {
                "id" : "CVE-2020-1971",
                "title" : "EDIPARTYNAME NULL pointer dereference",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2020-1971" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-4304",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-4304" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-0464",
                "title" : "Excessive Resource Usage Verifying X.509 Policy Constraints",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-0464" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-6237",
                "title" : "Excessive time spent checking invalid RSA public keys",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-6237" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-5535",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-5535" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-6119",
                "title" : "Possible denial of service in X.509 name checks",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-6119" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-15468",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-15468" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-66199",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-66199" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-69420",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-69420" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-22796",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-22796" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-4741",
                "source" : "redhat-csaf",
                "cvssScore" : 5.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-4741" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-9230",
                "source" : "redhat-csaf",
                "cvssScore" : 5.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-9230" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-0727",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-0727" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-15469",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-15469" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-22795",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-22795" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-1343",
                "title" : "OCSP_basic_verify may incorrectly verify the response signing certificate",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-1343" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-2097",
                "title" : "AES OCB fails to encrypt some bytes",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-2097" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-0465",
                "title" : "Invalid certificate policies in leaf certificates are silently ignored",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-0465" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-0466",
                "title" : "Certificate policy check not enabled",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-0466" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-2975",
                "title" : "AES-SIV implementation ignores empty associated data entries",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-2975" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-3446",
                "title" : "Excessive time spent checking DH keys and parameters",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-3446" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-3817",
                "title" : "Excessive time spent checking DH q parameter value",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-3817" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-5678",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-5678" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-4603",
                "title" : "Excessive time spent checking DSA keys and parameters",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-4603" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-1255",
                "title" : "Input buffer over-read in AES-XTS implementation on 64 bit ARM",
                "source" : "redhat-csaf",
                "cvssScore" : 5.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-1255" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-4203",
                "source" : "redhat-csaf",
                "cvssScore" : 4.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-4203" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-68160",
                "source" : "redhat-csaf",
                "cvssScore" : 4.7,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-68160" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-69418",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-69418" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-2511",
                "source" : "redhat-csaf",
                "cvssScore" : 3.7,
                "severity" : "LOW",
                "cves" : [ "CVE-2024-2511" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2025-15467",
                "title" : "Stack buffer overflow in CMS (Auth)EnvelopedData parsing",
                "source" : "redhat-csaf",
                "cvssScore" : 9.8,
                "severity" : "CRITICAL",
                "cves" : [ "CVE-2025-15467" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/glibc-minimal-langpack@2.28-251.el8_10.31?arch=x86_64&distro=rhel-8.10&upstream=glibc-2.28-251.el8_10.31.src.rpm",
              "issues" : [ {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0861",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-0861" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4911",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-4911" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33599",
                "title" : "nscd: Stack-based buffer overflow in netgroup cache",
                "source" : "redhat-csaf",
                "cvssScore" : 7.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-33599" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-4802",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-4802" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4527",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4527" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4806",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4806" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4813",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4813" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-5702",
                "title" : "The strcmp implementation optimized for the Power10 processor in the GNU C Library version 2.39 and later writes to vector registers v20 to v31 without saving contents from the caller (those registers are defined as non-volatile registers by the powerpc64le ABI), resulting in overwriting of its contents and potentially altering control flow of the caller, or leaking the input strings to the function to other parts of the program.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-5702" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-0395",
                "title" : "When the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-0395" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33600",
                "title" : "nscd: Null pointer crashes after notfound response",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33600" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0915",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-0915" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-8058",
                "source" : "redhat-csaf",
                "cvssScore" : 4.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-8058" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33601",
                "title" : "nscd: netgroup cache may terminate daemon on memory allocation failure",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33601" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33602",
                "title" : "nscd: netgroup cache assumes NSS callback uses in-buffer strings",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33602" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/glibc@2.28-251.el8_10.31?arch=x86_64&distro=rhel-8.10&upstream=glibc-2.28-251.el8_10.31.src.rpm",
              "issues" : [ {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0861",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-0861" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4911",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-4911" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33599",
                "title" : "nscd: Stack-based buffer overflow in netgroup cache",
                "source" : "redhat-csaf",
                "cvssScore" : 7.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-33599" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-4802",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-4802" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4527",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4527" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4806",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4806" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4813",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4813" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-15281",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-15281" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-5702",
                "title" : "The strcmp implementation optimized for the Power10 processor in the GNU C Library version 2.39 and later writes to vector registers v20 to v31 without saving contents from the caller (those registers are defined as non-volatile registers by the powerpc64le ABI), resulting in overwriting of its contents and potentially altering control flow of the caller, or leaking the input strings to the function to other parts of the program.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-5702" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-0395",
                "title" : "When the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-0395" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33600",
                "title" : "nscd: Null pointer crashes after notfound response",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33600" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0915",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-0915" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-8058",
                "source" : "redhat-csaf",
                "cvssScore" : 4.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-8058" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33601",
                "title" : "nscd: netgroup cache may terminate daemon on memory allocation failure",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33601" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33602",
                "title" : "nscd: netgroup cache assumes NSS callback uses in-buffer strings",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33602" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/glibc-common@2.28-251.el8_10.31?arch=x86_64&distro=rhel-8.10&upstream=glibc-2.28-251.el8_10.31.src.rpm",
              "issues" : [ {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0861",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-0861" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4911",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-4911" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33599",
                "title" : "nscd: Stack-based buffer overflow in netgroup cache",
                "source" : "redhat-csaf",
                "cvssScore" : 7.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-33599" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-4802",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-4802" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4527",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4527" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4806",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4806" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4813",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4813" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-5702",
                "title" : "The strcmp implementation optimized for the Power10 processor in the GNU C Library version 2.39 and later writes to vector registers v20 to v31 without saving contents from the caller (those registers are defined as non-volatile registers by the powerpc64le ABI), resulting in overwriting of its contents and potentially altering control flow of the caller, or leaking the input strings to the function to other parts of the program.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-5702" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-0395",
                "title" : "When the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-0395" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33600",
                "title" : "nscd: Null pointer crashes after notfound response",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33600" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0915",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-0915" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-8058",
                "source" : "redhat-csaf",
                "cvssScore" : 4.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-8058" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33601",
                "title" : "nscd: netgroup cache may terminate daemon on memory allocation failure",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33601" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33602",
                "title" : "nscd: netgroup cache assumes NSS callback uses in-buffer strings",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33602" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/zlib@1.2.11-25.el8?arch=x86_64&distro=rhel-8.10&upstream=zlib-1.2.11-25.el8.src.rpm",
              "issues" : [ {
                "id" : "CVE-2018-25032",
                "title" : "zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.",
                "source" : "redhat-csaf",
                "cvssScore" : 8.2,
                "severity" : "HIGH",
                "cves" : [ "CVE-2018-25032" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-37434",
                "title" : "zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference).",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-37434" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2018-25032",
                "title" : "zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.",
                "source" : "redhat-csaf",
                "cvssScore" : 8.2,
                "severity" : "HIGH",
                "cves" : [ "CVE-2018-25032" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libcap@2.48-6.el8_9?arch=x86_64&distro=rhel-8.10&upstream=libcap-2.48-6.el8_9.src.rpm",
              "issues" : [ {
                "id" : "CVE-2023-2603",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-2603" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-2602",
                "title" : "A vulnerability was found in the pthread_create() function in libcap. This issue may allow a malicious actor to use cause __real_pthread_create() to return an error, which can exhaust the process memory.",
                "source" : "redhat-csaf",
                "cvssScore" : 3.3,
                "severity" : "LOW",
                "cves" : [ "CVE-2023-2602" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2023-2603",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-2603" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/ncurses-base@6.1-10.20180224.el8?arch=noarch&distro=rhel-8.10&upstream=ncurses-6.1-10.20180224.el8.src.rpm",
              "issues" : [ {
                "id" : "CVE-2023-29491",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-29491" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-69720",
                "title" : "The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-69720" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-29458",
                "title" : "ncurses 6.3 before patch 20220416 has an out-of-bounds read and segmentation violation in convert_strings in tinfo/read_entry.c in the terminfo library.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-29458" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2023-29491",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-29491" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/ncurses-libs@6.1-10.20180224.el8?arch=x86_64&distro=rhel-8.10&upstream=ncurses-6.1-10.20180224.el8.src.rpm",
              "issues" : [ {
                "id" : "CVE-2023-29491",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-29491" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-69720",
                "title" : "The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-69720" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-29458",
                "title" : "ncurses 6.3 before patch 20220416 has an out-of-bounds read and segmentation violation in convert_strings in tinfo/read_entry.c in the terminfo library.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-29458" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2023-29491",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-29491" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/pcre2@10.32-3.el8_6?arch=x86_64&distro=rhel-8.10&upstream=pcre2-10.32-3.el8_6.src.rpm",
              "issues" : [ {
                "id" : "CVE-2022-1586",
                "title" : "An out-of-bounds read vulnerability was discovered in the PCRE2 library in the compile_xclass_matchingpath() function of the pcre2_jit_compile.c file. This involves a unicode property matching issue in JIT-compiled regular expressions. The issue occurs because the character was not fully read in case-less matching within JIT.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-1586" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-1587",
                "title" : "An out-of-bounds read vulnerability was discovered in the PCRE2 library in the get_recurse_data_length() function of the pcre2_jit_compile.c file. This issue affects recursions in JIT-compiled regular expressions caused by duplicate data transfers.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-1587" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2022-1586",
                "title" : "An out-of-bounds read vulnerability was discovered in the PCRE2 library in the compile_xclass_matchingpath() function of the pcre2_jit_compile.c file. This involves a unicode property matching issue in JIT-compiled regular expressions. The issue occurs because the character was not fully read in case-less matching within JIT.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-1586" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/bash@4.4.20-6.el8_10?arch=x86_64&distro=rhel-8.10&upstream=bash-4.4.20-6.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2022-3715",
                "source" : "redhat-csaf",
                "cvssScore" : 6.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-3715" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2022-3715",
                "source" : "redhat-csaf",
                "cvssScore" : 6.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-3715" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/tpm2-tss@2.3.2-6.el8?arch=x86_64&distro=rhel-8.10&upstream=tpm2-tss-2.3.2-6.el8.src.rpm",
              "issues" : [ {
                "id" : "CVE-2023-22745",
                "source" : "redhat-csaf",
                "cvssScore" : 6.4,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-22745" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2023-22745",
                "source" : "redhat-csaf",
                "cvssScore" : 6.4,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-22745" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libgcc@8.5.0-28.el8_10?arch=x86_64&distro=rhel-8.10&upstream=gcc-8.5.0-28.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2020-11023",
                "title" : "Potential XSS vulnerability in jQuery",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2020-11023" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2020-11023",
                "title" : "Potential XSS vulnerability in jQuery",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2020-11023" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libtasn1@4.13-5.el8_10?arch=x86_64&distro=rhel-8.10&upstream=libtasn1-4.13-5.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2021-46848",
                "title" : "GNU Libtasn1 before 4.19.0 has an ETYPE_OK off-by-one array size check that affects asn1_encode_simple_der.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2021-46848" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-12133",
                "title" : "Libtasn1: inefficient der decoding in libtasn1 leading to potential remote dos",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-12133" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2021-46848",
                "title" : "GNU Libtasn1 before 4.19.0 has an ETYPE_OK off-by-one array size check that affects asn1_encode_simple_der.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2021-46848" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/shadow-utils@4.6-23.el8_10?arch=x86_64&distro=rhel-8.10&epoch=2&upstream=shadow-utils-4.6-23.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2023-4641",
                "source" : "redhat-csaf",
                "cvssScore" : 4.7,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4641" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-56433",
                "title" : "shadow-utils (aka shadow) 4.4 through 4.17.0 establishes a default /etc/subuid behavior (e.g., uid 100000 through 165535 for the first user account) that can realistically conflict with the uids of users defined on locally administered networks, potentially leading to account takeover, e.g., by leveraging newuidmap for access to an NFS home directory (or same-host resources in the case of remote logins by these local network users). NOTE: it may also be argued that system administrators should not have assigned uids, within local networks, that are within the range that can occur in /etc/subuid.",
                "source" : "redhat-csaf",
                "cvssScore" : 3.6,
                "severity" : "LOW",
                "cves" : [ "CVE-2024-56433" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2023-4641",
                "source" : "redhat-csaf",
                "cvssScore" : 4.7,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4641" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/bzip2-libs@1.0.6-28.el8_10?arch=x86_64&distro=rhel-8.10&upstream=bzip2-1.0.6-28.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2019-12900",
                "title" : "BZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many selectors.",
                "source" : "redhat-csaf",
                "cvssScore" : 4.4,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2019-12900" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2019-12900",
                "title" : "BZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many selectors.",
                "source" : "redhat-csaf",
                "cvssScore" : 4.4,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2019-12900" ],
                "unique" : false
              }
            } ],
            "highestVulnerability" : {
              "id" : "CVE-2025-15467",
              "title" : "Stack buffer overflow in CMS (Auth)EnvelopedData parsing",
              "source" : "redhat-csaf",
              "cvssScore" : 9.8,
              "severity" : "CRITICAL",
              "cves" : [ "CVE-2025-15467" ],
              "unique" : false
            }
          }, {
            "ref" : "pkg:rpm/redhat/rpm-libs@4.14.3-32.el8_10?arch=x86_64&distro=rhel-8.10&upstream=rpm-4.14.3-32.el8_10.src.rpm",
            "issues" : [ {
              "id" : "CVE-2021-35938",
              "title" : "A symbolic link issue was found in rpm. It occurs when rpm sets the desired permissions and credentials after installing a file. A local unprivileged user could use this flaw to exchange the original file with a symbolic link to a security-critical file and escalate their privileges on the system. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
              "source" : "redhat-csaf",
              "cvssScore" : 6.5,
              "severity" : "MEDIUM",
              "cves" : [ "CVE-2021-35938" ],
              "unique" : false
            }, {
              "id" : "CVE-2021-35939",
              "title" : "It was found that the fix for CVE-2017-7500 and CVE-2017-7501 was incomplete: the check was only implemented for the parent directory of the file to be created. A local unprivileged user who owns another ancestor directory could potentially use this flaw to gain root privileges. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
              "source" : "redhat-csaf",
              "cvssScore" : 6.5,
              "severity" : "MEDIUM",
              "cves" : [ "CVE-2021-35939" ],
              "unique" : false
            }, {
              "id" : "CVE-2021-35937",
              "title" : "A race condition vulnerability was found in rpm. A local unprivileged user could use this flaw to bypass the checks that were introduced in response to CVE-2017-7500 and CVE-2017-7501, potentially gaining root privileges. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
              "source" : "redhat-csaf",
              "cvssScore" : 6.3,
              "severity" : "MEDIUM",
              "cves" : [ "CVE-2021-35937" ],
              "unique" : false
            } ],
            "transitive" : [ {
              "ref" : "pkg:rpm/redhat/openssl-libs@1.1.1k-15.el8_6?arch=x86_64&distro=rhel-8.10&epoch=1&upstream=openssl-1.1.1k-15.el8_6.src.rpm",
              "issues" : [ {
                "id" : "CVE-2025-15467",
                "title" : "Stack buffer overflow in CMS (Auth)EnvelopedData parsing",
                "source" : "redhat-csaf",
                "cvssScore" : 9.8,
                "severity" : "CRITICAL",
                "cves" : [ "CVE-2025-15467" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-1473",
                "title" : "Resource leakage when decoding certificates and keys",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-1473" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-3358",
                "title" : "Using a Custom Cipher with NID_undef may lead to NULL encryption",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-3358" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-3602",
                "title" : "X.509 Email Address 4-byte Buffer Overflow",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-3602" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-3786",
                "title" : "X.509 Email Address Variable Length Buffer Overflow",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-3786" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-4450",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-4450" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-0215",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-0215" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-0216",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-0216" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-0217",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-0217" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-0401",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-0401" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-5363",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-5363" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-0286",
                "source" : "redhat-csaf",
                "cvssScore" : 7.4,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-0286" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-12797",
                "title" : "RFC7250 handshakes with unauthenticated servers don't abort as expected",
                "source" : "redhat-csaf",
                "cvssScore" : 7.4,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-12797" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-69419",
                "source" : "redhat-csaf",
                "cvssScore" : 7.4,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-69419" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-1292",
                "source" : "redhat-csaf",
                "cvssScore" : 6.7,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-1292" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-2068",
                "source" : "redhat-csaf",
                "cvssScore" : 6.7,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-2068" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-2650",
                "title" : "Possible DoS translating ASN.1 object identifiers",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-2650" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-6129",
                "title" : "POLY1305 MAC implementation corrupts vector registers on PowerPC",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-6129" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-69421",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-69421" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-11187",
                "title" : "Improper validation of PBMAC1 parameters in PKCS#12 MAC verification",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-11187" ],
                "unique" : false
              }, {
                "id" : "CVE-2020-1971",
                "title" : "EDIPARTYNAME NULL pointer dereference",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2020-1971" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-4304",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-4304" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-0464",
                "title" : "Excessive Resource Usage Verifying X.509 Policy Constraints",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-0464" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-6237",
                "title" : "Excessive time spent checking invalid RSA public keys",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-6237" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-5535",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-5535" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-6119",
                "title" : "Possible denial of service in X.509 name checks",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-6119" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-15468",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-15468" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-66199",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-66199" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-69420",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-69420" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-22796",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-22796" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-4741",
                "source" : "redhat-csaf",
                "cvssScore" : 5.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-4741" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-9230",
                "source" : "redhat-csaf",
                "cvssScore" : 5.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-9230" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-0727",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-0727" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-15469",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-15469" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-22795",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-22795" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-1343",
                "title" : "OCSP_basic_verify may incorrectly verify the response signing certificate",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-1343" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-2097",
                "title" : "AES OCB fails to encrypt some bytes",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-2097" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-0465",
                "title" : "Invalid certificate policies in leaf certificates are silently ignored",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-0465" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-0466",
                "title" : "Certificate policy check not enabled",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-0466" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-2975",
                "title" : "AES-SIV implementation ignores empty associated data entries",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-2975" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-3446",
                "title" : "Excessive time spent checking DH keys and parameters",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-3446" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-3817",
                "title" : "Excessive time spent checking DH q parameter value",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-3817" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-5678",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-5678" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-4603",
                "title" : "Excessive time spent checking DSA keys and parameters",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-4603" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-1255",
                "title" : "Input buffer over-read in AES-XTS implementation on 64 bit ARM",
                "source" : "redhat-csaf",
                "cvssScore" : 5.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-1255" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-4203",
                "source" : "redhat-csaf",
                "cvssScore" : 4.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-4203" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-68160",
                "source" : "redhat-csaf",
                "cvssScore" : 4.7,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-68160" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-69418",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-69418" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-2511",
                "source" : "redhat-csaf",
                "cvssScore" : 3.7,
                "severity" : "LOW",
                "cves" : [ "CVE-2024-2511" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2025-15467",
                "title" : "Stack buffer overflow in CMS (Auth)EnvelopedData parsing",
                "source" : "redhat-csaf",
                "cvssScore" : 9.8,
                "severity" : "CRITICAL",
                "cves" : [ "CVE-2025-15467" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libcurl@7.61.1-34.el8_10.11?arch=x86_64&distro=rhel-8.10&upstream=curl-7.61.1-34.el8_10.11.src.rpm",
              "issues" : [ {
                "id" : "CVE-2022-32207",
                "title" : "When curl < 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes the operation atomic by finalizing the operation with a rename from a temporary name to the final target file name.In that rename operation, it might accidentally *widen* the permissions for the target file, leaving the updated file accessible to more users than intended.",
                "source" : "redhat-csaf",
                "cvssScore" : 9.8,
                "severity" : "CRITICAL",
                "cves" : [ "CVE-2022-32207" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-22576",
                "title" : "An improper authentication vulnerability exists in curl 7.33.0 to and including 7.82.0 which might allow reuse OAUTH2-authenticated connections without properly making sure that the connection was authenticated with the same credentials as set for this transfer. This affects SASL-enabled protocols: SMPTP(S), IMAP(S), POP3(S) and LDAP(S) (openldap only).",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-22576" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-38545",
                "title" : "This flaw makes curl overflow a heap based buffer in the SOCKS5 proxy\nhandshake.\n\nWhen curl is asked to pass along the host name to the SOCKS5 proxy to allow\nthat to resolve the address instead of it getting done by curl itself, the\nmaximum length that host name can be is 255 bytes.\n\nIf the host name is detected to be longer, curl switches to local name\nresolving and instead passes on the resolved address only. Due to this bug,\nthe local variable that means \"let the host resolve the name\" could get the\nwrong value during a slow SOCKS5 handshake, and contrary to the intention,\ncopy the too long host name to the target buffer instead of copying just the\nresolved address there.\n\nThe target buffer being a heap based buffer, and the host name coming from the\nURL that curl has been told to operate with.",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-38545" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-27775",
                "title" : "An information disclosure vulnerability exists in curl 7.65.0 to 7.82.0 are vulnerable that by using an IPv6 address that was in the connection pool but with a different zone id it could reuse a connection instead.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-27775" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-27782",
                "title" : "libcurl would reuse a previously created connection even when a TLS or SSHrelated option had been changed that should have prohibited reuse.libcurl keeps previously used connections in a connection pool for subsequenttransfers to reuse if one of them matches the setup. However, several TLS andSSH settings were left out from the configuration match checks, making themmatch too easily.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-27782" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-2398",
                "title" : "HTTP/2 push headers memory-leak",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2398" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-32206",
                "title" : "curl < 7.84.0 supports \"chained\" HTTP compression algorithms, meaning that a serverresponse can be compressed multiple times and potentially with different algorithms. The number of acceptable \"links\" in this \"decompression chain\" was unbounded, allowing a malicious server to insert a virtually unlimited number of compression steps.The use of such a decompression chain could result in a \"malloc bomb\", makingcurl end up spending enormous amounts of allocated heap memory, or trying toand returning out of memory errors.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-32206" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-23916",
                "title" : "An allocation of resources without limits or throttling vulnerability exists in curl <v7.88.0 based on the \"chained\" HTTP compression algorithms, meaning that a server response can be compressed multiple times and potentially with differentalgorithms. The number of acceptable \"links\" in this \"decompression chain\" wascapped, but the cap was implemented on a per-header basis allowing a maliciousserver to insert a virtually unlimited number of compression steps simply byusing many headers. The use of such a decompression chain could result in a \"malloc bomb\", making curl end up spending enormous amounts of allocated heap memory, or trying to and returning out of memory errors.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-23916" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-43552",
                "title" : "A use after free vulnerability exists in curl <7.87.0. Curl can be asked to *tunnel* virtually all protocols it supports through an HTTP proxy. HTTP proxies can (and often do) deny such tunnel operations. When getting denied to tunnel the specific protocols SMB or TELNET, curl would use a heap-allocated struct after it had been freed, in its transfer shutdown code path.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-43552" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-27535",
                "title" : "An authentication bypass vulnerability exists in libcurl <8.0.0 in the FTP connection reuse feature that can result in wrong credentials being used during subsequent transfers. Previously created connections are kept in a connection pool for reuse if they match the current setup. However, certain FTP settings such as CURLOPT_FTP_ACCOUNT, CURLOPT_FTP_ALTERNATIVE_TO_USER, CURLOPT_FTP_SSL_CCC, and CURLOPT_USE_SSL were not included in the configuration match checks, causing them to match too easily. This could lead to libcurl using the wrong credentials when performing a transfer, potentially allowing unauthorized access to sensitive information.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-27535" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-27536",
                "title" : "An authentication bypass vulnerability exists libcurl <8.0.0 in the connection reuse feature which can reuse previously established connections with incorrect user permissions due to a failure to check for changes in the CURLOPT_GSSAPI_DELEGATION option. This vulnerability affects krb5/kerberos/negotiate/GSSAPI transfers and could potentially result in unauthorized access to sensitive information. The safest option is to not reuse connections if the CURLOPT_GSSAPI_DELEGATION option has been changed.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-27536" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-28321",
                "title" : "An improper certificate validation vulnerability exists in curl <v8.1.0 in the way it supports matching of wildcard patterns when listed as \"Subject Alternative Name\" in TLS server certificates. curl can be built to use its own name matching function for TLS rather than one provided by a TLS library. This private wildcard matching function would match IDN (International Domain Name) hosts incorrectly and could as a result accept patterns that otherwise should mismatch. IDN hostnames are converted to puny code before used for certificate checks. Puny coded names always start with `xn--` and should not be allowed to pattern match, but the wildcard check in curl could still check for `x*`, which would match even though the IDN name most likely contained nothing even resembling an `x`.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-28321" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-27538",
                "title" : "An authentication bypass vulnerability exists in libcurl prior to v8.0.0 where it reuses a previously established SSH connection despite the fact that an SSH option was modified, which should have prevented reuse. libcurl maintains a pool of previously used connections to reuse them for subsequent transfers if the configurations match. However, two SSH settings were omitted from the configuration check, allowing them to match easily, potentially leading to the reuse of an inappropriate connection.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-27538" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-32208",
                "title" : "When curl < 7.84.0 does FTP transfers secured by krb5, it handles message verification failures wrongly. This flaw makes it possible for a Man-In-The-Middle attack to go unnoticed and even allows it to inject data to the client.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-32208" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-46218",
                "title" : "This flaw allows a malicious HTTP server to set \"super cookies\" in curl that\nare then passed back to more origins than what is otherwise allowed or\npossible. This allows a site to set cookies that then would get sent to\ndifferent and unrelated sites and domains.\n\nIt could do this by exploiting a mixed case flaw in curl's function that\nverifies a given cookie domain against the Public Suffix List (PSL). For\nexample a cookie could be set with `domain=co.UK` when the URL used a lower\ncase hostname `curl.co.uk`, even though `co.uk` is listed as a PSL domain.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-46218" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-9086",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-9086" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-27774",
                "title" : "An insufficiently protected credentials vulnerability exists in curl 4.9 to and include curl 7.82.0 are affected that could allow an attacker to extract credentials when follows HTTP(S) redirects is used with authentication could leak credentials to other services that exist on different protocols or port numbers.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-27774" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-32221",
                "title" : "When doing HTTP(S) transfers, libcurl might erroneously use the read callback (`CURLOPT_READFUNCTION`) to ask for data to send, even when the `CURLOPT_POSTFIELDS` option has been set, if the same handle previously was used to issue a `PUT` request which used that callback. This flaw may surprise the application and cause it to misbehave and either send off the wrong data or use memory after free or similar in the subsequent `POST` request. The problem exists in the logic for a reused handle when it is changed from a PUT to a POST.",
                "source" : "redhat-csaf",
                "cvssScore" : 4.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-32221" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-27776",
                "title" : "A insufficiently protected credentials vulnerability in fixed in curl 7.83.0 might leak authentication or cookie header data on HTTP redirects to the same host but another port number.",
                "source" : "redhat-csaf",
                "cvssScore" : 4.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-27776" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-27533",
                "title" : "A vulnerability in input validation exists in curl <8.0 during communication using the TELNET protocol may allow an attacker to pass on maliciously crafted user name and \"telnet options\" during server negotiation. The lack of proper input scrubbing allows an attacker to send content or perform option negotiation without the application's intent. This vulnerability could be exploited if an application allows user input, thereby enabling attackers to execute arbitrary code on the system.",
                "source" : "redhat-csaf",
                "cvssScore" : 4.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-27533" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-27534",
                "title" : "A path traversal vulnerability exists in curl <8.0.0 SFTP implementation causes the tilde (~) character to be wrongly replaced when used as a prefix in the first path element, in addition to its intended use as the first element to indicate a path relative to the user's home directory. Attackers can exploit this flaw to bypass filtering or execute arbitrary code by crafting a path like /~2/foo while accessing a server with a specific user.",
                "source" : "redhat-csaf",
                "cvssScore" : 3.7,
                "severity" : "LOW",
                "cves" : [ "CVE-2023-27534" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-28322",
                "title" : "An information disclosure vulnerability exists in curl <v8.1.0 when doing HTTP(S) transfers, libcurl might erroneously use the read callback (`CURLOPT_READFUNCTION`) to ask for data to send, even when the `CURLOPT_POSTFIELDS` option has been set, if the same handle previously wasused to issue a `PUT` request which used that callback. This flaw may surprise the application and cause it to misbehave and either send off the wrong data or use memory after free or similar in the second transfer. The problem exists in the logic for a reused handle when it is (expected to be) changed from a PUT to a POST.",
                "source" : "redhat-csaf",
                "cvssScore" : 3.7,
                "severity" : "LOW",
                "cves" : [ "CVE-2023-28322" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-38546",
                "source" : "redhat-csaf",
                "cvssScore" : 3.7,
                "severity" : "LOW",
                "cves" : [ "CVE-2023-38546" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-35252",
                "title" : "When curl is used to retrieve and parse cookies from a HTTP(S) server, itaccepts cookies using control codes that when later are sent back to a HTTPserver might make the server return 400 responses. Effectively allowing a\"sister site\" to deny service to all siblings.",
                "source" : "redhat-csaf",
                "cvssScore" : 3.1,
                "severity" : "LOW",
                "cves" : [ "CVE-2022-35252" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2022-32207",
                "title" : "When curl < 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes the operation atomic by finalizing the operation with a rename from a temporary name to the final target file name.In that rename operation, it might accidentally *widen* the permissions for the target file, leaving the updated file accessible to more users than intended.",
                "source" : "redhat-csaf",
                "cvssScore" : 9.8,
                "severity" : "CRITICAL",
                "cves" : [ "CVE-2022-32207" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/curl@7.61.1-34.el8_10.11?arch=x86_64&distro=rhel-8.10&upstream=curl-7.61.1-34.el8_10.11.src.rpm",
              "issues" : [ {
                "id" : "CVE-2022-32207",
                "title" : "When curl < 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes the operation atomic by finalizing the operation with a rename from a temporary name to the final target file name.In that rename operation, it might accidentally *widen* the permissions for the target file, leaving the updated file accessible to more users than intended.",
                "source" : "redhat-csaf",
                "cvssScore" : 9.8,
                "severity" : "CRITICAL",
                "cves" : [ "CVE-2022-32207" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-22576",
                "title" : "An improper authentication vulnerability exists in curl 7.33.0 to and including 7.82.0 which might allow reuse OAUTH2-authenticated connections without properly making sure that the connection was authenticated with the same credentials as set for this transfer. This affects SASL-enabled protocols: SMPTP(S), IMAP(S), POP3(S) and LDAP(S) (openldap only).",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-22576" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-38545",
                "title" : "This flaw makes curl overflow a heap based buffer in the SOCKS5 proxy\nhandshake.\n\nWhen curl is asked to pass along the host name to the SOCKS5 proxy to allow\nthat to resolve the address instead of it getting done by curl itself, the\nmaximum length that host name can be is 255 bytes.\n\nIf the host name is detected to be longer, curl switches to local name\nresolving and instead passes on the resolved address only. Due to this bug,\nthe local variable that means \"let the host resolve the name\" could get the\nwrong value during a slow SOCKS5 handshake, and contrary to the intention,\ncopy the too long host name to the target buffer instead of copying just the\nresolved address there.\n\nThe target buffer being a heap based buffer, and the host name coming from the\nURL that curl has been told to operate with.",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-38545" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-15079",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-15079" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-27775",
                "title" : "An information disclosure vulnerability exists in curl 7.65.0 to 7.82.0 are vulnerable that by using an IPv6 address that was in the connection pool but with a different zone id it could reuse a connection instead.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-27775" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-27782",
                "title" : "libcurl would reuse a previously created connection even when a TLS or SSHrelated option had been changed that should have prohibited reuse.libcurl keeps previously used connections in a connection pool for subsequenttransfers to reuse if one of them matches the setup. However, several TLS andSSH settings were left out from the configuration match checks, making themmatch too easily.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-27782" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-2398",
                "title" : "HTTP/2 push headers memory-leak",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2398" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-13034",
                "source" : "redhat-csaf",
                "cvssScore" : 6.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-13034" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-14819",
                "source" : "redhat-csaf",
                "cvssScore" : 6.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-14819" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-1965",
                "source" : "redhat-csaf",
                "cvssScore" : 6.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-1965" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-32206",
                "title" : "curl < 7.84.0 supports \"chained\" HTTP compression algorithms, meaning that a serverresponse can be compressed multiple times and potentially with different algorithms. The number of acceptable \"links\" in this \"decompression chain\" was unbounded, allowing a malicious server to insert a virtually unlimited number of compression steps.The use of such a decompression chain could result in a \"malloc bomb\", makingcurl end up spending enormous amounts of allocated heap memory, or trying toand returning out of memory errors.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-32206" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-23916",
                "title" : "An allocation of resources without limits or throttling vulnerability exists in curl <v7.88.0 based on the \"chained\" HTTP compression algorithms, meaning that a server response can be compressed multiple times and potentially with differentalgorithms. The number of acceptable \"links\" in this \"decompression chain\" wascapped, but the cap was implemented on a per-header basis allowing a maliciousserver to insert a virtually unlimited number of compression steps simply byusing many headers. The use of such a decompression chain could result in a \"malloc bomb\", making curl end up spending enormous amounts of allocated heap memory, or trying to and returning out of memory errors.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-23916" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-14524",
                "title" : "bearer token leak on cross-protocol redirect",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-14524" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-3784",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-3784" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-3805",
                "source" : "redhat-csaf",
                "cvssScore" : 6.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-3805" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-43552",
                "title" : "A use after free vulnerability exists in curl <7.87.0. Curl can be asked to *tunnel* virtually all protocols it supports through an HTTP proxy. HTTP proxies can (and often do) deny such tunnel operations. When getting denied to tunnel the specific protocols SMB or TELNET, curl would use a heap-allocated struct after it had been freed, in its transfer shutdown code path.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-43552" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-27535",
                "title" : "An authentication bypass vulnerability exists in libcurl <8.0.0 in the FTP connection reuse feature that can result in wrong credentials being used during subsequent transfers. Previously created connections are kept in a connection pool for reuse if they match the current setup. However, certain FTP settings such as CURLOPT_FTP_ACCOUNT, CURLOPT_FTP_ALTERNATIVE_TO_USER, CURLOPT_FTP_SSL_CCC, and CURLOPT_USE_SSL were not included in the configuration match checks, causing them to match too easily. This could lead to libcurl using the wrong credentials when performing a transfer, potentially allowing unauthorized access to sensitive information.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-27535" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-27536",
                "title" : "An authentication bypass vulnerability exists libcurl <8.0.0 in the connection reuse feature which can reuse previously established connections with incorrect user permissions due to a failure to check for changes in the CURLOPT_GSSAPI_DELEGATION option. This vulnerability affects krb5/kerberos/negotiate/GSSAPI transfers and could potentially result in unauthorized access to sensitive information. The safest option is to not reuse connections if the CURLOPT_GSSAPI_DELEGATION option has been changed.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-27536" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-28321",
                "title" : "An improper certificate validation vulnerability exists in curl <v8.1.0 in the way it supports matching of wildcard patterns when listed as \"Subject Alternative Name\" in TLS server certificates. curl can be built to use its own name matching function for TLS rather than one provided by a TLS library. This private wildcard matching function would match IDN (International Domain Name) hosts incorrectly and could as a result accept patterns that otherwise should mismatch. IDN hostnames are converted to puny code before used for certificate checks. Puny coded names always start with `xn--` and should not be allowed to pattern match, but the wildcard check in curl could still check for `x*`, which would match even though the IDN name most likely contained nothing even resembling an `x`.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-28321" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-10966",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-10966" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-3783",
                "source" : "redhat-csaf",
                "cvssScore" : 5.7,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-3783" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-27538",
                "title" : "An authentication bypass vulnerability exists in libcurl prior to v8.0.0 where it reuses a previously established SSH connection despite the fact that an SSH option was modified, which should have prevented reuse. libcurl maintains a pool of previously used connections to reuse them for subsequent transfers if the configurations match. However, two SSH settings were omitted from the configuration check, allowing them to match easily, potentially leading to the reuse of an inappropriate connection.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-27538" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-32208",
                "title" : "When curl < 7.84.0 does FTP transfers secured by krb5, it handles message verification failures wrongly. This flaw makes it possible for a Man-In-The-Middle attack to go unnoticed and even allows it to inject data to the client.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-32208" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-46218",
                "title" : "This flaw allows a malicious HTTP server to set \"super cookies\" in curl that\nare then passed back to more origins than what is otherwise allowed or\npossible. This allows a site to set cookies that then would get sent to\ndifferent and unrelated sites and domains.\n\nIt could do this by exploiting a mixed case flaw in curl's function that\nverifies a given cookie domain against the Public Suffix List (PSL). For\nexample a cookie could be set with `domain=co.UK` when the URL used a lower\ncase hostname `curl.co.uk`, even though `co.uk` is listed as a PSL domain.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-46218" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-9086",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-9086" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-27774",
                "title" : "An insufficiently protected credentials vulnerability exists in curl 4.9 to and include curl 7.82.0 are affected that could allow an attacker to extract credentials when follows HTTP(S) redirects is used with authentication could leak credentials to other services that exist on different protocols or port numbers.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-27774" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-32221",
                "title" : "When doing HTTP(S) transfers, libcurl might erroneously use the read callback (`CURLOPT_READFUNCTION`) to ask for data to send, even when the `CURLOPT_POSTFIELDS` option has been set, if the same handle previously was used to issue a `PUT` request which used that callback. This flaw may surprise the application and cause it to misbehave and either send off the wrong data or use memory after free or similar in the subsequent `POST` request. The problem exists in the logic for a reused handle when it is changed from a PUT to a POST.",
                "source" : "redhat-csaf",
                "cvssScore" : 4.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-32221" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-10148",
                "source" : "redhat-csaf",
                "cvssScore" : 4.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-10148" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-14017",
                "source" : "redhat-csaf",
                "cvssScore" : 4.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-14017" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-15224",
                "source" : "redhat-csaf",
                "cvssScore" : 4.7,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-15224" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-27776",
                "title" : "A insufficiently protected credentials vulnerability in fixed in curl 7.83.0 might leak authentication or cookie header data on HTTP redirects to the same host but another port number.",
                "source" : "redhat-csaf",
                "cvssScore" : 4.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-27776" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-27533",
                "title" : "A vulnerability in input validation exists in curl <8.0 during communication using the TELNET protocol may allow an attacker to pass on maliciously crafted user name and \"telnet options\" during server negotiation. The lack of proper input scrubbing allows an attacker to send content or perform option negotiation without the application's intent. This vulnerability could be exploited if an application allows user input, thereby enabling attackers to execute arbitrary code on the system.",
                "source" : "redhat-csaf",
                "cvssScore" : 4.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-27533" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-27534",
                "title" : "A path traversal vulnerability exists in curl <8.0.0 SFTP implementation causes the tilde (~) character to be wrongly replaced when used as a prefix in the first path element, in addition to its intended use as the first element to indicate a path relative to the user's home directory. Attackers can exploit this flaw to bypass filtering or execute arbitrary code by crafting a path like /~2/foo while accessing a server with a specific user.",
                "source" : "redhat-csaf",
                "cvssScore" : 3.7,
                "severity" : "LOW",
                "cves" : [ "CVE-2023-27534" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-28322",
                "title" : "An information disclosure vulnerability exists in curl <v8.1.0 when doing HTTP(S) transfers, libcurl might erroneously use the read callback (`CURLOPT_READFUNCTION`) to ask for data to send, even when the `CURLOPT_POSTFIELDS` option has been set, if the same handle previously wasused to issue a `PUT` request which used that callback. This flaw may surprise the application and cause it to misbehave and either send off the wrong data or use memory after free or similar in the second transfer. The problem exists in the logic for a reused handle when it is (expected to be) changed from a PUT to a POST.",
                "source" : "redhat-csaf",
                "cvssScore" : 3.7,
                "severity" : "LOW",
                "cves" : [ "CVE-2023-28322" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-38546",
                "source" : "redhat-csaf",
                "cvssScore" : 3.7,
                "severity" : "LOW",
                "cves" : [ "CVE-2023-38546" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-35252",
                "title" : "When curl is used to retrieve and parse cookies from a HTTP(S) server, itaccepts cookies using control codes that when later are sent back to a HTTPserver might make the server return 400 responses. Effectively allowing a\"sister site\" to deny service to all siblings.",
                "source" : "redhat-csaf",
                "cvssScore" : 3.1,
                "severity" : "LOW",
                "cves" : [ "CVE-2022-35252" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2022-32207",
                "title" : "When curl < 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes the operation atomic by finalizing the operation with a rename from a temporary name to the final target file name.In that rename operation, it might accidentally *widen* the permissions for the target file, leaving the updated file accessible to more users than intended.",
                "source" : "redhat-csaf",
                "cvssScore" : 9.8,
                "severity" : "CRITICAL",
                "cves" : [ "CVE-2022-32207" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libxml2@2.9.7-21.el8_10.3?arch=x86_64&distro=rhel-8.10&upstream=libxml2-2.9.7-21.el8_10.3.src.rpm",
              "issues" : [ {
                "id" : "CVE-2024-40896",
                "title" : "In libxml2 2.11 before 2.11.9, 2.12 before 2.12.9, and 2.13 before 2.13.3, the SAX parser can produce events for external entities even if custom SAX handlers try to override entity content (by setting \"checked\"). This makes classic XXE attacks possible.",
                "source" : "redhat-csaf",
                "cvssScore" : 9.1,
                "severity" : "CRITICAL",
                "cves" : [ "CVE-2024-40896" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-49794",
                "title" : "Libxml: heap use after free (uaf) leads to denial of service (dos)",
                "source" : "redhat-csaf",
                "cvssScore" : 9.1,
                "severity" : "CRITICAL",
                "cves" : [ "CVE-2025-49794" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-49796",
                "title" : "Libxml: type confusion leads to denial of service (dos)",
                "source" : "redhat-csaf",
                "cvssScore" : 9.1,
                "severity" : "CRITICAL",
                "cves" : [ "CVE-2025-49796" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-56171",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-56171" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-40304",
                "title" : "An issue was discovered in libxml2 before 2.10.3. Certain invalid XML entity definitions can corrupt a hash table key, potentially leading to subsequent logic errors. In one case, a double-free can be provoked.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-40304" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-24928",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-24928" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-7425",
                "title" : "Libxslt: heap use-after-free in libxslt caused by atype corruption in xmlattrptr",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-7425" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-40303",
                "title" : "An issue was discovered in libxml2 before 2.10.3. When parsing a multi-gigabyte XML document with the XML_PARSE_HUGE parser option enabled, several integer counters can overflow. This results in an attempt to access an array at a negative 2GB offset, typically leading to a segmentation fault.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-40303" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-25062",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-25062" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-32415",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-32415" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-49795",
                "title" : "Libxml: null pointer dereference leads to denial of service (dos)",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-49795" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-6021",
                "title" : "Libxml2: integer overflow in xmlbuildqname() leads to stack buffer overflow in libxml2",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-6021" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-7424",
                "title" : "Libxslt: type confusion in xmlnode.psvi between stylesheet and source nodes",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-7424" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-29824",
                "title" : "In libxml2 before 2.9.14, several buffer handling functions in buf.c (xmlBuf*) and tree.c (xmlBuffer*) don't check for integer overflows. This can result in out-of-bounds memory writes. Exploitation requires a victim to open a crafted, multi-gigabyte XML file. Other software using libxml2's buffer functions, for example libxslt through 1.1.35, is affected as well.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.4,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-29824" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-39615",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-39615" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-9714",
                "source" : "redhat-csaf",
                "cvssScore" : 6.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-9714" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-49043",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-49043" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-28484",
                "title" : "In libxml2 before 2.10.4, parsing of certain invalid XSD schemas can lead to a NULL pointer dereference and subsequently a segfault. This occurs in xmlSchemaFixupComplexType in xmlschemas.c.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-28484" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-29469",
                "title" : "An issue was discovered in libxml2 before 2.10.4. When hashing empty dict strings in a crafted XML document, xmlDictComputeFastKey in dict.c can produce non-deterministic values, leading to various logic and memory errors, such as a double free. This behavior occurs because there is an attempt to use the first byte of an empty string, and any value is possible (not solely the '\\0' value).",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-29469" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-32414",
                "source" : "redhat-csaf",
                "cvssScore" : 5.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-32414" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-6170",
                "title" : "Libxml2: stack buffer overflow in xmllint interactive shell command handling",
                "source" : "redhat-csaf",
                "cvssScore" : 2.5,
                "severity" : "LOW",
                "cves" : [ "CVE-2025-6170" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2024-40896",
                "title" : "In libxml2 2.11 before 2.11.9, 2.12 before 2.12.9, and 2.13 before 2.13.3, the SAX parser can produce events for external entities even if custom SAX handlers try to override entity content (by setting \"checked\"). This makes classic XXE attacks possible.",
                "source" : "redhat-csaf",
                "cvssScore" : 9.1,
                "severity" : "CRITICAL",
                "cves" : [ "CVE-2024-40896" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/krb5-libs@1.18.2-32.el8_10?arch=x86_64&distro=rhel-8.10&upstream=krb5-1.18.2-32.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2024-3596",
                "source" : "redhat-csaf",
                "cvssScore" : 9.0,
                "severity" : "CRITICAL",
                "cves" : [ "CVE-2024-3596" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-42898",
                "title" : "PAC parsing in MIT Kerberos 5 (aka krb5) before 1.19.4 and 1.20.x before 1.20.1 has integer overflows that may lead to remote code execution (in KDC, kadmind, or a GSS or Kerberos application server) on 32-bit platforms (which have a resultant heap-based buffer overflow), and cause a denial of service on other platforms. This occurs in krb5_pac_parse in lib/krb5/krb/pac.c. Heimdal before 7.7.1 has \"a similar bug.\"",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-42898" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-39975",
                "title" : "kdc/do_tgs_req.c in MIT Kerberos 5 (aka krb5) 1.21 before 1.21.2 has a double free that is reachable if an authenticated user can trigger an authorization-data handling failure. Incorrect data is copied from one ticket to another.",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-39975" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-26462",
                "title" : "Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/kdc/ndr.c.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-26462" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-37370",
                "title" : "In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can modify the plaintext Extra Count field of a confidential GSS krb5 wrap token, causing the unwrapped token to appear truncated to the application.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-37370" ],
                "unique" : false
              }, {
                "id" : "CVE-2020-17049",
                "title" : "Kerberos KDC Security Feature Bypass Vulnerability",
                "source" : "redhat-csaf",
                "cvssScore" : 7.2,
                "severity" : "HIGH",
                "cves" : [ "CVE-2020-17049" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-36054",
                "title" : "lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) before 1.20.2 and 1.21.x before 1.21.1 frees an uninitialized pointer. A remote authenticated user can trigger a kadmind crash. This occurs because _xdr_kadm5_principal_ent_rec does not validate the relationship between n_key_data and the key_data array count.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-36054" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-37371",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-37371" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-24528",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-24528" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-26458",
                "title" : "Kerberos 5 (aka krb5) 1.21.2 contains a memory leak in /krb5/src/lib/rpc/pmap_rmt.c.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-26458" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-26461",
                "title" : "Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/lib/gssapi/krb5/k5sealv3.c.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-26461" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-3576",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-3576" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2024-3596",
                "source" : "redhat-csaf",
                "cvssScore" : 9.0,
                "severity" : "CRITICAL",
                "cves" : [ "CVE-2024-3596" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/glibc-minimal-langpack@2.28-251.el8_10.31?arch=x86_64&distro=rhel-8.10&upstream=glibc-2.28-251.el8_10.31.src.rpm",
              "issues" : [ {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0861",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-0861" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4911",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-4911" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33599",
                "title" : "nscd: Stack-based buffer overflow in netgroup cache",
                "source" : "redhat-csaf",
                "cvssScore" : 7.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-33599" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-4802",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-4802" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4527",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4527" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4806",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4806" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4813",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4813" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-5702",
                "title" : "The strcmp implementation optimized for the Power10 processor in the GNU C Library version 2.39 and later writes to vector registers v20 to v31 without saving contents from the caller (those registers are defined as non-volatile registers by the powerpc64le ABI), resulting in overwriting of its contents and potentially altering control flow of the caller, or leaking the input strings to the function to other parts of the program.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-5702" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-0395",
                "title" : "When the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-0395" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33600",
                "title" : "nscd: Null pointer crashes after notfound response",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33600" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0915",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-0915" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-8058",
                "source" : "redhat-csaf",
                "cvssScore" : 4.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-8058" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33601",
                "title" : "nscd: netgroup cache may terminate daemon on memory allocation failure",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33601" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33602",
                "title" : "nscd: netgroup cache assumes NSS callback uses in-buffer strings",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33602" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/glibc@2.28-251.el8_10.31?arch=x86_64&distro=rhel-8.10&upstream=glibc-2.28-251.el8_10.31.src.rpm",
              "issues" : [ {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0861",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-0861" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4911",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-4911" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33599",
                "title" : "nscd: Stack-based buffer overflow in netgroup cache",
                "source" : "redhat-csaf",
                "cvssScore" : 7.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-33599" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-4802",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-4802" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4527",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4527" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4806",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4806" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4813",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4813" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-15281",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-15281" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-5702",
                "title" : "The strcmp implementation optimized for the Power10 processor in the GNU C Library version 2.39 and later writes to vector registers v20 to v31 without saving contents from the caller (those registers are defined as non-volatile registers by the powerpc64le ABI), resulting in overwriting of its contents and potentially altering control flow of the caller, or leaking the input strings to the function to other parts of the program.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-5702" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-0395",
                "title" : "When the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-0395" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33600",
                "title" : "nscd: Null pointer crashes after notfound response",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33600" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0915",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-0915" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-8058",
                "source" : "redhat-csaf",
                "cvssScore" : 4.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-8058" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33601",
                "title" : "nscd: netgroup cache may terminate daemon on memory allocation failure",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33601" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33602",
                "title" : "nscd: netgroup cache assumes NSS callback uses in-buffer strings",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33602" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/glibc-common@2.28-251.el8_10.31?arch=x86_64&distro=rhel-8.10&upstream=glibc-2.28-251.el8_10.31.src.rpm",
              "issues" : [ {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0861",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-0861" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4911",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-4911" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33599",
                "title" : "nscd: Stack-based buffer overflow in netgroup cache",
                "source" : "redhat-csaf",
                "cvssScore" : 7.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-33599" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-4802",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-4802" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4527",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4527" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4806",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4806" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4813",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4813" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-5702",
                "title" : "The strcmp implementation optimized for the Power10 processor in the GNU C Library version 2.39 and later writes to vector registers v20 to v31 without saving contents from the caller (those registers are defined as non-volatile registers by the powerpc64le ABI), resulting in overwriting of its contents and potentially altering control flow of the caller, or leaking the input strings to the function to other parts of the program.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-5702" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-0395",
                "title" : "When the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-0395" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33600",
                "title" : "nscd: Null pointer crashes after notfound response",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33600" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0915",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-0915" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-8058",
                "source" : "redhat-csaf",
                "cvssScore" : 4.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-8058" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33601",
                "title" : "nscd: netgroup cache may terminate daemon on memory allocation failure",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33601" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33602",
                "title" : "nscd: netgroup cache assumes NSS callback uses in-buffer strings",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33602" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/xz-libs@5.2.4-4.el8_6?arch=x86_64&distro=rhel-8.10&upstream=xz-5.2.4-4.el8_6.src.rpm",
              "issues" : [ {
                "id" : "CVE-2022-1271",
                "title" : "An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is applied on the attacker's chosen file name (for example, a crafted file name), this can overwrite an attacker's content to an arbitrary attacker-selected file. This flaw occurs due to insufficient validation when processing filenames with two or more newlines where selected content and the target file names are embedded in crafted multi-line file names. This flaw allows a remote, low privileged attacker to force zgrep to write arbitrary files on the system.",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-1271" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-31115",
                "title" : "XZ has a heap-use-after-free bug in threaded .xz decoder",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-31115" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2022-1271",
                "title" : "An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is applied on the attacker's chosen file name (for example, a crafted file name), this can overwrite an attacker's content to an arbitrary attacker-selected file. This flaw occurs due to insufficient validation when processing filenames with two or more newlines where selected content and the target file names are embedded in crafted multi-line file names. This flaw allows a remote, low privileged attacker to force zgrep to write arbitrary files on the system.",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-1271" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/zlib@1.2.11-25.el8?arch=x86_64&distro=rhel-8.10&upstream=zlib-1.2.11-25.el8.src.rpm",
              "issues" : [ {
                "id" : "CVE-2018-25032",
                "title" : "zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.",
                "source" : "redhat-csaf",
                "cvssScore" : 8.2,
                "severity" : "HIGH",
                "cves" : [ "CVE-2018-25032" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-37434",
                "title" : "zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference).",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-37434" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2018-25032",
                "title" : "zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.",
                "source" : "redhat-csaf",
                "cvssScore" : 8.2,
                "severity" : "HIGH",
                "cves" : [ "CVE-2018-25032" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libssh-config@0.9.6-16.el8_10?arch=noarch&distro=rhel-8.10&upstream=libssh-0.9.6-16.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2025-5318",
                "title" : "Libssh: out-of-bounds read in sftp_handle()",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-5318" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-5987",
                "title" : "Libssh: invalid return code for chacha20 poly1305 with openssl backend",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-5987" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-48795",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-48795" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-2283",
                "source" : "redhat-csaf",
                "cvssScore" : 4.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-2283" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-6004",
                "source" : "redhat-csaf",
                "cvssScore" : 4.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-6004" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-1667",
                "title" : "A NULL pointer dereference was found In libssh during re-keying with algorithm guessing. This issue may allow an authenticated client to cause a denial of service.",
                "source" : "redhat-csaf",
                "cvssScore" : 4.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-1667" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-6918",
                "source" : "redhat-csaf",
                "cvssScore" : 3.7,
                "severity" : "LOW",
                "cves" : [ "CVE-2023-6918" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2025-5318",
                "title" : "Libssh: out-of-bounds read in sftp_handle()",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-5318" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libssh@0.9.6-16.el8_10?arch=x86_64&distro=rhel-8.10&upstream=libssh-0.9.6-16.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2025-5318",
                "title" : "Libssh: out-of-bounds read in sftp_handle()",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-5318" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-5987",
                "title" : "Libssh: invalid return code for chacha20 poly1305 with openssl backend",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-5987" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-48795",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-48795" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-2283",
                "source" : "redhat-csaf",
                "cvssScore" : 4.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-2283" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-6004",
                "source" : "redhat-csaf",
                "cvssScore" : 4.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-6004" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-1667",
                "title" : "A NULL pointer dereference was found In libssh during re-keying with algorithm guessing. This issue may allow an authenticated client to cause a denial of service.",
                "source" : "redhat-csaf",
                "cvssScore" : 4.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-1667" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-6918",
                "source" : "redhat-csaf",
                "cvssScore" : 3.7,
                "severity" : "LOW",
                "cves" : [ "CVE-2023-6918" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2025-5318",
                "title" : "Libssh: out-of-bounds read in sftp_handle()",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-5318" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libarchive@3.3.3-6.el8_10?arch=x86_64&distro=rhel-8.10&upstream=libarchive-3.3.3-6.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2025-5914",
                "title" : "Libarchive: double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-5914" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-4111",
                "title" : "Libarchive: infinite loop denial of service in rar5 decompression via archive_read_data() in libarchive",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-4111" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-4424",
                "title" : "Libarchive: libarchive: information disclosure via heap out-of-bounds read in rar archive processing",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-4424" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-5121",
                "title" : "Libarchive: libarchive: arbitrary code execution via integer overflow in iso9660 image processing",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-5121" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-26280",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-26280" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-36227",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-36227" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-57970",
                "title" : "libarchive through 3.7.7 has a heap-based buffer over-read in header_gnu_longlink in archive_read_support_format_tar.c via a TAR archive because it mishandles truncation in the middle of a GNU long linkname.",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-57970" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-25724",
                "title" : "list_item_verbose in tar/util.c in libarchive through 3.7.7 does not check an strftime return value, which can lead to a denial of service or unspecified other impact via a crafted TAR archive that is read with a verbose value of 2. For example, the 100-byte buffer may not be sufficient for a custom locale.",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-25724" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2025-5914",
                "title" : "Libarchive: double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-5914" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libcap@2.48-6.el8_9?arch=x86_64&distro=rhel-8.10&upstream=libcap-2.48-6.el8_9.src.rpm",
              "issues" : [ {
                "id" : "CVE-2023-2603",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-2603" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-2602",
                "title" : "A vulnerability was found in the pthread_create() function in libcap. This issue may allow a malicious actor to use cause __real_pthread_create() to return an error, which can exhaust the process memory.",
                "source" : "redhat-csaf",
                "cvssScore" : 3.3,
                "severity" : "LOW",
                "cves" : [ "CVE-2023-2602" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2023-2603",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-2603" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/ncurses-base@6.1-10.20180224.el8?arch=noarch&distro=rhel-8.10&upstream=ncurses-6.1-10.20180224.el8.src.rpm",
              "issues" : [ {
                "id" : "CVE-2023-29491",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-29491" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-69720",
                "title" : "The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-69720" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-29458",
                "title" : "ncurses 6.3 before patch 20220416 has an out-of-bounds read and segmentation violation in convert_strings in tinfo/read_entry.c in the terminfo library.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-29458" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2023-29491",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-29491" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/ncurses-libs@6.1-10.20180224.el8?arch=x86_64&distro=rhel-8.10&upstream=ncurses-6.1-10.20180224.el8.src.rpm",
              "issues" : [ {
                "id" : "CVE-2023-29491",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-29491" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-69720",
                "title" : "The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-69720" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-29458",
                "title" : "ncurses 6.3 before patch 20220416 has an out-of-bounds read and segmentation violation in convert_strings in tinfo/read_entry.c in the terminfo library.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-29458" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2023-29491",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-29491" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/sqlite-libs@3.26.0-20.el8_10?arch=x86_64&distro=rhel-8.10&upstream=sqlite-3.26.0-20.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2025-6965",
                "title" : "Integer Truncation on SQLite",
                "source" : "redhat-csaf",
                "cvssScore" : 7.7,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-6965" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-7104",
                "source" : "redhat-csaf",
                "cvssScore" : 7.3,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-7104" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-3277",
                "title" : "An integer overflow can be triggered in SQLite’s `concat_ws()` function. The resulting, truncated integer is then used to allocate a buffer. When SQLite then writes the resulting string to the buffer, it uses the original, untruncated size and thus a wild Heap Buffer overflow of size ~4GB can be triggered. This can result in arbitrary code execution.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.3,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-3277" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-35737",
                "title" : "SQLite 1.0.12 through 3.39.x before 3.39.2 sometimes allows an array-bounds overflow if billions of bytes are used in a string argument to a C API.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-35737" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2025-6965",
                "title" : "Integer Truncation on SQLite",
                "source" : "redhat-csaf",
                "cvssScore" : 7.7,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-6965" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libnghttp2@1.33.0-6.el8_10.2?arch=x86_64&distro=rhel-8.10&upstream=nghttp2-1.33.0-6.el8_10.2.src.rpm",
              "issues" : [ {
                "id" : "CVE-2023-44487",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-44487" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-27135",
                "title" : "nghttp2 Denial of service: Assertion failure due to the missing state validation",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-27135" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-28182",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-28182" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2023-44487",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-44487" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/brotli@1.0.6-4.el8_10?arch=x86_64&distro=rhel-8.10&upstream=brotli-1.0.6-4.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2025-6176",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-6176" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2025-6176",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-6176" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/pcre2@10.32-3.el8_6?arch=x86_64&distro=rhel-8.10&upstream=pcre2-10.32-3.el8_6.src.rpm",
              "issues" : [ {
                "id" : "CVE-2022-1586",
                "title" : "An out-of-bounds read vulnerability was discovered in the PCRE2 library in the compile_xclass_matchingpath() function of the pcre2_jit_compile.c file. This involves a unicode property matching issue in JIT-compiled regular expressions. The issue occurs because the character was not fully read in case-less matching within JIT.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-1586" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-1587",
                "title" : "An out-of-bounds read vulnerability was discovered in the PCRE2 library in the get_recurse_data_length() function of the pcre2_jit_compile.c file. This issue affects recursions in JIT-compiled regular expressions caused by duplicate data transfers.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-1587" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2022-1586",
                "title" : "An out-of-bounds read vulnerability was discovered in the PCRE2 library in the compile_xclass_matchingpath() function of the pcre2_jit_compile.c file. This involves a unicode property matching issue in JIT-compiled regular expressions. The issue occurs because the character was not fully read in case-less matching within JIT.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-1586" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/openldap@2.4.46-21.el8_10?arch=x86_64&distro=rhel-8.10&upstream=openldap-2.4.46-21.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2023-2953",
                "title" : "A vulnerability was found in openldap. This security flaw causes a null pointer dereference in ber_memalloc_x() function.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-2953" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2023-2953",
                "title" : "A vulnerability was found in openldap. This security flaw causes a null pointer dereference in ber_memalloc_x() function.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-2953" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/lua-libs@5.3.4-12.el8?arch=x86_64&distro=rhel-8.10&upstream=lua-5.3.4-12.el8.src.rpm",
              "issues" : [ {
                "id" : "CVE-2021-44964",
                "title" : "Use after free in garbage collector and finalizer of lgc.c in Lua interpreter 5.4.0~5.4.3 allows attackers to perform Sandbox Escape via a crafted script file.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2021-44964" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-33099",
                "title" : "An issue in the component luaG_runerror of Lua v5.4.4 and below leads to a heap-buffer overflow when a recursive error occurs.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-33099" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-28805",
                "title" : "singlevar in lparser.c in Lua from (including) 5.4.0 up to (excluding) 5.4.4 lacks a certain luaK_exp2anyregup call, leading to a heap-based buffer over-read that might affect a system that compiles untrusted Lua code.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-28805" ],
                "unique" : false
              }, {
                "id" : "CVE-2021-43519",
                "title" : "Stack overflow in lua_resume of ldo.c in Lua Interpreter 5.1.0~5.4.4 allows attackers to perform a Denial of Service via a crafted script file.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2021-43519" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2021-44964",
                "title" : "Use after free in garbage collector and finalizer of lgc.c in Lua interpreter 5.4.0~5.4.3 allows attackers to perform Sandbox Escape via a crafted script file.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2021-44964" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/bash@4.4.20-6.el8_10?arch=x86_64&distro=rhel-8.10&upstream=bash-4.4.20-6.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2022-3715",
                "source" : "redhat-csaf",
                "cvssScore" : 6.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-3715" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2022-3715",
                "source" : "redhat-csaf",
                "cvssScore" : 6.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-3715" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/rpm-libs@4.14.3-32.el8_10?arch=x86_64&distro=rhel-8.10&upstream=rpm-4.14.3-32.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2021-35938",
                "title" : "A symbolic link issue was found in rpm. It occurs when rpm sets the desired permissions and credentials after installing a file. A local unprivileged user could use this flaw to exchange the original file with a symbolic link to a security-critical file and escalate their privileges on the system. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2021-35938" ],
                "unique" : false
              }, {
                "id" : "CVE-2021-35939",
                "title" : "It was found that the fix for CVE-2017-7500 and CVE-2017-7501 was incomplete: the check was only implemented for the parent directory of the file to be created. A local unprivileged user who owns another ancestor directory could potentially use this flaw to gain root privileges. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2021-35939" ],
                "unique" : false
              }, {
                "id" : "CVE-2021-35937",
                "title" : "A race condition vulnerability was found in rpm. A local unprivileged user could use this flaw to bypass the checks that were introduced in response to CVE-2017-7500 and CVE-2017-7501, potentially gaining root privileges. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2021-35937" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2021-35938",
                "title" : "A symbolic link issue was found in rpm. It occurs when rpm sets the desired permissions and credentials after installing a file. A local unprivileged user could use this flaw to exchange the original file with a symbolic link to a security-critical file and escalate their privileges on the system. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2021-35938" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/rpm@4.14.3-32.el8_10?arch=x86_64&distro=rhel-8.10&upstream=rpm-4.14.3-32.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2021-35938",
                "title" : "A symbolic link issue was found in rpm. It occurs when rpm sets the desired permissions and credentials after installing a file. A local unprivileged user could use this flaw to exchange the original file with a symbolic link to a security-critical file and escalate their privileges on the system. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2021-35938" ],
                "unique" : false
              }, {
                "id" : "CVE-2021-35939",
                "title" : "It was found that the fix for CVE-2017-7500 and CVE-2017-7501 was incomplete: the check was only implemented for the parent directory of the file to be created. A local unprivileged user who owns another ancestor directory could potentially use this flaw to gain root privileges. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2021-35939" ],
                "unique" : false
              }, {
                "id" : "CVE-2021-35937",
                "title" : "A race condition vulnerability was found in rpm. A local unprivileged user could use this flaw to bypass the checks that were introduced in response to CVE-2017-7500 and CVE-2017-7501, potentially gaining root privileges. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2021-35937" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2021-35938",
                "title" : "A symbolic link issue was found in rpm. It occurs when rpm sets the desired permissions and credentials after installing a file. A local unprivileged user could use this flaw to exchange the original file with a symbolic link to a security-critical file and escalate their privileges on the system. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2021-35938" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/gmp@6.1.2-11.el8?arch=x86_64&distro=rhel-8.10&epoch=1&upstream=gmp-6.1.2-11.el8.src.rpm",
              "issues" : [ {
                "id" : "CVE-2021-43618",
                "title" : "GNU Multiple Precision Arithmetic Library (GMP) through 6.2.1 has an mpz/inp_raw.c integer overflow and resultant buffer overflow via crafted input, leading to a segmentation fault on 32-bit platforms.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2021-43618" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2021-43618",
                "title" : "GNU Multiple Precision Arithmetic Library (GMP) through 6.2.1 has an mpz/inp_raw.c integer overflow and resultant buffer overflow via crafted input, leading to a segmentation fault on 32-bit platforms.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2021-43618" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libgcc@8.5.0-28.el8_10?arch=x86_64&distro=rhel-8.10&upstream=gcc-8.5.0-28.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2020-11023",
                "title" : "Potential XSS vulnerability in jQuery",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2020-11023" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2020-11023",
                "title" : "Potential XSS vulnerability in jQuery",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2020-11023" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libtasn1@4.13-5.el8_10?arch=x86_64&distro=rhel-8.10&upstream=libtasn1-4.13-5.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2021-46848",
                "title" : "GNU Libtasn1 before 4.19.0 has an ETYPE_OK off-by-one array size check that affects asn1_encode_simple_der.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2021-46848" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-12133",
                "title" : "Libtasn1: inefficient der decoding in libtasn1 leading to potential remote dos",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-12133" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2021-46848",
                "title" : "GNU Libtasn1 before 4.19.0 has an ETYPE_OK off-by-one array size check that affects asn1_encode_simple_der.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2021-46848" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libcom_err@1.45.6-7.el8_10?arch=x86_64&distro=rhel-8.10&upstream=e2fsprogs-1.45.6-7.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2022-1304",
                "title" : "An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a segmentation fault and possibly arbitrary code execution via a specially crafted filesystem.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-1304" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2022-1304",
                "title" : "An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a segmentation fault and possibly arbitrary code execution via a specially crafted filesystem.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-1304" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/bzip2-libs@1.0.6-28.el8_10?arch=x86_64&distro=rhel-8.10&upstream=bzip2-1.0.6-28.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2019-12900",
                "title" : "BZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many selectors.",
                "source" : "redhat-csaf",
                "cvssScore" : 4.4,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2019-12900" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2019-12900",
                "title" : "BZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many selectors.",
                "source" : "redhat-csaf",
                "cvssScore" : 4.4,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2019-12900" ],
                "unique" : false
              }
            } ],
            "highestVulnerability" : {
              "id" : "CVE-2025-15467",
              "title" : "Stack buffer overflow in CMS (Auth)EnvelopedData parsing",
              "source" : "redhat-csaf",
              "cvssScore" : 9.8,
              "severity" : "CRITICAL",
              "cves" : [ "CVE-2025-15467" ],
              "unique" : false
            }
          }, {
            "ref" : "pkg:rpm/redhat/python3-ethtool@0.14-5.el8?arch=x86_64&distro=rhel-8.10&upstream=python-ethtool-0.14-5.el8.src.rpm",
            "transitive" : [ {
              "ref" : "pkg:rpm/redhat/openssl-libs@1.1.1k-15.el8_6?arch=x86_64&distro=rhel-8.10&epoch=1&upstream=openssl-1.1.1k-15.el8_6.src.rpm",
              "issues" : [ {
                "id" : "CVE-2025-15467",
                "title" : "Stack buffer overflow in CMS (Auth)EnvelopedData parsing",
                "source" : "redhat-csaf",
                "cvssScore" : 9.8,
                "severity" : "CRITICAL",
                "cves" : [ "CVE-2025-15467" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-1473",
                "title" : "Resource leakage when decoding certificates and keys",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-1473" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-3358",
                "title" : "Using a Custom Cipher with NID_undef may lead to NULL encryption",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-3358" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-3602",
                "title" : "X.509 Email Address 4-byte Buffer Overflow",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-3602" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-3786",
                "title" : "X.509 Email Address Variable Length Buffer Overflow",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-3786" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-4450",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-4450" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-0215",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-0215" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-0216",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-0216" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-0217",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-0217" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-0401",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-0401" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-5363",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-5363" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-0286",
                "source" : "redhat-csaf",
                "cvssScore" : 7.4,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-0286" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-12797",
                "title" : "RFC7250 handshakes with unauthenticated servers don't abort as expected",
                "source" : "redhat-csaf",
                "cvssScore" : 7.4,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-12797" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-69419",
                "source" : "redhat-csaf",
                "cvssScore" : 7.4,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-69419" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-1292",
                "source" : "redhat-csaf",
                "cvssScore" : 6.7,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-1292" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-2068",
                "source" : "redhat-csaf",
                "cvssScore" : 6.7,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-2068" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-2650",
                "title" : "Possible DoS translating ASN.1 object identifiers",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-2650" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-6129",
                "title" : "POLY1305 MAC implementation corrupts vector registers on PowerPC",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-6129" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-69421",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-69421" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-11187",
                "title" : "Improper validation of PBMAC1 parameters in PKCS#12 MAC verification",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-11187" ],
                "unique" : false
              }, {
                "id" : "CVE-2020-1971",
                "title" : "EDIPARTYNAME NULL pointer dereference",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2020-1971" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-4304",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-4304" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-0464",
                "title" : "Excessive Resource Usage Verifying X.509 Policy Constraints",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-0464" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-6237",
                "title" : "Excessive time spent checking invalid RSA public keys",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-6237" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-5535",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-5535" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-6119",
                "title" : "Possible denial of service in X.509 name checks",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-6119" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-15468",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-15468" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-66199",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-66199" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-69420",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-69420" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-22796",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-22796" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-4741",
                "source" : "redhat-csaf",
                "cvssScore" : 5.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-4741" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-9230",
                "source" : "redhat-csaf",
                "cvssScore" : 5.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-9230" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-0727",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-0727" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-15469",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-15469" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-22795",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-22795" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-1343",
                "title" : "OCSP_basic_verify may incorrectly verify the response signing certificate",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-1343" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-2097",
                "title" : "AES OCB fails to encrypt some bytes",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-2097" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-0465",
                "title" : "Invalid certificate policies in leaf certificates are silently ignored",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-0465" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-0466",
                "title" : "Certificate policy check not enabled",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-0466" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-2975",
                "title" : "AES-SIV implementation ignores empty associated data entries",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-2975" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-3446",
                "title" : "Excessive time spent checking DH keys and parameters",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-3446" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-3817",
                "title" : "Excessive time spent checking DH q parameter value",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-3817" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-5678",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-5678" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-4603",
                "title" : "Excessive time spent checking DSA keys and parameters",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-4603" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-1255",
                "title" : "Input buffer over-read in AES-XTS implementation on 64 bit ARM",
                "source" : "redhat-csaf",
                "cvssScore" : 5.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-1255" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-4203",
                "source" : "redhat-csaf",
                "cvssScore" : 4.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-4203" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-68160",
                "source" : "redhat-csaf",
                "cvssScore" : 4.7,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-68160" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-69418",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-69418" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-2511",
                "source" : "redhat-csaf",
                "cvssScore" : 3.7,
                "severity" : "LOW",
                "cves" : [ "CVE-2024-2511" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2025-15467",
                "title" : "Stack buffer overflow in CMS (Auth)EnvelopedData parsing",
                "source" : "redhat-csaf",
                "cvssScore" : 9.8,
                "severity" : "CRITICAL",
                "cves" : [ "CVE-2025-15467" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/krb5-libs@1.18.2-32.el8_10?arch=x86_64&distro=rhel-8.10&upstream=krb5-1.18.2-32.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2024-3596",
                "source" : "redhat-csaf",
                "cvssScore" : 9.0,
                "severity" : "CRITICAL",
                "cves" : [ "CVE-2024-3596" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-42898",
                "title" : "PAC parsing in MIT Kerberos 5 (aka krb5) before 1.19.4 and 1.20.x before 1.20.1 has integer overflows that may lead to remote code execution (in KDC, kadmind, or a GSS or Kerberos application server) on 32-bit platforms (which have a resultant heap-based buffer overflow), and cause a denial of service on other platforms. This occurs in krb5_pac_parse in lib/krb5/krb/pac.c. Heimdal before 7.7.1 has \"a similar bug.\"",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-42898" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-39975",
                "title" : "kdc/do_tgs_req.c in MIT Kerberos 5 (aka krb5) 1.21 before 1.21.2 has a double free that is reachable if an authenticated user can trigger an authorization-data handling failure. Incorrect data is copied from one ticket to another.",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-39975" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-26462",
                "title" : "Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/kdc/ndr.c.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-26462" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-37370",
                "title" : "In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can modify the plaintext Extra Count field of a confidential GSS krb5 wrap token, causing the unwrapped token to appear truncated to the application.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-37370" ],
                "unique" : false
              }, {
                "id" : "CVE-2020-17049",
                "title" : "Kerberos KDC Security Feature Bypass Vulnerability",
                "source" : "redhat-csaf",
                "cvssScore" : 7.2,
                "severity" : "HIGH",
                "cves" : [ "CVE-2020-17049" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-36054",
                "title" : "lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) before 1.20.2 and 1.21.x before 1.21.1 frees an uninitialized pointer. A remote authenticated user can trigger a kadmind crash. This occurs because _xdr_kadm5_principal_ent_rec does not validate the relationship between n_key_data and the key_data array count.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-36054" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-37371",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-37371" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-24528",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-24528" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-26458",
                "title" : "Kerberos 5 (aka krb5) 1.21.2 contains a memory leak in /krb5/src/lib/rpc/pmap_rmt.c.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-26458" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-26461",
                "title" : "Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/lib/gssapi/krb5/k5sealv3.c.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-26461" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-3576",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-3576" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2024-3596",
                "source" : "redhat-csaf",
                "cvssScore" : 9.0,
                "severity" : "CRITICAL",
                "cves" : [ "CVE-2024-3596" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/python3-setuptools-wheel@39.2.0-9.el8_10?arch=noarch&distro=rhel-8.10&upstream=python-setuptools-39.2.0-9.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2024-6345",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-6345" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-47273",
                "title" : "setuptools has a path traversal vulnerability in PackageIndex.download that leads to Arbitrary File Write",
                "source" : "redhat-csaf",
                "cvssScore" : 7.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-47273" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-40897",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-40897" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2024-6345",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-6345" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/glibc-minimal-langpack@2.28-251.el8_10.31?arch=x86_64&distro=rhel-8.10&upstream=glibc-2.28-251.el8_10.31.src.rpm",
              "issues" : [ {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0861",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-0861" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4911",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-4911" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33599",
                "title" : "nscd: Stack-based buffer overflow in netgroup cache",
                "source" : "redhat-csaf",
                "cvssScore" : 7.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-33599" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-4802",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-4802" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4527",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4527" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4806",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4806" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4813",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4813" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-5702",
                "title" : "The strcmp implementation optimized for the Power10 processor in the GNU C Library version 2.39 and later writes to vector registers v20 to v31 without saving contents from the caller (those registers are defined as non-volatile registers by the powerpc64le ABI), resulting in overwriting of its contents and potentially altering control flow of the caller, or leaking the input strings to the function to other parts of the program.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-5702" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-0395",
                "title" : "When the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-0395" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33600",
                "title" : "nscd: Null pointer crashes after notfound response",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33600" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0915",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-0915" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-8058",
                "source" : "redhat-csaf",
                "cvssScore" : 4.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-8058" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33601",
                "title" : "nscd: netgroup cache may terminate daemon on memory allocation failure",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33601" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33602",
                "title" : "nscd: netgroup cache assumes NSS callback uses in-buffer strings",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33602" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/glibc@2.28-251.el8_10.31?arch=x86_64&distro=rhel-8.10&upstream=glibc-2.28-251.el8_10.31.src.rpm",
              "issues" : [ {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0861",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-0861" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4911",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-4911" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33599",
                "title" : "nscd: Stack-based buffer overflow in netgroup cache",
                "source" : "redhat-csaf",
                "cvssScore" : 7.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-33599" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-4802",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-4802" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4527",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4527" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4806",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4806" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4813",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4813" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-15281",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-15281" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-5702",
                "title" : "The strcmp implementation optimized for the Power10 processor in the GNU C Library version 2.39 and later writes to vector registers v20 to v31 without saving contents from the caller (those registers are defined as non-volatile registers by the powerpc64le ABI), resulting in overwriting of its contents and potentially altering control flow of the caller, or leaking the input strings to the function to other parts of the program.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-5702" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-0395",
                "title" : "When the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-0395" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33600",
                "title" : "nscd: Null pointer crashes after notfound response",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33600" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0915",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-0915" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-8058",
                "source" : "redhat-csaf",
                "cvssScore" : 4.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-8058" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33601",
                "title" : "nscd: netgroup cache may terminate daemon on memory allocation failure",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33601" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33602",
                "title" : "nscd: netgroup cache assumes NSS callback uses in-buffer strings",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33602" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/glibc-common@2.28-251.el8_10.31?arch=x86_64&distro=rhel-8.10&upstream=glibc-2.28-251.el8_10.31.src.rpm",
              "issues" : [ {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0861",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-0861" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4911",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-4911" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33599",
                "title" : "nscd: Stack-based buffer overflow in netgroup cache",
                "source" : "redhat-csaf",
                "cvssScore" : 7.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-33599" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-4802",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-4802" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4527",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4527" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4806",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4806" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4813",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4813" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-5702",
                "title" : "The strcmp implementation optimized for the Power10 processor in the GNU C Library version 2.39 and later writes to vector registers v20 to v31 without saving contents from the caller (those registers are defined as non-volatile registers by the powerpc64le ABI), resulting in overwriting of its contents and potentially altering control flow of the caller, or leaking the input strings to the function to other parts of the program.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-5702" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-0395",
                "title" : "When the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-0395" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33600",
                "title" : "nscd: Null pointer crashes after notfound response",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33600" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0915",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-0915" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-8058",
                "source" : "redhat-csaf",
                "cvssScore" : 4.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-8058" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33601",
                "title" : "nscd: netgroup cache may terminate daemon on memory allocation failure",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33601" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33602",
                "title" : "nscd: netgroup cache assumes NSS callback uses in-buffer strings",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33602" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/xz-libs@5.2.4-4.el8_6?arch=x86_64&distro=rhel-8.10&upstream=xz-5.2.4-4.el8_6.src.rpm",
              "issues" : [ {
                "id" : "CVE-2022-1271",
                "title" : "An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is applied on the attacker's chosen file name (for example, a crafted file name), this can overwrite an attacker's content to an arbitrary attacker-selected file. This flaw occurs due to insufficient validation when processing filenames with two or more newlines where selected content and the target file names are embedded in crafted multi-line file names. This flaw allows a remote, low privileged attacker to force zgrep to write arbitrary files on the system.",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-1271" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-31115",
                "title" : "XZ has a heap-use-after-free bug in threaded .xz decoder",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-31115" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2022-1271",
                "title" : "An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is applied on the attacker's chosen file name (for example, a crafted file name), this can overwrite an attacker's content to an arbitrary attacker-selected file. This flaw occurs due to insufficient validation when processing filenames with two or more newlines where selected content and the target file names are embedded in crafted multi-line file names. This flaw allows a remote, low privileged attacker to force zgrep to write arbitrary files on the system.",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-1271" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/python3-libs@3.6.8-75.el8_10?arch=x86_64&distro=rhel-8.10&upstream=python3-3.6.8-75.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2023-40217",
                "source" : "redhat-csaf",
                "cvssScore" : 8.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-40217" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-42919",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-42919" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-6597",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-6597" ],
                "unique" : false
              }, {
                "id" : "CVE-2015-20107",
                "source" : "redhat-csaf",
                "cvssScore" : 7.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2015-20107" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-12718",
                "title" : "Bypass extraction filter to modify file metadata outside extraction directory",
                "source" : "redhat-csaf",
                "cvssScore" : 7.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-12718" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-4517",
                "title" : "Arbitrary writes via tarfile realpath overflow",
                "source" : "redhat-csaf",
                "cvssScore" : 7.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-4517" ],
                "unique" : false
              }, {
                "id" : "CVE-2020-10735",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2020-10735" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-45061",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-45061" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-24329",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-24329" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-6232",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-6232" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-12084",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-12084" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-4138",
                "title" : "Bypassing extraction filter to create symlinks to arbitrary targets outside extraction directory",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-4138" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-4435",
                "title" : "Tarfile extracts filtered members when errorlevel=0",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-4435" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-8194",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-8194" ],
                "unique" : false
              }, {
                "id" : "CVE-2021-28861",
                "source" : "redhat-csaf",
                "cvssScore" : 7.4,
                "severity" : "HIGH",
                "cves" : [ "CVE-2021-28861" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-4330",
                "title" : "Extraction filter bypass for linking outside extraction directory",
                "source" : "redhat-csaf",
                "cvssScore" : 7.3,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-4330" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-15366",
                "source" : "redhat-csaf",
                "cvssScore" : 7.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-15366" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-15367",
                "source" : "redhat-csaf",
                "cvssScore" : 7.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-15367" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-1299",
                "source" : "redhat-csaf",
                "cvssScore" : 7.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-1299" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-4519",
                "title" : "webbrowser.open() allows leading dashes in URLs",
                "source" : "redhat-csaf",
                "cvssScore" : 7.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-4519" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-6923",
                "source" : "redhat-csaf",
                "cvssScore" : 6.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-6923" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-0938",
                "source" : "redhat-csaf",
                "cvssScore" : 6.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-0938" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-13836",
                "source" : "redhat-csaf",
                "cvssScore" : 6.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-13836" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-9287",
                "source" : "redhat-csaf",
                "cvssScore" : 6.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-9287" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-0450",
                "source" : "redhat-csaf",
                "cvssScore" : 6.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-0450" ],
                "unique" : false
              }, {
                "id" : "CVE-2007-4559",
                "title" : "Directory traversal vulnerability in the (1) extract and (2) extractall functions in the tarfile module in Python allows user-assisted remote attackers to overwrite arbitrary files via a .. (dot dot) sequence in filenames in a TAR archive, a related issue to CVE-2001-1267.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2007-4559" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-27043",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-27043" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-8088",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-8088" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-0397",
                "source" : "redhat-csaf",
                "cvssScore" : 5.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-0397" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-7592",
                "source" : "redhat-csaf",
                "cvssScore" : 4.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-7592" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0865",
                "source" : "redhat-csaf",
                "cvssScore" : 4.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-0865" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-6069",
                "title" : "HTMLParser quadratic complexity when processing malformed inputs",
                "source" : "redhat-csaf",
                "cvssScore" : 4.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-6069" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-8291",
                "source" : "redhat-csaf",
                "cvssScore" : 4.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-8291" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-6075",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-6075" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-11168",
                "source" : "redhat-csaf",
                "cvssScore" : 3.7,
                "severity" : "LOW",
                "cves" : [ "CVE-2024-11168" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-4032",
                "source" : "redhat-csaf",
                "cvssScore" : 3.7,
                "severity" : "LOW",
                "cves" : [ "CVE-2024-4032" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-5642",
                "title" : "Buffer overread when using an empty list with SSLContext.set_npn_protocols()",
                "source" : "redhat-csaf",
                "cvssScore" : 2.7,
                "severity" : "LOW",
                "cves" : [ "CVE-2024-5642" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2023-40217",
                "source" : "redhat-csaf",
                "cvssScore" : 8.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-40217" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/zlib@1.2.11-25.el8?arch=x86_64&distro=rhel-8.10&upstream=zlib-1.2.11-25.el8.src.rpm",
              "issues" : [ {
                "id" : "CVE-2018-25032",
                "title" : "zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.",
                "source" : "redhat-csaf",
                "cvssScore" : 8.2,
                "severity" : "HIGH",
                "cves" : [ "CVE-2018-25032" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-37434",
                "title" : "zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference).",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-37434" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2018-25032",
                "title" : "zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.",
                "source" : "redhat-csaf",
                "cvssScore" : 8.2,
                "severity" : "HIGH",
                "cves" : [ "CVE-2018-25032" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libcap@2.48-6.el8_9?arch=x86_64&distro=rhel-8.10&upstream=libcap-2.48-6.el8_9.src.rpm",
              "issues" : [ {
                "id" : "CVE-2023-2603",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-2603" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-2602",
                "title" : "A vulnerability was found in the pthread_create() function in libcap. This issue may allow a malicious actor to use cause __real_pthread_create() to return an error, which can exhaust the process memory.",
                "source" : "redhat-csaf",
                "cvssScore" : 3.3,
                "severity" : "LOW",
                "cves" : [ "CVE-2023-2602" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2023-2603",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-2603" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/ncurses-base@6.1-10.20180224.el8?arch=noarch&distro=rhel-8.10&upstream=ncurses-6.1-10.20180224.el8.src.rpm",
              "issues" : [ {
                "id" : "CVE-2023-29491",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-29491" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-69720",
                "title" : "The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-69720" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-29458",
                "title" : "ncurses 6.3 before patch 20220416 has an out-of-bounds read and segmentation violation in convert_strings in tinfo/read_entry.c in the terminfo library.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-29458" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2023-29491",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-29491" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/ncurses-libs@6.1-10.20180224.el8?arch=x86_64&distro=rhel-8.10&upstream=ncurses-6.1-10.20180224.el8.src.rpm",
              "issues" : [ {
                "id" : "CVE-2023-29491",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-29491" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-69720",
                "title" : "The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-69720" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-29458",
                "title" : "ncurses 6.3 before patch 20220416 has an out-of-bounds read and segmentation violation in convert_strings in tinfo/read_entry.c in the terminfo library.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-29458" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2023-29491",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-29491" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/sqlite-libs@3.26.0-20.el8_10?arch=x86_64&distro=rhel-8.10&upstream=sqlite-3.26.0-20.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2025-6965",
                "title" : "Integer Truncation on SQLite",
                "source" : "redhat-csaf",
                "cvssScore" : 7.7,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-6965" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-7104",
                "source" : "redhat-csaf",
                "cvssScore" : 7.3,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-7104" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-3277",
                "title" : "An integer overflow can be triggered in SQLite’s `concat_ws()` function. The resulting, truncated integer is then used to allocate a buffer. When SQLite then writes the resulting string to the buffer, it uses the original, untruncated size and thus a wild Heap Buffer overflow of size ~4GB can be triggered. This can result in arbitrary code execution.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.3,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-3277" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-35737",
                "title" : "SQLite 1.0.12 through 3.39.x before 3.39.2 sometimes allows an array-bounds overflow if billions of bytes are used in a string argument to a C API.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-35737" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2025-6965",
                "title" : "Integer Truncation on SQLite",
                "source" : "redhat-csaf",
                "cvssScore" : 7.7,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-6965" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/expat@2.5.0-1.el8_10?arch=x86_64&distro=rhel-8.10&upstream=expat-2.5.0-1.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2023-52425",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-52425" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-28757",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-28757" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-45490",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-45490" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-45491",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-45491" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-8176",
                "title" : "Libexpat: expat: improper restriction of xml entity expansion depth in libexpat",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-8176" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-45492",
                "source" : "redhat-csaf",
                "cvssScore" : 6.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-45492" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-50602",
                "title" : "An issue was discovered in libexpat before 2.6.4. There is a crash within the XML_ResumeParser function because XML_StopParser can stop/suspend an unstarted parser.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-50602" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-59375",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-59375" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2023-52425",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-52425" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libtirpc@1.1.4-12.el8_10?arch=x86_64&distro=rhel-8.10&upstream=libtirpc-1.1.4-12.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2021-46828",
                "title" : "In libtirpc before 1.3.3rc1, remote attackers could exhaust the file descriptors of a process that uses libtirpc because idle TCP connections are mishandled. This can, in turn, lead to an svc_run infinite loop without accepting new connections.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2021-46828" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2021-46828",
                "title" : "In libtirpc before 1.3.3rc1, remote attackers could exhaust the file descriptors of a process that uses libtirpc because idle TCP connections are mishandled. This can, in turn, lead to an svc_run infinite loop without accepting new connections.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2021-46828" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/pcre2@10.32-3.el8_6?arch=x86_64&distro=rhel-8.10&upstream=pcre2-10.32-3.el8_6.src.rpm",
              "issues" : [ {
                "id" : "CVE-2022-1586",
                "title" : "An out-of-bounds read vulnerability was discovered in the PCRE2 library in the compile_xclass_matchingpath() function of the pcre2_jit_compile.c file. This involves a unicode property matching issue in JIT-compiled regular expressions. The issue occurs because the character was not fully read in case-less matching within JIT.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-1586" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-1587",
                "title" : "An out-of-bounds read vulnerability was discovered in the PCRE2 library in the get_recurse_data_length() function of the pcre2_jit_compile.c file. This issue affects recursions in JIT-compiled regular expressions caused by duplicate data transfers.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-1587" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2022-1586",
                "title" : "An out-of-bounds read vulnerability was discovered in the PCRE2 library in the compile_xclass_matchingpath() function of the pcre2_jit_compile.c file. This involves a unicode property matching issue in JIT-compiled regular expressions. The issue occurs because the character was not fully read in case-less matching within JIT.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-1586" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/bash@4.4.20-6.el8_10?arch=x86_64&distro=rhel-8.10&upstream=bash-4.4.20-6.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2022-3715",
                "source" : "redhat-csaf",
                "cvssScore" : 6.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-3715" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2022-3715",
                "source" : "redhat-csaf",
                "cvssScore" : 6.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-3715" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/gmp@6.1.2-11.el8?arch=x86_64&distro=rhel-8.10&epoch=1&upstream=gmp-6.1.2-11.el8.src.rpm",
              "issues" : [ {
                "id" : "CVE-2021-43618",
                "title" : "GNU Multiple Precision Arithmetic Library (GMP) through 6.2.1 has an mpz/inp_raw.c integer overflow and resultant buffer overflow via crafted input, leading to a segmentation fault on 32-bit platforms.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2021-43618" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2021-43618",
                "title" : "GNU Multiple Precision Arithmetic Library (GMP) through 6.2.1 has an mpz/inp_raw.c integer overflow and resultant buffer overflow via crafted input, leading to a segmentation fault on 32-bit platforms.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2021-43618" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libgcc@8.5.0-28.el8_10?arch=x86_64&distro=rhel-8.10&upstream=gcc-8.5.0-28.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2020-11023",
                "title" : "Potential XSS vulnerability in jQuery",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2020-11023" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2020-11023",
                "title" : "Potential XSS vulnerability in jQuery",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2020-11023" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libtasn1@4.13-5.el8_10?arch=x86_64&distro=rhel-8.10&upstream=libtasn1-4.13-5.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2021-46848",
                "title" : "GNU Libtasn1 before 4.19.0 has an ETYPE_OK off-by-one array size check that affects asn1_encode_simple_der.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2021-46848" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-12133",
                "title" : "Libtasn1: inefficient der decoding in libtasn1 leading to potential remote dos",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-12133" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2021-46848",
                "title" : "GNU Libtasn1 before 4.19.0 has an ETYPE_OK off-by-one array size check that affects asn1_encode_simple_der.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2021-46848" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libcom_err@1.45.6-7.el8_10?arch=x86_64&distro=rhel-8.10&upstream=e2fsprogs-1.45.6-7.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2022-1304",
                "title" : "An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a segmentation fault and possibly arbitrary code execution via a specially crafted filesystem.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-1304" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2022-1304",
                "title" : "An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a segmentation fault and possibly arbitrary code execution via a specially crafted filesystem.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-1304" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/python3-pip-wheel@9.0.3-24.el8?arch=noarch&distro=rhel-8.10&upstream=python-pip-9.0.3-24.el8.src.rpm",
              "issues" : [ {
                "id" : "CVE-2007-4559",
                "title" : "Directory traversal vulnerability in the (1) extract and (2) extractall functions in the tarfile module in Python allows user-assisted remote attackers to overwrite arbitrary files via a .. (dot dot) sequence in filenames in a TAR archive, a related issue to CVE-2001-1267.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2007-4559" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2007-4559",
                "title" : "Directory traversal vulnerability in the (1) extract and (2) extractall functions in the tarfile module in Python allows user-assisted remote attackers to overwrite arbitrary files via a .. (dot dot) sequence in filenames in a TAR archive, a related issue to CVE-2001-1267.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2007-4559" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/bzip2-libs@1.0.6-28.el8_10?arch=x86_64&distro=rhel-8.10&upstream=bzip2-1.0.6-28.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2019-12900",
                "title" : "BZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many selectors.",
                "source" : "redhat-csaf",
                "cvssScore" : 4.4,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2019-12900" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2019-12900",
                "title" : "BZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many selectors.",
                "source" : "redhat-csaf",
                "cvssScore" : 4.4,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2019-12900" ],
                "unique" : false
              }
            } ],
            "highestVulnerability" : {
              "id" : "CVE-2025-15467",
              "title" : "Stack buffer overflow in CMS (Auth)EnvelopedData parsing",
              "source" : "redhat-csaf",
              "cvssScore" : 9.8,
              "severity" : "CRITICAL",
              "cves" : [ "CVE-2025-15467" ],
              "unique" : false
            }
          }, {
            "ref" : "pkg:rpm/redhat/python3-cloud-what@1.28.44-1.el8_10?arch=x86_64&distro=rhel-8.10&upstream=subscription-manager-1.28.44-1.el8_10.src.rpm",
            "issues" : [ {
              "id" : "CVE-2023-3899",
              "source" : "redhat-csaf",
              "cvssScore" : 7.8,
              "severity" : "HIGH",
              "cves" : [ "CVE-2023-3899" ],
              "unique" : false
            } ],
            "transitive" : [ {
              "ref" : "pkg:rpm/redhat/openssl-libs@1.1.1k-15.el8_6?arch=x86_64&distro=rhel-8.10&epoch=1&upstream=openssl-1.1.1k-15.el8_6.src.rpm",
              "issues" : [ {
                "id" : "CVE-2025-15467",
                "title" : "Stack buffer overflow in CMS (Auth)EnvelopedData parsing",
                "source" : "redhat-csaf",
                "cvssScore" : 9.8,
                "severity" : "CRITICAL",
                "cves" : [ "CVE-2025-15467" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-1473",
                "title" : "Resource leakage when decoding certificates and keys",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-1473" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-3358",
                "title" : "Using a Custom Cipher with NID_undef may lead to NULL encryption",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-3358" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-3602",
                "title" : "X.509 Email Address 4-byte Buffer Overflow",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-3602" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-3786",
                "title" : "X.509 Email Address Variable Length Buffer Overflow",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-3786" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-4450",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-4450" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-0215",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-0215" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-0216",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-0216" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-0217",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-0217" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-0401",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-0401" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-5363",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-5363" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-0286",
                "source" : "redhat-csaf",
                "cvssScore" : 7.4,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-0286" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-12797",
                "title" : "RFC7250 handshakes with unauthenticated servers don't abort as expected",
                "source" : "redhat-csaf",
                "cvssScore" : 7.4,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-12797" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-69419",
                "source" : "redhat-csaf",
                "cvssScore" : 7.4,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-69419" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-1292",
                "source" : "redhat-csaf",
                "cvssScore" : 6.7,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-1292" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-2068",
                "source" : "redhat-csaf",
                "cvssScore" : 6.7,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-2068" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-2650",
                "title" : "Possible DoS translating ASN.1 object identifiers",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-2650" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-6129",
                "title" : "POLY1305 MAC implementation corrupts vector registers on PowerPC",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-6129" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-69421",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-69421" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-11187",
                "title" : "Improper validation of PBMAC1 parameters in PKCS#12 MAC verification",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-11187" ],
                "unique" : false
              }, {
                "id" : "CVE-2020-1971",
                "title" : "EDIPARTYNAME NULL pointer dereference",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2020-1971" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-4304",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-4304" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-0464",
                "title" : "Excessive Resource Usage Verifying X.509 Policy Constraints",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-0464" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-6237",
                "title" : "Excessive time spent checking invalid RSA public keys",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-6237" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-5535",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-5535" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-6119",
                "title" : "Possible denial of service in X.509 name checks",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-6119" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-15468",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-15468" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-66199",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-66199" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-69420",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-69420" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-22796",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-22796" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-4741",
                "source" : "redhat-csaf",
                "cvssScore" : 5.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-4741" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-9230",
                "source" : "redhat-csaf",
                "cvssScore" : 5.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-9230" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-0727",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-0727" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-15469",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-15469" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-22795",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-22795" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-1343",
                "title" : "OCSP_basic_verify may incorrectly verify the response signing certificate",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-1343" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-2097",
                "title" : "AES OCB fails to encrypt some bytes",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-2097" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-0465",
                "title" : "Invalid certificate policies in leaf certificates are silently ignored",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-0465" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-0466",
                "title" : "Certificate policy check not enabled",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-0466" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-2975",
                "title" : "AES-SIV implementation ignores empty associated data entries",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-2975" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-3446",
                "title" : "Excessive time spent checking DH keys and parameters",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-3446" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-3817",
                "title" : "Excessive time spent checking DH q parameter value",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-3817" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-5678",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-5678" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-4603",
                "title" : "Excessive time spent checking DSA keys and parameters",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-4603" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-1255",
                "title" : "Input buffer over-read in AES-XTS implementation on 64 bit ARM",
                "source" : "redhat-csaf",
                "cvssScore" : 5.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-1255" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-4203",
                "source" : "redhat-csaf",
                "cvssScore" : 4.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-4203" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-68160",
                "source" : "redhat-csaf",
                "cvssScore" : 4.7,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-68160" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-69418",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-69418" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-2511",
                "source" : "redhat-csaf",
                "cvssScore" : 3.7,
                "severity" : "LOW",
                "cves" : [ "CVE-2024-2511" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2025-15467",
                "title" : "Stack buffer overflow in CMS (Auth)EnvelopedData parsing",
                "source" : "redhat-csaf",
                "cvssScore" : 9.8,
                "severity" : "CRITICAL",
                "cves" : [ "CVE-2025-15467" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/krb5-libs@1.18.2-32.el8_10?arch=x86_64&distro=rhel-8.10&upstream=krb5-1.18.2-32.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2024-3596",
                "source" : "redhat-csaf",
                "cvssScore" : 9.0,
                "severity" : "CRITICAL",
                "cves" : [ "CVE-2024-3596" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-42898",
                "title" : "PAC parsing in MIT Kerberos 5 (aka krb5) before 1.19.4 and 1.20.x before 1.20.1 has integer overflows that may lead to remote code execution (in KDC, kadmind, or a GSS or Kerberos application server) on 32-bit platforms (which have a resultant heap-based buffer overflow), and cause a denial of service on other platforms. This occurs in krb5_pac_parse in lib/krb5/krb/pac.c. Heimdal before 7.7.1 has \"a similar bug.\"",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-42898" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-39975",
                "title" : "kdc/do_tgs_req.c in MIT Kerberos 5 (aka krb5) 1.21 before 1.21.2 has a double free that is reachable if an authenticated user can trigger an authorization-data handling failure. Incorrect data is copied from one ticket to another.",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-39975" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-26462",
                "title" : "Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/kdc/ndr.c.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-26462" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-37370",
                "title" : "In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can modify the plaintext Extra Count field of a confidential GSS krb5 wrap token, causing the unwrapped token to appear truncated to the application.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-37370" ],
                "unique" : false
              }, {
                "id" : "CVE-2020-17049",
                "title" : "Kerberos KDC Security Feature Bypass Vulnerability",
                "source" : "redhat-csaf",
                "cvssScore" : 7.2,
                "severity" : "HIGH",
                "cves" : [ "CVE-2020-17049" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-36054",
                "title" : "lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) before 1.20.2 and 1.21.x before 1.21.1 frees an uninitialized pointer. A remote authenticated user can trigger a kadmind crash. This occurs because _xdr_kadm5_principal_ent_rec does not validate the relationship between n_key_data and the key_data array count.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-36054" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-37371",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-37371" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-24528",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-24528" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-26458",
                "title" : "Kerberos 5 (aka krb5) 1.21.2 contains a memory leak in /krb5/src/lib/rpc/pmap_rmt.c.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-26458" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-26461",
                "title" : "Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/lib/gssapi/krb5/k5sealv3.c.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-26461" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-3576",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-3576" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2024-3596",
                "source" : "redhat-csaf",
                "cvssScore" : 9.0,
                "severity" : "CRITICAL",
                "cves" : [ "CVE-2024-3596" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/python3-setuptools-wheel@39.2.0-9.el8_10?arch=noarch&distro=rhel-8.10&upstream=python-setuptools-39.2.0-9.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2024-6345",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-6345" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-47273",
                "title" : "setuptools has a path traversal vulnerability in PackageIndex.download that leads to Arbitrary File Write",
                "source" : "redhat-csaf",
                "cvssScore" : 7.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-47273" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-40897",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-40897" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2024-6345",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-6345" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/glibc-minimal-langpack@2.28-251.el8_10.31?arch=x86_64&distro=rhel-8.10&upstream=glibc-2.28-251.el8_10.31.src.rpm",
              "issues" : [ {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0861",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-0861" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4911",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-4911" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33599",
                "title" : "nscd: Stack-based buffer overflow in netgroup cache",
                "source" : "redhat-csaf",
                "cvssScore" : 7.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-33599" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-4802",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-4802" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4527",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4527" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4806",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4806" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4813",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4813" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-5702",
                "title" : "The strcmp implementation optimized for the Power10 processor in the GNU C Library version 2.39 and later writes to vector registers v20 to v31 without saving contents from the caller (those registers are defined as non-volatile registers by the powerpc64le ABI), resulting in overwriting of its contents and potentially altering control flow of the caller, or leaking the input strings to the function to other parts of the program.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-5702" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-0395",
                "title" : "When the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-0395" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33600",
                "title" : "nscd: Null pointer crashes after notfound response",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33600" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0915",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-0915" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-8058",
                "source" : "redhat-csaf",
                "cvssScore" : 4.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-8058" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33601",
                "title" : "nscd: netgroup cache may terminate daemon on memory allocation failure",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33601" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33602",
                "title" : "nscd: netgroup cache assumes NSS callback uses in-buffer strings",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33602" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/glibc@2.28-251.el8_10.31?arch=x86_64&distro=rhel-8.10&upstream=glibc-2.28-251.el8_10.31.src.rpm",
              "issues" : [ {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0861",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-0861" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4911",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-4911" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33599",
                "title" : "nscd: Stack-based buffer overflow in netgroup cache",
                "source" : "redhat-csaf",
                "cvssScore" : 7.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-33599" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-4802",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-4802" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4527",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4527" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4806",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4806" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4813",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4813" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-15281",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-15281" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-5702",
                "title" : "The strcmp implementation optimized for the Power10 processor in the GNU C Library version 2.39 and later writes to vector registers v20 to v31 without saving contents from the caller (those registers are defined as non-volatile registers by the powerpc64le ABI), resulting in overwriting of its contents and potentially altering control flow of the caller, or leaking the input strings to the function to other parts of the program.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-5702" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-0395",
                "title" : "When the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-0395" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33600",
                "title" : "nscd: Null pointer crashes after notfound response",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33600" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0915",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-0915" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-8058",
                "source" : "redhat-csaf",
                "cvssScore" : 4.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-8058" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33601",
                "title" : "nscd: netgroup cache may terminate daemon on memory allocation failure",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33601" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33602",
                "title" : "nscd: netgroup cache assumes NSS callback uses in-buffer strings",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33602" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/python3-chardet@3.0.4-7.el8?arch=noarch&distro=rhel-8.10&upstream=python-chardet-3.0.4-7.el8.src.rpm",
              "issues" : [ {
                "id" : "CVE-2018-3258",
                "title" : "Vulnerability in the MySQL Connectors component of Oracle MySQL (subcomponent: Connector/J). Supported versions that are affected are 8.0.12 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Connectors. Successful attacks of this vulnerability can result in takeover of MySQL Connectors. CVSS 3.0 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2018-3258" ],
                "unique" : false
              }, {
                "id" : "CVE-2020-10968",
                "title" : "FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.aoju.bus.proxy.provider.remoting.RmiProvider (aka bus-proxy).",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2020-10968" ],
                "unique" : false
              }, {
                "id" : "CVE-2020-14334",
                "title" : "A flaw was found in Red Hat Satellite 6 which allows privileged attacker to read cache files. These cache credentials could help attacker to gain complete control of the Satellite instance.",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2020-14334" ],
                "unique" : false
              }, {
                "id" : "CVE-2020-10969",
                "title" : "FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to javax.swing.JEditorPane.",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2020-10969" ],
                "unique" : false
              }, {
                "id" : "CVE-2020-11619",
                "title" : "FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.springframework.aop.config.MethodLocatingFactoryBean (aka spring-aop).",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2020-11619" ],
                "unique" : false
              }, {
                "id" : "CVE-2020-14061",
                "title" : "FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction between serialization gadgets and typing, related to oracle.jms.AQjmsQueueConnectionFactory, oracle.jms.AQjmsXATopicConnectionFactory, oracle.jms.AQjmsTopicConnectionFactory, oracle.jms.AQjmsXAQueueConnectionFactory, and oracle.jms.AQjmsXAConnectionFactory (aka weblogic/oracle-aqjms).",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2020-14061" ],
                "unique" : false
              }, {
                "id" : "CVE-2020-14062",
                "title" : "FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction between serialization gadgets and typing, related to com.sun.org.apache.xalan.internal.lib.sql.JNDIConnectionPool (aka xalan2).",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2020-14062" ],
                "unique" : false
              }, {
                "id" : "CVE-2020-14195",
                "title" : "FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction between serialization gadgets and typing, related to org.jsecurity.realm.jndi.JndiRealmFactory (aka org.jsecurity).",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2020-14195" ],
                "unique" : false
              }, {
                "id" : "CVE-2020-8840",
                "title" : "FasterXML jackson-databind 2.0.0 through 2.9.10.2 lacks certain xbean-reflect/JNDI blocking, as demonstrated by org.apache.xbean.propertyeditor.JndiConverter.",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2020-8840" ],
                "unique" : false
              }, {
                "id" : "CVE-2020-9546",
                "title" : "FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.hadoop.shaded.com.zaxxer.hikari.HikariConfig (aka shaded hikari-config).",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2020-9546" ],
                "unique" : false
              }, {
                "id" : "CVE-2020-9547",
                "title" : "FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to com.ibatis.sqlmap.engine.transaction.jta.JtaTransactionConfig (aka ibatis-sqlmap).",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2020-9547" ],
                "unique" : false
              }, {
                "id" : "CVE-2020-9548",
                "title" : "FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to br.com.anteros.dbcp.AnterosDBCPConfig (aka anteros-core).",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2020-9548" ],
                "unique" : false
              }, {
                "id" : "CVE-2019-12086",
                "title" : "A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.x before 2.9.9. When Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint, the service has the mysql-connector-java jar (8.0.14 or earlier) in the classpath, and an attacker can host a crafted MySQL server reachable by the victim, an attacker can send a crafted JSON message that allows them to read arbitrary local files on the server. This occurs because of missing com.mysql.cj.jdbc.admin.MiniAdmin validation.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2019-12086" ],
                "unique" : false
              }, {
                "id" : "CVE-2020-14380",
                "title" : "An account takeover flaw was found in Red Hat Satellite 6.7.2 onward. A potential attacker with proper authentication to the relevant external authentication source (SSO or Open ID) can claim the privileges of already existing local users of Satellite.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2020-14380" ],
                "unique" : false
              }, {
                "id" : "CVE-2020-7238",
                "title" : "Netty 4.1.43.Final allows HTTP Request Smuggling because it mishandles Transfer-Encoding whitespace (such as a [space]Transfer-Encoding:chunked line) and a later Content-Length header. This issue exists because of an incomplete fix for CVE-2019-16869.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2020-7238" ],
                "unique" : false
              }, {
                "id" : "CVE-2020-7943",
                "title" : "Puppet Server and PuppetDB provide useful performance and debugging information via their metrics API endpoints. For PuppetDB this may contain things like hostnames. Puppet Server reports resource names and titles for defined types (which may contain sensitive information) as well as function names and class names. Previously, these endpoints were open to the local network. PE 2018.1.13 & 2019.5.0, Puppet Server 6.9.2 & 5.3.12, and PuppetDB 6.9.1 & 5.2.13 disable trapperkeeper-metrics /v1 metrics API and only allows /v2 access on localhost by default. This affects software versions: Puppet Enterprise 2018.1.x stream prior to 2018.1.13 Puppet Enterprise prior to 2019.5.0 Puppet Server prior to 6.9.2 Puppet Server prior to 5.3.12 PuppetDB prior to 6.9.1 PuppetDB prior to 5.2.13 Resolved in: Puppet Enterprise 2018.1.13 Puppet Enterprise 2019.5.0 Puppet Server 6.9.2 Puppet Server 5.3.12 PuppetDB 6.9.1 PuppetDB 5.2.13",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2020-7943" ],
                "unique" : false
              }, {
                "id" : "CVE-2020-8184",
                "title" : "A reliance on cookies without validation/integrity check security vulnerability exists in rack < 2.2.3, rack < 2.1.4 that makes it is possible for an attacker to forge a secure or host-only cookie prefix.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2020-8184" ],
                "unique" : false
              }, {
                "id" : "CVE-2019-10086",
                "title" : "In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added which allows suppressing the ability for an attacker to access the classloader via the class property available on all Java objects. We, however were not using this by default characteristic of the PropertyUtilsBean.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.3,
                "severity" : "HIGH",
                "cves" : [ "CVE-2019-10086" ],
                "unique" : false
              }, {
                "id" : "CVE-2020-8185",
                "title" : "A denial of service vulnerability exists in Rails <6.0.3.2 that allowed an untrusted user to run any pending migrations on a Rails app running in production.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2020-8185" ],
                "unique" : false
              }, {
                "id" : "CVE-2019-0231",
                "title" : "Apache MINA SSLFilter security Issue",
                "source" : "redhat-csaf",
                "cvssScore" : 6.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2019-0231" ],
                "unique" : false
              }, {
                "id" : "CVE-2019-10219",
                "title" : "A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2019-10219" ],
                "unique" : false
              }, {
                "id" : "CVE-2020-7942",
                "title" : "Previously, Puppet operated on a model that a node with a valid certificate was entitled to all information in the system and that a compromised certificate allowed access to everything in the infrastructure. When a node's catalog falls back to the `default` node, the catalog can be retrieved for a different node by modifying facts for the Puppet run. This issue can be mitigated by setting `strict_hostname_checking = true` in `puppet.conf` on your Puppet master. Puppet 6.13.0 and 5.5.19 changes the default behavior for strict_hostname_checking from false to true. It is recommended that Puppet Open Source and Puppet Enterprise users that are not upgrading still set strict_hostname_checking to true to ensure secure behavior. Affected software versions: Puppet 6.x prior to 6.13.0 Puppet Agent 6.x prior to 6.13.0 Puppet 5.5.x prior to 5.5.19 Puppet Agent 5.5.x prior to 5.5.19 Resolved in: Puppet 6.13.0 Puppet Agent 6.13.0 Puppet 5.5.19 Puppet Agent 5.5.19",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2020-7942" ],
                "unique" : false
              }, {
                "id" : "CVE-2019-16782",
                "title" : "Possible Information Leak / Session Hijack Vulnerability in Rack",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2019-16782" ],
                "unique" : false
              }, {
                "id" : "CVE-2020-8161",
                "title" : "A directory traversal vulnerability exists in rack < 2.2.0 that allows an attacker perform directory traversal vulnerability in the Rack::Directory app that is bundled with Rack which could result in information disclosure.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2020-8161" ],
                "unique" : false
              }, {
                "id" : "CVE-2020-5216",
                "title" : "Limited header injection when using dynamic overrides with user input in RubyGems secure_headers",
                "source" : "redhat-csaf",
                "cvssScore" : 5.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2020-5216" ],
                "unique" : false
              }, {
                "id" : "CVE-2020-5217",
                "title" : "Directive injection when using dynamic overrides with user input in RubyGems secure_headers",
                "source" : "redhat-csaf",
                "cvssScore" : 5.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2020-5217" ],
                "unique" : false
              }, {
                "id" : "CVE-2020-10693",
                "title" : "A flaw was found in Hibernate Validator version 6.1.2.Final. A bug in the message interpolation processor enables invalid EL expressions to be evaluated as if they were valid. This flaw allows attackers to bypass input sanitation (escaping, stripping) controls that developers may have put in place when handling user-controlled data in error messages.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2020-10693" ],
                "unique" : false
              }, {
                "id" : "CVE-2017-17718",
                "title" : "The Net::LDAP (aka net-ldap) gem before 0.16.0 for Ruby has Missing SSL Certificate Validation.",
                "source" : "redhat-csaf",
                "cvssScore" : 4.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2017-17718" ],
                "unique" : false
              }, {
                "id" : "CVE-2019-12781",
                "title" : "An issue was discovered in Django 1.11 before 1.11.22, 2.1 before 2.1.10, and 2.2 before 2.2.3. An HTTP request is not redirected to HTTPS when the SECURE_PROXY_SSL_HEADER and SECURE_SSL_REDIRECT settings are used, and the proxy connects to Django via HTTPS. In other words, django.http.HttpRequest.scheme has incorrect behavior when a client uses HTTP.",
                "source" : "redhat-csaf",
                "cvssScore" : 4.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2019-12781" ],
                "unique" : false
              }, {
                "id" : "CVE-2020-10716",
                "title" : "A flaw was found in Red Hat Satellite's Job Invocation, where the \"User Input\" entry was not properly restricted to the view. This flaw allows a malicious Satellite user to scan through the Job Invocation, with the ability to search for passwords and other sensitive data. This flaw affects tfm-rubygem-foreman_ansible versions before 4.0.3.4.",
                "source" : "redhat-csaf",
                "cvssScore" : 4.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2020-10716" ],
                "unique" : false
              }, {
                "id" : "CVE-2018-1000119",
                "title" : "Sinatra rack-protection versions 1.5.4 and 2.0.0.rc3 and earlier contains a timing attack vulnerability in the CSRF token checking that can result in signatures can be exposed. This attack appear to be exploitable via network connectivity to the ruby application. This vulnerability appears to have been fixed in 1.5.5 and 2.0.0.",
                "source" : "redhat-csaf",
                "cvssScore" : 3.7,
                "severity" : "LOW",
                "cves" : [ "CVE-2018-1000119" ],
                "unique" : false
              }, {
                "id" : "CVE-2018-11751",
                "title" : "Previous versions of Puppet Agent didn't verify the peer in the SSL connection prior to downloading the CRL. This issue is resolved in Puppet Agent 6.4.0.",
                "source" : "redhat-csaf",
                "cvssScore" : 3.7,
                "severity" : "LOW",
                "cves" : [ "CVE-2018-11751" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2018-3258",
                "title" : "Vulnerability in the MySQL Connectors component of Oracle MySQL (subcomponent: Connector/J). Supported versions that are affected are 8.0.12 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Connectors. Successful attacks of this vulnerability can result in takeover of MySQL Connectors. CVSS 3.0 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2018-3258" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/glibc-common@2.28-251.el8_10.31?arch=x86_64&distro=rhel-8.10&upstream=glibc-2.28-251.el8_10.31.src.rpm",
              "issues" : [ {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0861",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-0861" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4911",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-4911" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33599",
                "title" : "nscd: Stack-based buffer overflow in netgroup cache",
                "source" : "redhat-csaf",
                "cvssScore" : 7.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-33599" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-4802",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-4802" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4527",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4527" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4806",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4806" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4813",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4813" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-5702",
                "title" : "The strcmp implementation optimized for the Power10 processor in the GNU C Library version 2.39 and later writes to vector registers v20 to v31 without saving contents from the caller (those registers are defined as non-volatile registers by the powerpc64le ABI), resulting in overwriting of its contents and potentially altering control flow of the caller, or leaking the input strings to the function to other parts of the program.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-5702" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-0395",
                "title" : "When the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-0395" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33600",
                "title" : "nscd: Null pointer crashes after notfound response",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33600" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0915",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-0915" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-8058",
                "source" : "redhat-csaf",
                "cvssScore" : 4.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-8058" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33601",
                "title" : "nscd: netgroup cache may terminate daemon on memory allocation failure",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33601" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33602",
                "title" : "nscd: netgroup cache assumes NSS callback uses in-buffer strings",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33602" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/xz-libs@5.2.4-4.el8_6?arch=x86_64&distro=rhel-8.10&upstream=xz-5.2.4-4.el8_6.src.rpm",
              "issues" : [ {
                "id" : "CVE-2022-1271",
                "title" : "An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is applied on the attacker's chosen file name (for example, a crafted file name), this can overwrite an attacker's content to an arbitrary attacker-selected file. This flaw occurs due to insufficient validation when processing filenames with two or more newlines where selected content and the target file names are embedded in crafted multi-line file names. This flaw allows a remote, low privileged attacker to force zgrep to write arbitrary files on the system.",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-1271" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-31115",
                "title" : "XZ has a heap-use-after-free bug in threaded .xz decoder",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-31115" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2022-1271",
                "title" : "An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is applied on the attacker's chosen file name (for example, a crafted file name), this can overwrite an attacker's content to an arbitrary attacker-selected file. This flaw occurs due to insufficient validation when processing filenames with two or more newlines where selected content and the target file names are embedded in crafted multi-line file names. This flaw allows a remote, low privileged attacker to force zgrep to write arbitrary files on the system.",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-1271" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/python3-libs@3.6.8-75.el8_10?arch=x86_64&distro=rhel-8.10&upstream=python3-3.6.8-75.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2023-40217",
                "source" : "redhat-csaf",
                "cvssScore" : 8.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-40217" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-42919",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-42919" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-6597",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-6597" ],
                "unique" : false
              }, {
                "id" : "CVE-2015-20107",
                "source" : "redhat-csaf",
                "cvssScore" : 7.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2015-20107" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-12718",
                "title" : "Bypass extraction filter to modify file metadata outside extraction directory",
                "source" : "redhat-csaf",
                "cvssScore" : 7.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-12718" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-4517",
                "title" : "Arbitrary writes via tarfile realpath overflow",
                "source" : "redhat-csaf",
                "cvssScore" : 7.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-4517" ],
                "unique" : false
              }, {
                "id" : "CVE-2020-10735",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2020-10735" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-45061",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-45061" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-24329",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-24329" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-6232",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-6232" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-12084",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-12084" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-4138",
                "title" : "Bypassing extraction filter to create symlinks to arbitrary targets outside extraction directory",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-4138" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-4435",
                "title" : "Tarfile extracts filtered members when errorlevel=0",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-4435" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-8194",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-8194" ],
                "unique" : false
              }, {
                "id" : "CVE-2021-28861",
                "source" : "redhat-csaf",
                "cvssScore" : 7.4,
                "severity" : "HIGH",
                "cves" : [ "CVE-2021-28861" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-4330",
                "title" : "Extraction filter bypass for linking outside extraction directory",
                "source" : "redhat-csaf",
                "cvssScore" : 7.3,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-4330" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-15366",
                "source" : "redhat-csaf",
                "cvssScore" : 7.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-15366" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-15367",
                "source" : "redhat-csaf",
                "cvssScore" : 7.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-15367" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-1299",
                "source" : "redhat-csaf",
                "cvssScore" : 7.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-1299" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-4519",
                "title" : "webbrowser.open() allows leading dashes in URLs",
                "source" : "redhat-csaf",
                "cvssScore" : 7.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-4519" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-6923",
                "source" : "redhat-csaf",
                "cvssScore" : 6.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-6923" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-0938",
                "source" : "redhat-csaf",
                "cvssScore" : 6.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-0938" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-13836",
                "source" : "redhat-csaf",
                "cvssScore" : 6.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-13836" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-9287",
                "source" : "redhat-csaf",
                "cvssScore" : 6.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-9287" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-0450",
                "source" : "redhat-csaf",
                "cvssScore" : 6.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-0450" ],
                "unique" : false
              }, {
                "id" : "CVE-2007-4559",
                "title" : "Directory traversal vulnerability in the (1) extract and (2) extractall functions in the tarfile module in Python allows user-assisted remote attackers to overwrite arbitrary files via a .. (dot dot) sequence in filenames in a TAR archive, a related issue to CVE-2001-1267.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2007-4559" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-27043",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-27043" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-8088",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-8088" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-0397",
                "source" : "redhat-csaf",
                "cvssScore" : 5.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-0397" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-7592",
                "source" : "redhat-csaf",
                "cvssScore" : 4.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-7592" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0865",
                "source" : "redhat-csaf",
                "cvssScore" : 4.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-0865" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-6069",
                "title" : "HTMLParser quadratic complexity when processing malformed inputs",
                "source" : "redhat-csaf",
                "cvssScore" : 4.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-6069" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-8291",
                "source" : "redhat-csaf",
                "cvssScore" : 4.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-8291" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-6075",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-6075" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-11168",
                "source" : "redhat-csaf",
                "cvssScore" : 3.7,
                "severity" : "LOW",
                "cves" : [ "CVE-2024-11168" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-4032",
                "source" : "redhat-csaf",
                "cvssScore" : 3.7,
                "severity" : "LOW",
                "cves" : [ "CVE-2024-4032" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-5642",
                "title" : "Buffer overread when using an empty list with SSLContext.set_npn_protocols()",
                "source" : "redhat-csaf",
                "cvssScore" : 2.7,
                "severity" : "LOW",
                "cves" : [ "CVE-2024-5642" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2023-40217",
                "source" : "redhat-csaf",
                "cvssScore" : 8.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-40217" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/zlib@1.2.11-25.el8?arch=x86_64&distro=rhel-8.10&upstream=zlib-1.2.11-25.el8.src.rpm",
              "issues" : [ {
                "id" : "CVE-2018-25032",
                "title" : "zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.",
                "source" : "redhat-csaf",
                "cvssScore" : 8.2,
                "severity" : "HIGH",
                "cves" : [ "CVE-2018-25032" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-37434",
                "title" : "zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference).",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-37434" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2018-25032",
                "title" : "zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.",
                "source" : "redhat-csaf",
                "cvssScore" : 8.2,
                "severity" : "HIGH",
                "cves" : [ "CVE-2018-25032" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libcap@2.48-6.el8_9?arch=x86_64&distro=rhel-8.10&upstream=libcap-2.48-6.el8_9.src.rpm",
              "issues" : [ {
                "id" : "CVE-2023-2603",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-2603" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-2602",
                "title" : "A vulnerability was found in the pthread_create() function in libcap. This issue may allow a malicious actor to use cause __real_pthread_create() to return an error, which can exhaust the process memory.",
                "source" : "redhat-csaf",
                "cvssScore" : 3.3,
                "severity" : "LOW",
                "cves" : [ "CVE-2023-2602" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2023-2603",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-2603" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/ncurses-base@6.1-10.20180224.el8?arch=noarch&distro=rhel-8.10&upstream=ncurses-6.1-10.20180224.el8.src.rpm",
              "issues" : [ {
                "id" : "CVE-2023-29491",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-29491" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-69720",
                "title" : "The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-69720" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-29458",
                "title" : "ncurses 6.3 before patch 20220416 has an out-of-bounds read and segmentation violation in convert_strings in tinfo/read_entry.c in the terminfo library.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-29458" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2023-29491",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-29491" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/ncurses-libs@6.1-10.20180224.el8?arch=x86_64&distro=rhel-8.10&upstream=ncurses-6.1-10.20180224.el8.src.rpm",
              "issues" : [ {
                "id" : "CVE-2023-29491",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-29491" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-69720",
                "title" : "The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-69720" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-29458",
                "title" : "ncurses 6.3 before patch 20220416 has an out-of-bounds read and segmentation violation in convert_strings in tinfo/read_entry.c in the terminfo library.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-29458" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2023-29491",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-29491" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/sqlite-libs@3.26.0-20.el8_10?arch=x86_64&distro=rhel-8.10&upstream=sqlite-3.26.0-20.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2025-6965",
                "title" : "Integer Truncation on SQLite",
                "source" : "redhat-csaf",
                "cvssScore" : 7.7,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-6965" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-7104",
                "source" : "redhat-csaf",
                "cvssScore" : 7.3,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-7104" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-3277",
                "title" : "An integer overflow can be triggered in SQLite’s `concat_ws()` function. The resulting, truncated integer is then used to allocate a buffer. When SQLite then writes the resulting string to the buffer, it uses the original, untruncated size and thus a wild Heap Buffer overflow of size ~4GB can be triggered. This can result in arbitrary code execution.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.3,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-3277" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-35737",
                "title" : "SQLite 1.0.12 through 3.39.x before 3.39.2 sometimes allows an array-bounds overflow if billions of bytes are used in a string argument to a C API.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-35737" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2025-6965",
                "title" : "Integer Truncation on SQLite",
                "source" : "redhat-csaf",
                "cvssScore" : 7.7,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-6965" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/expat@2.5.0-1.el8_10?arch=x86_64&distro=rhel-8.10&upstream=expat-2.5.0-1.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2023-52425",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-52425" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-28757",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-28757" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-45490",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-45490" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-45491",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-45491" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-8176",
                "title" : "Libexpat: expat: improper restriction of xml entity expansion depth in libexpat",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-8176" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-45492",
                "source" : "redhat-csaf",
                "cvssScore" : 6.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-45492" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-50602",
                "title" : "An issue was discovered in libexpat before 2.6.4. There is a crash within the XML_ResumeParser function because XML_StopParser can stop/suspend an unstarted parser.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-50602" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-59375",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-59375" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2023-52425",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-52425" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libtirpc@1.1.4-12.el8_10?arch=x86_64&distro=rhel-8.10&upstream=libtirpc-1.1.4-12.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2021-46828",
                "title" : "In libtirpc before 1.3.3rc1, remote attackers could exhaust the file descriptors of a process that uses libtirpc because idle TCP connections are mishandled. This can, in turn, lead to an svc_run infinite loop without accepting new connections.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2021-46828" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2021-46828",
                "title" : "In libtirpc before 1.3.3rc1, remote attackers could exhaust the file descriptors of a process that uses libtirpc because idle TCP connections are mishandled. This can, in turn, lead to an svc_run infinite loop without accepting new connections.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2021-46828" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/pcre2@10.32-3.el8_6?arch=x86_64&distro=rhel-8.10&upstream=pcre2-10.32-3.el8_6.src.rpm",
              "issues" : [ {
                "id" : "CVE-2022-1586",
                "title" : "An out-of-bounds read vulnerability was discovered in the PCRE2 library in the compile_xclass_matchingpath() function of the pcre2_jit_compile.c file. This involves a unicode property matching issue in JIT-compiled regular expressions. The issue occurs because the character was not fully read in case-less matching within JIT.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-1586" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-1587",
                "title" : "An out-of-bounds read vulnerability was discovered in the PCRE2 library in the get_recurse_data_length() function of the pcre2_jit_compile.c file. This issue affects recursions in JIT-compiled regular expressions caused by duplicate data transfers.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-1587" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2022-1586",
                "title" : "An out-of-bounds read vulnerability was discovered in the PCRE2 library in the compile_xclass_matchingpath() function of the pcre2_jit_compile.c file. This involves a unicode property matching issue in JIT-compiled regular expressions. The issue occurs because the character was not fully read in case-less matching within JIT.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-1586" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/python3-urllib3@1.24.2-9.el8_10?arch=noarch&distro=rhel-8.10&upstream=python-urllib3-1.24.2-9.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2021-33503",
                "title" : "An issue was discovered in urllib3 before 1.26.5. When provided with a URL containing many @ characters in the authority component, the authority regular expression exhibits catastrophic backtracking, causing a denial of service if a URL were passed as a parameter or redirected to via an HTTP redirect.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2021-33503" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-66418",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-66418" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-66471",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-66471" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-21441",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-21441" ],
                "unique" : false
              }, {
                "id" : "CVE-2020-8185",
                "title" : "A denial of service vulnerability exists in Rails <6.0.3.2 that allowed an untrusted user to run any pending migrations on a Rails app running in production.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2020-8185" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-7143",
                "title" : "Pulpcore: rbac permissions incorrectly assigned in tasks that create objects",
                "source" : "redhat-csaf",
                "cvssScore" : 6.7,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-7143" ],
                "unique" : false
              }, {
                "id" : "CVE-2019-16782",
                "title" : "Possible Information Leak / Session Hijack Vulnerability in Rack",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2019-16782" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-43804",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-43804" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-37891",
                "source" : "redhat-csaf",
                "cvssScore" : 4.4,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-37891" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-45803",
                "source" : "redhat-csaf",
                "cvssScore" : 4.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-45803" ],
                "unique" : false
              }, {
                "id" : "CVE-2018-1000119",
                "title" : "Sinatra rack-protection versions 1.5.4 and 2.0.0.rc3 and earlier contains a timing attack vulnerability in the CSRF token checking that can result in signatures can be exposed. This attack appear to be exploitable via network connectivity to the ruby application. This vulnerability appears to have been fixed in 1.5.5 and 2.0.0.",
                "source" : "redhat-csaf",
                "cvssScore" : 3.7,
                "severity" : "LOW",
                "cves" : [ "CVE-2018-1000119" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2021-33503",
                "title" : "An issue was discovered in urllib3 before 1.26.5. When provided with a URL containing many @ characters in the authority component, the authority regular expression exhibits catastrophic backtracking, causing a denial of service if a URL were passed as a parameter or redirected to via an HTTP redirect.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2021-33503" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/python3-idna@2.5-7.el8_10?arch=noarch&distro=rhel-8.10&upstream=python-idna-2.5-7.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2020-8185",
                "title" : "A denial of service vulnerability exists in Rails <6.0.3.2 that allowed an untrusted user to run any pending migrations on a Rails app running in production.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2020-8185" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-3651",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-3651" ],
                "unique" : false
              }, {
                "id" : "CVE-2019-16782",
                "title" : "Possible Information Leak / Session Hijack Vulnerability in Rack",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2019-16782" ],
                "unique" : false
              }, {
                "id" : "CVE-2018-1000119",
                "title" : "Sinatra rack-protection versions 1.5.4 and 2.0.0.rc3 and earlier contains a timing attack vulnerability in the CSRF token checking that can result in signatures can be exposed. This attack appear to be exploitable via network connectivity to the ruby application. This vulnerability appears to have been fixed in 1.5.5 and 2.0.0.",
                "source" : "redhat-csaf",
                "cvssScore" : 3.7,
                "severity" : "LOW",
                "cves" : [ "CVE-2018-1000119" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2020-8185",
                "title" : "A denial of service vulnerability exists in Rails <6.0.3.2 that allowed an untrusted user to run any pending migrations on a Rails app running in production.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2020-8185" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/python3-requests@2.20.0-6.el8_10?arch=noarch&distro=rhel-8.10&upstream=python-requests-2.20.0-6.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2020-8185",
                "title" : "A denial of service vulnerability exists in Rails <6.0.3.2 that allowed an untrusted user to run any pending migrations on a Rails app running in production.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2020-8185" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-32681",
                "title" : "Unintended leak of Proxy-Authorization header in requests",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-32681" ],
                "unique" : false
              }, {
                "id" : "CVE-2019-16782",
                "title" : "Possible Information Leak / Session Hijack Vulnerability in Rack",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2019-16782" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-35195",
                "title" : "Requests `Session` object does not verify requests after making first request with verify=False",
                "source" : "redhat-csaf",
                "cvssScore" : 5.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-35195" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-47081",
                "title" : "Requests vulnerable to .netrc credentials leak via malicious URLs",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-47081" ],
                "unique" : false
              }, {
                "id" : "CVE-2018-1000119",
                "title" : "Sinatra rack-protection versions 1.5.4 and 2.0.0.rc3 and earlier contains a timing attack vulnerability in the CSRF token checking that can result in signatures can be exposed. This attack appear to be exploitable via network connectivity to the ruby application. This vulnerability appears to have been fixed in 1.5.5 and 2.0.0.",
                "source" : "redhat-csaf",
                "cvssScore" : 3.7,
                "severity" : "LOW",
                "cves" : [ "CVE-2018-1000119" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2020-8185",
                "title" : "A denial of service vulnerability exists in Rails <6.0.3.2 that allowed an untrusted user to run any pending migrations on a Rails app running in production.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2020-8185" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/python3-six@1.11.0-8.el8?arch=noarch&distro=rhel-8.10&upstream=python-six-1.11.0-8.el8.src.rpm",
              "issues" : [ {
                "id" : "CVE-2020-8185",
                "title" : "A denial of service vulnerability exists in Rails <6.0.3.2 that allowed an untrusted user to run any pending migrations on a Rails app running in production.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2020-8185" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-1705",
                "title" : "Improper sanitization of Transfer-Encoding headers in net/http",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-1705" ],
                "unique" : false
              }, {
                "id" : "CVE-2019-16782",
                "title" : "Possible Information Leak / Session Hijack Vulnerability in Rack",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2019-16782" ],
                "unique" : false
              }, {
                "id" : "CVE-2018-1000119",
                "title" : "Sinatra rack-protection versions 1.5.4 and 2.0.0.rc3 and earlier contains a timing attack vulnerability in the CSRF token checking that can result in signatures can be exposed. This attack appear to be exploitable via network connectivity to the ruby application. This vulnerability appears to have been fixed in 1.5.5 and 2.0.0.",
                "source" : "redhat-csaf",
                "cvssScore" : 3.7,
                "severity" : "LOW",
                "cves" : [ "CVE-2018-1000119" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2020-8185",
                "title" : "A denial of service vulnerability exists in Rails <6.0.3.2 that allowed an untrusted user to run any pending migrations on a Rails app running in production.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2020-8185" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/bash@4.4.20-6.el8_10?arch=x86_64&distro=rhel-8.10&upstream=bash-4.4.20-6.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2022-3715",
                "source" : "redhat-csaf",
                "cvssScore" : 6.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-3715" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2022-3715",
                "source" : "redhat-csaf",
                "cvssScore" : 6.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-3715" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/gmp@6.1.2-11.el8?arch=x86_64&distro=rhel-8.10&epoch=1&upstream=gmp-6.1.2-11.el8.src.rpm",
              "issues" : [ {
                "id" : "CVE-2021-43618",
                "title" : "GNU Multiple Precision Arithmetic Library (GMP) through 6.2.1 has an mpz/inp_raw.c integer overflow and resultant buffer overflow via crafted input, leading to a segmentation fault on 32-bit platforms.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2021-43618" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2021-43618",
                "title" : "GNU Multiple Precision Arithmetic Library (GMP) through 6.2.1 has an mpz/inp_raw.c integer overflow and resultant buffer overflow via crafted input, leading to a segmentation fault on 32-bit platforms.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2021-43618" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libgcc@8.5.0-28.el8_10?arch=x86_64&distro=rhel-8.10&upstream=gcc-8.5.0-28.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2020-11023",
                "title" : "Potential XSS vulnerability in jQuery",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2020-11023" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2020-11023",
                "title" : "Potential XSS vulnerability in jQuery",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2020-11023" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libtasn1@4.13-5.el8_10?arch=x86_64&distro=rhel-8.10&upstream=libtasn1-4.13-5.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2021-46848",
                "title" : "GNU Libtasn1 before 4.19.0 has an ETYPE_OK off-by-one array size check that affects asn1_encode_simple_der.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2021-46848" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-12133",
                "title" : "Libtasn1: inefficient der decoding in libtasn1 leading to potential remote dos",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-12133" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2021-46848",
                "title" : "GNU Libtasn1 before 4.19.0 has an ETYPE_OK off-by-one array size check that affects asn1_encode_simple_der.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2021-46848" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libcom_err@1.45.6-7.el8_10?arch=x86_64&distro=rhel-8.10&upstream=e2fsprogs-1.45.6-7.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2022-1304",
                "title" : "An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a segmentation fault and possibly arbitrary code execution via a specially crafted filesystem.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-1304" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2022-1304",
                "title" : "An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a segmentation fault and possibly arbitrary code execution via a specially crafted filesystem.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-1304" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/python3-pip-wheel@9.0.3-24.el8?arch=noarch&distro=rhel-8.10&upstream=python-pip-9.0.3-24.el8.src.rpm",
              "issues" : [ {
                "id" : "CVE-2007-4559",
                "title" : "Directory traversal vulnerability in the (1) extract and (2) extractall functions in the tarfile module in Python allows user-assisted remote attackers to overwrite arbitrary files via a .. (dot dot) sequence in filenames in a TAR archive, a related issue to CVE-2001-1267.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2007-4559" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2007-4559",
                "title" : "Directory traversal vulnerability in the (1) extract and (2) extractall functions in the tarfile module in Python allows user-assisted remote attackers to overwrite arbitrary files via a .. (dot dot) sequence in filenames in a TAR archive, a related issue to CVE-2001-1267.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2007-4559" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/bzip2-libs@1.0.6-28.el8_10?arch=x86_64&distro=rhel-8.10&upstream=bzip2-1.0.6-28.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2019-12900",
                "title" : "BZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many selectors.",
                "source" : "redhat-csaf",
                "cvssScore" : 4.4,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2019-12900" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2019-12900",
                "title" : "BZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many selectors.",
                "source" : "redhat-csaf",
                "cvssScore" : 4.4,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2019-12900" ],
                "unique" : false
              }
            } ],
            "highestVulnerability" : {
              "id" : "CVE-2025-15467",
              "title" : "Stack buffer overflow in CMS (Auth)EnvelopedData parsing",
              "source" : "redhat-csaf",
              "cvssScore" : 9.8,
              "severity" : "CRITICAL",
              "cves" : [ "CVE-2025-15467" ],
              "unique" : false
            }
          }, {
            "ref" : "pkg:rpm/redhat/gpgme@1.13.1-12.el8?arch=x86_64&distro=rhel-8.10&upstream=gpgme-1.13.1-12.el8.src.rpm",
            "transitive" : [ {
              "ref" : "pkg:rpm/redhat/openssl-libs@1.1.1k-15.el8_6?arch=x86_64&distro=rhel-8.10&epoch=1&upstream=openssl-1.1.1k-15.el8_6.src.rpm",
              "issues" : [ {
                "id" : "CVE-2025-15467",
                "title" : "Stack buffer overflow in CMS (Auth)EnvelopedData parsing",
                "source" : "redhat-csaf",
                "cvssScore" : 9.8,
                "severity" : "CRITICAL",
                "cves" : [ "CVE-2025-15467" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-1473",
                "title" : "Resource leakage when decoding certificates and keys",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-1473" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-3358",
                "title" : "Using a Custom Cipher with NID_undef may lead to NULL encryption",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-3358" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-3602",
                "title" : "X.509 Email Address 4-byte Buffer Overflow",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-3602" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-3786",
                "title" : "X.509 Email Address Variable Length Buffer Overflow",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-3786" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-4450",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-4450" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-0215",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-0215" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-0216",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-0216" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-0217",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-0217" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-0401",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-0401" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-5363",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-5363" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-0286",
                "source" : "redhat-csaf",
                "cvssScore" : 7.4,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-0286" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-12797",
                "title" : "RFC7250 handshakes with unauthenticated servers don't abort as expected",
                "source" : "redhat-csaf",
                "cvssScore" : 7.4,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-12797" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-69419",
                "source" : "redhat-csaf",
                "cvssScore" : 7.4,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-69419" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-1292",
                "source" : "redhat-csaf",
                "cvssScore" : 6.7,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-1292" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-2068",
                "source" : "redhat-csaf",
                "cvssScore" : 6.7,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-2068" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-2650",
                "title" : "Possible DoS translating ASN.1 object identifiers",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-2650" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-6129",
                "title" : "POLY1305 MAC implementation corrupts vector registers on PowerPC",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-6129" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-69421",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-69421" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-11187",
                "title" : "Improper validation of PBMAC1 parameters in PKCS#12 MAC verification",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-11187" ],
                "unique" : false
              }, {
                "id" : "CVE-2020-1971",
                "title" : "EDIPARTYNAME NULL pointer dereference",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2020-1971" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-4304",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-4304" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-0464",
                "title" : "Excessive Resource Usage Verifying X.509 Policy Constraints",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-0464" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-6237",
                "title" : "Excessive time spent checking invalid RSA public keys",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-6237" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-5535",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-5535" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-6119",
                "title" : "Possible denial of service in X.509 name checks",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-6119" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-15468",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-15468" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-66199",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-66199" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-69420",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-69420" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-22796",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-22796" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-4741",
                "source" : "redhat-csaf",
                "cvssScore" : 5.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-4741" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-9230",
                "source" : "redhat-csaf",
                "cvssScore" : 5.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-9230" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-0727",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-0727" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-15469",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-15469" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-22795",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-22795" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-1343",
                "title" : "OCSP_basic_verify may incorrectly verify the response signing certificate",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-1343" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-2097",
                "title" : "AES OCB fails to encrypt some bytes",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-2097" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-0465",
                "title" : "Invalid certificate policies in leaf certificates are silently ignored",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-0465" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-0466",
                "title" : "Certificate policy check not enabled",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-0466" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-2975",
                "title" : "AES-SIV implementation ignores empty associated data entries",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-2975" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-3446",
                "title" : "Excessive time spent checking DH keys and parameters",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-3446" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-3817",
                "title" : "Excessive time spent checking DH q parameter value",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-3817" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-5678",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-5678" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-4603",
                "title" : "Excessive time spent checking DSA keys and parameters",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-4603" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-1255",
                "title" : "Input buffer over-read in AES-XTS implementation on 64 bit ARM",
                "source" : "redhat-csaf",
                "cvssScore" : 5.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-1255" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-4203",
                "source" : "redhat-csaf",
                "cvssScore" : 4.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-4203" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-68160",
                "source" : "redhat-csaf",
                "cvssScore" : 4.7,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-68160" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-69418",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-69418" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-2511",
                "source" : "redhat-csaf",
                "cvssScore" : 3.7,
                "severity" : "LOW",
                "cves" : [ "CVE-2024-2511" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2025-15467",
                "title" : "Stack buffer overflow in CMS (Auth)EnvelopedData parsing",
                "source" : "redhat-csaf",
                "cvssScore" : 9.8,
                "severity" : "CRITICAL",
                "cves" : [ "CVE-2025-15467" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/krb5-libs@1.18.2-32.el8_10?arch=x86_64&distro=rhel-8.10&upstream=krb5-1.18.2-32.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2024-3596",
                "source" : "redhat-csaf",
                "cvssScore" : 9.0,
                "severity" : "CRITICAL",
                "cves" : [ "CVE-2024-3596" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-42898",
                "title" : "PAC parsing in MIT Kerberos 5 (aka krb5) before 1.19.4 and 1.20.x before 1.20.1 has integer overflows that may lead to remote code execution (in KDC, kadmind, or a GSS or Kerberos application server) on 32-bit platforms (which have a resultant heap-based buffer overflow), and cause a denial of service on other platforms. This occurs in krb5_pac_parse in lib/krb5/krb/pac.c. Heimdal before 7.7.1 has \"a similar bug.\"",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-42898" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-39975",
                "title" : "kdc/do_tgs_req.c in MIT Kerberos 5 (aka krb5) 1.21 before 1.21.2 has a double free that is reachable if an authenticated user can trigger an authorization-data handling failure. Incorrect data is copied from one ticket to another.",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-39975" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-26462",
                "title" : "Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/kdc/ndr.c.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-26462" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-37370",
                "title" : "In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can modify the plaintext Extra Count field of a confidential GSS krb5 wrap token, causing the unwrapped token to appear truncated to the application.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-37370" ],
                "unique" : false
              }, {
                "id" : "CVE-2020-17049",
                "title" : "Kerberos KDC Security Feature Bypass Vulnerability",
                "source" : "redhat-csaf",
                "cvssScore" : 7.2,
                "severity" : "HIGH",
                "cves" : [ "CVE-2020-17049" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-36054",
                "title" : "lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) before 1.20.2 and 1.21.x before 1.21.1 frees an uninitialized pointer. A remote authenticated user can trigger a kadmind crash. This occurs because _xdr_kadm5_principal_ent_rec does not validate the relationship between n_key_data and the key_data array count.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-36054" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-37371",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-37371" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-24528",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-24528" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-26458",
                "title" : "Kerberos 5 (aka krb5) 1.21.2 contains a memory leak in /krb5/src/lib/rpc/pmap_rmt.c.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-26458" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-26461",
                "title" : "Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/lib/gssapi/krb5/k5sealv3.c.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-26461" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-3576",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-3576" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2024-3596",
                "source" : "redhat-csaf",
                "cvssScore" : 9.0,
                "severity" : "CRITICAL",
                "cves" : [ "CVE-2024-3596" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/glibc-minimal-langpack@2.28-251.el8_10.31?arch=x86_64&distro=rhel-8.10&upstream=glibc-2.28-251.el8_10.31.src.rpm",
              "issues" : [ {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0861",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-0861" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4911",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-4911" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33599",
                "title" : "nscd: Stack-based buffer overflow in netgroup cache",
                "source" : "redhat-csaf",
                "cvssScore" : 7.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-33599" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-4802",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-4802" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4527",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4527" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4806",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4806" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4813",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4813" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-5702",
                "title" : "The strcmp implementation optimized for the Power10 processor in the GNU C Library version 2.39 and later writes to vector registers v20 to v31 without saving contents from the caller (those registers are defined as non-volatile registers by the powerpc64le ABI), resulting in overwriting of its contents and potentially altering control flow of the caller, or leaking the input strings to the function to other parts of the program.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-5702" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-0395",
                "title" : "When the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-0395" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33600",
                "title" : "nscd: Null pointer crashes after notfound response",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33600" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0915",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-0915" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-8058",
                "source" : "redhat-csaf",
                "cvssScore" : 4.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-8058" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33601",
                "title" : "nscd: netgroup cache may terminate daemon on memory allocation failure",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33601" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33602",
                "title" : "nscd: netgroup cache assumes NSS callback uses in-buffer strings",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33602" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/glibc@2.28-251.el8_10.31?arch=x86_64&distro=rhel-8.10&upstream=glibc-2.28-251.el8_10.31.src.rpm",
              "issues" : [ {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0861",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-0861" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4911",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-4911" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33599",
                "title" : "nscd: Stack-based buffer overflow in netgroup cache",
                "source" : "redhat-csaf",
                "cvssScore" : 7.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-33599" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-4802",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-4802" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4527",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4527" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4806",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4806" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4813",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4813" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-15281",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-15281" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-5702",
                "title" : "The strcmp implementation optimized for the Power10 processor in the GNU C Library version 2.39 and later writes to vector registers v20 to v31 without saving contents from the caller (those registers are defined as non-volatile registers by the powerpc64le ABI), resulting in overwriting of its contents and potentially altering control flow of the caller, or leaking the input strings to the function to other parts of the program.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-5702" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-0395",
                "title" : "When the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-0395" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33600",
                "title" : "nscd: Null pointer crashes after notfound response",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33600" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0915",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-0915" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-8058",
                "source" : "redhat-csaf",
                "cvssScore" : 4.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-8058" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33601",
                "title" : "nscd: netgroup cache may terminate daemon on memory allocation failure",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33601" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33602",
                "title" : "nscd: netgroup cache assumes NSS callback uses in-buffer strings",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33602" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/glibc-common@2.28-251.el8_10.31?arch=x86_64&distro=rhel-8.10&upstream=glibc-2.28-251.el8_10.31.src.rpm",
              "issues" : [ {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0861",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-0861" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4911",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-4911" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33599",
                "title" : "nscd: Stack-based buffer overflow in netgroup cache",
                "source" : "redhat-csaf",
                "cvssScore" : 7.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-33599" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-4802",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-4802" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4527",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4527" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4806",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4806" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4813",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4813" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-5702",
                "title" : "The strcmp implementation optimized for the Power10 processor in the GNU C Library version 2.39 and later writes to vector registers v20 to v31 without saving contents from the caller (those registers are defined as non-volatile registers by the powerpc64le ABI), resulting in overwriting of its contents and potentially altering control flow of the caller, or leaking the input strings to the function to other parts of the program.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-5702" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-0395",
                "title" : "When the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-0395" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33600",
                "title" : "nscd: Null pointer crashes after notfound response",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33600" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0915",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-0915" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-8058",
                "source" : "redhat-csaf",
                "cvssScore" : 4.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-8058" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33601",
                "title" : "nscd: netgroup cache may terminate daemon on memory allocation failure",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33601" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33602",
                "title" : "nscd: netgroup cache assumes NSS callback uses in-buffer strings",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33602" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/xz-libs@5.2.4-4.el8_6?arch=x86_64&distro=rhel-8.10&upstream=xz-5.2.4-4.el8_6.src.rpm",
              "issues" : [ {
                "id" : "CVE-2022-1271",
                "title" : "An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is applied on the attacker's chosen file name (for example, a crafted file name), this can overwrite an attacker's content to an arbitrary attacker-selected file. This flaw occurs due to insufficient validation when processing filenames with two or more newlines where selected content and the target file names are embedded in crafted multi-line file names. This flaw allows a remote, low privileged attacker to force zgrep to write arbitrary files on the system.",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-1271" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-31115",
                "title" : "XZ has a heap-use-after-free bug in threaded .xz decoder",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-31115" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2022-1271",
                "title" : "An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is applied on the attacker's chosen file name (for example, a crafted file name), this can overwrite an attacker's content to an arbitrary attacker-selected file. This flaw occurs due to insufficient validation when processing filenames with two or more newlines where selected content and the target file names are embedded in crafted multi-line file names. This flaw allows a remote, low privileged attacker to force zgrep to write arbitrary files on the system.",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-1271" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libksba@1.3.5-9.el8_7?arch=x86_64&distro=rhel-8.10&upstream=libksba-1.3.5-9.el8_7.src.rpm",
              "issues" : [ {
                "id" : "CVE-2022-3515",
                "title" : "A vulnerability was found in the Libksba library due to an integer overflow within the CRL parser. The vulnerability can be exploited remotely for code execution on the target system by passing specially crafted data to the application, for example, a malicious S/MIME attachment.",
                "source" : "redhat-csaf",
                "cvssScore" : 8.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-3515" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-47629",
                "title" : "Libksba before 1.6.3 is prone to an integer overflow vulnerability in the CRL signature parser.",
                "source" : "redhat-csaf",
                "cvssScore" : 8.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-47629" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2022-3515",
                "title" : "A vulnerability was found in the Libksba library due to an integer overflow within the CRL parser. The vulnerability can be exploited remotely for code execution on the target system by passing specially crafted data to the application, for example, a malicious S/MIME attachment.",
                "source" : "redhat-csaf",
                "cvssScore" : 8.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-3515" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/gnupg2@2.2.20-4.el8_10?arch=x86_64&distro=rhel-8.10&upstream=gnupg2-2.2.20-4.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2026-24882",
                "source" : "redhat-csaf",
                "cvssScore" : 8.4,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-24882" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-68973",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-68973" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-34903",
                "title" : "GnuPG through 2.3.6, in unusual situations where an attacker possesses any secret-key information from a victim's keyring and other constraints (e.g., use of GPGME) are met, allows signature forgery via injection into the status line.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-34903" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2026-24882",
                "source" : "redhat-csaf",
                "cvssScore" : 8.4,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-24882" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/zlib@1.2.11-25.el8?arch=x86_64&distro=rhel-8.10&upstream=zlib-1.2.11-25.el8.src.rpm",
              "issues" : [ {
                "id" : "CVE-2018-25032",
                "title" : "zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.",
                "source" : "redhat-csaf",
                "cvssScore" : 8.2,
                "severity" : "HIGH",
                "cves" : [ "CVE-2018-25032" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-37434",
                "title" : "zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference).",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-37434" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2018-25032",
                "title" : "zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.",
                "source" : "redhat-csaf",
                "cvssScore" : 8.2,
                "severity" : "HIGH",
                "cves" : [ "CVE-2018-25032" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libcap@2.48-6.el8_9?arch=x86_64&distro=rhel-8.10&upstream=libcap-2.48-6.el8_9.src.rpm",
              "issues" : [ {
                "id" : "CVE-2023-2603",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-2603" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-2602",
                "title" : "A vulnerability was found in the pthread_create() function in libcap. This issue may allow a malicious actor to use cause __real_pthread_create() to return an error, which can exhaust the process memory.",
                "source" : "redhat-csaf",
                "cvssScore" : 3.3,
                "severity" : "LOW",
                "cves" : [ "CVE-2023-2602" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2023-2603",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-2603" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/ncurses-base@6.1-10.20180224.el8?arch=noarch&distro=rhel-8.10&upstream=ncurses-6.1-10.20180224.el8.src.rpm",
              "issues" : [ {
                "id" : "CVE-2023-29491",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-29491" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-69720",
                "title" : "The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-69720" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-29458",
                "title" : "ncurses 6.3 before patch 20220416 has an out-of-bounds read and segmentation violation in convert_strings in tinfo/read_entry.c in the terminfo library.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-29458" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2023-29491",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-29491" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/ncurses-libs@6.1-10.20180224.el8?arch=x86_64&distro=rhel-8.10&upstream=ncurses-6.1-10.20180224.el8.src.rpm",
              "issues" : [ {
                "id" : "CVE-2023-29491",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-29491" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-69720",
                "title" : "The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-69720" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-29458",
                "title" : "ncurses 6.3 before patch 20220416 has an out-of-bounds read and segmentation violation in convert_strings in tinfo/read_entry.c in the terminfo library.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-29458" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2023-29491",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-29491" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/sqlite-libs@3.26.0-20.el8_10?arch=x86_64&distro=rhel-8.10&upstream=sqlite-3.26.0-20.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2025-6965",
                "title" : "Integer Truncation on SQLite",
                "source" : "redhat-csaf",
                "cvssScore" : 7.7,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-6965" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-7104",
                "source" : "redhat-csaf",
                "cvssScore" : 7.3,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-7104" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-3277",
                "title" : "An integer overflow can be triggered in SQLite’s `concat_ws()` function. The resulting, truncated integer is then used to allocate a buffer. When SQLite then writes the resulting string to the buffer, it uses the original, untruncated size and thus a wild Heap Buffer overflow of size ~4GB can be triggered. This can result in arbitrary code execution.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.3,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-3277" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-35737",
                "title" : "SQLite 1.0.12 through 3.39.x before 3.39.2 sometimes allows an array-bounds overflow if billions of bytes are used in a string argument to a C API.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-35737" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2025-6965",
                "title" : "Integer Truncation on SQLite",
                "source" : "redhat-csaf",
                "cvssScore" : 7.7,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-6965" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/gnutls@3.6.16-8.el8_10.5?arch=x86_64&distro=rhel-8.10&upstream=gnutls-3.6.16-8.el8_10.5.src.rpm",
              "issues" : [ {
                "id" : "CVE-2022-2509",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-2509" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-0553",
                "title" : "Gnutls: incomplete fix for cve-2023-5981",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-0553" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-0567",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-0567" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-0361",
                "title" : "A timing side-channel in the handling of RSA ClientKeyExchange messages was discovered in GnuTLS. This side-channel can be sufficient to recover the key encrypted in the RSA ciphertext across a network in a Bleichenbacher style attack. To achieve a successful decryption the attacker would need to send a large amount of specially crafted messages to the vulnerable server. By recovering the secret from the ClientKeyExchange message, the attacker would be able to decrypt the application data exchanged over that connection.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.4,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-0361" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-32988",
                "title" : "Gnutls: vulnerability in gnutls othername san export",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-32988" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-32990",
                "title" : "Gnutls: vulnerability in gnutls certtool template parsing",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-32990" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-6395",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-6395" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-5981",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-5981" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-12243",
                "title" : "Gnutls: gnutls impacted by inefficient der decoding in libtasn1 leading to remote dos",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-12243" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-28834",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-28834" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-14831",
                "title" : "Gnutls: gnutls: denial of service via excessive resource consumption during certificate verification",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-14831" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-32989",
                "title" : "Gnutls: vulnerability in gnutls sct extension parsing",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-32989" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-28835",
                "source" : "redhat-csaf",
                "cvssScore" : 5.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-28835" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-9820",
                "title" : "Gnutls: stack-based buffer overflow in gnutls_pkcs11_token_init() function",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-9820" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2022-2509",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-2509" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/pcre2@10.32-3.el8_6?arch=x86_64&distro=rhel-8.10&upstream=pcre2-10.32-3.el8_6.src.rpm",
              "issues" : [ {
                "id" : "CVE-2022-1586",
                "title" : "An out-of-bounds read vulnerability was discovered in the PCRE2 library in the compile_xclass_matchingpath() function of the pcre2_jit_compile.c file. This involves a unicode property matching issue in JIT-compiled regular expressions. The issue occurs because the character was not fully read in case-less matching within JIT.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-1586" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-1587",
                "title" : "An out-of-bounds read vulnerability was discovered in the PCRE2 library in the get_recurse_data_length() function of the pcre2_jit_compile.c file. This issue affects recursions in JIT-compiled regular expressions caused by duplicate data transfers.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-1587" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2022-1586",
                "title" : "An out-of-bounds read vulnerability was discovered in the PCRE2 library in the compile_xclass_matchingpath() function of the pcre2_jit_compile.c file. This involves a unicode property matching issue in JIT-compiled regular expressions. The issue occurs because the character was not fully read in case-less matching within JIT.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-1586" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/openldap@2.4.46-21.el8_10?arch=x86_64&distro=rhel-8.10&upstream=openldap-2.4.46-21.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2023-2953",
                "title" : "A vulnerability was found in openldap. This security flaw causes a null pointer dereference in ber_memalloc_x() function.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-2953" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2023-2953",
                "title" : "A vulnerability was found in openldap. This security flaw causes a null pointer dereference in ber_memalloc_x() function.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-2953" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/bash@4.4.20-6.el8_10?arch=x86_64&distro=rhel-8.10&upstream=bash-4.4.20-6.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2022-3715",
                "source" : "redhat-csaf",
                "cvssScore" : 6.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-3715" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2022-3715",
                "source" : "redhat-csaf",
                "cvssScore" : 6.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-3715" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/gmp@6.1.2-11.el8?arch=x86_64&distro=rhel-8.10&epoch=1&upstream=gmp-6.1.2-11.el8.src.rpm",
              "issues" : [ {
                "id" : "CVE-2021-43618",
                "title" : "GNU Multiple Precision Arithmetic Library (GMP) through 6.2.1 has an mpz/inp_raw.c integer overflow and resultant buffer overflow via crafted input, leading to a segmentation fault on 32-bit platforms.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2021-43618" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2021-43618",
                "title" : "GNU Multiple Precision Arithmetic Library (GMP) through 6.2.1 has an mpz/inp_raw.c integer overflow and resultant buffer overflow via crafted input, leading to a segmentation fault on 32-bit platforms.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2021-43618" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libuuid@2.32.1-48.el8_10?arch=x86_64&distro=rhel-8.10&upstream=util-linux-2.32.1-48.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2025-14104",
                "title" : "Util-linux: util-linux: heap buffer overread in setpwnam() when processing 256-byte usernames",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-14104" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2025-14104",
                "title" : "Util-linux: util-linux: heap buffer overread in setpwnam() when processing 256-byte usernames",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-14104" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libgcc@8.5.0-28.el8_10?arch=x86_64&distro=rhel-8.10&upstream=gcc-8.5.0-28.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2020-11023",
                "title" : "Potential XSS vulnerability in jQuery",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2020-11023" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2020-11023",
                "title" : "Potential XSS vulnerability in jQuery",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2020-11023" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libblkid@2.32.1-48.el8_10?arch=x86_64&distro=rhel-8.10&upstream=util-linux-2.32.1-48.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2025-14104",
                "title" : "Util-linux: util-linux: heap buffer overread in setpwnam() when processing 256-byte usernames",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-14104" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-27456",
                "title" : "util-linux: TOCTOU Race Condition in util-linux mount(8) - Loop Device Setup",
                "source" : "redhat-csaf",
                "cvssScore" : 4.7,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-27456" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2025-14104",
                "title" : "Util-linux: util-linux: heap buffer overread in setpwnam() when processing 256-byte usernames",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-14104" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libmount@2.32.1-48.el8_10?arch=x86_64&distro=rhel-8.10&upstream=util-linux-2.32.1-48.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2025-14104",
                "title" : "Util-linux: util-linux: heap buffer overread in setpwnam() when processing 256-byte usernames",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-14104" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2025-14104",
                "title" : "Util-linux: util-linux: heap buffer overread in setpwnam() when processing 256-byte usernames",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-14104" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/systemd-libs@239-82.el8_10.15?arch=x86_64&distro=rhel-8.10&upstream=systemd-239-82.el8_10.15.src.rpm",
              "issues" : [ {
                "id" : "CVE-2023-7008",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-7008" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-3821",
                "title" : "An off-by-one Error issue was discovered in Systemd in format_timespan() function of time-util.c. An attacker could supply specific values for time and accuracy that leads to buffer overrun in format_timespan(), leading to a Denial of Service.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-3821" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-4415",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-4415" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-45873",
                "title" : "systemd 250 and 251 allows local users to achieve a systemd-coredump deadlock by triggering a crash that has a long backtrace. This occurs in parse_elf_object in shared/elf-util.c. The exploitation methodology is to crash a binary calling the same function recursively, and put it in a deeply nested directory to make its backtrace large enough to cause the deadlock. This must be done 16 times when MaxConnections=16 is set for the systemd/units/systemd-coredump.socket file.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-45873" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-4598",
                "source" : "redhat-csaf",
                "cvssScore" : 4.7,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-4598" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2023-7008",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-7008" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libtasn1@4.13-5.el8_10?arch=x86_64&distro=rhel-8.10&upstream=libtasn1-4.13-5.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2021-46848",
                "title" : "GNU Libtasn1 before 4.19.0 has an ETYPE_OK off-by-one array size check that affects asn1_encode_simple_der.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2021-46848" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-12133",
                "title" : "Libtasn1: inefficient der decoding in libtasn1 leading to potential remote dos",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-12133" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2021-46848",
                "title" : "GNU Libtasn1 before 4.19.0 has an ETYPE_OK off-by-one array size check that affects asn1_encode_simple_der.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2021-46848" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libgcrypt@1.8.5-7.el8_6?arch=x86_64&distro=rhel-8.10&upstream=libgcrypt-1.8.5-7.el8_6.src.rpm",
              "issues" : [ {
                "id" : "CVE-2024-2236",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-2236" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2024-2236",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-2236" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libcom_err@1.45.6-7.el8_10?arch=x86_64&distro=rhel-8.10&upstream=e2fsprogs-1.45.6-7.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2022-1304",
                "title" : "An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a segmentation fault and possibly arbitrary code execution via a specially crafted filesystem.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-1304" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2022-1304",
                "title" : "An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a segmentation fault and possibly arbitrary code execution via a specially crafted filesystem.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-1304" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/bzip2-libs@1.0.6-28.el8_10?arch=x86_64&distro=rhel-8.10&upstream=bzip2-1.0.6-28.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2019-12900",
                "title" : "BZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many selectors.",
                "source" : "redhat-csaf",
                "cvssScore" : 4.4,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2019-12900" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2019-12900",
                "title" : "BZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many selectors.",
                "source" : "redhat-csaf",
                "cvssScore" : 4.4,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2019-12900" ],
                "unique" : false
              }
            } ],
            "highestVulnerability" : {
              "id" : "CVE-2025-15467",
              "title" : "Stack buffer overflow in CMS (Auth)EnvelopedData parsing",
              "source" : "redhat-csaf",
              "cvssScore" : 9.8,
              "severity" : "CRITICAL",
              "cves" : [ "CVE-2025-15467" ],
              "unique" : false
            }
          }, {
            "ref" : "pkg:rpm/redhat/libmodulemd@2.13.0-1.el8?arch=x86_64&distro=rhel-8.10&upstream=libmodulemd-2.13.0-1.el8.src.rpm",
            "transitive" : [ {
              "ref" : "pkg:rpm/redhat/openssl-libs@1.1.1k-15.el8_6?arch=x86_64&distro=rhel-8.10&epoch=1&upstream=openssl-1.1.1k-15.el8_6.src.rpm",
              "issues" : [ {
                "id" : "CVE-2025-15467",
                "title" : "Stack buffer overflow in CMS (Auth)EnvelopedData parsing",
                "source" : "redhat-csaf",
                "cvssScore" : 9.8,
                "severity" : "CRITICAL",
                "cves" : [ "CVE-2025-15467" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-1473",
                "title" : "Resource leakage when decoding certificates and keys",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-1473" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-3358",
                "title" : "Using a Custom Cipher with NID_undef may lead to NULL encryption",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-3358" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-3602",
                "title" : "X.509 Email Address 4-byte Buffer Overflow",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-3602" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-3786",
                "title" : "X.509 Email Address Variable Length Buffer Overflow",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-3786" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-4450",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-4450" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-0215",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-0215" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-0216",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-0216" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-0217",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-0217" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-0401",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-0401" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-5363",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-5363" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-0286",
                "source" : "redhat-csaf",
                "cvssScore" : 7.4,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-0286" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-12797",
                "title" : "RFC7250 handshakes with unauthenticated servers don't abort as expected",
                "source" : "redhat-csaf",
                "cvssScore" : 7.4,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-12797" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-69419",
                "source" : "redhat-csaf",
                "cvssScore" : 7.4,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-69419" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-1292",
                "source" : "redhat-csaf",
                "cvssScore" : 6.7,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-1292" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-2068",
                "source" : "redhat-csaf",
                "cvssScore" : 6.7,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-2068" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-2650",
                "title" : "Possible DoS translating ASN.1 object identifiers",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-2650" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-6129",
                "title" : "POLY1305 MAC implementation corrupts vector registers on PowerPC",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-6129" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-69421",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-69421" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-11187",
                "title" : "Improper validation of PBMAC1 parameters in PKCS#12 MAC verification",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-11187" ],
                "unique" : false
              }, {
                "id" : "CVE-2020-1971",
                "title" : "EDIPARTYNAME NULL pointer dereference",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2020-1971" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-4304",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-4304" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-0464",
                "title" : "Excessive Resource Usage Verifying X.509 Policy Constraints",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-0464" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-6237",
                "title" : "Excessive time spent checking invalid RSA public keys",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-6237" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-5535",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-5535" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-6119",
                "title" : "Possible denial of service in X.509 name checks",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-6119" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-15468",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-15468" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-66199",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-66199" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-69420",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-69420" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-22796",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-22796" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-4741",
                "source" : "redhat-csaf",
                "cvssScore" : 5.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-4741" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-9230",
                "source" : "redhat-csaf",
                "cvssScore" : 5.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-9230" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-0727",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-0727" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-15469",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-15469" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-22795",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-22795" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-1343",
                "title" : "OCSP_basic_verify may incorrectly verify the response signing certificate",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-1343" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-2097",
                "title" : "AES OCB fails to encrypt some bytes",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-2097" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-0465",
                "title" : "Invalid certificate policies in leaf certificates are silently ignored",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-0465" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-0466",
                "title" : "Certificate policy check not enabled",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-0466" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-2975",
                "title" : "AES-SIV implementation ignores empty associated data entries",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-2975" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-3446",
                "title" : "Excessive time spent checking DH keys and parameters",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-3446" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-3817",
                "title" : "Excessive time spent checking DH q parameter value",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-3817" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-5678",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-5678" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-4603",
                "title" : "Excessive time spent checking DSA keys and parameters",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-4603" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-1255",
                "title" : "Input buffer over-read in AES-XTS implementation on 64 bit ARM",
                "source" : "redhat-csaf",
                "cvssScore" : 5.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-1255" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-4203",
                "source" : "redhat-csaf",
                "cvssScore" : 4.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-4203" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-68160",
                "source" : "redhat-csaf",
                "cvssScore" : 4.7,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-68160" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-69418",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-69418" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-2511",
                "source" : "redhat-csaf",
                "cvssScore" : 3.7,
                "severity" : "LOW",
                "cves" : [ "CVE-2024-2511" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2025-15467",
                "title" : "Stack buffer overflow in CMS (Auth)EnvelopedData parsing",
                "source" : "redhat-csaf",
                "cvssScore" : 9.8,
                "severity" : "CRITICAL",
                "cves" : [ "CVE-2025-15467" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libcurl@7.61.1-34.el8_10.11?arch=x86_64&distro=rhel-8.10&upstream=curl-7.61.1-34.el8_10.11.src.rpm",
              "issues" : [ {
                "id" : "CVE-2022-32207",
                "title" : "When curl < 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes the operation atomic by finalizing the operation with a rename from a temporary name to the final target file name.In that rename operation, it might accidentally *widen* the permissions for the target file, leaving the updated file accessible to more users than intended.",
                "source" : "redhat-csaf",
                "cvssScore" : 9.8,
                "severity" : "CRITICAL",
                "cves" : [ "CVE-2022-32207" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-22576",
                "title" : "An improper authentication vulnerability exists in curl 7.33.0 to and including 7.82.0 which might allow reuse OAUTH2-authenticated connections without properly making sure that the connection was authenticated with the same credentials as set for this transfer. This affects SASL-enabled protocols: SMPTP(S), IMAP(S), POP3(S) and LDAP(S) (openldap only).",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-22576" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-38545",
                "title" : "This flaw makes curl overflow a heap based buffer in the SOCKS5 proxy\nhandshake.\n\nWhen curl is asked to pass along the host name to the SOCKS5 proxy to allow\nthat to resolve the address instead of it getting done by curl itself, the\nmaximum length that host name can be is 255 bytes.\n\nIf the host name is detected to be longer, curl switches to local name\nresolving and instead passes on the resolved address only. Due to this bug,\nthe local variable that means \"let the host resolve the name\" could get the\nwrong value during a slow SOCKS5 handshake, and contrary to the intention,\ncopy the too long host name to the target buffer instead of copying just the\nresolved address there.\n\nThe target buffer being a heap based buffer, and the host name coming from the\nURL that curl has been told to operate with.",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-38545" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-27775",
                "title" : "An information disclosure vulnerability exists in curl 7.65.0 to 7.82.0 are vulnerable that by using an IPv6 address that was in the connection pool but with a different zone id it could reuse a connection instead.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-27775" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-27782",
                "title" : "libcurl would reuse a previously created connection even when a TLS or SSHrelated option had been changed that should have prohibited reuse.libcurl keeps previously used connections in a connection pool for subsequenttransfers to reuse if one of them matches the setup. However, several TLS andSSH settings were left out from the configuration match checks, making themmatch too easily.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-27782" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-2398",
                "title" : "HTTP/2 push headers memory-leak",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2398" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-32206",
                "title" : "curl < 7.84.0 supports \"chained\" HTTP compression algorithms, meaning that a serverresponse can be compressed multiple times and potentially with different algorithms. The number of acceptable \"links\" in this \"decompression chain\" was unbounded, allowing a malicious server to insert a virtually unlimited number of compression steps.The use of such a decompression chain could result in a \"malloc bomb\", makingcurl end up spending enormous amounts of allocated heap memory, or trying toand returning out of memory errors.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-32206" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-23916",
                "title" : "An allocation of resources without limits or throttling vulnerability exists in curl <v7.88.0 based on the \"chained\" HTTP compression algorithms, meaning that a server response can be compressed multiple times and potentially with differentalgorithms. The number of acceptable \"links\" in this \"decompression chain\" wascapped, but the cap was implemented on a per-header basis allowing a maliciousserver to insert a virtually unlimited number of compression steps simply byusing many headers. The use of such a decompression chain could result in a \"malloc bomb\", making curl end up spending enormous amounts of allocated heap memory, or trying to and returning out of memory errors.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-23916" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-43552",
                "title" : "A use after free vulnerability exists in curl <7.87.0. Curl can be asked to *tunnel* virtually all protocols it supports through an HTTP proxy. HTTP proxies can (and often do) deny such tunnel operations. When getting denied to tunnel the specific protocols SMB or TELNET, curl would use a heap-allocated struct after it had been freed, in its transfer shutdown code path.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-43552" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-27535",
                "title" : "An authentication bypass vulnerability exists in libcurl <8.0.0 in the FTP connection reuse feature that can result in wrong credentials being used during subsequent transfers. Previously created connections are kept in a connection pool for reuse if they match the current setup. However, certain FTP settings such as CURLOPT_FTP_ACCOUNT, CURLOPT_FTP_ALTERNATIVE_TO_USER, CURLOPT_FTP_SSL_CCC, and CURLOPT_USE_SSL were not included in the configuration match checks, causing them to match too easily. This could lead to libcurl using the wrong credentials when performing a transfer, potentially allowing unauthorized access to sensitive information.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-27535" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-27536",
                "title" : "An authentication bypass vulnerability exists libcurl <8.0.0 in the connection reuse feature which can reuse previously established connections with incorrect user permissions due to a failure to check for changes in the CURLOPT_GSSAPI_DELEGATION option. This vulnerability affects krb5/kerberos/negotiate/GSSAPI transfers and could potentially result in unauthorized access to sensitive information. The safest option is to not reuse connections if the CURLOPT_GSSAPI_DELEGATION option has been changed.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-27536" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-28321",
                "title" : "An improper certificate validation vulnerability exists in curl <v8.1.0 in the way it supports matching of wildcard patterns when listed as \"Subject Alternative Name\" in TLS server certificates. curl can be built to use its own name matching function for TLS rather than one provided by a TLS library. This private wildcard matching function would match IDN (International Domain Name) hosts incorrectly and could as a result accept patterns that otherwise should mismatch. IDN hostnames are converted to puny code before used for certificate checks. Puny coded names always start with `xn--` and should not be allowed to pattern match, but the wildcard check in curl could still check for `x*`, which would match even though the IDN name most likely contained nothing even resembling an `x`.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-28321" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-27538",
                "title" : "An authentication bypass vulnerability exists in libcurl prior to v8.0.0 where it reuses a previously established SSH connection despite the fact that an SSH option was modified, which should have prevented reuse. libcurl maintains a pool of previously used connections to reuse them for subsequent transfers if the configurations match. However, two SSH settings were omitted from the configuration check, allowing them to match easily, potentially leading to the reuse of an inappropriate connection.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-27538" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-32208",
                "title" : "When curl < 7.84.0 does FTP transfers secured by krb5, it handles message verification failures wrongly. This flaw makes it possible for a Man-In-The-Middle attack to go unnoticed and even allows it to inject data to the client.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-32208" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-46218",
                "title" : "This flaw allows a malicious HTTP server to set \"super cookies\" in curl that\nare then passed back to more origins than what is otherwise allowed or\npossible. This allows a site to set cookies that then would get sent to\ndifferent and unrelated sites and domains.\n\nIt could do this by exploiting a mixed case flaw in curl's function that\nverifies a given cookie domain against the Public Suffix List (PSL). For\nexample a cookie could be set with `domain=co.UK` when the URL used a lower\ncase hostname `curl.co.uk`, even though `co.uk` is listed as a PSL domain.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-46218" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-9086",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-9086" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-27774",
                "title" : "An insufficiently protected credentials vulnerability exists in curl 4.9 to and include curl 7.82.0 are affected that could allow an attacker to extract credentials when follows HTTP(S) redirects is used with authentication could leak credentials to other services that exist on different protocols or port numbers.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-27774" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-32221",
                "title" : "When doing HTTP(S) transfers, libcurl might erroneously use the read callback (`CURLOPT_READFUNCTION`) to ask for data to send, even when the `CURLOPT_POSTFIELDS` option has been set, if the same handle previously was used to issue a `PUT` request which used that callback. This flaw may surprise the application and cause it to misbehave and either send off the wrong data or use memory after free or similar in the subsequent `POST` request. The problem exists in the logic for a reused handle when it is changed from a PUT to a POST.",
                "source" : "redhat-csaf",
                "cvssScore" : 4.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-32221" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-27776",
                "title" : "A insufficiently protected credentials vulnerability in fixed in curl 7.83.0 might leak authentication or cookie header data on HTTP redirects to the same host but another port number.",
                "source" : "redhat-csaf",
                "cvssScore" : 4.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-27776" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-27533",
                "title" : "A vulnerability in input validation exists in curl <8.0 during communication using the TELNET protocol may allow an attacker to pass on maliciously crafted user name and \"telnet options\" during server negotiation. The lack of proper input scrubbing allows an attacker to send content or perform option negotiation without the application's intent. This vulnerability could be exploited if an application allows user input, thereby enabling attackers to execute arbitrary code on the system.",
                "source" : "redhat-csaf",
                "cvssScore" : 4.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-27533" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-27534",
                "title" : "A path traversal vulnerability exists in curl <8.0.0 SFTP implementation causes the tilde (~) character to be wrongly replaced when used as a prefix in the first path element, in addition to its intended use as the first element to indicate a path relative to the user's home directory. Attackers can exploit this flaw to bypass filtering or execute arbitrary code by crafting a path like /~2/foo while accessing a server with a specific user.",
                "source" : "redhat-csaf",
                "cvssScore" : 3.7,
                "severity" : "LOW",
                "cves" : [ "CVE-2023-27534" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-28322",
                "title" : "An information disclosure vulnerability exists in curl <v8.1.0 when doing HTTP(S) transfers, libcurl might erroneously use the read callback (`CURLOPT_READFUNCTION`) to ask for data to send, even when the `CURLOPT_POSTFIELDS` option has been set, if the same handle previously wasused to issue a `PUT` request which used that callback. This flaw may surprise the application and cause it to misbehave and either send off the wrong data or use memory after free or similar in the second transfer. The problem exists in the logic for a reused handle when it is (expected to be) changed from a PUT to a POST.",
                "source" : "redhat-csaf",
                "cvssScore" : 3.7,
                "severity" : "LOW",
                "cves" : [ "CVE-2023-28322" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-38546",
                "source" : "redhat-csaf",
                "cvssScore" : 3.7,
                "severity" : "LOW",
                "cves" : [ "CVE-2023-38546" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-35252",
                "title" : "When curl is used to retrieve and parse cookies from a HTTP(S) server, itaccepts cookies using control codes that when later are sent back to a HTTPserver might make the server return 400 responses. Effectively allowing a\"sister site\" to deny service to all siblings.",
                "source" : "redhat-csaf",
                "cvssScore" : 3.1,
                "severity" : "LOW",
                "cves" : [ "CVE-2022-35252" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2022-32207",
                "title" : "When curl < 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes the operation atomic by finalizing the operation with a rename from a temporary name to the final target file name.In that rename operation, it might accidentally *widen* the permissions for the target file, leaving the updated file accessible to more users than intended.",
                "source" : "redhat-csaf",
                "cvssScore" : 9.8,
                "severity" : "CRITICAL",
                "cves" : [ "CVE-2022-32207" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/curl@7.61.1-34.el8_10.11?arch=x86_64&distro=rhel-8.10&upstream=curl-7.61.1-34.el8_10.11.src.rpm",
              "issues" : [ {
                "id" : "CVE-2022-32207",
                "title" : "When curl < 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes the operation atomic by finalizing the operation with a rename from a temporary name to the final target file name.In that rename operation, it might accidentally *widen* the permissions for the target file, leaving the updated file accessible to more users than intended.",
                "source" : "redhat-csaf",
                "cvssScore" : 9.8,
                "severity" : "CRITICAL",
                "cves" : [ "CVE-2022-32207" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-22576",
                "title" : "An improper authentication vulnerability exists in curl 7.33.0 to and including 7.82.0 which might allow reuse OAUTH2-authenticated connections without properly making sure that the connection was authenticated with the same credentials as set for this transfer. This affects SASL-enabled protocols: SMPTP(S), IMAP(S), POP3(S) and LDAP(S) (openldap only).",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-22576" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-38545",
                "title" : "This flaw makes curl overflow a heap based buffer in the SOCKS5 proxy\nhandshake.\n\nWhen curl is asked to pass along the host name to the SOCKS5 proxy to allow\nthat to resolve the address instead of it getting done by curl itself, the\nmaximum length that host name can be is 255 bytes.\n\nIf the host name is detected to be longer, curl switches to local name\nresolving and instead passes on the resolved address only. Due to this bug,\nthe local variable that means \"let the host resolve the name\" could get the\nwrong value during a slow SOCKS5 handshake, and contrary to the intention,\ncopy the too long host name to the target buffer instead of copying just the\nresolved address there.\n\nThe target buffer being a heap based buffer, and the host name coming from the\nURL that curl has been told to operate with.",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-38545" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-15079",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-15079" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-27775",
                "title" : "An information disclosure vulnerability exists in curl 7.65.0 to 7.82.0 are vulnerable that by using an IPv6 address that was in the connection pool but with a different zone id it could reuse a connection instead.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-27775" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-27782",
                "title" : "libcurl would reuse a previously created connection even when a TLS or SSHrelated option had been changed that should have prohibited reuse.libcurl keeps previously used connections in a connection pool for subsequenttransfers to reuse if one of them matches the setup. However, several TLS andSSH settings were left out from the configuration match checks, making themmatch too easily.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-27782" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-2398",
                "title" : "HTTP/2 push headers memory-leak",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2398" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-13034",
                "source" : "redhat-csaf",
                "cvssScore" : 6.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-13034" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-14819",
                "source" : "redhat-csaf",
                "cvssScore" : 6.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-14819" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-1965",
                "source" : "redhat-csaf",
                "cvssScore" : 6.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-1965" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-32206",
                "title" : "curl < 7.84.0 supports \"chained\" HTTP compression algorithms, meaning that a serverresponse can be compressed multiple times and potentially with different algorithms. The number of acceptable \"links\" in this \"decompression chain\" was unbounded, allowing a malicious server to insert a virtually unlimited number of compression steps.The use of such a decompression chain could result in a \"malloc bomb\", makingcurl end up spending enormous amounts of allocated heap memory, or trying toand returning out of memory errors.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-32206" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-23916",
                "title" : "An allocation of resources without limits or throttling vulnerability exists in curl <v7.88.0 based on the \"chained\" HTTP compression algorithms, meaning that a server response can be compressed multiple times and potentially with differentalgorithms. The number of acceptable \"links\" in this \"decompression chain\" wascapped, but the cap was implemented on a per-header basis allowing a maliciousserver to insert a virtually unlimited number of compression steps simply byusing many headers. The use of such a decompression chain could result in a \"malloc bomb\", making curl end up spending enormous amounts of allocated heap memory, or trying to and returning out of memory errors.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-23916" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-14524",
                "title" : "bearer token leak on cross-protocol redirect",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-14524" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-3784",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-3784" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-3805",
                "source" : "redhat-csaf",
                "cvssScore" : 6.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-3805" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-43552",
                "title" : "A use after free vulnerability exists in curl <7.87.0. Curl can be asked to *tunnel* virtually all protocols it supports through an HTTP proxy. HTTP proxies can (and often do) deny such tunnel operations. When getting denied to tunnel the specific protocols SMB or TELNET, curl would use a heap-allocated struct after it had been freed, in its transfer shutdown code path.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-43552" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-27535",
                "title" : "An authentication bypass vulnerability exists in libcurl <8.0.0 in the FTP connection reuse feature that can result in wrong credentials being used during subsequent transfers. Previously created connections are kept in a connection pool for reuse if they match the current setup. However, certain FTP settings such as CURLOPT_FTP_ACCOUNT, CURLOPT_FTP_ALTERNATIVE_TO_USER, CURLOPT_FTP_SSL_CCC, and CURLOPT_USE_SSL were not included in the configuration match checks, causing them to match too easily. This could lead to libcurl using the wrong credentials when performing a transfer, potentially allowing unauthorized access to sensitive information.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-27535" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-27536",
                "title" : "An authentication bypass vulnerability exists libcurl <8.0.0 in the connection reuse feature which can reuse previously established connections with incorrect user permissions due to a failure to check for changes in the CURLOPT_GSSAPI_DELEGATION option. This vulnerability affects krb5/kerberos/negotiate/GSSAPI transfers and could potentially result in unauthorized access to sensitive information. The safest option is to not reuse connections if the CURLOPT_GSSAPI_DELEGATION option has been changed.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-27536" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-28321",
                "title" : "An improper certificate validation vulnerability exists in curl <v8.1.0 in the way it supports matching of wildcard patterns when listed as \"Subject Alternative Name\" in TLS server certificates. curl can be built to use its own name matching function for TLS rather than one provided by a TLS library. This private wildcard matching function would match IDN (International Domain Name) hosts incorrectly and could as a result accept patterns that otherwise should mismatch. IDN hostnames are converted to puny code before used for certificate checks. Puny coded names always start with `xn--` and should not be allowed to pattern match, but the wildcard check in curl could still check for `x*`, which would match even though the IDN name most likely contained nothing even resembling an `x`.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-28321" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-10966",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-10966" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-3783",
                "source" : "redhat-csaf",
                "cvssScore" : 5.7,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-3783" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-27538",
                "title" : "An authentication bypass vulnerability exists in libcurl prior to v8.0.0 where it reuses a previously established SSH connection despite the fact that an SSH option was modified, which should have prevented reuse. libcurl maintains a pool of previously used connections to reuse them for subsequent transfers if the configurations match. However, two SSH settings were omitted from the configuration check, allowing them to match easily, potentially leading to the reuse of an inappropriate connection.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-27538" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-32208",
                "title" : "When curl < 7.84.0 does FTP transfers secured by krb5, it handles message verification failures wrongly. This flaw makes it possible for a Man-In-The-Middle attack to go unnoticed and even allows it to inject data to the client.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-32208" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-46218",
                "title" : "This flaw allows a malicious HTTP server to set \"super cookies\" in curl that\nare then passed back to more origins than what is otherwise allowed or\npossible. This allows a site to set cookies that then would get sent to\ndifferent and unrelated sites and domains.\n\nIt could do this by exploiting a mixed case flaw in curl's function that\nverifies a given cookie domain against the Public Suffix List (PSL). For\nexample a cookie could be set with `domain=co.UK` when the URL used a lower\ncase hostname `curl.co.uk`, even though `co.uk` is listed as a PSL domain.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-46218" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-9086",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-9086" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-27774",
                "title" : "An insufficiently protected credentials vulnerability exists in curl 4.9 to and include curl 7.82.0 are affected that could allow an attacker to extract credentials when follows HTTP(S) redirects is used with authentication could leak credentials to other services that exist on different protocols or port numbers.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-27774" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-32221",
                "title" : "When doing HTTP(S) transfers, libcurl might erroneously use the read callback (`CURLOPT_READFUNCTION`) to ask for data to send, even when the `CURLOPT_POSTFIELDS` option has been set, if the same handle previously was used to issue a `PUT` request which used that callback. This flaw may surprise the application and cause it to misbehave and either send off the wrong data or use memory after free or similar in the subsequent `POST` request. The problem exists in the logic for a reused handle when it is changed from a PUT to a POST.",
                "source" : "redhat-csaf",
                "cvssScore" : 4.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-32221" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-10148",
                "source" : "redhat-csaf",
                "cvssScore" : 4.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-10148" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-14017",
                "source" : "redhat-csaf",
                "cvssScore" : 4.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-14017" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-15224",
                "source" : "redhat-csaf",
                "cvssScore" : 4.7,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-15224" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-27776",
                "title" : "A insufficiently protected credentials vulnerability in fixed in curl 7.83.0 might leak authentication or cookie header data on HTTP redirects to the same host but another port number.",
                "source" : "redhat-csaf",
                "cvssScore" : 4.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-27776" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-27533",
                "title" : "A vulnerability in input validation exists in curl <8.0 during communication using the TELNET protocol may allow an attacker to pass on maliciously crafted user name and \"telnet options\" during server negotiation. The lack of proper input scrubbing allows an attacker to send content or perform option negotiation without the application's intent. This vulnerability could be exploited if an application allows user input, thereby enabling attackers to execute arbitrary code on the system.",
                "source" : "redhat-csaf",
                "cvssScore" : 4.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-27533" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-27534",
                "title" : "A path traversal vulnerability exists in curl <8.0.0 SFTP implementation causes the tilde (~) character to be wrongly replaced when used as a prefix in the first path element, in addition to its intended use as the first element to indicate a path relative to the user's home directory. Attackers can exploit this flaw to bypass filtering or execute arbitrary code by crafting a path like /~2/foo while accessing a server with a specific user.",
                "source" : "redhat-csaf",
                "cvssScore" : 3.7,
                "severity" : "LOW",
                "cves" : [ "CVE-2023-27534" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-28322",
                "title" : "An information disclosure vulnerability exists in curl <v8.1.0 when doing HTTP(S) transfers, libcurl might erroneously use the read callback (`CURLOPT_READFUNCTION`) to ask for data to send, even when the `CURLOPT_POSTFIELDS` option has been set, if the same handle previously wasused to issue a `PUT` request which used that callback. This flaw may surprise the application and cause it to misbehave and either send off the wrong data or use memory after free or similar in the second transfer. The problem exists in the logic for a reused handle when it is (expected to be) changed from a PUT to a POST.",
                "source" : "redhat-csaf",
                "cvssScore" : 3.7,
                "severity" : "LOW",
                "cves" : [ "CVE-2023-28322" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-38546",
                "source" : "redhat-csaf",
                "cvssScore" : 3.7,
                "severity" : "LOW",
                "cves" : [ "CVE-2023-38546" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-35252",
                "title" : "When curl is used to retrieve and parse cookies from a HTTP(S) server, itaccepts cookies using control codes that when later are sent back to a HTTPserver might make the server return 400 responses. Effectively allowing a\"sister site\" to deny service to all siblings.",
                "source" : "redhat-csaf",
                "cvssScore" : 3.1,
                "severity" : "LOW",
                "cves" : [ "CVE-2022-35252" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2022-32207",
                "title" : "When curl < 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes the operation atomic by finalizing the operation with a rename from a temporary name to the final target file name.In that rename operation, it might accidentally *widen* the permissions for the target file, leaving the updated file accessible to more users than intended.",
                "source" : "redhat-csaf",
                "cvssScore" : 9.8,
                "severity" : "CRITICAL",
                "cves" : [ "CVE-2022-32207" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libxml2@2.9.7-21.el8_10.3?arch=x86_64&distro=rhel-8.10&upstream=libxml2-2.9.7-21.el8_10.3.src.rpm",
              "issues" : [ {
                "id" : "CVE-2024-40896",
                "title" : "In libxml2 2.11 before 2.11.9, 2.12 before 2.12.9, and 2.13 before 2.13.3, the SAX parser can produce events for external entities even if custom SAX handlers try to override entity content (by setting \"checked\"). This makes classic XXE attacks possible.",
                "source" : "redhat-csaf",
                "cvssScore" : 9.1,
                "severity" : "CRITICAL",
                "cves" : [ "CVE-2024-40896" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-49794",
                "title" : "Libxml: heap use after free (uaf) leads to denial of service (dos)",
                "source" : "redhat-csaf",
                "cvssScore" : 9.1,
                "severity" : "CRITICAL",
                "cves" : [ "CVE-2025-49794" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-49796",
                "title" : "Libxml: type confusion leads to denial of service (dos)",
                "source" : "redhat-csaf",
                "cvssScore" : 9.1,
                "severity" : "CRITICAL",
                "cves" : [ "CVE-2025-49796" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-56171",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-56171" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-40304",
                "title" : "An issue was discovered in libxml2 before 2.10.3. Certain invalid XML entity definitions can corrupt a hash table key, potentially leading to subsequent logic errors. In one case, a double-free can be provoked.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-40304" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-24928",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-24928" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-7425",
                "title" : "Libxslt: heap use-after-free in libxslt caused by atype corruption in xmlattrptr",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-7425" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-40303",
                "title" : "An issue was discovered in libxml2 before 2.10.3. When parsing a multi-gigabyte XML document with the XML_PARSE_HUGE parser option enabled, several integer counters can overflow. This results in an attempt to access an array at a negative 2GB offset, typically leading to a segmentation fault.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-40303" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-25062",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-25062" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-32415",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-32415" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-49795",
                "title" : "Libxml: null pointer dereference leads to denial of service (dos)",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-49795" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-6021",
                "title" : "Libxml2: integer overflow in xmlbuildqname() leads to stack buffer overflow in libxml2",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-6021" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-7424",
                "title" : "Libxslt: type confusion in xmlnode.psvi between stylesheet and source nodes",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-7424" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-29824",
                "title" : "In libxml2 before 2.9.14, several buffer handling functions in buf.c (xmlBuf*) and tree.c (xmlBuffer*) don't check for integer overflows. This can result in out-of-bounds memory writes. Exploitation requires a victim to open a crafted, multi-gigabyte XML file. Other software using libxml2's buffer functions, for example libxslt through 1.1.35, is affected as well.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.4,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-29824" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-39615",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-39615" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-9714",
                "source" : "redhat-csaf",
                "cvssScore" : 6.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-9714" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-49043",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-49043" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-28484",
                "title" : "In libxml2 before 2.10.4, parsing of certain invalid XSD schemas can lead to a NULL pointer dereference and subsequently a segfault. This occurs in xmlSchemaFixupComplexType in xmlschemas.c.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-28484" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-29469",
                "title" : "An issue was discovered in libxml2 before 2.10.4. When hashing empty dict strings in a crafted XML document, xmlDictComputeFastKey in dict.c can produce non-deterministic values, leading to various logic and memory errors, such as a double free. This behavior occurs because there is an attempt to use the first byte of an empty string, and any value is possible (not solely the '\\0' value).",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-29469" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-32414",
                "source" : "redhat-csaf",
                "cvssScore" : 5.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-32414" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-6170",
                "title" : "Libxml2: stack buffer overflow in xmllint interactive shell command handling",
                "source" : "redhat-csaf",
                "cvssScore" : 2.5,
                "severity" : "LOW",
                "cves" : [ "CVE-2025-6170" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2024-40896",
                "title" : "In libxml2 2.11 before 2.11.9, 2.12 before 2.12.9, and 2.13 before 2.13.3, the SAX parser can produce events for external entities even if custom SAX handlers try to override entity content (by setting \"checked\"). This makes classic XXE attacks possible.",
                "source" : "redhat-csaf",
                "cvssScore" : 9.1,
                "severity" : "CRITICAL",
                "cves" : [ "CVE-2024-40896" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/krb5-libs@1.18.2-32.el8_10?arch=x86_64&distro=rhel-8.10&upstream=krb5-1.18.2-32.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2024-3596",
                "source" : "redhat-csaf",
                "cvssScore" : 9.0,
                "severity" : "CRITICAL",
                "cves" : [ "CVE-2024-3596" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-42898",
                "title" : "PAC parsing in MIT Kerberos 5 (aka krb5) before 1.19.4 and 1.20.x before 1.20.1 has integer overflows that may lead to remote code execution (in KDC, kadmind, or a GSS or Kerberos application server) on 32-bit platforms (which have a resultant heap-based buffer overflow), and cause a denial of service on other platforms. This occurs in krb5_pac_parse in lib/krb5/krb/pac.c. Heimdal before 7.7.1 has \"a similar bug.\"",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-42898" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-39975",
                "title" : "kdc/do_tgs_req.c in MIT Kerberos 5 (aka krb5) 1.21 before 1.21.2 has a double free that is reachable if an authenticated user can trigger an authorization-data handling failure. Incorrect data is copied from one ticket to another.",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-39975" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-26462",
                "title" : "Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/kdc/ndr.c.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-26462" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-37370",
                "title" : "In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can modify the plaintext Extra Count field of a confidential GSS krb5 wrap token, causing the unwrapped token to appear truncated to the application.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-37370" ],
                "unique" : false
              }, {
                "id" : "CVE-2020-17049",
                "title" : "Kerberos KDC Security Feature Bypass Vulnerability",
                "source" : "redhat-csaf",
                "cvssScore" : 7.2,
                "severity" : "HIGH",
                "cves" : [ "CVE-2020-17049" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-36054",
                "title" : "lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) before 1.20.2 and 1.21.x before 1.21.1 frees an uninitialized pointer. A remote authenticated user can trigger a kadmind crash. This occurs because _xdr_kadm5_principal_ent_rec does not validate the relationship between n_key_data and the key_data array count.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-36054" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-37371",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-37371" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-24528",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-24528" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-26458",
                "title" : "Kerberos 5 (aka krb5) 1.21.2 contains a memory leak in /krb5/src/lib/rpc/pmap_rmt.c.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-26458" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-26461",
                "title" : "Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/lib/gssapi/krb5/k5sealv3.c.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-26461" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-3576",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-3576" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2024-3596",
                "source" : "redhat-csaf",
                "cvssScore" : 9.0,
                "severity" : "CRITICAL",
                "cves" : [ "CVE-2024-3596" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/glibc-minimal-langpack@2.28-251.el8_10.31?arch=x86_64&distro=rhel-8.10&upstream=glibc-2.28-251.el8_10.31.src.rpm",
              "issues" : [ {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0861",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-0861" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4911",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-4911" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33599",
                "title" : "nscd: Stack-based buffer overflow in netgroup cache",
                "source" : "redhat-csaf",
                "cvssScore" : 7.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-33599" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-4802",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-4802" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4527",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4527" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4806",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4806" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4813",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4813" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-5702",
                "title" : "The strcmp implementation optimized for the Power10 processor in the GNU C Library version 2.39 and later writes to vector registers v20 to v31 without saving contents from the caller (those registers are defined as non-volatile registers by the powerpc64le ABI), resulting in overwriting of its contents and potentially altering control flow of the caller, or leaking the input strings to the function to other parts of the program.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-5702" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-0395",
                "title" : "When the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-0395" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33600",
                "title" : "nscd: Null pointer crashes after notfound response",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33600" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0915",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-0915" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-8058",
                "source" : "redhat-csaf",
                "cvssScore" : 4.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-8058" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33601",
                "title" : "nscd: netgroup cache may terminate daemon on memory allocation failure",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33601" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33602",
                "title" : "nscd: netgroup cache assumes NSS callback uses in-buffer strings",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33602" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/glibc@2.28-251.el8_10.31?arch=x86_64&distro=rhel-8.10&upstream=glibc-2.28-251.el8_10.31.src.rpm",
              "issues" : [ {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0861",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-0861" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4911",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-4911" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33599",
                "title" : "nscd: Stack-based buffer overflow in netgroup cache",
                "source" : "redhat-csaf",
                "cvssScore" : 7.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-33599" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-4802",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-4802" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4527",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4527" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4806",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4806" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4813",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4813" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-15281",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-15281" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-5702",
                "title" : "The strcmp implementation optimized for the Power10 processor in the GNU C Library version 2.39 and later writes to vector registers v20 to v31 without saving contents from the caller (those registers are defined as non-volatile registers by the powerpc64le ABI), resulting in overwriting of its contents and potentially altering control flow of the caller, or leaking the input strings to the function to other parts of the program.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-5702" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-0395",
                "title" : "When the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-0395" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33600",
                "title" : "nscd: Null pointer crashes after notfound response",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33600" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0915",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-0915" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-8058",
                "source" : "redhat-csaf",
                "cvssScore" : 4.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-8058" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33601",
                "title" : "nscd: netgroup cache may terminate daemon on memory allocation failure",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33601" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33602",
                "title" : "nscd: netgroup cache assumes NSS callback uses in-buffer strings",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33602" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/glibc-common@2.28-251.el8_10.31?arch=x86_64&distro=rhel-8.10&upstream=glibc-2.28-251.el8_10.31.src.rpm",
              "issues" : [ {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0861",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-0861" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4911",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-4911" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33599",
                "title" : "nscd: Stack-based buffer overflow in netgroup cache",
                "source" : "redhat-csaf",
                "cvssScore" : 7.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-33599" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-4802",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-4802" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4527",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4527" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4806",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4806" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4813",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4813" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-5702",
                "title" : "The strcmp implementation optimized for the Power10 processor in the GNU C Library version 2.39 and later writes to vector registers v20 to v31 without saving contents from the caller (those registers are defined as non-volatile registers by the powerpc64le ABI), resulting in overwriting of its contents and potentially altering control flow of the caller, or leaking the input strings to the function to other parts of the program.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-5702" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-0395",
                "title" : "When the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-0395" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33600",
                "title" : "nscd: Null pointer crashes after notfound response",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33600" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0915",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-0915" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-8058",
                "source" : "redhat-csaf",
                "cvssScore" : 4.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-8058" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33601",
                "title" : "nscd: netgroup cache may terminate daemon on memory allocation failure",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33601" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33602",
                "title" : "nscd: netgroup cache assumes NSS callback uses in-buffer strings",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33602" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/xz-libs@5.2.4-4.el8_6?arch=x86_64&distro=rhel-8.10&upstream=xz-5.2.4-4.el8_6.src.rpm",
              "issues" : [ {
                "id" : "CVE-2022-1271",
                "title" : "An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is applied on the attacker's chosen file name (for example, a crafted file name), this can overwrite an attacker's content to an arbitrary attacker-selected file. This flaw occurs due to insufficient validation when processing filenames with two or more newlines where selected content and the target file names are embedded in crafted multi-line file names. This flaw allows a remote, low privileged attacker to force zgrep to write arbitrary files on the system.",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-1271" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-31115",
                "title" : "XZ has a heap-use-after-free bug in threaded .xz decoder",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-31115" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2022-1271",
                "title" : "An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is applied on the attacker's chosen file name (for example, a crafted file name), this can overwrite an attacker's content to an arbitrary attacker-selected file. This flaw occurs due to insufficient validation when processing filenames with two or more newlines where selected content and the target file names are embedded in crafted multi-line file names. This flaw allows a remote, low privileged attacker to force zgrep to write arbitrary files on the system.",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-1271" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/zlib@1.2.11-25.el8?arch=x86_64&distro=rhel-8.10&upstream=zlib-1.2.11-25.el8.src.rpm",
              "issues" : [ {
                "id" : "CVE-2018-25032",
                "title" : "zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.",
                "source" : "redhat-csaf",
                "cvssScore" : 8.2,
                "severity" : "HIGH",
                "cves" : [ "CVE-2018-25032" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-37434",
                "title" : "zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference).",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-37434" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2018-25032",
                "title" : "zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.",
                "source" : "redhat-csaf",
                "cvssScore" : 8.2,
                "severity" : "HIGH",
                "cves" : [ "CVE-2018-25032" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libssh-config@0.9.6-16.el8_10?arch=noarch&distro=rhel-8.10&upstream=libssh-0.9.6-16.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2025-5318",
                "title" : "Libssh: out-of-bounds read in sftp_handle()",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-5318" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-5987",
                "title" : "Libssh: invalid return code for chacha20 poly1305 with openssl backend",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-5987" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-48795",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-48795" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-2283",
                "source" : "redhat-csaf",
                "cvssScore" : 4.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-2283" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-6004",
                "source" : "redhat-csaf",
                "cvssScore" : 4.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-6004" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-1667",
                "title" : "A NULL pointer dereference was found In libssh during re-keying with algorithm guessing. This issue may allow an authenticated client to cause a denial of service.",
                "source" : "redhat-csaf",
                "cvssScore" : 4.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-1667" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-6918",
                "source" : "redhat-csaf",
                "cvssScore" : 3.7,
                "severity" : "LOW",
                "cves" : [ "CVE-2023-6918" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2025-5318",
                "title" : "Libssh: out-of-bounds read in sftp_handle()",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-5318" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libssh@0.9.6-16.el8_10?arch=x86_64&distro=rhel-8.10&upstream=libssh-0.9.6-16.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2025-5318",
                "title" : "Libssh: out-of-bounds read in sftp_handle()",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-5318" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-5987",
                "title" : "Libssh: invalid return code for chacha20 poly1305 with openssl backend",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-5987" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-48795",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-48795" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-2283",
                "source" : "redhat-csaf",
                "cvssScore" : 4.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-2283" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-6004",
                "source" : "redhat-csaf",
                "cvssScore" : 4.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-6004" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-1667",
                "title" : "A NULL pointer dereference was found In libssh during re-keying with algorithm guessing. This issue may allow an authenticated client to cause a denial of service.",
                "source" : "redhat-csaf",
                "cvssScore" : 4.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-1667" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-6918",
                "source" : "redhat-csaf",
                "cvssScore" : 3.7,
                "severity" : "LOW",
                "cves" : [ "CVE-2023-6918" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2025-5318",
                "title" : "Libssh: out-of-bounds read in sftp_handle()",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-5318" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libarchive@3.3.3-6.el8_10?arch=x86_64&distro=rhel-8.10&upstream=libarchive-3.3.3-6.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2025-5914",
                "title" : "Libarchive: double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-5914" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-4111",
                "title" : "Libarchive: infinite loop denial of service in rar5 decompression via archive_read_data() in libarchive",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-4111" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-4424",
                "title" : "Libarchive: libarchive: information disclosure via heap out-of-bounds read in rar archive processing",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-4424" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-5121",
                "title" : "Libarchive: libarchive: arbitrary code execution via integer overflow in iso9660 image processing",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-5121" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-26280",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-26280" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-36227",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-36227" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-57970",
                "title" : "libarchive through 3.7.7 has a heap-based buffer over-read in header_gnu_longlink in archive_read_support_format_tar.c via a TAR archive because it mishandles truncation in the middle of a GNU long linkname.",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-57970" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-25724",
                "title" : "list_item_verbose in tar/util.c in libarchive through 3.7.7 does not check an strftime return value, which can lead to a denial of service or unspecified other impact via a crafted TAR archive that is read with a verbose value of 2. For example, the 100-byte buffer may not be sufficient for a custom locale.",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-25724" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2025-5914",
                "title" : "Libarchive: double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-5914" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libcap@2.48-6.el8_9?arch=x86_64&distro=rhel-8.10&upstream=libcap-2.48-6.el8_9.src.rpm",
              "issues" : [ {
                "id" : "CVE-2023-2603",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-2603" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-2602",
                "title" : "A vulnerability was found in the pthread_create() function in libcap. This issue may allow a malicious actor to use cause __real_pthread_create() to return an error, which can exhaust the process memory.",
                "source" : "redhat-csaf",
                "cvssScore" : 3.3,
                "severity" : "LOW",
                "cves" : [ "CVE-2023-2602" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2023-2603",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-2603" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/ncurses-base@6.1-10.20180224.el8?arch=noarch&distro=rhel-8.10&upstream=ncurses-6.1-10.20180224.el8.src.rpm",
              "issues" : [ {
                "id" : "CVE-2023-29491",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-29491" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-69720",
                "title" : "The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-69720" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-29458",
                "title" : "ncurses 6.3 before patch 20220416 has an out-of-bounds read and segmentation violation in convert_strings in tinfo/read_entry.c in the terminfo library.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-29458" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2023-29491",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-29491" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/ncurses-libs@6.1-10.20180224.el8?arch=x86_64&distro=rhel-8.10&upstream=ncurses-6.1-10.20180224.el8.src.rpm",
              "issues" : [ {
                "id" : "CVE-2023-29491",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-29491" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-69720",
                "title" : "The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-69720" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-29458",
                "title" : "ncurses 6.3 before patch 20220416 has an out-of-bounds read and segmentation violation in convert_strings in tinfo/read_entry.c in the terminfo library.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-29458" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2023-29491",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-29491" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/glib2@2.56.4-168.el8_10?arch=x86_64&distro=rhel-8.10&upstream=glib2-2.56.4-168.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2025-13601",
                "title" : "Glib: integer overflow in in g_escape_uri_string()",
                "source" : "redhat-csaf",
                "cvssScore" : 7.7,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-13601" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-52533",
                "title" : "gio/gsocks4aproxy.c in GNOME GLib before 2.82.1 has an off-by-one error and resultant buffer overflow because SOCKS4_CONN_MSG_LEN is not sufficient for a trailing '\\0' character.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-52533" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-32611",
                "title" : "G_variant_byteswap() can take a long time with some non-normal inputs",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-32611" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-32665",
                "title" : "Gvariant deserialisation does not match spec for non-normal data",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-32665" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-14512",
                "title" : "Glib: integer overflow in glib gio attribute escaping causes heap buffer overflow",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-14512" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-29499",
                "source" : "redhat-csaf",
                "cvssScore" : 6.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-29499" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-14087",
                "title" : "Glib: glib: buffer underflow in gvariant parser leads to heap corruption",
                "source" : "redhat-csaf",
                "cvssScore" : 5.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-14087" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-4373",
                "source" : "redhat-csaf",
                "cvssScore" : 4.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-4373" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-34397",
                "source" : "redhat-csaf",
                "cvssScore" : 3.8,
                "severity" : "LOW",
                "cves" : [ "CVE-2024-34397" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2025-13601",
                "title" : "Glib: integer overflow in in g_escape_uri_string()",
                "source" : "redhat-csaf",
                "cvssScore" : 7.7,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-13601" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/sqlite-libs@3.26.0-20.el8_10?arch=x86_64&distro=rhel-8.10&upstream=sqlite-3.26.0-20.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2025-6965",
                "title" : "Integer Truncation on SQLite",
                "source" : "redhat-csaf",
                "cvssScore" : 7.7,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-6965" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-7104",
                "source" : "redhat-csaf",
                "cvssScore" : 7.3,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-7104" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-3277",
                "title" : "An integer overflow can be triggered in SQLite’s `concat_ws()` function. The resulting, truncated integer is then used to allocate a buffer. When SQLite then writes the resulting string to the buffer, it uses the original, untruncated size and thus a wild Heap Buffer overflow of size ~4GB can be triggered. This can result in arbitrary code execution.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.3,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-3277" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-35737",
                "title" : "SQLite 1.0.12 through 3.39.x before 3.39.2 sometimes allows an array-bounds overflow if billions of bytes are used in a string argument to a C API.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-35737" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2025-6965",
                "title" : "Integer Truncation on SQLite",
                "source" : "redhat-csaf",
                "cvssScore" : 7.7,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-6965" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libnghttp2@1.33.0-6.el8_10.2?arch=x86_64&distro=rhel-8.10&upstream=nghttp2-1.33.0-6.el8_10.2.src.rpm",
              "issues" : [ {
                "id" : "CVE-2023-44487",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-44487" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-27135",
                "title" : "nghttp2 Denial of service: Assertion failure due to the missing state validation",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-27135" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-28182",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-28182" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2023-44487",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-44487" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/brotli@1.0.6-4.el8_10?arch=x86_64&distro=rhel-8.10&upstream=brotli-1.0.6-4.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2025-6176",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-6176" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2025-6176",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-6176" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/gnutls@3.6.16-8.el8_10.5?arch=x86_64&distro=rhel-8.10&upstream=gnutls-3.6.16-8.el8_10.5.src.rpm",
              "issues" : [ {
                "id" : "CVE-2022-2509",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-2509" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-0553",
                "title" : "Gnutls: incomplete fix for cve-2023-5981",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-0553" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-0567",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-0567" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-0361",
                "title" : "A timing side-channel in the handling of RSA ClientKeyExchange messages was discovered in GnuTLS. This side-channel can be sufficient to recover the key encrypted in the RSA ciphertext across a network in a Bleichenbacher style attack. To achieve a successful decryption the attacker would need to send a large amount of specially crafted messages to the vulnerable server. By recovering the secret from the ClientKeyExchange message, the attacker would be able to decrypt the application data exchanged over that connection.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.4,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-0361" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-32988",
                "title" : "Gnutls: vulnerability in gnutls othername san export",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-32988" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-32990",
                "title" : "Gnutls: vulnerability in gnutls certtool template parsing",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-32990" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-6395",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-6395" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-5981",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-5981" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-12243",
                "title" : "Gnutls: gnutls impacted by inefficient der decoding in libtasn1 leading to remote dos",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-12243" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-28834",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-28834" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-14831",
                "title" : "Gnutls: gnutls: denial of service via excessive resource consumption during certificate verification",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-14831" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-32989",
                "title" : "Gnutls: vulnerability in gnutls sct extension parsing",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-32989" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-28835",
                "source" : "redhat-csaf",
                "cvssScore" : 5.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-28835" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-9820",
                "title" : "Gnutls: stack-based buffer overflow in gnutls_pkcs11_token_init() function",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-9820" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2022-2509",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-2509" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/pcre2@10.32-3.el8_6?arch=x86_64&distro=rhel-8.10&upstream=pcre2-10.32-3.el8_6.src.rpm",
              "issues" : [ {
                "id" : "CVE-2022-1586",
                "title" : "An out-of-bounds read vulnerability was discovered in the PCRE2 library in the compile_xclass_matchingpath() function of the pcre2_jit_compile.c file. This involves a unicode property matching issue in JIT-compiled regular expressions. The issue occurs because the character was not fully read in case-less matching within JIT.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-1586" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-1587",
                "title" : "An out-of-bounds read vulnerability was discovered in the PCRE2 library in the get_recurse_data_length() function of the pcre2_jit_compile.c file. This issue affects recursions in JIT-compiled regular expressions caused by duplicate data transfers.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-1587" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2022-1586",
                "title" : "An out-of-bounds read vulnerability was discovered in the PCRE2 library in the compile_xclass_matchingpath() function of the pcre2_jit_compile.c file. This involves a unicode property matching issue in JIT-compiled regular expressions. The issue occurs because the character was not fully read in case-less matching within JIT.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-1586" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/openldap@2.4.46-21.el8_10?arch=x86_64&distro=rhel-8.10&upstream=openldap-2.4.46-21.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2023-2953",
                "title" : "A vulnerability was found in openldap. This security flaw causes a null pointer dereference in ber_memalloc_x() function.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-2953" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2023-2953",
                "title" : "A vulnerability was found in openldap. This security flaw causes a null pointer dereference in ber_memalloc_x() function.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-2953" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/lua-libs@5.3.4-12.el8?arch=x86_64&distro=rhel-8.10&upstream=lua-5.3.4-12.el8.src.rpm",
              "issues" : [ {
                "id" : "CVE-2021-44964",
                "title" : "Use after free in garbage collector and finalizer of lgc.c in Lua interpreter 5.4.0~5.4.3 allows attackers to perform Sandbox Escape via a crafted script file.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2021-44964" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-33099",
                "title" : "An issue in the component luaG_runerror of Lua v5.4.4 and below leads to a heap-buffer overflow when a recursive error occurs.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-33099" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-28805",
                "title" : "singlevar in lparser.c in Lua from (including) 5.4.0 up to (excluding) 5.4.4 lacks a certain luaK_exp2anyregup call, leading to a heap-based buffer over-read that might affect a system that compiles untrusted Lua code.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-28805" ],
                "unique" : false
              }, {
                "id" : "CVE-2021-43519",
                "title" : "Stack overflow in lua_resume of ldo.c in Lua Interpreter 5.1.0~5.4.4 allows attackers to perform a Denial of Service via a crafted script file.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2021-43519" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2021-44964",
                "title" : "Use after free in garbage collector and finalizer of lgc.c in Lua interpreter 5.4.0~5.4.3 allows attackers to perform Sandbox Escape via a crafted script file.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2021-44964" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/bash@4.4.20-6.el8_10?arch=x86_64&distro=rhel-8.10&upstream=bash-4.4.20-6.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2022-3715",
                "source" : "redhat-csaf",
                "cvssScore" : 6.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-3715" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2022-3715",
                "source" : "redhat-csaf",
                "cvssScore" : 6.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-3715" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/rpm-libs@4.14.3-32.el8_10?arch=x86_64&distro=rhel-8.10&upstream=rpm-4.14.3-32.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2021-35938",
                "title" : "A symbolic link issue was found in rpm. It occurs when rpm sets the desired permissions and credentials after installing a file. A local unprivileged user could use this flaw to exchange the original file with a symbolic link to a security-critical file and escalate their privileges on the system. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2021-35938" ],
                "unique" : false
              }, {
                "id" : "CVE-2021-35939",
                "title" : "It was found that the fix for CVE-2017-7500 and CVE-2017-7501 was incomplete: the check was only implemented for the parent directory of the file to be created. A local unprivileged user who owns another ancestor directory could potentially use this flaw to gain root privileges. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2021-35939" ],
                "unique" : false
              }, {
                "id" : "CVE-2021-35937",
                "title" : "A race condition vulnerability was found in rpm. A local unprivileged user could use this flaw to bypass the checks that were introduced in response to CVE-2017-7500 and CVE-2017-7501, potentially gaining root privileges. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2021-35937" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2021-35938",
                "title" : "A symbolic link issue was found in rpm. It occurs when rpm sets the desired permissions and credentials after installing a file. A local unprivileged user could use this flaw to exchange the original file with a symbolic link to a security-critical file and escalate their privileges on the system. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2021-35938" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/rpm@4.14.3-32.el8_10?arch=x86_64&distro=rhel-8.10&upstream=rpm-4.14.3-32.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2021-35938",
                "title" : "A symbolic link issue was found in rpm. It occurs when rpm sets the desired permissions and credentials after installing a file. A local unprivileged user could use this flaw to exchange the original file with a symbolic link to a security-critical file and escalate their privileges on the system. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2021-35938" ],
                "unique" : false
              }, {
                "id" : "CVE-2021-35939",
                "title" : "It was found that the fix for CVE-2017-7500 and CVE-2017-7501 was incomplete: the check was only implemented for the parent directory of the file to be created. A local unprivileged user who owns another ancestor directory could potentially use this flaw to gain root privileges. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2021-35939" ],
                "unique" : false
              }, {
                "id" : "CVE-2021-35937",
                "title" : "A race condition vulnerability was found in rpm. A local unprivileged user could use this flaw to bypass the checks that were introduced in response to CVE-2017-7500 and CVE-2017-7501, potentially gaining root privileges. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2021-35937" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2021-35938",
                "title" : "A symbolic link issue was found in rpm. It occurs when rpm sets the desired permissions and credentials after installing a file. A local unprivileged user could use this flaw to exchange the original file with a symbolic link to a security-critical file and escalate their privileges on the system. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2021-35938" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/gmp@6.1.2-11.el8?arch=x86_64&distro=rhel-8.10&epoch=1&upstream=gmp-6.1.2-11.el8.src.rpm",
              "issues" : [ {
                "id" : "CVE-2021-43618",
                "title" : "GNU Multiple Precision Arithmetic Library (GMP) through 6.2.1 has an mpz/inp_raw.c integer overflow and resultant buffer overflow via crafted input, leading to a segmentation fault on 32-bit platforms.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2021-43618" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2021-43618",
                "title" : "GNU Multiple Precision Arithmetic Library (GMP) through 6.2.1 has an mpz/inp_raw.c integer overflow and resultant buffer overflow via crafted input, leading to a segmentation fault on 32-bit platforms.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2021-43618" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libuuid@2.32.1-48.el8_10?arch=x86_64&distro=rhel-8.10&upstream=util-linux-2.32.1-48.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2025-14104",
                "title" : "Util-linux: util-linux: heap buffer overread in setpwnam() when processing 256-byte usernames",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-14104" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2025-14104",
                "title" : "Util-linux: util-linux: heap buffer overread in setpwnam() when processing 256-byte usernames",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-14104" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libgcc@8.5.0-28.el8_10?arch=x86_64&distro=rhel-8.10&upstream=gcc-8.5.0-28.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2020-11023",
                "title" : "Potential XSS vulnerability in jQuery",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2020-11023" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2020-11023",
                "title" : "Potential XSS vulnerability in jQuery",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2020-11023" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libblkid@2.32.1-48.el8_10?arch=x86_64&distro=rhel-8.10&upstream=util-linux-2.32.1-48.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2025-14104",
                "title" : "Util-linux: util-linux: heap buffer overread in setpwnam() when processing 256-byte usernames",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-14104" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-27456",
                "title" : "util-linux: TOCTOU Race Condition in util-linux mount(8) - Loop Device Setup",
                "source" : "redhat-csaf",
                "cvssScore" : 4.7,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-27456" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2025-14104",
                "title" : "Util-linux: util-linux: heap buffer overread in setpwnam() when processing 256-byte usernames",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-14104" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libmount@2.32.1-48.el8_10?arch=x86_64&distro=rhel-8.10&upstream=util-linux-2.32.1-48.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2025-14104",
                "title" : "Util-linux: util-linux: heap buffer overread in setpwnam() when processing 256-byte usernames",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-14104" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2025-14104",
                "title" : "Util-linux: util-linux: heap buffer overread in setpwnam() when processing 256-byte usernames",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-14104" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libtasn1@4.13-5.el8_10?arch=x86_64&distro=rhel-8.10&upstream=libtasn1-4.13-5.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2021-46848",
                "title" : "GNU Libtasn1 before 4.19.0 has an ETYPE_OK off-by-one array size check that affects asn1_encode_simple_der.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2021-46848" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-12133",
                "title" : "Libtasn1: inefficient der decoding in libtasn1 leading to potential remote dos",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-12133" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2021-46848",
                "title" : "GNU Libtasn1 before 4.19.0 has an ETYPE_OK off-by-one array size check that affects asn1_encode_simple_der.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2021-46848" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libcom_err@1.45.6-7.el8_10?arch=x86_64&distro=rhel-8.10&upstream=e2fsprogs-1.45.6-7.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2022-1304",
                "title" : "An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a segmentation fault and possibly arbitrary code execution via a specially crafted filesystem.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-1304" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2022-1304",
                "title" : "An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a segmentation fault and possibly arbitrary code execution via a specially crafted filesystem.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-1304" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/file-libs@5.33-27.el8_10?arch=x86_64&distro=rhel-8.10&upstream=file-5.33-27.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2022-48554",
                "title" : "File before 5.43 has an stack-based buffer over-read in file_copystr in funcs.c. NOTE: \"File\" is the name of an Open Source project.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-48554" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2022-48554",
                "title" : "File before 5.43 has an stack-based buffer over-read in file_copystr in funcs.c. NOTE: \"File\" is the name of an Open Source project.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-48554" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/bzip2-libs@1.0.6-28.el8_10?arch=x86_64&distro=rhel-8.10&upstream=bzip2-1.0.6-28.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2019-12900",
                "title" : "BZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many selectors.",
                "source" : "redhat-csaf",
                "cvssScore" : 4.4,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2019-12900" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2019-12900",
                "title" : "BZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many selectors.",
                "source" : "redhat-csaf",
                "cvssScore" : 4.4,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2019-12900" ],
                "unique" : false
              }
            } ],
            "highestVulnerability" : {
              "id" : "CVE-2025-15467",
              "title" : "Stack buffer overflow in CMS (Auth)EnvelopedData parsing",
              "source" : "redhat-csaf",
              "cvssScore" : 9.8,
              "severity" : "CRITICAL",
              "cves" : [ "CVE-2025-15467" ],
              "unique" : false
            }
          }, {
            "ref" : "pkg:rpm/redhat/python3-hawkey@0.63.0-21.el8_10?arch=x86_64&distro=rhel-8.10&upstream=libdnf-0.63.0-21.el8_10.src.rpm",
            "transitive" : [ {
              "ref" : "pkg:rpm/redhat/openssl-libs@1.1.1k-15.el8_6?arch=x86_64&distro=rhel-8.10&epoch=1&upstream=openssl-1.1.1k-15.el8_6.src.rpm",
              "issues" : [ {
                "id" : "CVE-2025-15467",
                "title" : "Stack buffer overflow in CMS (Auth)EnvelopedData parsing",
                "source" : "redhat-csaf",
                "cvssScore" : 9.8,
                "severity" : "CRITICAL",
                "cves" : [ "CVE-2025-15467" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-1473",
                "title" : "Resource leakage when decoding certificates and keys",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-1473" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-3358",
                "title" : "Using a Custom Cipher with NID_undef may lead to NULL encryption",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-3358" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-3602",
                "title" : "X.509 Email Address 4-byte Buffer Overflow",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-3602" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-3786",
                "title" : "X.509 Email Address Variable Length Buffer Overflow",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-3786" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-4450",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-4450" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-0215",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-0215" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-0216",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-0216" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-0217",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-0217" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-0401",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-0401" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-5363",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-5363" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-0286",
                "source" : "redhat-csaf",
                "cvssScore" : 7.4,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-0286" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-12797",
                "title" : "RFC7250 handshakes with unauthenticated servers don't abort as expected",
                "source" : "redhat-csaf",
                "cvssScore" : 7.4,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-12797" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-69419",
                "source" : "redhat-csaf",
                "cvssScore" : 7.4,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-69419" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-1292",
                "source" : "redhat-csaf",
                "cvssScore" : 6.7,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-1292" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-2068",
                "source" : "redhat-csaf",
                "cvssScore" : 6.7,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-2068" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-2650",
                "title" : "Possible DoS translating ASN.1 object identifiers",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-2650" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-6129",
                "title" : "POLY1305 MAC implementation corrupts vector registers on PowerPC",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-6129" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-69421",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-69421" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-11187",
                "title" : "Improper validation of PBMAC1 parameters in PKCS#12 MAC verification",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-11187" ],
                "unique" : false
              }, {
                "id" : "CVE-2020-1971",
                "title" : "EDIPARTYNAME NULL pointer dereference",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2020-1971" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-4304",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-4304" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-0464",
                "title" : "Excessive Resource Usage Verifying X.509 Policy Constraints",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-0464" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-6237",
                "title" : "Excessive time spent checking invalid RSA public keys",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-6237" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-5535",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-5535" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-6119",
                "title" : "Possible denial of service in X.509 name checks",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-6119" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-15468",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-15468" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-66199",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-66199" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-69420",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-69420" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-22796",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-22796" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-4741",
                "source" : "redhat-csaf",
                "cvssScore" : 5.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-4741" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-9230",
                "source" : "redhat-csaf",
                "cvssScore" : 5.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-9230" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-0727",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-0727" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-15469",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-15469" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-22795",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-22795" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-1343",
                "title" : "OCSP_basic_verify may incorrectly verify the response signing certificate",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-1343" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-2097",
                "title" : "AES OCB fails to encrypt some bytes",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-2097" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-0465",
                "title" : "Invalid certificate policies in leaf certificates are silently ignored",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-0465" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-0466",
                "title" : "Certificate policy check not enabled",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-0466" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-2975",
                "title" : "AES-SIV implementation ignores empty associated data entries",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-2975" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-3446",
                "title" : "Excessive time spent checking DH keys and parameters",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-3446" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-3817",
                "title" : "Excessive time spent checking DH q parameter value",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-3817" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-5678",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-5678" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-4603",
                "title" : "Excessive time spent checking DSA keys and parameters",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-4603" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-1255",
                "title" : "Input buffer over-read in AES-XTS implementation on 64 bit ARM",
                "source" : "redhat-csaf",
                "cvssScore" : 5.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-1255" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-4203",
                "source" : "redhat-csaf",
                "cvssScore" : 4.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-4203" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-68160",
                "source" : "redhat-csaf",
                "cvssScore" : 4.7,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-68160" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-69418",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-69418" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-2511",
                "source" : "redhat-csaf",
                "cvssScore" : 3.7,
                "severity" : "LOW",
                "cves" : [ "CVE-2024-2511" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2025-15467",
                "title" : "Stack buffer overflow in CMS (Auth)EnvelopedData parsing",
                "source" : "redhat-csaf",
                "cvssScore" : 9.8,
                "severity" : "CRITICAL",
                "cves" : [ "CVE-2025-15467" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libcurl@7.61.1-34.el8_10.11?arch=x86_64&distro=rhel-8.10&upstream=curl-7.61.1-34.el8_10.11.src.rpm",
              "issues" : [ {
                "id" : "CVE-2022-32207",
                "title" : "When curl < 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes the operation atomic by finalizing the operation with a rename from a temporary name to the final target file name.In that rename operation, it might accidentally *widen* the permissions for the target file, leaving the updated file accessible to more users than intended.",
                "source" : "redhat-csaf",
                "cvssScore" : 9.8,
                "severity" : "CRITICAL",
                "cves" : [ "CVE-2022-32207" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-22576",
                "title" : "An improper authentication vulnerability exists in curl 7.33.0 to and including 7.82.0 which might allow reuse OAUTH2-authenticated connections without properly making sure that the connection was authenticated with the same credentials as set for this transfer. This affects SASL-enabled protocols: SMPTP(S), IMAP(S), POP3(S) and LDAP(S) (openldap only).",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-22576" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-38545",
                "title" : "This flaw makes curl overflow a heap based buffer in the SOCKS5 proxy\nhandshake.\n\nWhen curl is asked to pass along the host name to the SOCKS5 proxy to allow\nthat to resolve the address instead of it getting done by curl itself, the\nmaximum length that host name can be is 255 bytes.\n\nIf the host name is detected to be longer, curl switches to local name\nresolving and instead passes on the resolved address only. Due to this bug,\nthe local variable that means \"let the host resolve the name\" could get the\nwrong value during a slow SOCKS5 handshake, and contrary to the intention,\ncopy the too long host name to the target buffer instead of copying just the\nresolved address there.\n\nThe target buffer being a heap based buffer, and the host name coming from the\nURL that curl has been told to operate with.",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-38545" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-27775",
                "title" : "An information disclosure vulnerability exists in curl 7.65.0 to 7.82.0 are vulnerable that by using an IPv6 address that was in the connection pool but with a different zone id it could reuse a connection instead.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-27775" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-27782",
                "title" : "libcurl would reuse a previously created connection even when a TLS or SSHrelated option had been changed that should have prohibited reuse.libcurl keeps previously used connections in a connection pool for subsequenttransfers to reuse if one of them matches the setup. However, several TLS andSSH settings were left out from the configuration match checks, making themmatch too easily.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-27782" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-2398",
                "title" : "HTTP/2 push headers memory-leak",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2398" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-32206",
                "title" : "curl < 7.84.0 supports \"chained\" HTTP compression algorithms, meaning that a serverresponse can be compressed multiple times and potentially with different algorithms. The number of acceptable \"links\" in this \"decompression chain\" was unbounded, allowing a malicious server to insert a virtually unlimited number of compression steps.The use of such a decompression chain could result in a \"malloc bomb\", makingcurl end up spending enormous amounts of allocated heap memory, or trying toand returning out of memory errors.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-32206" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-23916",
                "title" : "An allocation of resources without limits or throttling vulnerability exists in curl <v7.88.0 based on the \"chained\" HTTP compression algorithms, meaning that a server response can be compressed multiple times and potentially with differentalgorithms. The number of acceptable \"links\" in this \"decompression chain\" wascapped, but the cap was implemented on a per-header basis allowing a maliciousserver to insert a virtually unlimited number of compression steps simply byusing many headers. The use of such a decompression chain could result in a \"malloc bomb\", making curl end up spending enormous amounts of allocated heap memory, or trying to and returning out of memory errors.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-23916" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-43552",
                "title" : "A use after free vulnerability exists in curl <7.87.0. Curl can be asked to *tunnel* virtually all protocols it supports through an HTTP proxy. HTTP proxies can (and often do) deny such tunnel operations. When getting denied to tunnel the specific protocols SMB or TELNET, curl would use a heap-allocated struct after it had been freed, in its transfer shutdown code path.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-43552" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-27535",
                "title" : "An authentication bypass vulnerability exists in libcurl <8.0.0 in the FTP connection reuse feature that can result in wrong credentials being used during subsequent transfers. Previously created connections are kept in a connection pool for reuse if they match the current setup. However, certain FTP settings such as CURLOPT_FTP_ACCOUNT, CURLOPT_FTP_ALTERNATIVE_TO_USER, CURLOPT_FTP_SSL_CCC, and CURLOPT_USE_SSL were not included in the configuration match checks, causing them to match too easily. This could lead to libcurl using the wrong credentials when performing a transfer, potentially allowing unauthorized access to sensitive information.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-27535" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-27536",
                "title" : "An authentication bypass vulnerability exists libcurl <8.0.0 in the connection reuse feature which can reuse previously established connections with incorrect user permissions due to a failure to check for changes in the CURLOPT_GSSAPI_DELEGATION option. This vulnerability affects krb5/kerberos/negotiate/GSSAPI transfers and could potentially result in unauthorized access to sensitive information. The safest option is to not reuse connections if the CURLOPT_GSSAPI_DELEGATION option has been changed.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-27536" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-28321",
                "title" : "An improper certificate validation vulnerability exists in curl <v8.1.0 in the way it supports matching of wildcard patterns when listed as \"Subject Alternative Name\" in TLS server certificates. curl can be built to use its own name matching function for TLS rather than one provided by a TLS library. This private wildcard matching function would match IDN (International Domain Name) hosts incorrectly and could as a result accept patterns that otherwise should mismatch. IDN hostnames are converted to puny code before used for certificate checks. Puny coded names always start with `xn--` and should not be allowed to pattern match, but the wildcard check in curl could still check for `x*`, which would match even though the IDN name most likely contained nothing even resembling an `x`.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-28321" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-27538",
                "title" : "An authentication bypass vulnerability exists in libcurl prior to v8.0.0 where it reuses a previously established SSH connection despite the fact that an SSH option was modified, which should have prevented reuse. libcurl maintains a pool of previously used connections to reuse them for subsequent transfers if the configurations match. However, two SSH settings were omitted from the configuration check, allowing them to match easily, potentially leading to the reuse of an inappropriate connection.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-27538" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-32208",
                "title" : "When curl < 7.84.0 does FTP transfers secured by krb5, it handles message verification failures wrongly. This flaw makes it possible for a Man-In-The-Middle attack to go unnoticed and even allows it to inject data to the client.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-32208" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-46218",
                "title" : "This flaw allows a malicious HTTP server to set \"super cookies\" in curl that\nare then passed back to more origins than what is otherwise allowed or\npossible. This allows a site to set cookies that then would get sent to\ndifferent and unrelated sites and domains.\n\nIt could do this by exploiting a mixed case flaw in curl's function that\nverifies a given cookie domain against the Public Suffix List (PSL). For\nexample a cookie could be set with `domain=co.UK` when the URL used a lower\ncase hostname `curl.co.uk`, even though `co.uk` is listed as a PSL domain.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-46218" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-9086",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-9086" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-27774",
                "title" : "An insufficiently protected credentials vulnerability exists in curl 4.9 to and include curl 7.82.0 are affected that could allow an attacker to extract credentials when follows HTTP(S) redirects is used with authentication could leak credentials to other services that exist on different protocols or port numbers.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-27774" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-32221",
                "title" : "When doing HTTP(S) transfers, libcurl might erroneously use the read callback (`CURLOPT_READFUNCTION`) to ask for data to send, even when the `CURLOPT_POSTFIELDS` option has been set, if the same handle previously was used to issue a `PUT` request which used that callback. This flaw may surprise the application and cause it to misbehave and either send off the wrong data or use memory after free or similar in the subsequent `POST` request. The problem exists in the logic for a reused handle when it is changed from a PUT to a POST.",
                "source" : "redhat-csaf",
                "cvssScore" : 4.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-32221" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-27776",
                "title" : "A insufficiently protected credentials vulnerability in fixed in curl 7.83.0 might leak authentication or cookie header data on HTTP redirects to the same host but another port number.",
                "source" : "redhat-csaf",
                "cvssScore" : 4.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-27776" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-27533",
                "title" : "A vulnerability in input validation exists in curl <8.0 during communication using the TELNET protocol may allow an attacker to pass on maliciously crafted user name and \"telnet options\" during server negotiation. The lack of proper input scrubbing allows an attacker to send content or perform option negotiation without the application's intent. This vulnerability could be exploited if an application allows user input, thereby enabling attackers to execute arbitrary code on the system.",
                "source" : "redhat-csaf",
                "cvssScore" : 4.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-27533" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-27534",
                "title" : "A path traversal vulnerability exists in curl <8.0.0 SFTP implementation causes the tilde (~) character to be wrongly replaced when used as a prefix in the first path element, in addition to its intended use as the first element to indicate a path relative to the user's home directory. Attackers can exploit this flaw to bypass filtering or execute arbitrary code by crafting a path like /~2/foo while accessing a server with a specific user.",
                "source" : "redhat-csaf",
                "cvssScore" : 3.7,
                "severity" : "LOW",
                "cves" : [ "CVE-2023-27534" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-28322",
                "title" : "An information disclosure vulnerability exists in curl <v8.1.0 when doing HTTP(S) transfers, libcurl might erroneously use the read callback (`CURLOPT_READFUNCTION`) to ask for data to send, even when the `CURLOPT_POSTFIELDS` option has been set, if the same handle previously wasused to issue a `PUT` request which used that callback. This flaw may surprise the application and cause it to misbehave and either send off the wrong data or use memory after free or similar in the second transfer. The problem exists in the logic for a reused handle when it is (expected to be) changed from a PUT to a POST.",
                "source" : "redhat-csaf",
                "cvssScore" : 3.7,
                "severity" : "LOW",
                "cves" : [ "CVE-2023-28322" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-38546",
                "source" : "redhat-csaf",
                "cvssScore" : 3.7,
                "severity" : "LOW",
                "cves" : [ "CVE-2023-38546" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-35252",
                "title" : "When curl is used to retrieve and parse cookies from a HTTP(S) server, itaccepts cookies using control codes that when later are sent back to a HTTPserver might make the server return 400 responses. Effectively allowing a\"sister site\" to deny service to all siblings.",
                "source" : "redhat-csaf",
                "cvssScore" : 3.1,
                "severity" : "LOW",
                "cves" : [ "CVE-2022-35252" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2022-32207",
                "title" : "When curl < 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes the operation atomic by finalizing the operation with a rename from a temporary name to the final target file name.In that rename operation, it might accidentally *widen* the permissions for the target file, leaving the updated file accessible to more users than intended.",
                "source" : "redhat-csaf",
                "cvssScore" : 9.8,
                "severity" : "CRITICAL",
                "cves" : [ "CVE-2022-32207" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/curl@7.61.1-34.el8_10.11?arch=x86_64&distro=rhel-8.10&upstream=curl-7.61.1-34.el8_10.11.src.rpm",
              "issues" : [ {
                "id" : "CVE-2022-32207",
                "title" : "When curl < 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes the operation atomic by finalizing the operation with a rename from a temporary name to the final target file name.In that rename operation, it might accidentally *widen* the permissions for the target file, leaving the updated file accessible to more users than intended.",
                "source" : "redhat-csaf",
                "cvssScore" : 9.8,
                "severity" : "CRITICAL",
                "cves" : [ "CVE-2022-32207" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-22576",
                "title" : "An improper authentication vulnerability exists in curl 7.33.0 to and including 7.82.0 which might allow reuse OAUTH2-authenticated connections without properly making sure that the connection was authenticated with the same credentials as set for this transfer. This affects SASL-enabled protocols: SMPTP(S), IMAP(S), POP3(S) and LDAP(S) (openldap only).",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-22576" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-38545",
                "title" : "This flaw makes curl overflow a heap based buffer in the SOCKS5 proxy\nhandshake.\n\nWhen curl is asked to pass along the host name to the SOCKS5 proxy to allow\nthat to resolve the address instead of it getting done by curl itself, the\nmaximum length that host name can be is 255 bytes.\n\nIf the host name is detected to be longer, curl switches to local name\nresolving and instead passes on the resolved address only. Due to this bug,\nthe local variable that means \"let the host resolve the name\" could get the\nwrong value during a slow SOCKS5 handshake, and contrary to the intention,\ncopy the too long host name to the target buffer instead of copying just the\nresolved address there.\n\nThe target buffer being a heap based buffer, and the host name coming from the\nURL that curl has been told to operate with.",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-38545" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-15079",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-15079" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-27775",
                "title" : "An information disclosure vulnerability exists in curl 7.65.0 to 7.82.0 are vulnerable that by using an IPv6 address that was in the connection pool but with a different zone id it could reuse a connection instead.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-27775" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-27782",
                "title" : "libcurl would reuse a previously created connection even when a TLS or SSHrelated option had been changed that should have prohibited reuse.libcurl keeps previously used connections in a connection pool for subsequenttransfers to reuse if one of them matches the setup. However, several TLS andSSH settings were left out from the configuration match checks, making themmatch too easily.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-27782" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-2398",
                "title" : "HTTP/2 push headers memory-leak",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2398" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-13034",
                "source" : "redhat-csaf",
                "cvssScore" : 6.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-13034" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-14819",
                "source" : "redhat-csaf",
                "cvssScore" : 6.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-14819" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-1965",
                "source" : "redhat-csaf",
                "cvssScore" : 6.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-1965" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-32206",
                "title" : "curl < 7.84.0 supports \"chained\" HTTP compression algorithms, meaning that a serverresponse can be compressed multiple times and potentially with different algorithms. The number of acceptable \"links\" in this \"decompression chain\" was unbounded, allowing a malicious server to insert a virtually unlimited number of compression steps.The use of such a decompression chain could result in a \"malloc bomb\", makingcurl end up spending enormous amounts of allocated heap memory, or trying toand returning out of memory errors.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-32206" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-23916",
                "title" : "An allocation of resources without limits or throttling vulnerability exists in curl <v7.88.0 based on the \"chained\" HTTP compression algorithms, meaning that a server response can be compressed multiple times and potentially with differentalgorithms. The number of acceptable \"links\" in this \"decompression chain\" wascapped, but the cap was implemented on a per-header basis allowing a maliciousserver to insert a virtually unlimited number of compression steps simply byusing many headers. The use of such a decompression chain could result in a \"malloc bomb\", making curl end up spending enormous amounts of allocated heap memory, or trying to and returning out of memory errors.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-23916" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-14524",
                "title" : "bearer token leak on cross-protocol redirect",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-14524" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-3784",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-3784" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-3805",
                "source" : "redhat-csaf",
                "cvssScore" : 6.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-3805" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-43552",
                "title" : "A use after free vulnerability exists in curl <7.87.0. Curl can be asked to *tunnel* virtually all protocols it supports through an HTTP proxy. HTTP proxies can (and often do) deny such tunnel operations. When getting denied to tunnel the specific protocols SMB or TELNET, curl would use a heap-allocated struct after it had been freed, in its transfer shutdown code path.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-43552" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-27535",
                "title" : "An authentication bypass vulnerability exists in libcurl <8.0.0 in the FTP connection reuse feature that can result in wrong credentials being used during subsequent transfers. Previously created connections are kept in a connection pool for reuse if they match the current setup. However, certain FTP settings such as CURLOPT_FTP_ACCOUNT, CURLOPT_FTP_ALTERNATIVE_TO_USER, CURLOPT_FTP_SSL_CCC, and CURLOPT_USE_SSL were not included in the configuration match checks, causing them to match too easily. This could lead to libcurl using the wrong credentials when performing a transfer, potentially allowing unauthorized access to sensitive information.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-27535" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-27536",
                "title" : "An authentication bypass vulnerability exists libcurl <8.0.0 in the connection reuse feature which can reuse previously established connections with incorrect user permissions due to a failure to check for changes in the CURLOPT_GSSAPI_DELEGATION option. This vulnerability affects krb5/kerberos/negotiate/GSSAPI transfers and could potentially result in unauthorized access to sensitive information. The safest option is to not reuse connections if the CURLOPT_GSSAPI_DELEGATION option has been changed.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-27536" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-28321",
                "title" : "An improper certificate validation vulnerability exists in curl <v8.1.0 in the way it supports matching of wildcard patterns when listed as \"Subject Alternative Name\" in TLS server certificates. curl can be built to use its own name matching function for TLS rather than one provided by a TLS library. This private wildcard matching function would match IDN (International Domain Name) hosts incorrectly and could as a result accept patterns that otherwise should mismatch. IDN hostnames are converted to puny code before used for certificate checks. Puny coded names always start with `xn--` and should not be allowed to pattern match, but the wildcard check in curl could still check for `x*`, which would match even though the IDN name most likely contained nothing even resembling an `x`.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-28321" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-10966",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-10966" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-3783",
                "source" : "redhat-csaf",
                "cvssScore" : 5.7,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-3783" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-27538",
                "title" : "An authentication bypass vulnerability exists in libcurl prior to v8.0.0 where it reuses a previously established SSH connection despite the fact that an SSH option was modified, which should have prevented reuse. libcurl maintains a pool of previously used connections to reuse them for subsequent transfers if the configurations match. However, two SSH settings were omitted from the configuration check, allowing them to match easily, potentially leading to the reuse of an inappropriate connection.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-27538" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-32208",
                "title" : "When curl < 7.84.0 does FTP transfers secured by krb5, it handles message verification failures wrongly. This flaw makes it possible for a Man-In-The-Middle attack to go unnoticed and even allows it to inject data to the client.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-32208" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-46218",
                "title" : "This flaw allows a malicious HTTP server to set \"super cookies\" in curl that\nare then passed back to more origins than what is otherwise allowed or\npossible. This allows a site to set cookies that then would get sent to\ndifferent and unrelated sites and domains.\n\nIt could do this by exploiting a mixed case flaw in curl's function that\nverifies a given cookie domain against the Public Suffix List (PSL). For\nexample a cookie could be set with `domain=co.UK` when the URL used a lower\ncase hostname `curl.co.uk`, even though `co.uk` is listed as a PSL domain.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-46218" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-9086",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-9086" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-27774",
                "title" : "An insufficiently protected credentials vulnerability exists in curl 4.9 to and include curl 7.82.0 are affected that could allow an attacker to extract credentials when follows HTTP(S) redirects is used with authentication could leak credentials to other services that exist on different protocols or port numbers.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-27774" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-32221",
                "title" : "When doing HTTP(S) transfers, libcurl might erroneously use the read callback (`CURLOPT_READFUNCTION`) to ask for data to send, even when the `CURLOPT_POSTFIELDS` option has been set, if the same handle previously was used to issue a `PUT` request which used that callback. This flaw may surprise the application and cause it to misbehave and either send off the wrong data or use memory after free or similar in the subsequent `POST` request. The problem exists in the logic for a reused handle when it is changed from a PUT to a POST.",
                "source" : "redhat-csaf",
                "cvssScore" : 4.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-32221" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-10148",
                "source" : "redhat-csaf",
                "cvssScore" : 4.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-10148" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-14017",
                "source" : "redhat-csaf",
                "cvssScore" : 4.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-14017" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-15224",
                "source" : "redhat-csaf",
                "cvssScore" : 4.7,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-15224" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-27776",
                "title" : "A insufficiently protected credentials vulnerability in fixed in curl 7.83.0 might leak authentication or cookie header data on HTTP redirects to the same host but another port number.",
                "source" : "redhat-csaf",
                "cvssScore" : 4.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-27776" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-27533",
                "title" : "A vulnerability in input validation exists in curl <8.0 during communication using the TELNET protocol may allow an attacker to pass on maliciously crafted user name and \"telnet options\" during server negotiation. The lack of proper input scrubbing allows an attacker to send content or perform option negotiation without the application's intent. This vulnerability could be exploited if an application allows user input, thereby enabling attackers to execute arbitrary code on the system.",
                "source" : "redhat-csaf",
                "cvssScore" : 4.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-27533" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-27534",
                "title" : "A path traversal vulnerability exists in curl <8.0.0 SFTP implementation causes the tilde (~) character to be wrongly replaced when used as a prefix in the first path element, in addition to its intended use as the first element to indicate a path relative to the user's home directory. Attackers can exploit this flaw to bypass filtering or execute arbitrary code by crafting a path like /~2/foo while accessing a server with a specific user.",
                "source" : "redhat-csaf",
                "cvssScore" : 3.7,
                "severity" : "LOW",
                "cves" : [ "CVE-2023-27534" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-28322",
                "title" : "An information disclosure vulnerability exists in curl <v8.1.0 when doing HTTP(S) transfers, libcurl might erroneously use the read callback (`CURLOPT_READFUNCTION`) to ask for data to send, even when the `CURLOPT_POSTFIELDS` option has been set, if the same handle previously wasused to issue a `PUT` request which used that callback. This flaw may surprise the application and cause it to misbehave and either send off the wrong data or use memory after free or similar in the second transfer. The problem exists in the logic for a reused handle when it is (expected to be) changed from a PUT to a POST.",
                "source" : "redhat-csaf",
                "cvssScore" : 3.7,
                "severity" : "LOW",
                "cves" : [ "CVE-2023-28322" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-38546",
                "source" : "redhat-csaf",
                "cvssScore" : 3.7,
                "severity" : "LOW",
                "cves" : [ "CVE-2023-38546" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-35252",
                "title" : "When curl is used to retrieve and parse cookies from a HTTP(S) server, itaccepts cookies using control codes that when later are sent back to a HTTPserver might make the server return 400 responses. Effectively allowing a\"sister site\" to deny service to all siblings.",
                "source" : "redhat-csaf",
                "cvssScore" : 3.1,
                "severity" : "LOW",
                "cves" : [ "CVE-2022-35252" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2022-32207",
                "title" : "When curl < 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes the operation atomic by finalizing the operation with a rename from a temporary name to the final target file name.In that rename operation, it might accidentally *widen* the permissions for the target file, leaving the updated file accessible to more users than intended.",
                "source" : "redhat-csaf",
                "cvssScore" : 9.8,
                "severity" : "CRITICAL",
                "cves" : [ "CVE-2022-32207" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libxml2@2.9.7-21.el8_10.3?arch=x86_64&distro=rhel-8.10&upstream=libxml2-2.9.7-21.el8_10.3.src.rpm",
              "issues" : [ {
                "id" : "CVE-2024-40896",
                "title" : "In libxml2 2.11 before 2.11.9, 2.12 before 2.12.9, and 2.13 before 2.13.3, the SAX parser can produce events for external entities even if custom SAX handlers try to override entity content (by setting \"checked\"). This makes classic XXE attacks possible.",
                "source" : "redhat-csaf",
                "cvssScore" : 9.1,
                "severity" : "CRITICAL",
                "cves" : [ "CVE-2024-40896" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-49794",
                "title" : "Libxml: heap use after free (uaf) leads to denial of service (dos)",
                "source" : "redhat-csaf",
                "cvssScore" : 9.1,
                "severity" : "CRITICAL",
                "cves" : [ "CVE-2025-49794" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-49796",
                "title" : "Libxml: type confusion leads to denial of service (dos)",
                "source" : "redhat-csaf",
                "cvssScore" : 9.1,
                "severity" : "CRITICAL",
                "cves" : [ "CVE-2025-49796" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-56171",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-56171" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-40304",
                "title" : "An issue was discovered in libxml2 before 2.10.3. Certain invalid XML entity definitions can corrupt a hash table key, potentially leading to subsequent logic errors. In one case, a double-free can be provoked.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-40304" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-24928",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-24928" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-7425",
                "title" : "Libxslt: heap use-after-free in libxslt caused by atype corruption in xmlattrptr",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-7425" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-40303",
                "title" : "An issue was discovered in libxml2 before 2.10.3. When parsing a multi-gigabyte XML document with the XML_PARSE_HUGE parser option enabled, several integer counters can overflow. This results in an attempt to access an array at a negative 2GB offset, typically leading to a segmentation fault.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-40303" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-25062",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-25062" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-32415",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-32415" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-49795",
                "title" : "Libxml: null pointer dereference leads to denial of service (dos)",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-49795" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-6021",
                "title" : "Libxml2: integer overflow in xmlbuildqname() leads to stack buffer overflow in libxml2",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-6021" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-7424",
                "title" : "Libxslt: type confusion in xmlnode.psvi between stylesheet and source nodes",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-7424" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-29824",
                "title" : "In libxml2 before 2.9.14, several buffer handling functions in buf.c (xmlBuf*) and tree.c (xmlBuffer*) don't check for integer overflows. This can result in out-of-bounds memory writes. Exploitation requires a victim to open a crafted, multi-gigabyte XML file. Other software using libxml2's buffer functions, for example libxslt through 1.1.35, is affected as well.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.4,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-29824" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-39615",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-39615" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-9714",
                "source" : "redhat-csaf",
                "cvssScore" : 6.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-9714" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-49043",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-49043" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-28484",
                "title" : "In libxml2 before 2.10.4, parsing of certain invalid XSD schemas can lead to a NULL pointer dereference and subsequently a segfault. This occurs in xmlSchemaFixupComplexType in xmlschemas.c.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-28484" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-29469",
                "title" : "An issue was discovered in libxml2 before 2.10.4. When hashing empty dict strings in a crafted XML document, xmlDictComputeFastKey in dict.c can produce non-deterministic values, leading to various logic and memory errors, such as a double free. This behavior occurs because there is an attempt to use the first byte of an empty string, and any value is possible (not solely the '\\0' value).",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-29469" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-32414",
                "source" : "redhat-csaf",
                "cvssScore" : 5.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-32414" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-6170",
                "title" : "Libxml2: stack buffer overflow in xmllint interactive shell command handling",
                "source" : "redhat-csaf",
                "cvssScore" : 2.5,
                "severity" : "LOW",
                "cves" : [ "CVE-2025-6170" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2024-40896",
                "title" : "In libxml2 2.11 before 2.11.9, 2.12 before 2.12.9, and 2.13 before 2.13.3, the SAX parser can produce events for external entities even if custom SAX handlers try to override entity content (by setting \"checked\"). This makes classic XXE attacks possible.",
                "source" : "redhat-csaf",
                "cvssScore" : 9.1,
                "severity" : "CRITICAL",
                "cves" : [ "CVE-2024-40896" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/krb5-libs@1.18.2-32.el8_10?arch=x86_64&distro=rhel-8.10&upstream=krb5-1.18.2-32.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2024-3596",
                "source" : "redhat-csaf",
                "cvssScore" : 9.0,
                "severity" : "CRITICAL",
                "cves" : [ "CVE-2024-3596" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-42898",
                "title" : "PAC parsing in MIT Kerberos 5 (aka krb5) before 1.19.4 and 1.20.x before 1.20.1 has integer overflows that may lead to remote code execution (in KDC, kadmind, or a GSS or Kerberos application server) on 32-bit platforms (which have a resultant heap-based buffer overflow), and cause a denial of service on other platforms. This occurs in krb5_pac_parse in lib/krb5/krb/pac.c. Heimdal before 7.7.1 has \"a similar bug.\"",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-42898" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-39975",
                "title" : "kdc/do_tgs_req.c in MIT Kerberos 5 (aka krb5) 1.21 before 1.21.2 has a double free that is reachable if an authenticated user can trigger an authorization-data handling failure. Incorrect data is copied from one ticket to another.",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-39975" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-26462",
                "title" : "Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/kdc/ndr.c.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-26462" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-37370",
                "title" : "In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can modify the plaintext Extra Count field of a confidential GSS krb5 wrap token, causing the unwrapped token to appear truncated to the application.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-37370" ],
                "unique" : false
              }, {
                "id" : "CVE-2020-17049",
                "title" : "Kerberos KDC Security Feature Bypass Vulnerability",
                "source" : "redhat-csaf",
                "cvssScore" : 7.2,
                "severity" : "HIGH",
                "cves" : [ "CVE-2020-17049" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-36054",
                "title" : "lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) before 1.20.2 and 1.21.x before 1.21.1 frees an uninitialized pointer. A remote authenticated user can trigger a kadmind crash. This occurs because _xdr_kadm5_principal_ent_rec does not validate the relationship between n_key_data and the key_data array count.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-36054" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-37371",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-37371" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-24528",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-24528" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-26458",
                "title" : "Kerberos 5 (aka krb5) 1.21.2 contains a memory leak in /krb5/src/lib/rpc/pmap_rmt.c.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-26458" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-26461",
                "title" : "Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/lib/gssapi/krb5/k5sealv3.c.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-26461" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-3576",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-3576" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2024-3596",
                "source" : "redhat-csaf",
                "cvssScore" : 9.0,
                "severity" : "CRITICAL",
                "cves" : [ "CVE-2024-3596" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/python3-setuptools-wheel@39.2.0-9.el8_10?arch=noarch&distro=rhel-8.10&upstream=python-setuptools-39.2.0-9.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2024-6345",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-6345" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-47273",
                "title" : "setuptools has a path traversal vulnerability in PackageIndex.download that leads to Arbitrary File Write",
                "source" : "redhat-csaf",
                "cvssScore" : 7.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-47273" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-40897",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-40897" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2024-6345",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-6345" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/glibc-minimal-langpack@2.28-251.el8_10.31?arch=x86_64&distro=rhel-8.10&upstream=glibc-2.28-251.el8_10.31.src.rpm",
              "issues" : [ {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0861",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-0861" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4911",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-4911" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33599",
                "title" : "nscd: Stack-based buffer overflow in netgroup cache",
                "source" : "redhat-csaf",
                "cvssScore" : 7.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-33599" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-4802",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-4802" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4527",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4527" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4806",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4806" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4813",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4813" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-5702",
                "title" : "The strcmp implementation optimized for the Power10 processor in the GNU C Library version 2.39 and later writes to vector registers v20 to v31 without saving contents from the caller (those registers are defined as non-volatile registers by the powerpc64le ABI), resulting in overwriting of its contents and potentially altering control flow of the caller, or leaking the input strings to the function to other parts of the program.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-5702" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-0395",
                "title" : "When the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-0395" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33600",
                "title" : "nscd: Null pointer crashes after notfound response",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33600" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0915",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-0915" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-8058",
                "source" : "redhat-csaf",
                "cvssScore" : 4.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-8058" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33601",
                "title" : "nscd: netgroup cache may terminate daemon on memory allocation failure",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33601" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33602",
                "title" : "nscd: netgroup cache assumes NSS callback uses in-buffer strings",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33602" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/glibc@2.28-251.el8_10.31?arch=x86_64&distro=rhel-8.10&upstream=glibc-2.28-251.el8_10.31.src.rpm",
              "issues" : [ {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0861",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-0861" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4911",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-4911" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33599",
                "title" : "nscd: Stack-based buffer overflow in netgroup cache",
                "source" : "redhat-csaf",
                "cvssScore" : 7.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-33599" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-4802",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-4802" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4527",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4527" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4806",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4806" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4813",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4813" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-15281",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-15281" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-5702",
                "title" : "The strcmp implementation optimized for the Power10 processor in the GNU C Library version 2.39 and later writes to vector registers v20 to v31 without saving contents from the caller (those registers are defined as non-volatile registers by the powerpc64le ABI), resulting in overwriting of its contents and potentially altering control flow of the caller, or leaking the input strings to the function to other parts of the program.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-5702" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-0395",
                "title" : "When the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-0395" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33600",
                "title" : "nscd: Null pointer crashes after notfound response",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33600" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0915",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-0915" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-8058",
                "source" : "redhat-csaf",
                "cvssScore" : 4.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-8058" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33601",
                "title" : "nscd: netgroup cache may terminate daemon on memory allocation failure",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33601" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33602",
                "title" : "nscd: netgroup cache assumes NSS callback uses in-buffer strings",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33602" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/glibc-common@2.28-251.el8_10.31?arch=x86_64&distro=rhel-8.10&upstream=glibc-2.28-251.el8_10.31.src.rpm",
              "issues" : [ {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0861",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-0861" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4911",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-4911" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33599",
                "title" : "nscd: Stack-based buffer overflow in netgroup cache",
                "source" : "redhat-csaf",
                "cvssScore" : 7.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-33599" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-4802",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-4802" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4527",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4527" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4806",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4806" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4813",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4813" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-5702",
                "title" : "The strcmp implementation optimized for the Power10 processor in the GNU C Library version 2.39 and later writes to vector registers v20 to v31 without saving contents from the caller (those registers are defined as non-volatile registers by the powerpc64le ABI), resulting in overwriting of its contents and potentially altering control flow of the caller, or leaking the input strings to the function to other parts of the program.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-5702" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-0395",
                "title" : "When the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-0395" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33600",
                "title" : "nscd: Null pointer crashes after notfound response",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33600" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0915",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-0915" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-8058",
                "source" : "redhat-csaf",
                "cvssScore" : 4.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-8058" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33601",
                "title" : "nscd: netgroup cache may terminate daemon on memory allocation failure",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33601" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33602",
                "title" : "nscd: netgroup cache assumes NSS callback uses in-buffer strings",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33602" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/xz-libs@5.2.4-4.el8_6?arch=x86_64&distro=rhel-8.10&upstream=xz-5.2.4-4.el8_6.src.rpm",
              "issues" : [ {
                "id" : "CVE-2022-1271",
                "title" : "An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is applied on the attacker's chosen file name (for example, a crafted file name), this can overwrite an attacker's content to an arbitrary attacker-selected file. This flaw occurs due to insufficient validation when processing filenames with two or more newlines where selected content and the target file names are embedded in crafted multi-line file names. This flaw allows a remote, low privileged attacker to force zgrep to write arbitrary files on the system.",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-1271" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-31115",
                "title" : "XZ has a heap-use-after-free bug in threaded .xz decoder",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-31115" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2022-1271",
                "title" : "An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is applied on the attacker's chosen file name (for example, a crafted file name), this can overwrite an attacker's content to an arbitrary attacker-selected file. This flaw occurs due to insufficient validation when processing filenames with two or more newlines where selected content and the target file names are embedded in crafted multi-line file names. This flaw allows a remote, low privileged attacker to force zgrep to write arbitrary files on the system.",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-1271" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/python3-libs@3.6.8-75.el8_10?arch=x86_64&distro=rhel-8.10&upstream=python3-3.6.8-75.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2023-40217",
                "source" : "redhat-csaf",
                "cvssScore" : 8.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-40217" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-42919",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-42919" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-6597",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-6597" ],
                "unique" : false
              }, {
                "id" : "CVE-2015-20107",
                "source" : "redhat-csaf",
                "cvssScore" : 7.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2015-20107" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-12718",
                "title" : "Bypass extraction filter to modify file metadata outside extraction directory",
                "source" : "redhat-csaf",
                "cvssScore" : 7.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-12718" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-4517",
                "title" : "Arbitrary writes via tarfile realpath overflow",
                "source" : "redhat-csaf",
                "cvssScore" : 7.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-4517" ],
                "unique" : false
              }, {
                "id" : "CVE-2020-10735",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2020-10735" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-45061",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-45061" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-24329",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-24329" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-6232",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-6232" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-12084",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-12084" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-4138",
                "title" : "Bypassing extraction filter to create symlinks to arbitrary targets outside extraction directory",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-4138" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-4435",
                "title" : "Tarfile extracts filtered members when errorlevel=0",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-4435" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-8194",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-8194" ],
                "unique" : false
              }, {
                "id" : "CVE-2021-28861",
                "source" : "redhat-csaf",
                "cvssScore" : 7.4,
                "severity" : "HIGH",
                "cves" : [ "CVE-2021-28861" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-4330",
                "title" : "Extraction filter bypass for linking outside extraction directory",
                "source" : "redhat-csaf",
                "cvssScore" : 7.3,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-4330" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-15366",
                "source" : "redhat-csaf",
                "cvssScore" : 7.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-15366" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-15367",
                "source" : "redhat-csaf",
                "cvssScore" : 7.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-15367" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-1299",
                "source" : "redhat-csaf",
                "cvssScore" : 7.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-1299" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-4519",
                "title" : "webbrowser.open() allows leading dashes in URLs",
                "source" : "redhat-csaf",
                "cvssScore" : 7.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-4519" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-6923",
                "source" : "redhat-csaf",
                "cvssScore" : 6.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-6923" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-0938",
                "source" : "redhat-csaf",
                "cvssScore" : 6.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-0938" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-13836",
                "source" : "redhat-csaf",
                "cvssScore" : 6.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-13836" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-9287",
                "source" : "redhat-csaf",
                "cvssScore" : 6.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-9287" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-0450",
                "source" : "redhat-csaf",
                "cvssScore" : 6.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-0450" ],
                "unique" : false
              }, {
                "id" : "CVE-2007-4559",
                "title" : "Directory traversal vulnerability in the (1) extract and (2) extractall functions in the tarfile module in Python allows user-assisted remote attackers to overwrite arbitrary files via a .. (dot dot) sequence in filenames in a TAR archive, a related issue to CVE-2001-1267.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2007-4559" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-27043",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-27043" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-8088",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-8088" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-0397",
                "source" : "redhat-csaf",
                "cvssScore" : 5.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-0397" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-7592",
                "source" : "redhat-csaf",
                "cvssScore" : 4.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-7592" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0865",
                "source" : "redhat-csaf",
                "cvssScore" : 4.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-0865" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-6069",
                "title" : "HTMLParser quadratic complexity when processing malformed inputs",
                "source" : "redhat-csaf",
                "cvssScore" : 4.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-6069" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-8291",
                "source" : "redhat-csaf",
                "cvssScore" : 4.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-8291" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-6075",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-6075" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-11168",
                "source" : "redhat-csaf",
                "cvssScore" : 3.7,
                "severity" : "LOW",
                "cves" : [ "CVE-2024-11168" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-4032",
                "source" : "redhat-csaf",
                "cvssScore" : 3.7,
                "severity" : "LOW",
                "cves" : [ "CVE-2024-4032" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-5642",
                "title" : "Buffer overread when using an empty list with SSLContext.set_npn_protocols()",
                "source" : "redhat-csaf",
                "cvssScore" : 2.7,
                "severity" : "LOW",
                "cves" : [ "CVE-2024-5642" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2023-40217",
                "source" : "redhat-csaf",
                "cvssScore" : 8.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-40217" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libksba@1.3.5-9.el8_7?arch=x86_64&distro=rhel-8.10&upstream=libksba-1.3.5-9.el8_7.src.rpm",
              "issues" : [ {
                "id" : "CVE-2022-3515",
                "title" : "A vulnerability was found in the Libksba library due to an integer overflow within the CRL parser. The vulnerability can be exploited remotely for code execution on the target system by passing specially crafted data to the application, for example, a malicious S/MIME attachment.",
                "source" : "redhat-csaf",
                "cvssScore" : 8.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-3515" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-47629",
                "title" : "Libksba before 1.6.3 is prone to an integer overflow vulnerability in the CRL signature parser.",
                "source" : "redhat-csaf",
                "cvssScore" : 8.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-47629" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2022-3515",
                "title" : "A vulnerability was found in the Libksba library due to an integer overflow within the CRL parser. The vulnerability can be exploited remotely for code execution on the target system by passing specially crafted data to the application, for example, a malicious S/MIME attachment.",
                "source" : "redhat-csaf",
                "cvssScore" : 8.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-3515" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/gnupg2@2.2.20-4.el8_10?arch=x86_64&distro=rhel-8.10&upstream=gnupg2-2.2.20-4.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2026-24882",
                "source" : "redhat-csaf",
                "cvssScore" : 8.4,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-24882" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-68973",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-68973" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-34903",
                "title" : "GnuPG through 2.3.6, in unusual situations where an attacker possesses any secret-key information from a victim's keyring and other constraints (e.g., use of GPGME) are met, allows signature forgery via injection into the status line.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-34903" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2026-24882",
                "source" : "redhat-csaf",
                "cvssScore" : 8.4,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-24882" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/zlib@1.2.11-25.el8?arch=x86_64&distro=rhel-8.10&upstream=zlib-1.2.11-25.el8.src.rpm",
              "issues" : [ {
                "id" : "CVE-2018-25032",
                "title" : "zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.",
                "source" : "redhat-csaf",
                "cvssScore" : 8.2,
                "severity" : "HIGH",
                "cves" : [ "CVE-2018-25032" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-37434",
                "title" : "zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference).",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-37434" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2018-25032",
                "title" : "zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.",
                "source" : "redhat-csaf",
                "cvssScore" : 8.2,
                "severity" : "HIGH",
                "cves" : [ "CVE-2018-25032" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libssh-config@0.9.6-16.el8_10?arch=noarch&distro=rhel-8.10&upstream=libssh-0.9.6-16.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2025-5318",
                "title" : "Libssh: out-of-bounds read in sftp_handle()",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-5318" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-5987",
                "title" : "Libssh: invalid return code for chacha20 poly1305 with openssl backend",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-5987" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-48795",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-48795" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-2283",
                "source" : "redhat-csaf",
                "cvssScore" : 4.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-2283" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-6004",
                "source" : "redhat-csaf",
                "cvssScore" : 4.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-6004" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-1667",
                "title" : "A NULL pointer dereference was found In libssh during re-keying with algorithm guessing. This issue may allow an authenticated client to cause a denial of service.",
                "source" : "redhat-csaf",
                "cvssScore" : 4.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-1667" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-6918",
                "source" : "redhat-csaf",
                "cvssScore" : 3.7,
                "severity" : "LOW",
                "cves" : [ "CVE-2023-6918" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2025-5318",
                "title" : "Libssh: out-of-bounds read in sftp_handle()",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-5318" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libssh@0.9.6-16.el8_10?arch=x86_64&distro=rhel-8.10&upstream=libssh-0.9.6-16.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2025-5318",
                "title" : "Libssh: out-of-bounds read in sftp_handle()",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-5318" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-5987",
                "title" : "Libssh: invalid return code for chacha20 poly1305 with openssl backend",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-5987" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-48795",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-48795" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-2283",
                "source" : "redhat-csaf",
                "cvssScore" : 4.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-2283" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-6004",
                "source" : "redhat-csaf",
                "cvssScore" : 4.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-6004" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-1667",
                "title" : "A NULL pointer dereference was found In libssh during re-keying with algorithm guessing. This issue may allow an authenticated client to cause a denial of service.",
                "source" : "redhat-csaf",
                "cvssScore" : 4.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-1667" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-6918",
                "source" : "redhat-csaf",
                "cvssScore" : 3.7,
                "severity" : "LOW",
                "cves" : [ "CVE-2023-6918" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2025-5318",
                "title" : "Libssh: out-of-bounds read in sftp_handle()",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-5318" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libcap@2.48-6.el8_9?arch=x86_64&distro=rhel-8.10&upstream=libcap-2.48-6.el8_9.src.rpm",
              "issues" : [ {
                "id" : "CVE-2023-2603",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-2603" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-2602",
                "title" : "A vulnerability was found in the pthread_create() function in libcap. This issue may allow a malicious actor to use cause __real_pthread_create() to return an error, which can exhaust the process memory.",
                "source" : "redhat-csaf",
                "cvssScore" : 3.3,
                "severity" : "LOW",
                "cves" : [ "CVE-2023-2602" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2023-2603",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-2603" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/ncurses-base@6.1-10.20180224.el8?arch=noarch&distro=rhel-8.10&upstream=ncurses-6.1-10.20180224.el8.src.rpm",
              "issues" : [ {
                "id" : "CVE-2023-29491",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-29491" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-69720",
                "title" : "The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-69720" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-29458",
                "title" : "ncurses 6.3 before patch 20220416 has an out-of-bounds read and segmentation violation in convert_strings in tinfo/read_entry.c in the terminfo library.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-29458" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2023-29491",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-29491" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/ncurses-libs@6.1-10.20180224.el8?arch=x86_64&distro=rhel-8.10&upstream=ncurses-6.1-10.20180224.el8.src.rpm",
              "issues" : [ {
                "id" : "CVE-2023-29491",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-29491" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-69720",
                "title" : "The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-69720" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-29458",
                "title" : "ncurses 6.3 before patch 20220416 has an out-of-bounds read and segmentation violation in convert_strings in tinfo/read_entry.c in the terminfo library.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-29458" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2023-29491",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-29491" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libarchive@3.3.3-6.el8_10?arch=x86_64&distro=rhel-8.10&upstream=libarchive-3.3.3-6.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2025-5914",
                "title" : "Libarchive: double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-5914" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-4111",
                "title" : "Libarchive: infinite loop denial of service in rar5 decompression via archive_read_data() in libarchive",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-4111" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-4424",
                "title" : "Libarchive: libarchive: information disclosure via heap out-of-bounds read in rar archive processing",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-4424" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-5121",
                "title" : "Libarchive: libarchive: arbitrary code execution via integer overflow in iso9660 image processing",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-5121" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-26280",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-26280" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-36227",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-36227" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-57970",
                "title" : "libarchive through 3.7.7 has a heap-based buffer over-read in header_gnu_longlink in archive_read_support_format_tar.c via a TAR archive because it mishandles truncation in the middle of a GNU long linkname.",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-57970" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-25724",
                "title" : "list_item_verbose in tar/util.c in libarchive through 3.7.7 does not check an strftime return value, which can lead to a denial of service or unspecified other impact via a crafted TAR archive that is read with a verbose value of 2. For example, the 100-byte buffer may not be sufficient for a custom locale.",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-25724" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2025-5914",
                "title" : "Libarchive: double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-5914" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/glib2@2.56.4-168.el8_10?arch=x86_64&distro=rhel-8.10&upstream=glib2-2.56.4-168.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2025-13601",
                "title" : "Glib: integer overflow in in g_escape_uri_string()",
                "source" : "redhat-csaf",
                "cvssScore" : 7.7,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-13601" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-52533",
                "title" : "gio/gsocks4aproxy.c in GNOME GLib before 2.82.1 has an off-by-one error and resultant buffer overflow because SOCKS4_CONN_MSG_LEN is not sufficient for a trailing '\\0' character.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-52533" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-32611",
                "title" : "G_variant_byteswap() can take a long time with some non-normal inputs",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-32611" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-32665",
                "title" : "Gvariant deserialisation does not match spec for non-normal data",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-32665" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-14512",
                "title" : "Glib: integer overflow in glib gio attribute escaping causes heap buffer overflow",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-14512" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-29499",
                "source" : "redhat-csaf",
                "cvssScore" : 6.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-29499" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-14087",
                "title" : "Glib: glib: buffer underflow in gvariant parser leads to heap corruption",
                "source" : "redhat-csaf",
                "cvssScore" : 5.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-14087" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-4373",
                "source" : "redhat-csaf",
                "cvssScore" : 4.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-4373" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-34397",
                "source" : "redhat-csaf",
                "cvssScore" : 3.8,
                "severity" : "LOW",
                "cves" : [ "CVE-2024-34397" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2025-13601",
                "title" : "Glib: integer overflow in in g_escape_uri_string()",
                "source" : "redhat-csaf",
                "cvssScore" : 7.7,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-13601" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/sqlite-libs@3.26.0-20.el8_10?arch=x86_64&distro=rhel-8.10&upstream=sqlite-3.26.0-20.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2025-6965",
                "title" : "Integer Truncation on SQLite",
                "source" : "redhat-csaf",
                "cvssScore" : 7.7,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-6965" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-7104",
                "source" : "redhat-csaf",
                "cvssScore" : 7.3,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-7104" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-3277",
                "title" : "An integer overflow can be triggered in SQLite’s `concat_ws()` function. The resulting, truncated integer is then used to allocate a buffer. When SQLite then writes the resulting string to the buffer, it uses the original, untruncated size and thus a wild Heap Buffer overflow of size ~4GB can be triggered. This can result in arbitrary code execution.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.3,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-3277" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-35737",
                "title" : "SQLite 1.0.12 through 3.39.x before 3.39.2 sometimes allows an array-bounds overflow if billions of bytes are used in a string argument to a C API.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-35737" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2025-6965",
                "title" : "Integer Truncation on SQLite",
                "source" : "redhat-csaf",
                "cvssScore" : 7.7,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-6965" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/expat@2.5.0-1.el8_10?arch=x86_64&distro=rhel-8.10&upstream=expat-2.5.0-1.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2023-52425",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-52425" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-28757",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-28757" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-45490",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-45490" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-45491",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-45491" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-8176",
                "title" : "Libexpat: expat: improper restriction of xml entity expansion depth in libexpat",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-8176" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-45492",
                "source" : "redhat-csaf",
                "cvssScore" : 6.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-45492" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-50602",
                "title" : "An issue was discovered in libexpat before 2.6.4. There is a crash within the XML_ResumeParser function because XML_StopParser can stop/suspend an unstarted parser.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-50602" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-59375",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-59375" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2023-52425",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-52425" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libsolv@0.7.20-6.el8?arch=x86_64&distro=rhel-8.10&upstream=libsolv-0.7.20-6.el8.src.rpm",
              "issues" : [ {
                "id" : "CVE-2021-33928",
                "title" : "Buffer overflow vulnerability in function pool_installable in src/repo.h in libsolv before 0.7.17 allows attackers to cause a Denial of Service.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2021-33928" ],
                "unique" : false
              }, {
                "id" : "CVE-2021-33929",
                "title" : "Buffer overflow vulnerability in function pool_disabled_solvable in src/repo.h in libsolv before 0.7.17 allows attackers to cause a Denial of Service.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2021-33929" ],
                "unique" : false
              }, {
                "id" : "CVE-2021-33930",
                "title" : "Buffer overflow vulnerability in function pool_installable_whatprovides in src/repo.h in libsolv before 0.7.17 allows attackers to cause a Denial of Service.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2021-33930" ],
                "unique" : false
              }, {
                "id" : "CVE-2021-33938",
                "title" : "Buffer overflow vulnerability in function prune_to_recommended in src/policy.c in libsolv before 0.7.17 allows attackers to cause a Denial of Service.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2021-33938" ],
                "unique" : false
              }, {
                "id" : "CVE-2021-46877",
                "title" : "jackson-databind 2.10.x through 2.12.x before 2.12.6 and 2.13.x before 2.13.1 allows attackers to cause a denial of service (2 GB transient heap usage per read) in uncommon situations involving JsonNode JDK serialization.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2021-46877" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-28863",
                "title" : "node-tar vulnerable to denial of service while parsing a tar file due to lack of folders count validation",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-28863" ],
                "unique" : false
              }, {
                "id" : "CVE-2021-44568",
                "title" : "Two heap-overflow vulnerabilities exist in openSUSE/libsolv libsolv through 13 Dec 2020 in the decisionmap variable via the resolve_dependencies function at src/solver.c (line 1940 & line 1995), which could cause a remote Denial of Service.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2021-44568" ],
                "unique" : false
              }, {
                "id" : "CVE-2021-3200",
                "title" : "Buffer overflow vulnerability in libsolv 2020-12-13 via the Solver * testcase_read(Pool *pool, FILE *fp, const char *testcase, Queue *job, char **resultp, int *resultflagsp function at src/testcase.c: line 2334, which could cause a denial of service",
                "source" : "redhat-csaf",
                "cvssScore" : 3.3,
                "severity" : "LOW",
                "cves" : [ "CVE-2021-3200" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2021-33928",
                "title" : "Buffer overflow vulnerability in function pool_installable in src/repo.h in libsolv before 0.7.17 allows attackers to cause a Denial of Service.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2021-33928" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/brotli@1.0.6-4.el8_10?arch=x86_64&distro=rhel-8.10&upstream=brotli-1.0.6-4.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2025-6176",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-6176" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2025-6176",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-6176" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/gnutls@3.6.16-8.el8_10.5?arch=x86_64&distro=rhel-8.10&upstream=gnutls-3.6.16-8.el8_10.5.src.rpm",
              "issues" : [ {
                "id" : "CVE-2022-2509",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-2509" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-0553",
                "title" : "Gnutls: incomplete fix for cve-2023-5981",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-0553" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-0567",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-0567" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-0361",
                "title" : "A timing side-channel in the handling of RSA ClientKeyExchange messages was discovered in GnuTLS. This side-channel can be sufficient to recover the key encrypted in the RSA ciphertext across a network in a Bleichenbacher style attack. To achieve a successful decryption the attacker would need to send a large amount of specially crafted messages to the vulnerable server. By recovering the secret from the ClientKeyExchange message, the attacker would be able to decrypt the application data exchanged over that connection.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.4,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-0361" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-32988",
                "title" : "Gnutls: vulnerability in gnutls othername san export",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-32988" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-32990",
                "title" : "Gnutls: vulnerability in gnutls certtool template parsing",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-32990" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-6395",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-6395" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-5981",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-5981" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-12243",
                "title" : "Gnutls: gnutls impacted by inefficient der decoding in libtasn1 leading to remote dos",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-12243" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-28834",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-28834" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-14831",
                "title" : "Gnutls: gnutls: denial of service via excessive resource consumption during certificate verification",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-14831" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-32989",
                "title" : "Gnutls: vulnerability in gnutls sct extension parsing",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-32989" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-28835",
                "source" : "redhat-csaf",
                "cvssScore" : 5.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-28835" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-9820",
                "title" : "Gnutls: stack-based buffer overflow in gnutls_pkcs11_token_init() function",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-9820" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2022-2509",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-2509" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libnghttp2@1.33.0-6.el8_10.2?arch=x86_64&distro=rhel-8.10&upstream=nghttp2-1.33.0-6.el8_10.2.src.rpm",
              "issues" : [ {
                "id" : "CVE-2023-44487",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-44487" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-27135",
                "title" : "nghttp2 Denial of service: Assertion failure due to the missing state validation",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-27135" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-28182",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-28182" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2023-44487",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-44487" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libtirpc@1.1.4-12.el8_10?arch=x86_64&distro=rhel-8.10&upstream=libtirpc-1.1.4-12.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2021-46828",
                "title" : "In libtirpc before 1.3.3rc1, remote attackers could exhaust the file descriptors of a process that uses libtirpc because idle TCP connections are mishandled. This can, in turn, lead to an svc_run infinite loop without accepting new connections.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2021-46828" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2021-46828",
                "title" : "In libtirpc before 1.3.3rc1, remote attackers could exhaust the file descriptors of a process that uses libtirpc because idle TCP connections are mishandled. This can, in turn, lead to an svc_run infinite loop without accepting new connections.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2021-46828" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/pcre2@10.32-3.el8_6?arch=x86_64&distro=rhel-8.10&upstream=pcre2-10.32-3.el8_6.src.rpm",
              "issues" : [ {
                "id" : "CVE-2022-1586",
                "title" : "An out-of-bounds read vulnerability was discovered in the PCRE2 library in the compile_xclass_matchingpath() function of the pcre2_jit_compile.c file. This involves a unicode property matching issue in JIT-compiled regular expressions. The issue occurs because the character was not fully read in case-less matching within JIT.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-1586" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-1587",
                "title" : "An out-of-bounds read vulnerability was discovered in the PCRE2 library in the get_recurse_data_length() function of the pcre2_jit_compile.c file. This issue affects recursions in JIT-compiled regular expressions caused by duplicate data transfers.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-1587" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2022-1586",
                "title" : "An out-of-bounds read vulnerability was discovered in the PCRE2 library in the compile_xclass_matchingpath() function of the pcre2_jit_compile.c file. This involves a unicode property matching issue in JIT-compiled regular expressions. The issue occurs because the character was not fully read in case-less matching within JIT.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-1586" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/openldap@2.4.46-21.el8_10?arch=x86_64&distro=rhel-8.10&upstream=openldap-2.4.46-21.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2023-2953",
                "title" : "A vulnerability was found in openldap. This security flaw causes a null pointer dereference in ber_memalloc_x() function.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-2953" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2023-2953",
                "title" : "A vulnerability was found in openldap. This security flaw causes a null pointer dereference in ber_memalloc_x() function.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-2953" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/lua-libs@5.3.4-12.el8?arch=x86_64&distro=rhel-8.10&upstream=lua-5.3.4-12.el8.src.rpm",
              "issues" : [ {
                "id" : "CVE-2021-44964",
                "title" : "Use after free in garbage collector and finalizer of lgc.c in Lua interpreter 5.4.0~5.4.3 allows attackers to perform Sandbox Escape via a crafted script file.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2021-44964" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-33099",
                "title" : "An issue in the component luaG_runerror of Lua v5.4.4 and below leads to a heap-buffer overflow when a recursive error occurs.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-33099" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-28805",
                "title" : "singlevar in lparser.c in Lua from (including) 5.4.0 up to (excluding) 5.4.4 lacks a certain luaK_exp2anyregup call, leading to a heap-based buffer over-read that might affect a system that compiles untrusted Lua code.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-28805" ],
                "unique" : false
              }, {
                "id" : "CVE-2021-43519",
                "title" : "Stack overflow in lua_resume of ldo.c in Lua Interpreter 5.1.0~5.4.4 allows attackers to perform a Denial of Service via a crafted script file.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2021-43519" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2021-44964",
                "title" : "Use after free in garbage collector and finalizer of lgc.c in Lua interpreter 5.4.0~5.4.3 allows attackers to perform Sandbox Escape via a crafted script file.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2021-44964" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/bash@4.4.20-6.el8_10?arch=x86_64&distro=rhel-8.10&upstream=bash-4.4.20-6.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2022-3715",
                "source" : "redhat-csaf",
                "cvssScore" : 6.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-3715" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2022-3715",
                "source" : "redhat-csaf",
                "cvssScore" : 6.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-3715" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/rpm-libs@4.14.3-32.el8_10?arch=x86_64&distro=rhel-8.10&upstream=rpm-4.14.3-32.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2021-35938",
                "title" : "A symbolic link issue was found in rpm. It occurs when rpm sets the desired permissions and credentials after installing a file. A local unprivileged user could use this flaw to exchange the original file with a symbolic link to a security-critical file and escalate their privileges on the system. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2021-35938" ],
                "unique" : false
              }, {
                "id" : "CVE-2021-35939",
                "title" : "It was found that the fix for CVE-2017-7500 and CVE-2017-7501 was incomplete: the check was only implemented for the parent directory of the file to be created. A local unprivileged user who owns another ancestor directory could potentially use this flaw to gain root privileges. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2021-35939" ],
                "unique" : false
              }, {
                "id" : "CVE-2021-35937",
                "title" : "A race condition vulnerability was found in rpm. A local unprivileged user could use this flaw to bypass the checks that were introduced in response to CVE-2017-7500 and CVE-2017-7501, potentially gaining root privileges. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2021-35937" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2021-35938",
                "title" : "A symbolic link issue was found in rpm. It occurs when rpm sets the desired permissions and credentials after installing a file. A local unprivileged user could use this flaw to exchange the original file with a symbolic link to a security-critical file and escalate their privileges on the system. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2021-35938" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/rpm@4.14.3-32.el8_10?arch=x86_64&distro=rhel-8.10&upstream=rpm-4.14.3-32.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2021-35938",
                "title" : "A symbolic link issue was found in rpm. It occurs when rpm sets the desired permissions and credentials after installing a file. A local unprivileged user could use this flaw to exchange the original file with a symbolic link to a security-critical file and escalate their privileges on the system. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2021-35938" ],
                "unique" : false
              }, {
                "id" : "CVE-2021-35939",
                "title" : "It was found that the fix for CVE-2017-7500 and CVE-2017-7501 was incomplete: the check was only implemented for the parent directory of the file to be created. A local unprivileged user who owns another ancestor directory could potentially use this flaw to gain root privileges. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2021-35939" ],
                "unique" : false
              }, {
                "id" : "CVE-2021-35937",
                "title" : "A race condition vulnerability was found in rpm. A local unprivileged user could use this flaw to bypass the checks that were introduced in response to CVE-2017-7500 and CVE-2017-7501, potentially gaining root privileges. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2021-35937" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2021-35938",
                "title" : "A symbolic link issue was found in rpm. It occurs when rpm sets the desired permissions and credentials after installing a file. A local unprivileged user could use this flaw to exchange the original file with a symbolic link to a security-critical file and escalate their privileges on the system. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2021-35938" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/gmp@6.1.2-11.el8?arch=x86_64&distro=rhel-8.10&epoch=1&upstream=gmp-6.1.2-11.el8.src.rpm",
              "issues" : [ {
                "id" : "CVE-2021-43618",
                "title" : "GNU Multiple Precision Arithmetic Library (GMP) through 6.2.1 has an mpz/inp_raw.c integer overflow and resultant buffer overflow via crafted input, leading to a segmentation fault on 32-bit platforms.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2021-43618" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2021-43618",
                "title" : "GNU Multiple Precision Arithmetic Library (GMP) through 6.2.1 has an mpz/inp_raw.c integer overflow and resultant buffer overflow via crafted input, leading to a segmentation fault on 32-bit platforms.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2021-43618" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libsmartcols@2.32.1-48.el8_10?arch=x86_64&distro=rhel-8.10&upstream=util-linux-2.32.1-48.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2025-14104",
                "title" : "Util-linux: util-linux: heap buffer overread in setpwnam() when processing 256-byte usernames",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-14104" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2025-14104",
                "title" : "Util-linux: util-linux: heap buffer overread in setpwnam() when processing 256-byte usernames",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-14104" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libgcc@8.5.0-28.el8_10?arch=x86_64&distro=rhel-8.10&upstream=gcc-8.5.0-28.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2020-11023",
                "title" : "Potential XSS vulnerability in jQuery",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2020-11023" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2020-11023",
                "title" : "Potential XSS vulnerability in jQuery",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2020-11023" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libmount@2.32.1-48.el8_10?arch=x86_64&distro=rhel-8.10&upstream=util-linux-2.32.1-48.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2025-14104",
                "title" : "Util-linux: util-linux: heap buffer overread in setpwnam() when processing 256-byte usernames",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-14104" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2025-14104",
                "title" : "Util-linux: util-linux: heap buffer overread in setpwnam() when processing 256-byte usernames",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-14104" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libuuid@2.32.1-48.el8_10?arch=x86_64&distro=rhel-8.10&upstream=util-linux-2.32.1-48.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2025-14104",
                "title" : "Util-linux: util-linux: heap buffer overread in setpwnam() when processing 256-byte usernames",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-14104" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2025-14104",
                "title" : "Util-linux: util-linux: heap buffer overread in setpwnam() when processing 256-byte usernames",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-14104" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libblkid@2.32.1-48.el8_10?arch=x86_64&distro=rhel-8.10&upstream=util-linux-2.32.1-48.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2025-14104",
                "title" : "Util-linux: util-linux: heap buffer overread in setpwnam() when processing 256-byte usernames",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-14104" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-27456",
                "title" : "util-linux: TOCTOU Race Condition in util-linux mount(8) - Loop Device Setup",
                "source" : "redhat-csaf",
                "cvssScore" : 4.7,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-27456" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2025-14104",
                "title" : "Util-linux: util-linux: heap buffer overread in setpwnam() when processing 256-byte usernames",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-14104" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libstdc%2B%2B@8.5.0-28.el8_10?arch=x86_64&distro=rhel-8.10&upstream=gcc-8.5.0-28.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2020-11023",
                "title" : "Potential XSS vulnerability in jQuery",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2020-11023" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2020-11023",
                "title" : "Potential XSS vulnerability in jQuery",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2020-11023" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libtasn1@4.13-5.el8_10?arch=x86_64&distro=rhel-8.10&upstream=libtasn1-4.13-5.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2021-46848",
                "title" : "GNU Libtasn1 before 4.19.0 has an ETYPE_OK off-by-one array size check that affects asn1_encode_simple_der.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2021-46848" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-12133",
                "title" : "Libtasn1: inefficient der decoding in libtasn1 leading to potential remote dos",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-12133" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2021-46848",
                "title" : "GNU Libtasn1 before 4.19.0 has an ETYPE_OK off-by-one array size check that affects asn1_encode_simple_der.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2021-46848" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libgcrypt@1.8.5-7.el8_6?arch=x86_64&distro=rhel-8.10&upstream=libgcrypt-1.8.5-7.el8_6.src.rpm",
              "issues" : [ {
                "id" : "CVE-2024-2236",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-2236" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2024-2236",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-2236" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/systemd-libs@239-82.el8_10.15?arch=x86_64&distro=rhel-8.10&upstream=systemd-239-82.el8_10.15.src.rpm",
              "issues" : [ {
                "id" : "CVE-2023-7008",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-7008" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-3821",
                "title" : "An off-by-one Error issue was discovered in Systemd in format_timespan() function of time-util.c. An attacker could supply specific values for time and accuracy that leads to buffer overrun in format_timespan(), leading to a Denial of Service.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-3821" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-4415",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-4415" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-45873",
                "title" : "systemd 250 and 251 allows local users to achieve a systemd-coredump deadlock by triggering a crash that has a long backtrace. This occurs in parse_elf_object in shared/elf-util.c. The exploitation methodology is to crash a binary calling the same function recursively, and put it in a deeply nested directory to make its backtrace large enough to cause the deadlock. This must be done 16 times when MaxConnections=16 is set for the systemd/units/systemd-coredump.socket file.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-45873" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-4598",
                "source" : "redhat-csaf",
                "cvssScore" : 4.7,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-4598" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2023-7008",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-7008" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libcom_err@1.45.6-7.el8_10?arch=x86_64&distro=rhel-8.10&upstream=e2fsprogs-1.45.6-7.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2022-1304",
                "title" : "An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a segmentation fault and possibly arbitrary code execution via a specially crafted filesystem.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-1304" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2022-1304",
                "title" : "An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a segmentation fault and possibly arbitrary code execution via a specially crafted filesystem.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-1304" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/python3-pip-wheel@9.0.3-24.el8?arch=noarch&distro=rhel-8.10&upstream=python-pip-9.0.3-24.el8.src.rpm",
              "issues" : [ {
                "id" : "CVE-2007-4559",
                "title" : "Directory traversal vulnerability in the (1) extract and (2) extractall functions in the tarfile module in Python allows user-assisted remote attackers to overwrite arbitrary files via a .. (dot dot) sequence in filenames in a TAR archive, a related issue to CVE-2001-1267.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2007-4559" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2007-4559",
                "title" : "Directory traversal vulnerability in the (1) extract and (2) extractall functions in the tarfile module in Python allows user-assisted remote attackers to overwrite arbitrary files via a .. (dot dot) sequence in filenames in a TAR archive, a related issue to CVE-2001-1267.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2007-4559" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/file-libs@5.33-27.el8_10?arch=x86_64&distro=rhel-8.10&upstream=file-5.33-27.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2022-48554",
                "title" : "File before 5.43 has an stack-based buffer over-read in file_copystr in funcs.c. NOTE: \"File\" is the name of an Open Source project.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-48554" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2022-48554",
                "title" : "File before 5.43 has an stack-based buffer over-read in file_copystr in funcs.c. NOTE: \"File\" is the name of an Open Source project.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-48554" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/bzip2-libs@1.0.6-28.el8_10?arch=x86_64&distro=rhel-8.10&upstream=bzip2-1.0.6-28.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2019-12900",
                "title" : "BZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many selectors.",
                "source" : "redhat-csaf",
                "cvssScore" : 4.4,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2019-12900" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2019-12900",
                "title" : "BZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many selectors.",
                "source" : "redhat-csaf",
                "cvssScore" : 4.4,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2019-12900" ],
                "unique" : false
              }
            } ],
            "highestVulnerability" : {
              "id" : "CVE-2025-15467",
              "title" : "Stack buffer overflow in CMS (Auth)EnvelopedData parsing",
              "source" : "redhat-csaf",
              "cvssScore" : 9.8,
              "severity" : "CRITICAL",
              "cves" : [ "CVE-2025-15467" ],
              "unique" : false
            }
          }, {
            "ref" : "pkg:rpm/redhat/python3-libcomps@0.1.18-1.el8?arch=x86_64&distro=rhel-8.10&upstream=libcomps-0.1.18-1.el8.src.rpm",
            "issues" : [ {
              "id" : "CVE-2026-1312",
              "source" : "redhat-csaf",
              "cvssScore" : 8.5,
              "severity" : "HIGH",
              "cves" : [ "CVE-2026-1312" ],
              "unique" : false
            }, {
              "id" : "CVE-2026-0980",
              "title" : "Rubyipmi: red hat satellite: remote code execution in rubyipmi via malicious bmc username",
              "source" : "redhat-csaf",
              "cvssScore" : 8.3,
              "severity" : "HIGH",
              "cves" : [ "CVE-2026-0980" ],
              "unique" : false
            }, {
              "id" : "CVE-2026-1207",
              "source" : "redhat-csaf",
              "cvssScore" : 8.3,
              "severity" : "HIGH",
              "cves" : [ "CVE-2026-1207" ],
              "unique" : false
            }, {
              "id" : "CVE-2026-1287",
              "source" : "redhat-csaf",
              "cvssScore" : 8.3,
              "severity" : "HIGH",
              "cves" : [ "CVE-2026-1287" ],
              "unique" : false
            }, {
              "id" : "CVE-2026-1530",
              "title" : "Fog-kubevirt: fog-kubevirt: man-in-the-middle vulnerability due to disabled certificate validation",
              "source" : "redhat-csaf",
              "cvssScore" : 8.1,
              "severity" : "HIGH",
              "cves" : [ "CVE-2026-1530" ],
              "unique" : false
            }, {
              "id" : "CVE-2026-1531",
              "title" : "Foreman-kubevirt: foreman_kubevirt: man-in-the-middle due to insecure default ssl verification",
              "source" : "redhat-csaf",
              "cvssScore" : 8.1,
              "severity" : "HIGH",
              "cves" : [ "CVE-2026-1531" ],
              "unique" : false
            }, {
              "id" : "CVE-2026-1961",
              "title" : "Forman: foreman: remote code execution via command injection in websocket proxy",
              "source" : "redhat-csaf",
              "cvssScore" : 8.0,
              "severity" : "HIGH",
              "cves" : [ "CVE-2026-1961" ],
              "unique" : false
            }, {
              "id" : "CVE-2021-46877",
              "title" : "jackson-databind 2.10.x through 2.12.x before 2.12.6 and 2.13.x before 2.13.1 allows attackers to cause a denial of service (2 GB transient heap usage per read) in uncommon situations involving JsonNode JDK serialization.",
              "source" : "redhat-csaf",
              "cvssScore" : 7.5,
              "severity" : "HIGH",
              "cves" : [ "CVE-2021-46877" ],
              "unique" : false
            }, {
              "id" : "CVE-2025-14550",
              "source" : "redhat-csaf",
              "cvssScore" : 7.5,
              "severity" : "HIGH",
              "cves" : [ "CVE-2025-14550" ],
              "unique" : false
            }, {
              "id" : "CVE-2025-6176",
              "source" : "redhat-csaf",
              "cvssScore" : 7.5,
              "severity" : "HIGH",
              "cves" : [ "CVE-2025-6176" ],
              "unique" : false
            }, {
              "id" : "CVE-2026-1285",
              "source" : "redhat-csaf",
              "cvssScore" : 7.5,
              "severity" : "HIGH",
              "cves" : [ "CVE-2026-1285" ],
              "unique" : false
            }, {
              "id" : "CVE-2025-68121",
              "source" : "redhat-csaf",
              "cvssScore" : 7.4,
              "severity" : "HIGH",
              "cves" : [ "CVE-2025-68121" ],
              "unique" : false
            }, {
              "id" : "CVE-2024-28863",
              "title" : "node-tar vulnerable to denial of service while parsing a tar file due to lack of folders count validation",
              "source" : "redhat-csaf",
              "cvssScore" : 6.5,
              "severity" : "MEDIUM",
              "cves" : [ "CVE-2024-28863" ],
              "unique" : false
            }, {
              "id" : "CVE-2026-4324",
              "title" : "Rubygem-katello: katello: denial of service and potential information disclosure via sql injection",
              "source" : "redhat-csaf",
              "cvssScore" : 5.4,
              "severity" : "MEDIUM",
              "cves" : [ "CVE-2026-4324" ],
              "unique" : false
            } ],
            "transitive" : [ {
              "ref" : "pkg:rpm/redhat/openssl-libs@1.1.1k-15.el8_6?arch=x86_64&distro=rhel-8.10&epoch=1&upstream=openssl-1.1.1k-15.el8_6.src.rpm",
              "issues" : [ {
                "id" : "CVE-2025-15467",
                "title" : "Stack buffer overflow in CMS (Auth)EnvelopedData parsing",
                "source" : "redhat-csaf",
                "cvssScore" : 9.8,
                "severity" : "CRITICAL",
                "cves" : [ "CVE-2025-15467" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-1473",
                "title" : "Resource leakage when decoding certificates and keys",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-1473" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-3358",
                "title" : "Using a Custom Cipher with NID_undef may lead to NULL encryption",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-3358" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-3602",
                "title" : "X.509 Email Address 4-byte Buffer Overflow",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-3602" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-3786",
                "title" : "X.509 Email Address Variable Length Buffer Overflow",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-3786" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-4450",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-4450" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-0215",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-0215" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-0216",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-0216" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-0217",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-0217" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-0401",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-0401" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-5363",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-5363" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-0286",
                "source" : "redhat-csaf",
                "cvssScore" : 7.4,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-0286" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-12797",
                "title" : "RFC7250 handshakes with unauthenticated servers don't abort as expected",
                "source" : "redhat-csaf",
                "cvssScore" : 7.4,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-12797" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-69419",
                "source" : "redhat-csaf",
                "cvssScore" : 7.4,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-69419" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-1292",
                "source" : "redhat-csaf",
                "cvssScore" : 6.7,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-1292" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-2068",
                "source" : "redhat-csaf",
                "cvssScore" : 6.7,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-2068" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-2650",
                "title" : "Possible DoS translating ASN.1 object identifiers",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-2650" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-6129",
                "title" : "POLY1305 MAC implementation corrupts vector registers on PowerPC",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-6129" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-69421",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-69421" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-11187",
                "title" : "Improper validation of PBMAC1 parameters in PKCS#12 MAC verification",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-11187" ],
                "unique" : false
              }, {
                "id" : "CVE-2020-1971",
                "title" : "EDIPARTYNAME NULL pointer dereference",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2020-1971" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-4304",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-4304" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-0464",
                "title" : "Excessive Resource Usage Verifying X.509 Policy Constraints",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-0464" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-6237",
                "title" : "Excessive time spent checking invalid RSA public keys",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-6237" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-5535",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-5535" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-6119",
                "title" : "Possible denial of service in X.509 name checks",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-6119" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-15468",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-15468" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-66199",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-66199" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-69420",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-69420" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-22796",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-22796" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-4741",
                "source" : "redhat-csaf",
                "cvssScore" : 5.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-4741" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-9230",
                "source" : "redhat-csaf",
                "cvssScore" : 5.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-9230" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-0727",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-0727" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-15469",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-15469" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-22795",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-22795" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-1343",
                "title" : "OCSP_basic_verify may incorrectly verify the response signing certificate",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-1343" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-2097",
                "title" : "AES OCB fails to encrypt some bytes",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-2097" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-0465",
                "title" : "Invalid certificate policies in leaf certificates are silently ignored",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-0465" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-0466",
                "title" : "Certificate policy check not enabled",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-0466" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-2975",
                "title" : "AES-SIV implementation ignores empty associated data entries",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-2975" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-3446",
                "title" : "Excessive time spent checking DH keys and parameters",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-3446" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-3817",
                "title" : "Excessive time spent checking DH q parameter value",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-3817" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-5678",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-5678" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-4603",
                "title" : "Excessive time spent checking DSA keys and parameters",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-4603" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-1255",
                "title" : "Input buffer over-read in AES-XTS implementation on 64 bit ARM",
                "source" : "redhat-csaf",
                "cvssScore" : 5.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-1255" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-4203",
                "source" : "redhat-csaf",
                "cvssScore" : 4.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-4203" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-68160",
                "source" : "redhat-csaf",
                "cvssScore" : 4.7,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-68160" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-69418",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-69418" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-2511",
                "source" : "redhat-csaf",
                "cvssScore" : 3.7,
                "severity" : "LOW",
                "cves" : [ "CVE-2024-2511" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2025-15467",
                "title" : "Stack buffer overflow in CMS (Auth)EnvelopedData parsing",
                "source" : "redhat-csaf",
                "cvssScore" : 9.8,
                "severity" : "CRITICAL",
                "cves" : [ "CVE-2025-15467" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libxml2@2.9.7-21.el8_10.3?arch=x86_64&distro=rhel-8.10&upstream=libxml2-2.9.7-21.el8_10.3.src.rpm",
              "issues" : [ {
                "id" : "CVE-2024-40896",
                "title" : "In libxml2 2.11 before 2.11.9, 2.12 before 2.12.9, and 2.13 before 2.13.3, the SAX parser can produce events for external entities even if custom SAX handlers try to override entity content (by setting \"checked\"). This makes classic XXE attacks possible.",
                "source" : "redhat-csaf",
                "cvssScore" : 9.1,
                "severity" : "CRITICAL",
                "cves" : [ "CVE-2024-40896" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-49794",
                "title" : "Libxml: heap use after free (uaf) leads to denial of service (dos)",
                "source" : "redhat-csaf",
                "cvssScore" : 9.1,
                "severity" : "CRITICAL",
                "cves" : [ "CVE-2025-49794" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-49796",
                "title" : "Libxml: type confusion leads to denial of service (dos)",
                "source" : "redhat-csaf",
                "cvssScore" : 9.1,
                "severity" : "CRITICAL",
                "cves" : [ "CVE-2025-49796" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-56171",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-56171" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-40304",
                "title" : "An issue was discovered in libxml2 before 2.10.3. Certain invalid XML entity definitions can corrupt a hash table key, potentially leading to subsequent logic errors. In one case, a double-free can be provoked.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-40304" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-24928",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-24928" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-7425",
                "title" : "Libxslt: heap use-after-free in libxslt caused by atype corruption in xmlattrptr",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-7425" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-40303",
                "title" : "An issue was discovered in libxml2 before 2.10.3. When parsing a multi-gigabyte XML document with the XML_PARSE_HUGE parser option enabled, several integer counters can overflow. This results in an attempt to access an array at a negative 2GB offset, typically leading to a segmentation fault.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-40303" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-25062",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-25062" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-32415",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-32415" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-49795",
                "title" : "Libxml: null pointer dereference leads to denial of service (dos)",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-49795" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-6021",
                "title" : "Libxml2: integer overflow in xmlbuildqname() leads to stack buffer overflow in libxml2",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-6021" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-7424",
                "title" : "Libxslt: type confusion in xmlnode.psvi between stylesheet and source nodes",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-7424" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-29824",
                "title" : "In libxml2 before 2.9.14, several buffer handling functions in buf.c (xmlBuf*) and tree.c (xmlBuffer*) don't check for integer overflows. This can result in out-of-bounds memory writes. Exploitation requires a victim to open a crafted, multi-gigabyte XML file. Other software using libxml2's buffer functions, for example libxslt through 1.1.35, is affected as well.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.4,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-29824" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-39615",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-39615" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-9714",
                "source" : "redhat-csaf",
                "cvssScore" : 6.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-9714" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-49043",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-49043" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-28484",
                "title" : "In libxml2 before 2.10.4, parsing of certain invalid XSD schemas can lead to a NULL pointer dereference and subsequently a segfault. This occurs in xmlSchemaFixupComplexType in xmlschemas.c.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-28484" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-29469",
                "title" : "An issue was discovered in libxml2 before 2.10.4. When hashing empty dict strings in a crafted XML document, xmlDictComputeFastKey in dict.c can produce non-deterministic values, leading to various logic and memory errors, such as a double free. This behavior occurs because there is an attempt to use the first byte of an empty string, and any value is possible (not solely the '\\0' value).",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-29469" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-32414",
                "source" : "redhat-csaf",
                "cvssScore" : 5.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-32414" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-6170",
                "title" : "Libxml2: stack buffer overflow in xmllint interactive shell command handling",
                "source" : "redhat-csaf",
                "cvssScore" : 2.5,
                "severity" : "LOW",
                "cves" : [ "CVE-2025-6170" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2024-40896",
                "title" : "In libxml2 2.11 before 2.11.9, 2.12 before 2.12.9, and 2.13 before 2.13.3, the SAX parser can produce events for external entities even if custom SAX handlers try to override entity content (by setting \"checked\"). This makes classic XXE attacks possible.",
                "source" : "redhat-csaf",
                "cvssScore" : 9.1,
                "severity" : "CRITICAL",
                "cves" : [ "CVE-2024-40896" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/krb5-libs@1.18.2-32.el8_10?arch=x86_64&distro=rhel-8.10&upstream=krb5-1.18.2-32.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2024-3596",
                "source" : "redhat-csaf",
                "cvssScore" : 9.0,
                "severity" : "CRITICAL",
                "cves" : [ "CVE-2024-3596" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-42898",
                "title" : "PAC parsing in MIT Kerberos 5 (aka krb5) before 1.19.4 and 1.20.x before 1.20.1 has integer overflows that may lead to remote code execution (in KDC, kadmind, or a GSS or Kerberos application server) on 32-bit platforms (which have a resultant heap-based buffer overflow), and cause a denial of service on other platforms. This occurs in krb5_pac_parse in lib/krb5/krb/pac.c. Heimdal before 7.7.1 has \"a similar bug.\"",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-42898" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-39975",
                "title" : "kdc/do_tgs_req.c in MIT Kerberos 5 (aka krb5) 1.21 before 1.21.2 has a double free that is reachable if an authenticated user can trigger an authorization-data handling failure. Incorrect data is copied from one ticket to another.",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-39975" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-26462",
                "title" : "Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/kdc/ndr.c.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-26462" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-37370",
                "title" : "In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can modify the plaintext Extra Count field of a confidential GSS krb5 wrap token, causing the unwrapped token to appear truncated to the application.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-37370" ],
                "unique" : false
              }, {
                "id" : "CVE-2020-17049",
                "title" : "Kerberos KDC Security Feature Bypass Vulnerability",
                "source" : "redhat-csaf",
                "cvssScore" : 7.2,
                "severity" : "HIGH",
                "cves" : [ "CVE-2020-17049" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-36054",
                "title" : "lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) before 1.20.2 and 1.21.x before 1.21.1 frees an uninitialized pointer. A remote authenticated user can trigger a kadmind crash. This occurs because _xdr_kadm5_principal_ent_rec does not validate the relationship between n_key_data and the key_data array count.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-36054" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-37371",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-37371" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-24528",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-24528" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-26458",
                "title" : "Kerberos 5 (aka krb5) 1.21.2 contains a memory leak in /krb5/src/lib/rpc/pmap_rmt.c.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-26458" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-26461",
                "title" : "Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/lib/gssapi/krb5/k5sealv3.c.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-26461" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-3576",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-3576" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2024-3596",
                "source" : "redhat-csaf",
                "cvssScore" : 9.0,
                "severity" : "CRITICAL",
                "cves" : [ "CVE-2024-3596" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/python3-setuptools-wheel@39.2.0-9.el8_10?arch=noarch&distro=rhel-8.10&upstream=python-setuptools-39.2.0-9.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2024-6345",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-6345" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-47273",
                "title" : "setuptools has a path traversal vulnerability in PackageIndex.download that leads to Arbitrary File Write",
                "source" : "redhat-csaf",
                "cvssScore" : 7.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-47273" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-40897",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-40897" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2024-6345",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-6345" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/glibc-minimal-langpack@2.28-251.el8_10.31?arch=x86_64&distro=rhel-8.10&upstream=glibc-2.28-251.el8_10.31.src.rpm",
              "issues" : [ {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0861",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-0861" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4911",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-4911" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33599",
                "title" : "nscd: Stack-based buffer overflow in netgroup cache",
                "source" : "redhat-csaf",
                "cvssScore" : 7.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-33599" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-4802",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-4802" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4527",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4527" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4806",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4806" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4813",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4813" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-5702",
                "title" : "The strcmp implementation optimized for the Power10 processor in the GNU C Library version 2.39 and later writes to vector registers v20 to v31 without saving contents from the caller (those registers are defined as non-volatile registers by the powerpc64le ABI), resulting in overwriting of its contents and potentially altering control flow of the caller, or leaking the input strings to the function to other parts of the program.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-5702" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-0395",
                "title" : "When the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-0395" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33600",
                "title" : "nscd: Null pointer crashes after notfound response",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33600" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0915",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-0915" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-8058",
                "source" : "redhat-csaf",
                "cvssScore" : 4.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-8058" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33601",
                "title" : "nscd: netgroup cache may terminate daemon on memory allocation failure",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33601" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33602",
                "title" : "nscd: netgroup cache assumes NSS callback uses in-buffer strings",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33602" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/glibc@2.28-251.el8_10.31?arch=x86_64&distro=rhel-8.10&upstream=glibc-2.28-251.el8_10.31.src.rpm",
              "issues" : [ {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0861",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-0861" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4911",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-4911" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33599",
                "title" : "nscd: Stack-based buffer overflow in netgroup cache",
                "source" : "redhat-csaf",
                "cvssScore" : 7.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-33599" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-4802",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-4802" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4527",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4527" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4806",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4806" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4813",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4813" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-15281",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-15281" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-5702",
                "title" : "The strcmp implementation optimized for the Power10 processor in the GNU C Library version 2.39 and later writes to vector registers v20 to v31 without saving contents from the caller (those registers are defined as non-volatile registers by the powerpc64le ABI), resulting in overwriting of its contents and potentially altering control flow of the caller, or leaking the input strings to the function to other parts of the program.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-5702" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-0395",
                "title" : "When the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-0395" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33600",
                "title" : "nscd: Null pointer crashes after notfound response",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33600" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0915",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-0915" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-8058",
                "source" : "redhat-csaf",
                "cvssScore" : 4.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-8058" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33601",
                "title" : "nscd: netgroup cache may terminate daemon on memory allocation failure",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33601" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33602",
                "title" : "nscd: netgroup cache assumes NSS callback uses in-buffer strings",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33602" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/glibc-common@2.28-251.el8_10.31?arch=x86_64&distro=rhel-8.10&upstream=glibc-2.28-251.el8_10.31.src.rpm",
              "issues" : [ {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0861",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-0861" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4911",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-4911" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33599",
                "title" : "nscd: Stack-based buffer overflow in netgroup cache",
                "source" : "redhat-csaf",
                "cvssScore" : 7.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-33599" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-4802",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-4802" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4527",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4527" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4806",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4806" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4813",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4813" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-5702",
                "title" : "The strcmp implementation optimized for the Power10 processor in the GNU C Library version 2.39 and later writes to vector registers v20 to v31 without saving contents from the caller (those registers are defined as non-volatile registers by the powerpc64le ABI), resulting in overwriting of its contents and potentially altering control flow of the caller, or leaking the input strings to the function to other parts of the program.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-5702" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-0395",
                "title" : "When the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-0395" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33600",
                "title" : "nscd: Null pointer crashes after notfound response",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33600" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0915",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-0915" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-8058",
                "source" : "redhat-csaf",
                "cvssScore" : 4.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-8058" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33601",
                "title" : "nscd: netgroup cache may terminate daemon on memory allocation failure",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33601" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33602",
                "title" : "nscd: netgroup cache assumes NSS callback uses in-buffer strings",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33602" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/xz-libs@5.2.4-4.el8_6?arch=x86_64&distro=rhel-8.10&upstream=xz-5.2.4-4.el8_6.src.rpm",
              "issues" : [ {
                "id" : "CVE-2022-1271",
                "title" : "An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is applied on the attacker's chosen file name (for example, a crafted file name), this can overwrite an attacker's content to an arbitrary attacker-selected file. This flaw occurs due to insufficient validation when processing filenames with two or more newlines where selected content and the target file names are embedded in crafted multi-line file names. This flaw allows a remote, low privileged attacker to force zgrep to write arbitrary files on the system.",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-1271" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-31115",
                "title" : "XZ has a heap-use-after-free bug in threaded .xz decoder",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-31115" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2022-1271",
                "title" : "An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is applied on the attacker's chosen file name (for example, a crafted file name), this can overwrite an attacker's content to an arbitrary attacker-selected file. This flaw occurs due to insufficient validation when processing filenames with two or more newlines where selected content and the target file names are embedded in crafted multi-line file names. This flaw allows a remote, low privileged attacker to force zgrep to write arbitrary files on the system.",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-1271" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/python3-libs@3.6.8-75.el8_10?arch=x86_64&distro=rhel-8.10&upstream=python3-3.6.8-75.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2023-40217",
                "source" : "redhat-csaf",
                "cvssScore" : 8.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-40217" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-42919",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-42919" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-6597",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-6597" ],
                "unique" : false
              }, {
                "id" : "CVE-2015-20107",
                "source" : "redhat-csaf",
                "cvssScore" : 7.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2015-20107" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-12718",
                "title" : "Bypass extraction filter to modify file metadata outside extraction directory",
                "source" : "redhat-csaf",
                "cvssScore" : 7.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-12718" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-4517",
                "title" : "Arbitrary writes via tarfile realpath overflow",
                "source" : "redhat-csaf",
                "cvssScore" : 7.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-4517" ],
                "unique" : false
              }, {
                "id" : "CVE-2020-10735",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2020-10735" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-45061",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-45061" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-24329",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-24329" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-6232",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-6232" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-12084",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-12084" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-4138",
                "title" : "Bypassing extraction filter to create symlinks to arbitrary targets outside extraction directory",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-4138" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-4435",
                "title" : "Tarfile extracts filtered members when errorlevel=0",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-4435" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-8194",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-8194" ],
                "unique" : false
              }, {
                "id" : "CVE-2021-28861",
                "source" : "redhat-csaf",
                "cvssScore" : 7.4,
                "severity" : "HIGH",
                "cves" : [ "CVE-2021-28861" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-4330",
                "title" : "Extraction filter bypass for linking outside extraction directory",
                "source" : "redhat-csaf",
                "cvssScore" : 7.3,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-4330" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-15366",
                "source" : "redhat-csaf",
                "cvssScore" : 7.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-15366" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-15367",
                "source" : "redhat-csaf",
                "cvssScore" : 7.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-15367" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-1299",
                "source" : "redhat-csaf",
                "cvssScore" : 7.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-1299" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-4519",
                "title" : "webbrowser.open() allows leading dashes in URLs",
                "source" : "redhat-csaf",
                "cvssScore" : 7.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-4519" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-6923",
                "source" : "redhat-csaf",
                "cvssScore" : 6.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-6923" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-0938",
                "source" : "redhat-csaf",
                "cvssScore" : 6.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-0938" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-13836",
                "source" : "redhat-csaf",
                "cvssScore" : 6.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-13836" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-9287",
                "source" : "redhat-csaf",
                "cvssScore" : 6.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-9287" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-0450",
                "source" : "redhat-csaf",
                "cvssScore" : 6.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-0450" ],
                "unique" : false
              }, {
                "id" : "CVE-2007-4559",
                "title" : "Directory traversal vulnerability in the (1) extract and (2) extractall functions in the tarfile module in Python allows user-assisted remote attackers to overwrite arbitrary files via a .. (dot dot) sequence in filenames in a TAR archive, a related issue to CVE-2001-1267.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2007-4559" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-27043",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-27043" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-8088",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-8088" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-0397",
                "source" : "redhat-csaf",
                "cvssScore" : 5.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-0397" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-7592",
                "source" : "redhat-csaf",
                "cvssScore" : 4.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-7592" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0865",
                "source" : "redhat-csaf",
                "cvssScore" : 4.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-0865" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-6069",
                "title" : "HTMLParser quadratic complexity when processing malformed inputs",
                "source" : "redhat-csaf",
                "cvssScore" : 4.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-6069" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-8291",
                "source" : "redhat-csaf",
                "cvssScore" : 4.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-8291" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-6075",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-6075" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-11168",
                "source" : "redhat-csaf",
                "cvssScore" : 3.7,
                "severity" : "LOW",
                "cves" : [ "CVE-2024-11168" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-4032",
                "source" : "redhat-csaf",
                "cvssScore" : 3.7,
                "severity" : "LOW",
                "cves" : [ "CVE-2024-4032" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-5642",
                "title" : "Buffer overread when using an empty list with SSLContext.set_npn_protocols()",
                "source" : "redhat-csaf",
                "cvssScore" : 2.7,
                "severity" : "LOW",
                "cves" : [ "CVE-2024-5642" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2023-40217",
                "source" : "redhat-csaf",
                "cvssScore" : 8.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-40217" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libcomps@0.1.18-1.el8?arch=x86_64&distro=rhel-8.10&upstream=libcomps-0.1.18-1.el8.src.rpm",
              "issues" : [ {
                "id" : "CVE-2026-1312",
                "source" : "redhat-csaf",
                "cvssScore" : 8.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-1312" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0980",
                "title" : "Rubyipmi: red hat satellite: remote code execution in rubyipmi via malicious bmc username",
                "source" : "redhat-csaf",
                "cvssScore" : 8.3,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-0980" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-1207",
                "source" : "redhat-csaf",
                "cvssScore" : 8.3,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-1207" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-1287",
                "source" : "redhat-csaf",
                "cvssScore" : 8.3,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-1287" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-1530",
                "title" : "Fog-kubevirt: fog-kubevirt: man-in-the-middle vulnerability due to disabled certificate validation",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-1530" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-1531",
                "title" : "Foreman-kubevirt: foreman_kubevirt: man-in-the-middle due to insecure default ssl verification",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-1531" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-1961",
                "title" : "Forman: foreman: remote code execution via command injection in websocket proxy",
                "source" : "redhat-csaf",
                "cvssScore" : 8.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-1961" ],
                "unique" : false
              }, {
                "id" : "CVE-2021-46877",
                "title" : "jackson-databind 2.10.x through 2.12.x before 2.12.6 and 2.13.x before 2.13.1 allows attackers to cause a denial of service (2 GB transient heap usage per read) in uncommon situations involving JsonNode JDK serialization.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2021-46877" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-14550",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-14550" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-6176",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-6176" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-1285",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-1285" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-68121",
                "source" : "redhat-csaf",
                "cvssScore" : 7.4,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-68121" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-28863",
                "title" : "node-tar vulnerable to denial of service while parsing a tar file due to lack of folders count validation",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-28863" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-4324",
                "title" : "Rubygem-katello: katello: denial of service and potential information disclosure via sql injection",
                "source" : "redhat-csaf",
                "cvssScore" : 5.4,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-4324" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2026-1312",
                "source" : "redhat-csaf",
                "cvssScore" : 8.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-1312" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/zlib@1.2.11-25.el8?arch=x86_64&distro=rhel-8.10&upstream=zlib-1.2.11-25.el8.src.rpm",
              "issues" : [ {
                "id" : "CVE-2018-25032",
                "title" : "zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.",
                "source" : "redhat-csaf",
                "cvssScore" : 8.2,
                "severity" : "HIGH",
                "cves" : [ "CVE-2018-25032" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-37434",
                "title" : "zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference).",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-37434" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2018-25032",
                "title" : "zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.",
                "source" : "redhat-csaf",
                "cvssScore" : 8.2,
                "severity" : "HIGH",
                "cves" : [ "CVE-2018-25032" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libcap@2.48-6.el8_9?arch=x86_64&distro=rhel-8.10&upstream=libcap-2.48-6.el8_9.src.rpm",
              "issues" : [ {
                "id" : "CVE-2023-2603",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-2603" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-2602",
                "title" : "A vulnerability was found in the pthread_create() function in libcap. This issue may allow a malicious actor to use cause __real_pthread_create() to return an error, which can exhaust the process memory.",
                "source" : "redhat-csaf",
                "cvssScore" : 3.3,
                "severity" : "LOW",
                "cves" : [ "CVE-2023-2602" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2023-2603",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-2603" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/ncurses-base@6.1-10.20180224.el8?arch=noarch&distro=rhel-8.10&upstream=ncurses-6.1-10.20180224.el8.src.rpm",
              "issues" : [ {
                "id" : "CVE-2023-29491",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-29491" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-69720",
                "title" : "The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-69720" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-29458",
                "title" : "ncurses 6.3 before patch 20220416 has an out-of-bounds read and segmentation violation in convert_strings in tinfo/read_entry.c in the terminfo library.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-29458" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2023-29491",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-29491" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/ncurses-libs@6.1-10.20180224.el8?arch=x86_64&distro=rhel-8.10&upstream=ncurses-6.1-10.20180224.el8.src.rpm",
              "issues" : [ {
                "id" : "CVE-2023-29491",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-29491" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-69720",
                "title" : "The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-69720" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-29458",
                "title" : "ncurses 6.3 before patch 20220416 has an out-of-bounds read and segmentation violation in convert_strings in tinfo/read_entry.c in the terminfo library.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-29458" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2023-29491",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-29491" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/sqlite-libs@3.26.0-20.el8_10?arch=x86_64&distro=rhel-8.10&upstream=sqlite-3.26.0-20.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2025-6965",
                "title" : "Integer Truncation on SQLite",
                "source" : "redhat-csaf",
                "cvssScore" : 7.7,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-6965" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-7104",
                "source" : "redhat-csaf",
                "cvssScore" : 7.3,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-7104" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-3277",
                "title" : "An integer overflow can be triggered in SQLite’s `concat_ws()` function. The resulting, truncated integer is then used to allocate a buffer. When SQLite then writes the resulting string to the buffer, it uses the original, untruncated size and thus a wild Heap Buffer overflow of size ~4GB can be triggered. This can result in arbitrary code execution.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.3,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-3277" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-35737",
                "title" : "SQLite 1.0.12 through 3.39.x before 3.39.2 sometimes allows an array-bounds overflow if billions of bytes are used in a string argument to a C API.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-35737" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2025-6965",
                "title" : "Integer Truncation on SQLite",
                "source" : "redhat-csaf",
                "cvssScore" : 7.7,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-6965" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/expat@2.5.0-1.el8_10?arch=x86_64&distro=rhel-8.10&upstream=expat-2.5.0-1.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2023-52425",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-52425" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-28757",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-28757" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-45490",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-45490" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-45491",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-45491" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-8176",
                "title" : "Libexpat: expat: improper restriction of xml entity expansion depth in libexpat",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-8176" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-45492",
                "source" : "redhat-csaf",
                "cvssScore" : 6.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-45492" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-50602",
                "title" : "An issue was discovered in libexpat before 2.6.4. There is a crash within the XML_ResumeParser function because XML_StopParser can stop/suspend an unstarted parser.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-50602" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-59375",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-59375" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2023-52425",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-52425" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libtirpc@1.1.4-12.el8_10?arch=x86_64&distro=rhel-8.10&upstream=libtirpc-1.1.4-12.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2021-46828",
                "title" : "In libtirpc before 1.3.3rc1, remote attackers could exhaust the file descriptors of a process that uses libtirpc because idle TCP connections are mishandled. This can, in turn, lead to an svc_run infinite loop without accepting new connections.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2021-46828" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2021-46828",
                "title" : "In libtirpc before 1.3.3rc1, remote attackers could exhaust the file descriptors of a process that uses libtirpc because idle TCP connections are mishandled. This can, in turn, lead to an svc_run infinite loop without accepting new connections.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2021-46828" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/pcre2@10.32-3.el8_6?arch=x86_64&distro=rhel-8.10&upstream=pcre2-10.32-3.el8_6.src.rpm",
              "issues" : [ {
                "id" : "CVE-2022-1586",
                "title" : "An out-of-bounds read vulnerability was discovered in the PCRE2 library in the compile_xclass_matchingpath() function of the pcre2_jit_compile.c file. This involves a unicode property matching issue in JIT-compiled regular expressions. The issue occurs because the character was not fully read in case-less matching within JIT.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-1586" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-1587",
                "title" : "An out-of-bounds read vulnerability was discovered in the PCRE2 library in the get_recurse_data_length() function of the pcre2_jit_compile.c file. This issue affects recursions in JIT-compiled regular expressions caused by duplicate data transfers.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-1587" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2022-1586",
                "title" : "An out-of-bounds read vulnerability was discovered in the PCRE2 library in the compile_xclass_matchingpath() function of the pcre2_jit_compile.c file. This involves a unicode property matching issue in JIT-compiled regular expressions. The issue occurs because the character was not fully read in case-less matching within JIT.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-1586" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/bash@4.4.20-6.el8_10?arch=x86_64&distro=rhel-8.10&upstream=bash-4.4.20-6.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2022-3715",
                "source" : "redhat-csaf",
                "cvssScore" : 6.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-3715" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2022-3715",
                "source" : "redhat-csaf",
                "cvssScore" : 6.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-3715" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/gmp@6.1.2-11.el8?arch=x86_64&distro=rhel-8.10&epoch=1&upstream=gmp-6.1.2-11.el8.src.rpm",
              "issues" : [ {
                "id" : "CVE-2021-43618",
                "title" : "GNU Multiple Precision Arithmetic Library (GMP) through 6.2.1 has an mpz/inp_raw.c integer overflow and resultant buffer overflow via crafted input, leading to a segmentation fault on 32-bit platforms.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2021-43618" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2021-43618",
                "title" : "GNU Multiple Precision Arithmetic Library (GMP) through 6.2.1 has an mpz/inp_raw.c integer overflow and resultant buffer overflow via crafted input, leading to a segmentation fault on 32-bit platforms.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2021-43618" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libgcc@8.5.0-28.el8_10?arch=x86_64&distro=rhel-8.10&upstream=gcc-8.5.0-28.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2020-11023",
                "title" : "Potential XSS vulnerability in jQuery",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2020-11023" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2020-11023",
                "title" : "Potential XSS vulnerability in jQuery",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2020-11023" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libtasn1@4.13-5.el8_10?arch=x86_64&distro=rhel-8.10&upstream=libtasn1-4.13-5.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2021-46848",
                "title" : "GNU Libtasn1 before 4.19.0 has an ETYPE_OK off-by-one array size check that affects asn1_encode_simple_der.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2021-46848" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-12133",
                "title" : "Libtasn1: inefficient der decoding in libtasn1 leading to potential remote dos",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-12133" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2021-46848",
                "title" : "GNU Libtasn1 before 4.19.0 has an ETYPE_OK off-by-one array size check that affects asn1_encode_simple_der.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2021-46848" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libcom_err@1.45.6-7.el8_10?arch=x86_64&distro=rhel-8.10&upstream=e2fsprogs-1.45.6-7.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2022-1304",
                "title" : "An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a segmentation fault and possibly arbitrary code execution via a specially crafted filesystem.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-1304" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2022-1304",
                "title" : "An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a segmentation fault and possibly arbitrary code execution via a specially crafted filesystem.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-1304" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/python3-pip-wheel@9.0.3-24.el8?arch=noarch&distro=rhel-8.10&upstream=python-pip-9.0.3-24.el8.src.rpm",
              "issues" : [ {
                "id" : "CVE-2007-4559",
                "title" : "Directory traversal vulnerability in the (1) extract and (2) extractall functions in the tarfile module in Python allows user-assisted remote attackers to overwrite arbitrary files via a .. (dot dot) sequence in filenames in a TAR archive, a related issue to CVE-2001-1267.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2007-4559" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2007-4559",
                "title" : "Directory traversal vulnerability in the (1) extract and (2) extractall functions in the tarfile module in Python allows user-assisted remote attackers to overwrite arbitrary files via a .. (dot dot) sequence in filenames in a TAR archive, a related issue to CVE-2001-1267.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2007-4559" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/bzip2-libs@1.0.6-28.el8_10?arch=x86_64&distro=rhel-8.10&upstream=bzip2-1.0.6-28.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2019-12900",
                "title" : "BZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many selectors.",
                "source" : "redhat-csaf",
                "cvssScore" : 4.4,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2019-12900" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2019-12900",
                "title" : "BZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many selectors.",
                "source" : "redhat-csaf",
                "cvssScore" : 4.4,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2019-12900" ],
                "unique" : false
              }
            } ],
            "highestVulnerability" : {
              "id" : "CVE-2025-15467",
              "title" : "Stack buffer overflow in CMS (Auth)EnvelopedData parsing",
              "source" : "redhat-csaf",
              "cvssScore" : 9.8,
              "severity" : "CRITICAL",
              "cves" : [ "CVE-2025-15467" ],
              "unique" : false
            }
          }, {
            "ref" : "pkg:rpm/redhat/python3-syspurpose@1.28.44-1.el8_10?arch=x86_64&distro=rhel-8.10&upstream=subscription-manager-1.28.44-1.el8_10.src.rpm",
            "transitive" : [ {
              "ref" : "pkg:rpm/redhat/openssl-libs@1.1.1k-15.el8_6?arch=x86_64&distro=rhel-8.10&epoch=1&upstream=openssl-1.1.1k-15.el8_6.src.rpm",
              "issues" : [ {
                "id" : "CVE-2025-15467",
                "title" : "Stack buffer overflow in CMS (Auth)EnvelopedData parsing",
                "source" : "redhat-csaf",
                "cvssScore" : 9.8,
                "severity" : "CRITICAL",
                "cves" : [ "CVE-2025-15467" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-1473",
                "title" : "Resource leakage when decoding certificates and keys",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-1473" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-3358",
                "title" : "Using a Custom Cipher with NID_undef may lead to NULL encryption",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-3358" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-3602",
                "title" : "X.509 Email Address 4-byte Buffer Overflow",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-3602" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-3786",
                "title" : "X.509 Email Address Variable Length Buffer Overflow",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-3786" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-4450",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-4450" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-0215",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-0215" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-0216",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-0216" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-0217",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-0217" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-0401",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-0401" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-5363",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-5363" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-0286",
                "source" : "redhat-csaf",
                "cvssScore" : 7.4,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-0286" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-12797",
                "title" : "RFC7250 handshakes with unauthenticated servers don't abort as expected",
                "source" : "redhat-csaf",
                "cvssScore" : 7.4,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-12797" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-69419",
                "source" : "redhat-csaf",
                "cvssScore" : 7.4,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-69419" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-1292",
                "source" : "redhat-csaf",
                "cvssScore" : 6.7,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-1292" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-2068",
                "source" : "redhat-csaf",
                "cvssScore" : 6.7,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-2068" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-2650",
                "title" : "Possible DoS translating ASN.1 object identifiers",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-2650" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-6129",
                "title" : "POLY1305 MAC implementation corrupts vector registers on PowerPC",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-6129" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-69421",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-69421" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-11187",
                "title" : "Improper validation of PBMAC1 parameters in PKCS#12 MAC verification",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-11187" ],
                "unique" : false
              }, {
                "id" : "CVE-2020-1971",
                "title" : "EDIPARTYNAME NULL pointer dereference",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2020-1971" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-4304",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-4304" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-0464",
                "title" : "Excessive Resource Usage Verifying X.509 Policy Constraints",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-0464" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-6237",
                "title" : "Excessive time spent checking invalid RSA public keys",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-6237" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-5535",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-5535" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-6119",
                "title" : "Possible denial of service in X.509 name checks",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-6119" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-15468",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-15468" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-66199",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-66199" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-69420",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-69420" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-22796",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-22796" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-4741",
                "source" : "redhat-csaf",
                "cvssScore" : 5.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-4741" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-9230",
                "source" : "redhat-csaf",
                "cvssScore" : 5.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-9230" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-0727",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-0727" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-15469",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-15469" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-22795",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-22795" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-1343",
                "title" : "OCSP_basic_verify may incorrectly verify the response signing certificate",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-1343" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-2097",
                "title" : "AES OCB fails to encrypt some bytes",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-2097" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-0465",
                "title" : "Invalid certificate policies in leaf certificates are silently ignored",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-0465" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-0466",
                "title" : "Certificate policy check not enabled",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-0466" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-2975",
                "title" : "AES-SIV implementation ignores empty associated data entries",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-2975" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-3446",
                "title" : "Excessive time spent checking DH keys and parameters",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-3446" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-3817",
                "title" : "Excessive time spent checking DH q parameter value",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-3817" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-5678",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-5678" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-4603",
                "title" : "Excessive time spent checking DSA keys and parameters",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-4603" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-1255",
                "title" : "Input buffer over-read in AES-XTS implementation on 64 bit ARM",
                "source" : "redhat-csaf",
                "cvssScore" : 5.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-1255" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-4203",
                "source" : "redhat-csaf",
                "cvssScore" : 4.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-4203" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-68160",
                "source" : "redhat-csaf",
                "cvssScore" : 4.7,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-68160" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-69418",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-69418" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-2511",
                "source" : "redhat-csaf",
                "cvssScore" : 3.7,
                "severity" : "LOW",
                "cves" : [ "CVE-2024-2511" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2025-15467",
                "title" : "Stack buffer overflow in CMS (Auth)EnvelopedData parsing",
                "source" : "redhat-csaf",
                "cvssScore" : 9.8,
                "severity" : "CRITICAL",
                "cves" : [ "CVE-2025-15467" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/krb5-libs@1.18.2-32.el8_10?arch=x86_64&distro=rhel-8.10&upstream=krb5-1.18.2-32.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2024-3596",
                "source" : "redhat-csaf",
                "cvssScore" : 9.0,
                "severity" : "CRITICAL",
                "cves" : [ "CVE-2024-3596" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-42898",
                "title" : "PAC parsing in MIT Kerberos 5 (aka krb5) before 1.19.4 and 1.20.x before 1.20.1 has integer overflows that may lead to remote code execution (in KDC, kadmind, or a GSS or Kerberos application server) on 32-bit platforms (which have a resultant heap-based buffer overflow), and cause a denial of service on other platforms. This occurs in krb5_pac_parse in lib/krb5/krb/pac.c. Heimdal before 7.7.1 has \"a similar bug.\"",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-42898" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-39975",
                "title" : "kdc/do_tgs_req.c in MIT Kerberos 5 (aka krb5) 1.21 before 1.21.2 has a double free that is reachable if an authenticated user can trigger an authorization-data handling failure. Incorrect data is copied from one ticket to another.",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-39975" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-26462",
                "title" : "Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/kdc/ndr.c.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-26462" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-37370",
                "title" : "In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can modify the plaintext Extra Count field of a confidential GSS krb5 wrap token, causing the unwrapped token to appear truncated to the application.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-37370" ],
                "unique" : false
              }, {
                "id" : "CVE-2020-17049",
                "title" : "Kerberos KDC Security Feature Bypass Vulnerability",
                "source" : "redhat-csaf",
                "cvssScore" : 7.2,
                "severity" : "HIGH",
                "cves" : [ "CVE-2020-17049" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-36054",
                "title" : "lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) before 1.20.2 and 1.21.x before 1.21.1 frees an uninitialized pointer. A remote authenticated user can trigger a kadmind crash. This occurs because _xdr_kadm5_principal_ent_rec does not validate the relationship between n_key_data and the key_data array count.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-36054" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-37371",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-37371" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-24528",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-24528" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-26458",
                "title" : "Kerberos 5 (aka krb5) 1.21.2 contains a memory leak in /krb5/src/lib/rpc/pmap_rmt.c.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-26458" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-26461",
                "title" : "Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/lib/gssapi/krb5/k5sealv3.c.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-26461" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-3576",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-3576" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2024-3596",
                "source" : "redhat-csaf",
                "cvssScore" : 9.0,
                "severity" : "CRITICAL",
                "cves" : [ "CVE-2024-3596" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/python3-setuptools-wheel@39.2.0-9.el8_10?arch=noarch&distro=rhel-8.10&upstream=python-setuptools-39.2.0-9.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2024-6345",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-6345" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-47273",
                "title" : "setuptools has a path traversal vulnerability in PackageIndex.download that leads to Arbitrary File Write",
                "source" : "redhat-csaf",
                "cvssScore" : 7.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-47273" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-40897",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-40897" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2024-6345",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-6345" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/glibc-minimal-langpack@2.28-251.el8_10.31?arch=x86_64&distro=rhel-8.10&upstream=glibc-2.28-251.el8_10.31.src.rpm",
              "issues" : [ {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0861",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-0861" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4911",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-4911" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33599",
                "title" : "nscd: Stack-based buffer overflow in netgroup cache",
                "source" : "redhat-csaf",
                "cvssScore" : 7.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-33599" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-4802",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-4802" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4527",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4527" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4806",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4806" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4813",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4813" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-5702",
                "title" : "The strcmp implementation optimized for the Power10 processor in the GNU C Library version 2.39 and later writes to vector registers v20 to v31 without saving contents from the caller (those registers are defined as non-volatile registers by the powerpc64le ABI), resulting in overwriting of its contents and potentially altering control flow of the caller, or leaking the input strings to the function to other parts of the program.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-5702" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-0395",
                "title" : "When the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-0395" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33600",
                "title" : "nscd: Null pointer crashes after notfound response",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33600" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0915",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-0915" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-8058",
                "source" : "redhat-csaf",
                "cvssScore" : 4.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-8058" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33601",
                "title" : "nscd: netgroup cache may terminate daemon on memory allocation failure",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33601" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33602",
                "title" : "nscd: netgroup cache assumes NSS callback uses in-buffer strings",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33602" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/glibc@2.28-251.el8_10.31?arch=x86_64&distro=rhel-8.10&upstream=glibc-2.28-251.el8_10.31.src.rpm",
              "issues" : [ {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0861",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-0861" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4911",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-4911" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33599",
                "title" : "nscd: Stack-based buffer overflow in netgroup cache",
                "source" : "redhat-csaf",
                "cvssScore" : 7.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-33599" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-4802",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-4802" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4527",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4527" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4806",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4806" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4813",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4813" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-15281",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-15281" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-5702",
                "title" : "The strcmp implementation optimized for the Power10 processor in the GNU C Library version 2.39 and later writes to vector registers v20 to v31 without saving contents from the caller (those registers are defined as non-volatile registers by the powerpc64le ABI), resulting in overwriting of its contents and potentially altering control flow of the caller, or leaking the input strings to the function to other parts of the program.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-5702" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-0395",
                "title" : "When the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-0395" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33600",
                "title" : "nscd: Null pointer crashes after notfound response",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33600" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0915",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-0915" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-8058",
                "source" : "redhat-csaf",
                "cvssScore" : 4.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-8058" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33601",
                "title" : "nscd: netgroup cache may terminate daemon on memory allocation failure",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33601" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33602",
                "title" : "nscd: netgroup cache assumes NSS callback uses in-buffer strings",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33602" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/glibc-common@2.28-251.el8_10.31?arch=x86_64&distro=rhel-8.10&upstream=glibc-2.28-251.el8_10.31.src.rpm",
              "issues" : [ {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0861",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-0861" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4911",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-4911" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33599",
                "title" : "nscd: Stack-based buffer overflow in netgroup cache",
                "source" : "redhat-csaf",
                "cvssScore" : 7.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-33599" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-4802",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-4802" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4527",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4527" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4806",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4806" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4813",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4813" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-5702",
                "title" : "The strcmp implementation optimized for the Power10 processor in the GNU C Library version 2.39 and later writes to vector registers v20 to v31 without saving contents from the caller (those registers are defined as non-volatile registers by the powerpc64le ABI), resulting in overwriting of its contents and potentially altering control flow of the caller, or leaking the input strings to the function to other parts of the program.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-5702" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-0395",
                "title" : "When the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-0395" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33600",
                "title" : "nscd: Null pointer crashes after notfound response",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33600" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0915",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-0915" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-8058",
                "source" : "redhat-csaf",
                "cvssScore" : 4.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-8058" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33601",
                "title" : "nscd: netgroup cache may terminate daemon on memory allocation failure",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33601" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33602",
                "title" : "nscd: netgroup cache assumes NSS callback uses in-buffer strings",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33602" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/xz-libs@5.2.4-4.el8_6?arch=x86_64&distro=rhel-8.10&upstream=xz-5.2.4-4.el8_6.src.rpm",
              "issues" : [ {
                "id" : "CVE-2022-1271",
                "title" : "An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is applied on the attacker's chosen file name (for example, a crafted file name), this can overwrite an attacker's content to an arbitrary attacker-selected file. This flaw occurs due to insufficient validation when processing filenames with two or more newlines where selected content and the target file names are embedded in crafted multi-line file names. This flaw allows a remote, low privileged attacker to force zgrep to write arbitrary files on the system.",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-1271" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-31115",
                "title" : "XZ has a heap-use-after-free bug in threaded .xz decoder",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-31115" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2022-1271",
                "title" : "An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is applied on the attacker's chosen file name (for example, a crafted file name), this can overwrite an attacker's content to an arbitrary attacker-selected file. This flaw occurs due to insufficient validation when processing filenames with two or more newlines where selected content and the target file names are embedded in crafted multi-line file names. This flaw allows a remote, low privileged attacker to force zgrep to write arbitrary files on the system.",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-1271" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/python3-libs@3.6.8-75.el8_10?arch=x86_64&distro=rhel-8.10&upstream=python3-3.6.8-75.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2023-40217",
                "source" : "redhat-csaf",
                "cvssScore" : 8.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-40217" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-42919",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-42919" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-6597",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-6597" ],
                "unique" : false
              }, {
                "id" : "CVE-2015-20107",
                "source" : "redhat-csaf",
                "cvssScore" : 7.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2015-20107" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-12718",
                "title" : "Bypass extraction filter to modify file metadata outside extraction directory",
                "source" : "redhat-csaf",
                "cvssScore" : 7.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-12718" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-4517",
                "title" : "Arbitrary writes via tarfile realpath overflow",
                "source" : "redhat-csaf",
                "cvssScore" : 7.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-4517" ],
                "unique" : false
              }, {
                "id" : "CVE-2020-10735",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2020-10735" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-45061",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-45061" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-24329",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-24329" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-6232",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-6232" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-12084",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-12084" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-4138",
                "title" : "Bypassing extraction filter to create symlinks to arbitrary targets outside extraction directory",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-4138" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-4435",
                "title" : "Tarfile extracts filtered members when errorlevel=0",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-4435" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-8194",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-8194" ],
                "unique" : false
              }, {
                "id" : "CVE-2021-28861",
                "source" : "redhat-csaf",
                "cvssScore" : 7.4,
                "severity" : "HIGH",
                "cves" : [ "CVE-2021-28861" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-4330",
                "title" : "Extraction filter bypass for linking outside extraction directory",
                "source" : "redhat-csaf",
                "cvssScore" : 7.3,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-4330" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-15366",
                "source" : "redhat-csaf",
                "cvssScore" : 7.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-15366" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-15367",
                "source" : "redhat-csaf",
                "cvssScore" : 7.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-15367" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-1299",
                "source" : "redhat-csaf",
                "cvssScore" : 7.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-1299" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-4519",
                "title" : "webbrowser.open() allows leading dashes in URLs",
                "source" : "redhat-csaf",
                "cvssScore" : 7.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-4519" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-6923",
                "source" : "redhat-csaf",
                "cvssScore" : 6.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-6923" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-0938",
                "source" : "redhat-csaf",
                "cvssScore" : 6.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-0938" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-13836",
                "source" : "redhat-csaf",
                "cvssScore" : 6.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-13836" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-9287",
                "source" : "redhat-csaf",
                "cvssScore" : 6.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-9287" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-0450",
                "source" : "redhat-csaf",
                "cvssScore" : 6.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-0450" ],
                "unique" : false
              }, {
                "id" : "CVE-2007-4559",
                "title" : "Directory traversal vulnerability in the (1) extract and (2) extractall functions in the tarfile module in Python allows user-assisted remote attackers to overwrite arbitrary files via a .. (dot dot) sequence in filenames in a TAR archive, a related issue to CVE-2001-1267.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2007-4559" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-27043",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-27043" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-8088",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-8088" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-0397",
                "source" : "redhat-csaf",
                "cvssScore" : 5.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-0397" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-7592",
                "source" : "redhat-csaf",
                "cvssScore" : 4.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-7592" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0865",
                "source" : "redhat-csaf",
                "cvssScore" : 4.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-0865" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-6069",
                "title" : "HTMLParser quadratic complexity when processing malformed inputs",
                "source" : "redhat-csaf",
                "cvssScore" : 4.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-6069" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-8291",
                "source" : "redhat-csaf",
                "cvssScore" : 4.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-8291" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-6075",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-6075" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-11168",
                "source" : "redhat-csaf",
                "cvssScore" : 3.7,
                "severity" : "LOW",
                "cves" : [ "CVE-2024-11168" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-4032",
                "source" : "redhat-csaf",
                "cvssScore" : 3.7,
                "severity" : "LOW",
                "cves" : [ "CVE-2024-4032" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-5642",
                "title" : "Buffer overread when using an empty list with SSLContext.set_npn_protocols()",
                "source" : "redhat-csaf",
                "cvssScore" : 2.7,
                "severity" : "LOW",
                "cves" : [ "CVE-2024-5642" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2023-40217",
                "source" : "redhat-csaf",
                "cvssScore" : 8.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-40217" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/zlib@1.2.11-25.el8?arch=x86_64&distro=rhel-8.10&upstream=zlib-1.2.11-25.el8.src.rpm",
              "issues" : [ {
                "id" : "CVE-2018-25032",
                "title" : "zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.",
                "source" : "redhat-csaf",
                "cvssScore" : 8.2,
                "severity" : "HIGH",
                "cves" : [ "CVE-2018-25032" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-37434",
                "title" : "zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference).",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-37434" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2018-25032",
                "title" : "zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.",
                "source" : "redhat-csaf",
                "cvssScore" : 8.2,
                "severity" : "HIGH",
                "cves" : [ "CVE-2018-25032" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libcap@2.48-6.el8_9?arch=x86_64&distro=rhel-8.10&upstream=libcap-2.48-6.el8_9.src.rpm",
              "issues" : [ {
                "id" : "CVE-2023-2603",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-2603" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-2602",
                "title" : "A vulnerability was found in the pthread_create() function in libcap. This issue may allow a malicious actor to use cause __real_pthread_create() to return an error, which can exhaust the process memory.",
                "source" : "redhat-csaf",
                "cvssScore" : 3.3,
                "severity" : "LOW",
                "cves" : [ "CVE-2023-2602" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2023-2603",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-2603" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/ncurses-base@6.1-10.20180224.el8?arch=noarch&distro=rhel-8.10&upstream=ncurses-6.1-10.20180224.el8.src.rpm",
              "issues" : [ {
                "id" : "CVE-2023-29491",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-29491" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-69720",
                "title" : "The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-69720" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-29458",
                "title" : "ncurses 6.3 before patch 20220416 has an out-of-bounds read and segmentation violation in convert_strings in tinfo/read_entry.c in the terminfo library.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-29458" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2023-29491",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-29491" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/ncurses-libs@6.1-10.20180224.el8?arch=x86_64&distro=rhel-8.10&upstream=ncurses-6.1-10.20180224.el8.src.rpm",
              "issues" : [ {
                "id" : "CVE-2023-29491",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-29491" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-69720",
                "title" : "The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-69720" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-29458",
                "title" : "ncurses 6.3 before patch 20220416 has an out-of-bounds read and segmentation violation in convert_strings in tinfo/read_entry.c in the terminfo library.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-29458" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2023-29491",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-29491" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/sqlite-libs@3.26.0-20.el8_10?arch=x86_64&distro=rhel-8.10&upstream=sqlite-3.26.0-20.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2025-6965",
                "title" : "Integer Truncation on SQLite",
                "source" : "redhat-csaf",
                "cvssScore" : 7.7,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-6965" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-7104",
                "source" : "redhat-csaf",
                "cvssScore" : 7.3,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-7104" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-3277",
                "title" : "An integer overflow can be triggered in SQLite’s `concat_ws()` function. The resulting, truncated integer is then used to allocate a buffer. When SQLite then writes the resulting string to the buffer, it uses the original, untruncated size and thus a wild Heap Buffer overflow of size ~4GB can be triggered. This can result in arbitrary code execution.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.3,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-3277" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-35737",
                "title" : "SQLite 1.0.12 through 3.39.x before 3.39.2 sometimes allows an array-bounds overflow if billions of bytes are used in a string argument to a C API.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-35737" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2025-6965",
                "title" : "Integer Truncation on SQLite",
                "source" : "redhat-csaf",
                "cvssScore" : 7.7,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-6965" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/expat@2.5.0-1.el8_10?arch=x86_64&distro=rhel-8.10&upstream=expat-2.5.0-1.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2023-52425",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-52425" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-28757",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-28757" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-45490",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-45490" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-45491",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-45491" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-8176",
                "title" : "Libexpat: expat: improper restriction of xml entity expansion depth in libexpat",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-8176" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-45492",
                "source" : "redhat-csaf",
                "cvssScore" : 6.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-45492" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-50602",
                "title" : "An issue was discovered in libexpat before 2.6.4. There is a crash within the XML_ResumeParser function because XML_StopParser can stop/suspend an unstarted parser.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-50602" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-59375",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-59375" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2023-52425",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-52425" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libtirpc@1.1.4-12.el8_10?arch=x86_64&distro=rhel-8.10&upstream=libtirpc-1.1.4-12.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2021-46828",
                "title" : "In libtirpc before 1.3.3rc1, remote attackers could exhaust the file descriptors of a process that uses libtirpc because idle TCP connections are mishandled. This can, in turn, lead to an svc_run infinite loop without accepting new connections.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2021-46828" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2021-46828",
                "title" : "In libtirpc before 1.3.3rc1, remote attackers could exhaust the file descriptors of a process that uses libtirpc because idle TCP connections are mishandled. This can, in turn, lead to an svc_run infinite loop without accepting new connections.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2021-46828" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/pcre2@10.32-3.el8_6?arch=x86_64&distro=rhel-8.10&upstream=pcre2-10.32-3.el8_6.src.rpm",
              "issues" : [ {
                "id" : "CVE-2022-1586",
                "title" : "An out-of-bounds read vulnerability was discovered in the PCRE2 library in the compile_xclass_matchingpath() function of the pcre2_jit_compile.c file. This involves a unicode property matching issue in JIT-compiled regular expressions. The issue occurs because the character was not fully read in case-less matching within JIT.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-1586" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-1587",
                "title" : "An out-of-bounds read vulnerability was discovered in the PCRE2 library in the get_recurse_data_length() function of the pcre2_jit_compile.c file. This issue affects recursions in JIT-compiled regular expressions caused by duplicate data transfers.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-1587" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2022-1586",
                "title" : "An out-of-bounds read vulnerability was discovered in the PCRE2 library in the compile_xclass_matchingpath() function of the pcre2_jit_compile.c file. This involves a unicode property matching issue in JIT-compiled regular expressions. The issue occurs because the character was not fully read in case-less matching within JIT.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-1586" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/bash@4.4.20-6.el8_10?arch=x86_64&distro=rhel-8.10&upstream=bash-4.4.20-6.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2022-3715",
                "source" : "redhat-csaf",
                "cvssScore" : 6.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-3715" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2022-3715",
                "source" : "redhat-csaf",
                "cvssScore" : 6.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-3715" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/gmp@6.1.2-11.el8?arch=x86_64&distro=rhel-8.10&epoch=1&upstream=gmp-6.1.2-11.el8.src.rpm",
              "issues" : [ {
                "id" : "CVE-2021-43618",
                "title" : "GNU Multiple Precision Arithmetic Library (GMP) through 6.2.1 has an mpz/inp_raw.c integer overflow and resultant buffer overflow via crafted input, leading to a segmentation fault on 32-bit platforms.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2021-43618" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2021-43618",
                "title" : "GNU Multiple Precision Arithmetic Library (GMP) through 6.2.1 has an mpz/inp_raw.c integer overflow and resultant buffer overflow via crafted input, leading to a segmentation fault on 32-bit platforms.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2021-43618" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libgcc@8.5.0-28.el8_10?arch=x86_64&distro=rhel-8.10&upstream=gcc-8.5.0-28.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2020-11023",
                "title" : "Potential XSS vulnerability in jQuery",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2020-11023" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2020-11023",
                "title" : "Potential XSS vulnerability in jQuery",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2020-11023" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libtasn1@4.13-5.el8_10?arch=x86_64&distro=rhel-8.10&upstream=libtasn1-4.13-5.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2021-46848",
                "title" : "GNU Libtasn1 before 4.19.0 has an ETYPE_OK off-by-one array size check that affects asn1_encode_simple_der.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2021-46848" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-12133",
                "title" : "Libtasn1: inefficient der decoding in libtasn1 leading to potential remote dos",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-12133" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2021-46848",
                "title" : "GNU Libtasn1 before 4.19.0 has an ETYPE_OK off-by-one array size check that affects asn1_encode_simple_der.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2021-46848" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libcom_err@1.45.6-7.el8_10?arch=x86_64&distro=rhel-8.10&upstream=e2fsprogs-1.45.6-7.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2022-1304",
                "title" : "An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a segmentation fault and possibly arbitrary code execution via a specially crafted filesystem.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-1304" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2022-1304",
                "title" : "An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a segmentation fault and possibly arbitrary code execution via a specially crafted filesystem.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-1304" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/python3-pip-wheel@9.0.3-24.el8?arch=noarch&distro=rhel-8.10&upstream=python-pip-9.0.3-24.el8.src.rpm",
              "issues" : [ {
                "id" : "CVE-2007-4559",
                "title" : "Directory traversal vulnerability in the (1) extract and (2) extractall functions in the tarfile module in Python allows user-assisted remote attackers to overwrite arbitrary files via a .. (dot dot) sequence in filenames in a TAR archive, a related issue to CVE-2001-1267.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2007-4559" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2007-4559",
                "title" : "Directory traversal vulnerability in the (1) extract and (2) extractall functions in the tarfile module in Python allows user-assisted remote attackers to overwrite arbitrary files via a .. (dot dot) sequence in filenames in a TAR archive, a related issue to CVE-2001-1267.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2007-4559" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/bzip2-libs@1.0.6-28.el8_10?arch=x86_64&distro=rhel-8.10&upstream=bzip2-1.0.6-28.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2019-12900",
                "title" : "BZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many selectors.",
                "source" : "redhat-csaf",
                "cvssScore" : 4.4,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2019-12900" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2019-12900",
                "title" : "BZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many selectors.",
                "source" : "redhat-csaf",
                "cvssScore" : 4.4,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2019-12900" ],
                "unique" : false
              }
            } ],
            "highestVulnerability" : {
              "id" : "CVE-2025-15467",
              "title" : "Stack buffer overflow in CMS (Auth)EnvelopedData parsing",
              "source" : "redhat-csaf",
              "cvssScore" : 9.8,
              "severity" : "CRITICAL",
              "cves" : [ "CVE-2025-15467" ],
              "unique" : false
            }
          }, {
            "ref" : "pkg:rpm/redhat/libpwquality@1.4.4-6.el8?arch=x86_64&distro=rhel-8.10&upstream=libpwquality-1.4.4-6.el8.src.rpm",
            "transitive" : [ {
              "ref" : "pkg:rpm/redhat/openssl-libs@1.1.1k-15.el8_6?arch=x86_64&distro=rhel-8.10&epoch=1&upstream=openssl-1.1.1k-15.el8_6.src.rpm",
              "issues" : [ {
                "id" : "CVE-2025-15467",
                "title" : "Stack buffer overflow in CMS (Auth)EnvelopedData parsing",
                "source" : "redhat-csaf",
                "cvssScore" : 9.8,
                "severity" : "CRITICAL",
                "cves" : [ "CVE-2025-15467" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-1473",
                "title" : "Resource leakage when decoding certificates and keys",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-1473" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-3358",
                "title" : "Using a Custom Cipher with NID_undef may lead to NULL encryption",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-3358" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-3602",
                "title" : "X.509 Email Address 4-byte Buffer Overflow",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-3602" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-3786",
                "title" : "X.509 Email Address Variable Length Buffer Overflow",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-3786" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-4450",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-4450" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-0215",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-0215" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-0216",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-0216" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-0217",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-0217" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-0401",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-0401" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-5363",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-5363" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-0286",
                "source" : "redhat-csaf",
                "cvssScore" : 7.4,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-0286" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-12797",
                "title" : "RFC7250 handshakes with unauthenticated servers don't abort as expected",
                "source" : "redhat-csaf",
                "cvssScore" : 7.4,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-12797" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-69419",
                "source" : "redhat-csaf",
                "cvssScore" : 7.4,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-69419" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-1292",
                "source" : "redhat-csaf",
                "cvssScore" : 6.7,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-1292" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-2068",
                "source" : "redhat-csaf",
                "cvssScore" : 6.7,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-2068" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-2650",
                "title" : "Possible DoS translating ASN.1 object identifiers",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-2650" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-6129",
                "title" : "POLY1305 MAC implementation corrupts vector registers on PowerPC",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-6129" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-69421",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-69421" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-11187",
                "title" : "Improper validation of PBMAC1 parameters in PKCS#12 MAC verification",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-11187" ],
                "unique" : false
              }, {
                "id" : "CVE-2020-1971",
                "title" : "EDIPARTYNAME NULL pointer dereference",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2020-1971" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-4304",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-4304" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-0464",
                "title" : "Excessive Resource Usage Verifying X.509 Policy Constraints",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-0464" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-6237",
                "title" : "Excessive time spent checking invalid RSA public keys",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-6237" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-5535",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-5535" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-6119",
                "title" : "Possible denial of service in X.509 name checks",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-6119" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-15468",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-15468" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-66199",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-66199" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-69420",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-69420" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-22796",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-22796" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-4741",
                "source" : "redhat-csaf",
                "cvssScore" : 5.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-4741" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-9230",
                "source" : "redhat-csaf",
                "cvssScore" : 5.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-9230" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-0727",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-0727" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-15469",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-15469" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-22795",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-22795" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-1343",
                "title" : "OCSP_basic_verify may incorrectly verify the response signing certificate",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-1343" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-2097",
                "title" : "AES OCB fails to encrypt some bytes",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-2097" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-0465",
                "title" : "Invalid certificate policies in leaf certificates are silently ignored",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-0465" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-0466",
                "title" : "Certificate policy check not enabled",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-0466" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-2975",
                "title" : "AES-SIV implementation ignores empty associated data entries",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-2975" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-3446",
                "title" : "Excessive time spent checking DH keys and parameters",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-3446" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-3817",
                "title" : "Excessive time spent checking DH q parameter value",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-3817" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-5678",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-5678" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-4603",
                "title" : "Excessive time spent checking DSA keys and parameters",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-4603" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-1255",
                "title" : "Input buffer over-read in AES-XTS implementation on 64 bit ARM",
                "source" : "redhat-csaf",
                "cvssScore" : 5.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-1255" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-4203",
                "source" : "redhat-csaf",
                "cvssScore" : 4.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-4203" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-68160",
                "source" : "redhat-csaf",
                "cvssScore" : 4.7,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-68160" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-69418",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-69418" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-2511",
                "source" : "redhat-csaf",
                "cvssScore" : 3.7,
                "severity" : "LOW",
                "cves" : [ "CVE-2024-2511" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2025-15467",
                "title" : "Stack buffer overflow in CMS (Auth)EnvelopedData parsing",
                "source" : "redhat-csaf",
                "cvssScore" : 9.8,
                "severity" : "CRITICAL",
                "cves" : [ "CVE-2025-15467" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/krb5-libs@1.18.2-32.el8_10?arch=x86_64&distro=rhel-8.10&upstream=krb5-1.18.2-32.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2024-3596",
                "source" : "redhat-csaf",
                "cvssScore" : 9.0,
                "severity" : "CRITICAL",
                "cves" : [ "CVE-2024-3596" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-42898",
                "title" : "PAC parsing in MIT Kerberos 5 (aka krb5) before 1.19.4 and 1.20.x before 1.20.1 has integer overflows that may lead to remote code execution (in KDC, kadmind, or a GSS or Kerberos application server) on 32-bit platforms (which have a resultant heap-based buffer overflow), and cause a denial of service on other platforms. This occurs in krb5_pac_parse in lib/krb5/krb/pac.c. Heimdal before 7.7.1 has \"a similar bug.\"",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-42898" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-39975",
                "title" : "kdc/do_tgs_req.c in MIT Kerberos 5 (aka krb5) 1.21 before 1.21.2 has a double free that is reachable if an authenticated user can trigger an authorization-data handling failure. Incorrect data is copied from one ticket to another.",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-39975" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-26462",
                "title" : "Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/kdc/ndr.c.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-26462" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-37370",
                "title" : "In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can modify the plaintext Extra Count field of a confidential GSS krb5 wrap token, causing the unwrapped token to appear truncated to the application.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-37370" ],
                "unique" : false
              }, {
                "id" : "CVE-2020-17049",
                "title" : "Kerberos KDC Security Feature Bypass Vulnerability",
                "source" : "redhat-csaf",
                "cvssScore" : 7.2,
                "severity" : "HIGH",
                "cves" : [ "CVE-2020-17049" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-36054",
                "title" : "lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) before 1.20.2 and 1.21.x before 1.21.1 frees an uninitialized pointer. A remote authenticated user can trigger a kadmind crash. This occurs because _xdr_kadm5_principal_ent_rec does not validate the relationship between n_key_data and the key_data array count.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-36054" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-37371",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-37371" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-24528",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-24528" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-26458",
                "title" : "Kerberos 5 (aka krb5) 1.21.2 contains a memory leak in /krb5/src/lib/rpc/pmap_rmt.c.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-26458" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-26461",
                "title" : "Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/lib/gssapi/krb5/k5sealv3.c.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-26461" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-3576",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-3576" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2024-3596",
                "source" : "redhat-csaf",
                "cvssScore" : 9.0,
                "severity" : "CRITICAL",
                "cves" : [ "CVE-2024-3596" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/glibc-minimal-langpack@2.28-251.el8_10.31?arch=x86_64&distro=rhel-8.10&upstream=glibc-2.28-251.el8_10.31.src.rpm",
              "issues" : [ {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0861",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-0861" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4911",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-4911" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33599",
                "title" : "nscd: Stack-based buffer overflow in netgroup cache",
                "source" : "redhat-csaf",
                "cvssScore" : 7.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-33599" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-4802",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-4802" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4527",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4527" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4806",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4806" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4813",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4813" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-5702",
                "title" : "The strcmp implementation optimized for the Power10 processor in the GNU C Library version 2.39 and later writes to vector registers v20 to v31 without saving contents from the caller (those registers are defined as non-volatile registers by the powerpc64le ABI), resulting in overwriting of its contents and potentially altering control flow of the caller, or leaking the input strings to the function to other parts of the program.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-5702" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-0395",
                "title" : "When the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-0395" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33600",
                "title" : "nscd: Null pointer crashes after notfound response",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33600" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0915",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-0915" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-8058",
                "source" : "redhat-csaf",
                "cvssScore" : 4.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-8058" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33601",
                "title" : "nscd: netgroup cache may terminate daemon on memory allocation failure",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33601" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33602",
                "title" : "nscd: netgroup cache assumes NSS callback uses in-buffer strings",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33602" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/glibc@2.28-251.el8_10.31?arch=x86_64&distro=rhel-8.10&upstream=glibc-2.28-251.el8_10.31.src.rpm",
              "issues" : [ {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0861",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-0861" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4911",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-4911" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33599",
                "title" : "nscd: Stack-based buffer overflow in netgroup cache",
                "source" : "redhat-csaf",
                "cvssScore" : 7.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-33599" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-4802",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-4802" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4527",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4527" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4806",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4806" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4813",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4813" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-15281",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-15281" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-5702",
                "title" : "The strcmp implementation optimized for the Power10 processor in the GNU C Library version 2.39 and later writes to vector registers v20 to v31 without saving contents from the caller (those registers are defined as non-volatile registers by the powerpc64le ABI), resulting in overwriting of its contents and potentially altering control flow of the caller, or leaking the input strings to the function to other parts of the program.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-5702" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-0395",
                "title" : "When the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-0395" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33600",
                "title" : "nscd: Null pointer crashes after notfound response",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33600" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0915",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-0915" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-8058",
                "source" : "redhat-csaf",
                "cvssScore" : 4.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-8058" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33601",
                "title" : "nscd: netgroup cache may terminate daemon on memory allocation failure",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33601" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33602",
                "title" : "nscd: netgroup cache assumes NSS callback uses in-buffer strings",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33602" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/glibc-common@2.28-251.el8_10.31?arch=x86_64&distro=rhel-8.10&upstream=glibc-2.28-251.el8_10.31.src.rpm",
              "issues" : [ {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0861",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-0861" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4911",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-4911" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33599",
                "title" : "nscd: Stack-based buffer overflow in netgroup cache",
                "source" : "redhat-csaf",
                "cvssScore" : 7.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-33599" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-4802",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-4802" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4527",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4527" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4806",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4806" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4813",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4813" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-5702",
                "title" : "The strcmp implementation optimized for the Power10 processor in the GNU C Library version 2.39 and later writes to vector registers v20 to v31 without saving contents from the caller (those registers are defined as non-volatile registers by the powerpc64le ABI), resulting in overwriting of its contents and potentially altering control flow of the caller, or leaking the input strings to the function to other parts of the program.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-5702" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-0395",
                "title" : "When the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-0395" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33600",
                "title" : "nscd: Null pointer crashes after notfound response",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33600" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0915",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-0915" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-8058",
                "source" : "redhat-csaf",
                "cvssScore" : 4.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-8058" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33601",
                "title" : "nscd: netgroup cache may terminate daemon on memory allocation failure",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33601" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33602",
                "title" : "nscd: netgroup cache assumes NSS callback uses in-buffer strings",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33602" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/gzip@1.9-13.el8_5?arch=x86_64&distro=rhel-8.10&upstream=gzip-1.9-13.el8_5.src.rpm",
              "issues" : [ {
                "id" : "CVE-2022-1271",
                "title" : "An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is applied on the attacker's chosen file name (for example, a crafted file name), this can overwrite an attacker's content to an arbitrary attacker-selected file. This flaw occurs due to insufficient validation when processing filenames with two or more newlines where selected content and the target file names are embedded in crafted multi-line file names. This flaw allows a remote, low privileged attacker to force zgrep to write arbitrary files on the system.",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-1271" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2022-1271",
                "title" : "An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is applied on the attacker's chosen file name (for example, a crafted file name), this can overwrite an attacker's content to an arbitrary attacker-selected file. This flaw occurs due to insufficient validation when processing filenames with two or more newlines where selected content and the target file names are embedded in crafted multi-line file names. This flaw allows a remote, low privileged attacker to force zgrep to write arbitrary files on the system.",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-1271" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/zlib@1.2.11-25.el8?arch=x86_64&distro=rhel-8.10&upstream=zlib-1.2.11-25.el8.src.rpm",
              "issues" : [ {
                "id" : "CVE-2018-25032",
                "title" : "zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.",
                "source" : "redhat-csaf",
                "cvssScore" : 8.2,
                "severity" : "HIGH",
                "cves" : [ "CVE-2018-25032" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-37434",
                "title" : "zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference).",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-37434" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2018-25032",
                "title" : "zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.",
                "source" : "redhat-csaf",
                "cvssScore" : 8.2,
                "severity" : "HIGH",
                "cves" : [ "CVE-2018-25032" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/pam@1.3.1-39.el8_10?arch=x86_64&distro=rhel-8.10&upstream=pam-1.3.1-39.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2025-6020",
                "title" : "Linux-pam: linux-pam directory traversal",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-6020" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-8941",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-8941" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-10963",
                "title" : "Pam: improper hostname interpretation in pam_access leads to access control bypass",
                "source" : "redhat-csaf",
                "cvssScore" : 7.4,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-10963" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-22365",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-22365" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-10041",
                "source" : "redhat-csaf",
                "cvssScore" : 4.7,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-10041" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2025-6020",
                "title" : "Linux-pam: linux-pam directory traversal",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-6020" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libcap@2.48-6.el8_9?arch=x86_64&distro=rhel-8.10&upstream=libcap-2.48-6.el8_9.src.rpm",
              "issues" : [ {
                "id" : "CVE-2023-2603",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-2603" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-2602",
                "title" : "A vulnerability was found in the pthread_create() function in libcap. This issue may allow a malicious actor to use cause __real_pthread_create() to return an error, which can exhaust the process memory.",
                "source" : "redhat-csaf",
                "cvssScore" : 3.3,
                "severity" : "LOW",
                "cves" : [ "CVE-2023-2602" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2023-2603",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-2603" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/ncurses-base@6.1-10.20180224.el8?arch=noarch&distro=rhel-8.10&upstream=ncurses-6.1-10.20180224.el8.src.rpm",
              "issues" : [ {
                "id" : "CVE-2023-29491",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-29491" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-69720",
                "title" : "The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-69720" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-29458",
                "title" : "ncurses 6.3 before patch 20220416 has an out-of-bounds read and segmentation violation in convert_strings in tinfo/read_entry.c in the terminfo library.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-29458" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2023-29491",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-29491" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/ncurses-libs@6.1-10.20180224.el8?arch=x86_64&distro=rhel-8.10&upstream=ncurses-6.1-10.20180224.el8.src.rpm",
              "issues" : [ {
                "id" : "CVE-2023-29491",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-29491" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-69720",
                "title" : "The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-69720" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-29458",
                "title" : "ncurses 6.3 before patch 20220416 has an out-of-bounds read and segmentation violation in convert_strings in tinfo/read_entry.c in the terminfo library.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-29458" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2023-29491",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-29491" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libtirpc@1.1.4-12.el8_10?arch=x86_64&distro=rhel-8.10&upstream=libtirpc-1.1.4-12.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2021-46828",
                "title" : "In libtirpc before 1.3.3rc1, remote attackers could exhaust the file descriptors of a process that uses libtirpc because idle TCP connections are mishandled. This can, in turn, lead to an svc_run infinite loop without accepting new connections.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2021-46828" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2021-46828",
                "title" : "In libtirpc before 1.3.3rc1, remote attackers could exhaust the file descriptors of a process that uses libtirpc because idle TCP connections are mishandled. This can, in turn, lead to an svc_run infinite loop without accepting new connections.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2021-46828" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/pcre2@10.32-3.el8_6?arch=x86_64&distro=rhel-8.10&upstream=pcre2-10.32-3.el8_6.src.rpm",
              "issues" : [ {
                "id" : "CVE-2022-1586",
                "title" : "An out-of-bounds read vulnerability was discovered in the PCRE2 library in the compile_xclass_matchingpath() function of the pcre2_jit_compile.c file. This involves a unicode property matching issue in JIT-compiled regular expressions. The issue occurs because the character was not fully read in case-less matching within JIT.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-1586" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-1587",
                "title" : "An out-of-bounds read vulnerability was discovered in the PCRE2 library in the get_recurse_data_length() function of the pcre2_jit_compile.c file. This issue affects recursions in JIT-compiled regular expressions caused by duplicate data transfers.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-1587" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2022-1586",
                "title" : "An out-of-bounds read vulnerability was discovered in the PCRE2 library in the compile_xclass_matchingpath() function of the pcre2_jit_compile.c file. This involves a unicode property matching issue in JIT-compiled regular expressions. The issue occurs because the character was not fully read in case-less matching within JIT.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-1586" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/bash@4.4.20-6.el8_10?arch=x86_64&distro=rhel-8.10&upstream=bash-4.4.20-6.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2022-3715",
                "source" : "redhat-csaf",
                "cvssScore" : 6.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-3715" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2022-3715",
                "source" : "redhat-csaf",
                "cvssScore" : 6.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-3715" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/gmp@6.1.2-11.el8?arch=x86_64&distro=rhel-8.10&epoch=1&upstream=gmp-6.1.2-11.el8.src.rpm",
              "issues" : [ {
                "id" : "CVE-2021-43618",
                "title" : "GNU Multiple Precision Arithmetic Library (GMP) through 6.2.1 has an mpz/inp_raw.c integer overflow and resultant buffer overflow via crafted input, leading to a segmentation fault on 32-bit platforms.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2021-43618" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2021-43618",
                "title" : "GNU Multiple Precision Arithmetic Library (GMP) through 6.2.1 has an mpz/inp_raw.c integer overflow and resultant buffer overflow via crafted input, leading to a segmentation fault on 32-bit platforms.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2021-43618" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libgcc@8.5.0-28.el8_10?arch=x86_64&distro=rhel-8.10&upstream=gcc-8.5.0-28.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2020-11023",
                "title" : "Potential XSS vulnerability in jQuery",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2020-11023" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2020-11023",
                "title" : "Potential XSS vulnerability in jQuery",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2020-11023" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libtasn1@4.13-5.el8_10?arch=x86_64&distro=rhel-8.10&upstream=libtasn1-4.13-5.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2021-46848",
                "title" : "GNU Libtasn1 before 4.19.0 has an ETYPE_OK off-by-one array size check that affects asn1_encode_simple_der.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2021-46848" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-12133",
                "title" : "Libtasn1: inefficient der decoding in libtasn1 leading to potential remote dos",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-12133" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2021-46848",
                "title" : "GNU Libtasn1 before 4.19.0 has an ETYPE_OK off-by-one array size check that affects asn1_encode_simple_der.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2021-46848" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libcom_err@1.45.6-7.el8_10?arch=x86_64&distro=rhel-8.10&upstream=e2fsprogs-1.45.6-7.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2022-1304",
                "title" : "An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a segmentation fault and possibly arbitrary code execution via a specially crafted filesystem.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-1304" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2022-1304",
                "title" : "An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a segmentation fault and possibly arbitrary code execution via a specially crafted filesystem.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-1304" ],
                "unique" : false
              }
            } ],
            "highestVulnerability" : {
              "id" : "CVE-2025-15467",
              "title" : "Stack buffer overflow in CMS (Auth)EnvelopedData parsing",
              "source" : "redhat-csaf",
              "cvssScore" : 9.8,
              "severity" : "CRITICAL",
              "cves" : [ "CVE-2025-15467" ],
              "unique" : false
            }
          }, {
            "ref" : "pkg:rpm/redhat/dnf-plugin-subscription-manager@1.28.44-1.el8_10?arch=x86_64&distro=rhel-8.10&upstream=subscription-manager-1.28.44-1.el8_10.src.rpm",
            "transitive" : [ {
              "ref" : "pkg:rpm/redhat/openssl-libs@1.1.1k-15.el8_6?arch=x86_64&distro=rhel-8.10&epoch=1&upstream=openssl-1.1.1k-15.el8_6.src.rpm",
              "issues" : [ {
                "id" : "CVE-2025-15467",
                "title" : "Stack buffer overflow in CMS (Auth)EnvelopedData parsing",
                "source" : "redhat-csaf",
                "cvssScore" : 9.8,
                "severity" : "CRITICAL",
                "cves" : [ "CVE-2025-15467" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-1473",
                "title" : "Resource leakage when decoding certificates and keys",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-1473" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-3358",
                "title" : "Using a Custom Cipher with NID_undef may lead to NULL encryption",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-3358" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-3602",
                "title" : "X.509 Email Address 4-byte Buffer Overflow",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-3602" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-3786",
                "title" : "X.509 Email Address Variable Length Buffer Overflow",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-3786" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-4450",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-4450" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-0215",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-0215" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-0216",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-0216" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-0217",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-0217" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-0401",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-0401" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-5363",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-5363" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-0286",
                "source" : "redhat-csaf",
                "cvssScore" : 7.4,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-0286" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-12797",
                "title" : "RFC7250 handshakes with unauthenticated servers don't abort as expected",
                "source" : "redhat-csaf",
                "cvssScore" : 7.4,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-12797" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-69419",
                "source" : "redhat-csaf",
                "cvssScore" : 7.4,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-69419" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-1292",
                "source" : "redhat-csaf",
                "cvssScore" : 6.7,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-1292" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-2068",
                "source" : "redhat-csaf",
                "cvssScore" : 6.7,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-2068" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-2650",
                "title" : "Possible DoS translating ASN.1 object identifiers",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-2650" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-6129",
                "title" : "POLY1305 MAC implementation corrupts vector registers on PowerPC",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-6129" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-69421",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-69421" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-11187",
                "title" : "Improper validation of PBMAC1 parameters in PKCS#12 MAC verification",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-11187" ],
                "unique" : false
              }, {
                "id" : "CVE-2020-1971",
                "title" : "EDIPARTYNAME NULL pointer dereference",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2020-1971" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-4304",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-4304" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-0464",
                "title" : "Excessive Resource Usage Verifying X.509 Policy Constraints",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-0464" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-6237",
                "title" : "Excessive time spent checking invalid RSA public keys",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-6237" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-5535",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-5535" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-6119",
                "title" : "Possible denial of service in X.509 name checks",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-6119" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-15468",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-15468" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-66199",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-66199" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-69420",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-69420" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-22796",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-22796" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-4741",
                "source" : "redhat-csaf",
                "cvssScore" : 5.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-4741" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-9230",
                "source" : "redhat-csaf",
                "cvssScore" : 5.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-9230" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-0727",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-0727" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-15469",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-15469" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-22795",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-22795" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-1343",
                "title" : "OCSP_basic_verify may incorrectly verify the response signing certificate",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-1343" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-2097",
                "title" : "AES OCB fails to encrypt some bytes",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-2097" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-0465",
                "title" : "Invalid certificate policies in leaf certificates are silently ignored",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-0465" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-0466",
                "title" : "Certificate policy check not enabled",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-0466" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-2975",
                "title" : "AES-SIV implementation ignores empty associated data entries",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-2975" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-3446",
                "title" : "Excessive time spent checking DH keys and parameters",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-3446" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-3817",
                "title" : "Excessive time spent checking DH q parameter value",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-3817" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-5678",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-5678" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-4603",
                "title" : "Excessive time spent checking DSA keys and parameters",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-4603" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-1255",
                "title" : "Input buffer over-read in AES-XTS implementation on 64 bit ARM",
                "source" : "redhat-csaf",
                "cvssScore" : 5.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-1255" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-4203",
                "source" : "redhat-csaf",
                "cvssScore" : 4.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-4203" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-68160",
                "source" : "redhat-csaf",
                "cvssScore" : 4.7,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-68160" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-69418",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-69418" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-2511",
                "source" : "redhat-csaf",
                "cvssScore" : 3.7,
                "severity" : "LOW",
                "cves" : [ "CVE-2024-2511" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2025-15467",
                "title" : "Stack buffer overflow in CMS (Auth)EnvelopedData parsing",
                "source" : "redhat-csaf",
                "cvssScore" : 9.8,
                "severity" : "CRITICAL",
                "cves" : [ "CVE-2025-15467" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libcurl@7.61.1-34.el8_10.11?arch=x86_64&distro=rhel-8.10&upstream=curl-7.61.1-34.el8_10.11.src.rpm",
              "issues" : [ {
                "id" : "CVE-2022-32207",
                "title" : "When curl < 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes the operation atomic by finalizing the operation with a rename from a temporary name to the final target file name.In that rename operation, it might accidentally *widen* the permissions for the target file, leaving the updated file accessible to more users than intended.",
                "source" : "redhat-csaf",
                "cvssScore" : 9.8,
                "severity" : "CRITICAL",
                "cves" : [ "CVE-2022-32207" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-22576",
                "title" : "An improper authentication vulnerability exists in curl 7.33.0 to and including 7.82.0 which might allow reuse OAUTH2-authenticated connections without properly making sure that the connection was authenticated with the same credentials as set for this transfer. This affects SASL-enabled protocols: SMPTP(S), IMAP(S), POP3(S) and LDAP(S) (openldap only).",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-22576" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-38545",
                "title" : "This flaw makes curl overflow a heap based buffer in the SOCKS5 proxy\nhandshake.\n\nWhen curl is asked to pass along the host name to the SOCKS5 proxy to allow\nthat to resolve the address instead of it getting done by curl itself, the\nmaximum length that host name can be is 255 bytes.\n\nIf the host name is detected to be longer, curl switches to local name\nresolving and instead passes on the resolved address only. Due to this bug,\nthe local variable that means \"let the host resolve the name\" could get the\nwrong value during a slow SOCKS5 handshake, and contrary to the intention,\ncopy the too long host name to the target buffer instead of copying just the\nresolved address there.\n\nThe target buffer being a heap based buffer, and the host name coming from the\nURL that curl has been told to operate with.",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-38545" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-27775",
                "title" : "An information disclosure vulnerability exists in curl 7.65.0 to 7.82.0 are vulnerable that by using an IPv6 address that was in the connection pool but with a different zone id it could reuse a connection instead.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-27775" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-27782",
                "title" : "libcurl would reuse a previously created connection even when a TLS or SSHrelated option had been changed that should have prohibited reuse.libcurl keeps previously used connections in a connection pool for subsequenttransfers to reuse if one of them matches the setup. However, several TLS andSSH settings were left out from the configuration match checks, making themmatch too easily.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-27782" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-2398",
                "title" : "HTTP/2 push headers memory-leak",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2398" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-32206",
                "title" : "curl < 7.84.0 supports \"chained\" HTTP compression algorithms, meaning that a serverresponse can be compressed multiple times and potentially with different algorithms. The number of acceptable \"links\" in this \"decompression chain\" was unbounded, allowing a malicious server to insert a virtually unlimited number of compression steps.The use of such a decompression chain could result in a \"malloc bomb\", makingcurl end up spending enormous amounts of allocated heap memory, or trying toand returning out of memory errors.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-32206" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-23916",
                "title" : "An allocation of resources without limits or throttling vulnerability exists in curl <v7.88.0 based on the \"chained\" HTTP compression algorithms, meaning that a server response can be compressed multiple times and potentially with differentalgorithms. The number of acceptable \"links\" in this \"decompression chain\" wascapped, but the cap was implemented on a per-header basis allowing a maliciousserver to insert a virtually unlimited number of compression steps simply byusing many headers. The use of such a decompression chain could result in a \"malloc bomb\", making curl end up spending enormous amounts of allocated heap memory, or trying to and returning out of memory errors.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-23916" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-43552",
                "title" : "A use after free vulnerability exists in curl <7.87.0. Curl can be asked to *tunnel* virtually all protocols it supports through an HTTP proxy. HTTP proxies can (and often do) deny such tunnel operations. When getting denied to tunnel the specific protocols SMB or TELNET, curl would use a heap-allocated struct after it had been freed, in its transfer shutdown code path.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-43552" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-27535",
                "title" : "An authentication bypass vulnerability exists in libcurl <8.0.0 in the FTP connection reuse feature that can result in wrong credentials being used during subsequent transfers. Previously created connections are kept in a connection pool for reuse if they match the current setup. However, certain FTP settings such as CURLOPT_FTP_ACCOUNT, CURLOPT_FTP_ALTERNATIVE_TO_USER, CURLOPT_FTP_SSL_CCC, and CURLOPT_USE_SSL were not included in the configuration match checks, causing them to match too easily. This could lead to libcurl using the wrong credentials when performing a transfer, potentially allowing unauthorized access to sensitive information.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-27535" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-27536",
                "title" : "An authentication bypass vulnerability exists libcurl <8.0.0 in the connection reuse feature which can reuse previously established connections with incorrect user permissions due to a failure to check for changes in the CURLOPT_GSSAPI_DELEGATION option. This vulnerability affects krb5/kerberos/negotiate/GSSAPI transfers and could potentially result in unauthorized access to sensitive information. The safest option is to not reuse connections if the CURLOPT_GSSAPI_DELEGATION option has been changed.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-27536" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-28321",
                "title" : "An improper certificate validation vulnerability exists in curl <v8.1.0 in the way it supports matching of wildcard patterns when listed as \"Subject Alternative Name\" in TLS server certificates. curl can be built to use its own name matching function for TLS rather than one provided by a TLS library. This private wildcard matching function would match IDN (International Domain Name) hosts incorrectly and could as a result accept patterns that otherwise should mismatch. IDN hostnames are converted to puny code before used for certificate checks. Puny coded names always start with `xn--` and should not be allowed to pattern match, but the wildcard check in curl could still check for `x*`, which would match even though the IDN name most likely contained nothing even resembling an `x`.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-28321" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-27538",
                "title" : "An authentication bypass vulnerability exists in libcurl prior to v8.0.0 where it reuses a previously established SSH connection despite the fact that an SSH option was modified, which should have prevented reuse. libcurl maintains a pool of previously used connections to reuse them for subsequent transfers if the configurations match. However, two SSH settings were omitted from the configuration check, allowing them to match easily, potentially leading to the reuse of an inappropriate connection.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-27538" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-32208",
                "title" : "When curl < 7.84.0 does FTP transfers secured by krb5, it handles message verification failures wrongly. This flaw makes it possible for a Man-In-The-Middle attack to go unnoticed and even allows it to inject data to the client.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-32208" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-46218",
                "title" : "This flaw allows a malicious HTTP server to set \"super cookies\" in curl that\nare then passed back to more origins than what is otherwise allowed or\npossible. This allows a site to set cookies that then would get sent to\ndifferent and unrelated sites and domains.\n\nIt could do this by exploiting a mixed case flaw in curl's function that\nverifies a given cookie domain against the Public Suffix List (PSL). For\nexample a cookie could be set with `domain=co.UK` when the URL used a lower\ncase hostname `curl.co.uk`, even though `co.uk` is listed as a PSL domain.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-46218" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-9086",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-9086" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-27774",
                "title" : "An insufficiently protected credentials vulnerability exists in curl 4.9 to and include curl 7.82.0 are affected that could allow an attacker to extract credentials when follows HTTP(S) redirects is used with authentication could leak credentials to other services that exist on different protocols or port numbers.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-27774" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-32221",
                "title" : "When doing HTTP(S) transfers, libcurl might erroneously use the read callback (`CURLOPT_READFUNCTION`) to ask for data to send, even when the `CURLOPT_POSTFIELDS` option has been set, if the same handle previously was used to issue a `PUT` request which used that callback. This flaw may surprise the application and cause it to misbehave and either send off the wrong data or use memory after free or similar in the subsequent `POST` request. The problem exists in the logic for a reused handle when it is changed from a PUT to a POST.",
                "source" : "redhat-csaf",
                "cvssScore" : 4.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-32221" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-27776",
                "title" : "A insufficiently protected credentials vulnerability in fixed in curl 7.83.0 might leak authentication or cookie header data on HTTP redirects to the same host but another port number.",
                "source" : "redhat-csaf",
                "cvssScore" : 4.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-27776" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-27533",
                "title" : "A vulnerability in input validation exists in curl <8.0 during communication using the TELNET protocol may allow an attacker to pass on maliciously crafted user name and \"telnet options\" during server negotiation. The lack of proper input scrubbing allows an attacker to send content or perform option negotiation without the application's intent. This vulnerability could be exploited if an application allows user input, thereby enabling attackers to execute arbitrary code on the system.",
                "source" : "redhat-csaf",
                "cvssScore" : 4.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-27533" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-27534",
                "title" : "A path traversal vulnerability exists in curl <8.0.0 SFTP implementation causes the tilde (~) character to be wrongly replaced when used as a prefix in the first path element, in addition to its intended use as the first element to indicate a path relative to the user's home directory. Attackers can exploit this flaw to bypass filtering or execute arbitrary code by crafting a path like /~2/foo while accessing a server with a specific user.",
                "source" : "redhat-csaf",
                "cvssScore" : 3.7,
                "severity" : "LOW",
                "cves" : [ "CVE-2023-27534" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-28322",
                "title" : "An information disclosure vulnerability exists in curl <v8.1.0 when doing HTTP(S) transfers, libcurl might erroneously use the read callback (`CURLOPT_READFUNCTION`) to ask for data to send, even when the `CURLOPT_POSTFIELDS` option has been set, if the same handle previously wasused to issue a `PUT` request which used that callback. This flaw may surprise the application and cause it to misbehave and either send off the wrong data or use memory after free or similar in the second transfer. The problem exists in the logic for a reused handle when it is (expected to be) changed from a PUT to a POST.",
                "source" : "redhat-csaf",
                "cvssScore" : 3.7,
                "severity" : "LOW",
                "cves" : [ "CVE-2023-28322" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-38546",
                "source" : "redhat-csaf",
                "cvssScore" : 3.7,
                "severity" : "LOW",
                "cves" : [ "CVE-2023-38546" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-35252",
                "title" : "When curl is used to retrieve and parse cookies from a HTTP(S) server, itaccepts cookies using control codes that when later are sent back to a HTTPserver might make the server return 400 responses. Effectively allowing a\"sister site\" to deny service to all siblings.",
                "source" : "redhat-csaf",
                "cvssScore" : 3.1,
                "severity" : "LOW",
                "cves" : [ "CVE-2022-35252" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2022-32207",
                "title" : "When curl < 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes the operation atomic by finalizing the operation with a rename from a temporary name to the final target file name.In that rename operation, it might accidentally *widen* the permissions for the target file, leaving the updated file accessible to more users than intended.",
                "source" : "redhat-csaf",
                "cvssScore" : 9.8,
                "severity" : "CRITICAL",
                "cves" : [ "CVE-2022-32207" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/curl@7.61.1-34.el8_10.11?arch=x86_64&distro=rhel-8.10&upstream=curl-7.61.1-34.el8_10.11.src.rpm",
              "issues" : [ {
                "id" : "CVE-2022-32207",
                "title" : "When curl < 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes the operation atomic by finalizing the operation with a rename from a temporary name to the final target file name.In that rename operation, it might accidentally *widen* the permissions for the target file, leaving the updated file accessible to more users than intended.",
                "source" : "redhat-csaf",
                "cvssScore" : 9.8,
                "severity" : "CRITICAL",
                "cves" : [ "CVE-2022-32207" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-22576",
                "title" : "An improper authentication vulnerability exists in curl 7.33.0 to and including 7.82.0 which might allow reuse OAUTH2-authenticated connections without properly making sure that the connection was authenticated with the same credentials as set for this transfer. This affects SASL-enabled protocols: SMPTP(S), IMAP(S), POP3(S) and LDAP(S) (openldap only).",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-22576" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-38545",
                "title" : "This flaw makes curl overflow a heap based buffer in the SOCKS5 proxy\nhandshake.\n\nWhen curl is asked to pass along the host name to the SOCKS5 proxy to allow\nthat to resolve the address instead of it getting done by curl itself, the\nmaximum length that host name can be is 255 bytes.\n\nIf the host name is detected to be longer, curl switches to local name\nresolving and instead passes on the resolved address only. Due to this bug,\nthe local variable that means \"let the host resolve the name\" could get the\nwrong value during a slow SOCKS5 handshake, and contrary to the intention,\ncopy the too long host name to the target buffer instead of copying just the\nresolved address there.\n\nThe target buffer being a heap based buffer, and the host name coming from the\nURL that curl has been told to operate with.",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-38545" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-15079",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-15079" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-27775",
                "title" : "An information disclosure vulnerability exists in curl 7.65.0 to 7.82.0 are vulnerable that by using an IPv6 address that was in the connection pool but with a different zone id it could reuse a connection instead.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-27775" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-27782",
                "title" : "libcurl would reuse a previously created connection even when a TLS or SSHrelated option had been changed that should have prohibited reuse.libcurl keeps previously used connections in a connection pool for subsequenttransfers to reuse if one of them matches the setup. However, several TLS andSSH settings were left out from the configuration match checks, making themmatch too easily.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-27782" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-2398",
                "title" : "HTTP/2 push headers memory-leak",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2398" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-13034",
                "source" : "redhat-csaf",
                "cvssScore" : 6.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-13034" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-14819",
                "source" : "redhat-csaf",
                "cvssScore" : 6.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-14819" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-1965",
                "source" : "redhat-csaf",
                "cvssScore" : 6.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-1965" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-32206",
                "title" : "curl < 7.84.0 supports \"chained\" HTTP compression algorithms, meaning that a serverresponse can be compressed multiple times and potentially with different algorithms. The number of acceptable \"links\" in this \"decompression chain\" was unbounded, allowing a malicious server to insert a virtually unlimited number of compression steps.The use of such a decompression chain could result in a \"malloc bomb\", makingcurl end up spending enormous amounts of allocated heap memory, or trying toand returning out of memory errors.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-32206" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-23916",
                "title" : "An allocation of resources without limits or throttling vulnerability exists in curl <v7.88.0 based on the \"chained\" HTTP compression algorithms, meaning that a server response can be compressed multiple times and potentially with differentalgorithms. The number of acceptable \"links\" in this \"decompression chain\" wascapped, but the cap was implemented on a per-header basis allowing a maliciousserver to insert a virtually unlimited number of compression steps simply byusing many headers. The use of such a decompression chain could result in a \"malloc bomb\", making curl end up spending enormous amounts of allocated heap memory, or trying to and returning out of memory errors.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-23916" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-14524",
                "title" : "bearer token leak on cross-protocol redirect",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-14524" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-3784",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-3784" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-3805",
                "source" : "redhat-csaf",
                "cvssScore" : 6.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-3805" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-43552",
                "title" : "A use after free vulnerability exists in curl <7.87.0. Curl can be asked to *tunnel* virtually all protocols it supports through an HTTP proxy. HTTP proxies can (and often do) deny such tunnel operations. When getting denied to tunnel the specific protocols SMB or TELNET, curl would use a heap-allocated struct after it had been freed, in its transfer shutdown code path.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-43552" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-27535",
                "title" : "An authentication bypass vulnerability exists in libcurl <8.0.0 in the FTP connection reuse feature that can result in wrong credentials being used during subsequent transfers. Previously created connections are kept in a connection pool for reuse if they match the current setup. However, certain FTP settings such as CURLOPT_FTP_ACCOUNT, CURLOPT_FTP_ALTERNATIVE_TO_USER, CURLOPT_FTP_SSL_CCC, and CURLOPT_USE_SSL were not included in the configuration match checks, causing them to match too easily. This could lead to libcurl using the wrong credentials when performing a transfer, potentially allowing unauthorized access to sensitive information.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-27535" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-27536",
                "title" : "An authentication bypass vulnerability exists libcurl <8.0.0 in the connection reuse feature which can reuse previously established connections with incorrect user permissions due to a failure to check for changes in the CURLOPT_GSSAPI_DELEGATION option. This vulnerability affects krb5/kerberos/negotiate/GSSAPI transfers and could potentially result in unauthorized access to sensitive information. The safest option is to not reuse connections if the CURLOPT_GSSAPI_DELEGATION option has been changed.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-27536" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-28321",
                "title" : "An improper certificate validation vulnerability exists in curl <v8.1.0 in the way it supports matching of wildcard patterns when listed as \"Subject Alternative Name\" in TLS server certificates. curl can be built to use its own name matching function for TLS rather than one provided by a TLS library. This private wildcard matching function would match IDN (International Domain Name) hosts incorrectly and could as a result accept patterns that otherwise should mismatch. IDN hostnames are converted to puny code before used for certificate checks. Puny coded names always start with `xn--` and should not be allowed to pattern match, but the wildcard check in curl could still check for `x*`, which would match even though the IDN name most likely contained nothing even resembling an `x`.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-28321" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-10966",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-10966" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-3783",
                "source" : "redhat-csaf",
                "cvssScore" : 5.7,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-3783" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-27538",
                "title" : "An authentication bypass vulnerability exists in libcurl prior to v8.0.0 where it reuses a previously established SSH connection despite the fact that an SSH option was modified, which should have prevented reuse. libcurl maintains a pool of previously used connections to reuse them for subsequent transfers if the configurations match. However, two SSH settings were omitted from the configuration check, allowing them to match easily, potentially leading to the reuse of an inappropriate connection.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-27538" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-32208",
                "title" : "When curl < 7.84.0 does FTP transfers secured by krb5, it handles message verification failures wrongly. This flaw makes it possible for a Man-In-The-Middle attack to go unnoticed and even allows it to inject data to the client.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-32208" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-46218",
                "title" : "This flaw allows a malicious HTTP server to set \"super cookies\" in curl that\nare then passed back to more origins than what is otherwise allowed or\npossible. This allows a site to set cookies that then would get sent to\ndifferent and unrelated sites and domains.\n\nIt could do this by exploiting a mixed case flaw in curl's function that\nverifies a given cookie domain against the Public Suffix List (PSL). For\nexample a cookie could be set with `domain=co.UK` when the URL used a lower\ncase hostname `curl.co.uk`, even though `co.uk` is listed as a PSL domain.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-46218" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-9086",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-9086" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-27774",
                "title" : "An insufficiently protected credentials vulnerability exists in curl 4.9 to and include curl 7.82.0 are affected that could allow an attacker to extract credentials when follows HTTP(S) redirects is used with authentication could leak credentials to other services that exist on different protocols or port numbers.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-27774" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-32221",
                "title" : "When doing HTTP(S) transfers, libcurl might erroneously use the read callback (`CURLOPT_READFUNCTION`) to ask for data to send, even when the `CURLOPT_POSTFIELDS` option has been set, if the same handle previously was used to issue a `PUT` request which used that callback. This flaw may surprise the application and cause it to misbehave and either send off the wrong data or use memory after free or similar in the subsequent `POST` request. The problem exists in the logic for a reused handle when it is changed from a PUT to a POST.",
                "source" : "redhat-csaf",
                "cvssScore" : 4.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-32221" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-10148",
                "source" : "redhat-csaf",
                "cvssScore" : 4.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-10148" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-14017",
                "source" : "redhat-csaf",
                "cvssScore" : 4.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-14017" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-15224",
                "source" : "redhat-csaf",
                "cvssScore" : 4.7,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-15224" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-27776",
                "title" : "A insufficiently protected credentials vulnerability in fixed in curl 7.83.0 might leak authentication or cookie header data on HTTP redirects to the same host but another port number.",
                "source" : "redhat-csaf",
                "cvssScore" : 4.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-27776" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-27533",
                "title" : "A vulnerability in input validation exists in curl <8.0 during communication using the TELNET protocol may allow an attacker to pass on maliciously crafted user name and \"telnet options\" during server negotiation. The lack of proper input scrubbing allows an attacker to send content or perform option negotiation without the application's intent. This vulnerability could be exploited if an application allows user input, thereby enabling attackers to execute arbitrary code on the system.",
                "source" : "redhat-csaf",
                "cvssScore" : 4.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-27533" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-27534",
                "title" : "A path traversal vulnerability exists in curl <8.0.0 SFTP implementation causes the tilde (~) character to be wrongly replaced when used as a prefix in the first path element, in addition to its intended use as the first element to indicate a path relative to the user's home directory. Attackers can exploit this flaw to bypass filtering or execute arbitrary code by crafting a path like /~2/foo while accessing a server with a specific user.",
                "source" : "redhat-csaf",
                "cvssScore" : 3.7,
                "severity" : "LOW",
                "cves" : [ "CVE-2023-27534" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-28322",
                "title" : "An information disclosure vulnerability exists in curl <v8.1.0 when doing HTTP(S) transfers, libcurl might erroneously use the read callback (`CURLOPT_READFUNCTION`) to ask for data to send, even when the `CURLOPT_POSTFIELDS` option has been set, if the same handle previously wasused to issue a `PUT` request which used that callback. This flaw may surprise the application and cause it to misbehave and either send off the wrong data or use memory after free or similar in the second transfer. The problem exists in the logic for a reused handle when it is (expected to be) changed from a PUT to a POST.",
                "source" : "redhat-csaf",
                "cvssScore" : 3.7,
                "severity" : "LOW",
                "cves" : [ "CVE-2023-28322" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-38546",
                "source" : "redhat-csaf",
                "cvssScore" : 3.7,
                "severity" : "LOW",
                "cves" : [ "CVE-2023-38546" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-35252",
                "title" : "When curl is used to retrieve and parse cookies from a HTTP(S) server, itaccepts cookies using control codes that when later are sent back to a HTTPserver might make the server return 400 responses. Effectively allowing a\"sister site\" to deny service to all siblings.",
                "source" : "redhat-csaf",
                "cvssScore" : 3.1,
                "severity" : "LOW",
                "cves" : [ "CVE-2022-35252" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2022-32207",
                "title" : "When curl < 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes the operation atomic by finalizing the operation with a rename from a temporary name to the final target file name.In that rename operation, it might accidentally *widen* the permissions for the target file, leaving the updated file accessible to more users than intended.",
                "source" : "redhat-csaf",
                "cvssScore" : 9.8,
                "severity" : "CRITICAL",
                "cves" : [ "CVE-2022-32207" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libxml2@2.9.7-21.el8_10.3?arch=x86_64&distro=rhel-8.10&upstream=libxml2-2.9.7-21.el8_10.3.src.rpm",
              "issues" : [ {
                "id" : "CVE-2024-40896",
                "title" : "In libxml2 2.11 before 2.11.9, 2.12 before 2.12.9, and 2.13 before 2.13.3, the SAX parser can produce events for external entities even if custom SAX handlers try to override entity content (by setting \"checked\"). This makes classic XXE attacks possible.",
                "source" : "redhat-csaf",
                "cvssScore" : 9.1,
                "severity" : "CRITICAL",
                "cves" : [ "CVE-2024-40896" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-49794",
                "title" : "Libxml: heap use after free (uaf) leads to denial of service (dos)",
                "source" : "redhat-csaf",
                "cvssScore" : 9.1,
                "severity" : "CRITICAL",
                "cves" : [ "CVE-2025-49794" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-49796",
                "title" : "Libxml: type confusion leads to denial of service (dos)",
                "source" : "redhat-csaf",
                "cvssScore" : 9.1,
                "severity" : "CRITICAL",
                "cves" : [ "CVE-2025-49796" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-56171",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-56171" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-40304",
                "title" : "An issue was discovered in libxml2 before 2.10.3. Certain invalid XML entity definitions can corrupt a hash table key, potentially leading to subsequent logic errors. In one case, a double-free can be provoked.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-40304" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-24928",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-24928" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-7425",
                "title" : "Libxslt: heap use-after-free in libxslt caused by atype corruption in xmlattrptr",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-7425" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-40303",
                "title" : "An issue was discovered in libxml2 before 2.10.3. When parsing a multi-gigabyte XML document with the XML_PARSE_HUGE parser option enabled, several integer counters can overflow. This results in an attempt to access an array at a negative 2GB offset, typically leading to a segmentation fault.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-40303" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-25062",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-25062" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-32415",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-32415" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-49795",
                "title" : "Libxml: null pointer dereference leads to denial of service (dos)",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-49795" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-6021",
                "title" : "Libxml2: integer overflow in xmlbuildqname() leads to stack buffer overflow in libxml2",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-6021" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-7424",
                "title" : "Libxslt: type confusion in xmlnode.psvi between stylesheet and source nodes",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-7424" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-29824",
                "title" : "In libxml2 before 2.9.14, several buffer handling functions in buf.c (xmlBuf*) and tree.c (xmlBuffer*) don't check for integer overflows. This can result in out-of-bounds memory writes. Exploitation requires a victim to open a crafted, multi-gigabyte XML file. Other software using libxml2's buffer functions, for example libxslt through 1.1.35, is affected as well.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.4,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-29824" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-39615",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-39615" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-9714",
                "source" : "redhat-csaf",
                "cvssScore" : 6.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-9714" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-49043",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-49043" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-28484",
                "title" : "In libxml2 before 2.10.4, parsing of certain invalid XSD schemas can lead to a NULL pointer dereference and subsequently a segfault. This occurs in xmlSchemaFixupComplexType in xmlschemas.c.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-28484" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-29469",
                "title" : "An issue was discovered in libxml2 before 2.10.4. When hashing empty dict strings in a crafted XML document, xmlDictComputeFastKey in dict.c can produce non-deterministic values, leading to various logic and memory errors, such as a double free. This behavior occurs because there is an attempt to use the first byte of an empty string, and any value is possible (not solely the '\\0' value).",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-29469" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-32414",
                "source" : "redhat-csaf",
                "cvssScore" : 5.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-32414" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-6170",
                "title" : "Libxml2: stack buffer overflow in xmllint interactive shell command handling",
                "source" : "redhat-csaf",
                "cvssScore" : 2.5,
                "severity" : "LOW",
                "cves" : [ "CVE-2025-6170" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2024-40896",
                "title" : "In libxml2 2.11 before 2.11.9, 2.12 before 2.12.9, and 2.13 before 2.13.3, the SAX parser can produce events for external entities even if custom SAX handlers try to override entity content (by setting \"checked\"). This makes classic XXE attacks possible.",
                "source" : "redhat-csaf",
                "cvssScore" : 9.1,
                "severity" : "CRITICAL",
                "cves" : [ "CVE-2024-40896" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/krb5-libs@1.18.2-32.el8_10?arch=x86_64&distro=rhel-8.10&upstream=krb5-1.18.2-32.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2024-3596",
                "source" : "redhat-csaf",
                "cvssScore" : 9.0,
                "severity" : "CRITICAL",
                "cves" : [ "CVE-2024-3596" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-42898",
                "title" : "PAC parsing in MIT Kerberos 5 (aka krb5) before 1.19.4 and 1.20.x before 1.20.1 has integer overflows that may lead to remote code execution (in KDC, kadmind, or a GSS or Kerberos application server) on 32-bit platforms (which have a resultant heap-based buffer overflow), and cause a denial of service on other platforms. This occurs in krb5_pac_parse in lib/krb5/krb/pac.c. Heimdal before 7.7.1 has \"a similar bug.\"",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-42898" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-39975",
                "title" : "kdc/do_tgs_req.c in MIT Kerberos 5 (aka krb5) 1.21 before 1.21.2 has a double free that is reachable if an authenticated user can trigger an authorization-data handling failure. Incorrect data is copied from one ticket to another.",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-39975" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-26462",
                "title" : "Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/kdc/ndr.c.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-26462" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-37370",
                "title" : "In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can modify the plaintext Extra Count field of a confidential GSS krb5 wrap token, causing the unwrapped token to appear truncated to the application.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-37370" ],
                "unique" : false
              }, {
                "id" : "CVE-2020-17049",
                "title" : "Kerberos KDC Security Feature Bypass Vulnerability",
                "source" : "redhat-csaf",
                "cvssScore" : 7.2,
                "severity" : "HIGH",
                "cves" : [ "CVE-2020-17049" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-36054",
                "title" : "lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) before 1.20.2 and 1.21.x before 1.21.1 frees an uninitialized pointer. A remote authenticated user can trigger a kadmind crash. This occurs because _xdr_kadm5_principal_ent_rec does not validate the relationship between n_key_data and the key_data array count.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-36054" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-37371",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-37371" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-24528",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-24528" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-26458",
                "title" : "Kerberos 5 (aka krb5) 1.21.2 contains a memory leak in /krb5/src/lib/rpc/pmap_rmt.c.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-26458" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-26461",
                "title" : "Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/lib/gssapi/krb5/k5sealv3.c.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-26461" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-3576",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-3576" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2024-3596",
                "source" : "redhat-csaf",
                "cvssScore" : 9.0,
                "severity" : "CRITICAL",
                "cves" : [ "CVE-2024-3596" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/python3-setuptools-wheel@39.2.0-9.el8_10?arch=noarch&distro=rhel-8.10&upstream=python-setuptools-39.2.0-9.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2024-6345",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-6345" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-47273",
                "title" : "setuptools has a path traversal vulnerability in PackageIndex.download that leads to Arbitrary File Write",
                "source" : "redhat-csaf",
                "cvssScore" : 7.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-47273" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-40897",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-40897" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2024-6345",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-6345" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/glibc-minimal-langpack@2.28-251.el8_10.31?arch=x86_64&distro=rhel-8.10&upstream=glibc-2.28-251.el8_10.31.src.rpm",
              "issues" : [ {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0861",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-0861" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4911",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-4911" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33599",
                "title" : "nscd: Stack-based buffer overflow in netgroup cache",
                "source" : "redhat-csaf",
                "cvssScore" : 7.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-33599" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-4802",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-4802" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4527",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4527" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4806",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4806" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4813",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4813" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-5702",
                "title" : "The strcmp implementation optimized for the Power10 processor in the GNU C Library version 2.39 and later writes to vector registers v20 to v31 without saving contents from the caller (those registers are defined as non-volatile registers by the powerpc64le ABI), resulting in overwriting of its contents and potentially altering control flow of the caller, or leaking the input strings to the function to other parts of the program.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-5702" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-0395",
                "title" : "When the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-0395" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33600",
                "title" : "nscd: Null pointer crashes after notfound response",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33600" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0915",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-0915" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-8058",
                "source" : "redhat-csaf",
                "cvssScore" : 4.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-8058" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33601",
                "title" : "nscd: netgroup cache may terminate daemon on memory allocation failure",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33601" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33602",
                "title" : "nscd: netgroup cache assumes NSS callback uses in-buffer strings",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33602" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/glibc@2.28-251.el8_10.31?arch=x86_64&distro=rhel-8.10&upstream=glibc-2.28-251.el8_10.31.src.rpm",
              "issues" : [ {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0861",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-0861" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4911",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-4911" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33599",
                "title" : "nscd: Stack-based buffer overflow in netgroup cache",
                "source" : "redhat-csaf",
                "cvssScore" : 7.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-33599" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-4802",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-4802" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4527",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4527" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4806",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4806" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4813",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4813" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-15281",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-15281" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-5702",
                "title" : "The strcmp implementation optimized for the Power10 processor in the GNU C Library version 2.39 and later writes to vector registers v20 to v31 without saving contents from the caller (those registers are defined as non-volatile registers by the powerpc64le ABI), resulting in overwriting of its contents and potentially altering control flow of the caller, or leaking the input strings to the function to other parts of the program.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-5702" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-0395",
                "title" : "When the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-0395" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33600",
                "title" : "nscd: Null pointer crashes after notfound response",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33600" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0915",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-0915" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-8058",
                "source" : "redhat-csaf",
                "cvssScore" : 4.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-8058" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33601",
                "title" : "nscd: netgroup cache may terminate daemon on memory allocation failure",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33601" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33602",
                "title" : "nscd: netgroup cache assumes NSS callback uses in-buffer strings",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33602" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/python3-dateutil@2.6.1-6.el8?arch=noarch&distro=rhel-8.10&epoch=1&upstream=python-dateutil-2.6.1-6.el8.src.rpm",
              "issues" : [ {
                "id" : "CVE-2018-3258",
                "title" : "Vulnerability in the MySQL Connectors component of Oracle MySQL (subcomponent: Connector/J). Supported versions that are affected are 8.0.12 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Connectors. Successful attacks of this vulnerability can result in takeover of MySQL Connectors. CVSS 3.0 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2018-3258" ],
                "unique" : false
              }, {
                "id" : "CVE-2020-10968",
                "title" : "FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.aoju.bus.proxy.provider.remoting.RmiProvider (aka bus-proxy).",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2020-10968" ],
                "unique" : false
              }, {
                "id" : "CVE-2020-14334",
                "title" : "A flaw was found in Red Hat Satellite 6 which allows privileged attacker to read cache files. These cache credentials could help attacker to gain complete control of the Satellite instance.",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2020-14334" ],
                "unique" : false
              }, {
                "id" : "CVE-2020-10969",
                "title" : "FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to javax.swing.JEditorPane.",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2020-10969" ],
                "unique" : false
              }, {
                "id" : "CVE-2020-11619",
                "title" : "FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.springframework.aop.config.MethodLocatingFactoryBean (aka spring-aop).",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2020-11619" ],
                "unique" : false
              }, {
                "id" : "CVE-2020-14061",
                "title" : "FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction between serialization gadgets and typing, related to oracle.jms.AQjmsQueueConnectionFactory, oracle.jms.AQjmsXATopicConnectionFactory, oracle.jms.AQjmsTopicConnectionFactory, oracle.jms.AQjmsXAQueueConnectionFactory, and oracle.jms.AQjmsXAConnectionFactory (aka weblogic/oracle-aqjms).",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2020-14061" ],
                "unique" : false
              }, {
                "id" : "CVE-2020-14062",
                "title" : "FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction between serialization gadgets and typing, related to com.sun.org.apache.xalan.internal.lib.sql.JNDIConnectionPool (aka xalan2).",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2020-14062" ],
                "unique" : false
              }, {
                "id" : "CVE-2020-14195",
                "title" : "FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction between serialization gadgets and typing, related to org.jsecurity.realm.jndi.JndiRealmFactory (aka org.jsecurity).",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2020-14195" ],
                "unique" : false
              }, {
                "id" : "CVE-2020-8840",
                "title" : "FasterXML jackson-databind 2.0.0 through 2.9.10.2 lacks certain xbean-reflect/JNDI blocking, as demonstrated by org.apache.xbean.propertyeditor.JndiConverter.",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2020-8840" ],
                "unique" : false
              }, {
                "id" : "CVE-2020-9546",
                "title" : "FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.hadoop.shaded.com.zaxxer.hikari.HikariConfig (aka shaded hikari-config).",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2020-9546" ],
                "unique" : false
              }, {
                "id" : "CVE-2020-9547",
                "title" : "FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to com.ibatis.sqlmap.engine.transaction.jta.JtaTransactionConfig (aka ibatis-sqlmap).",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2020-9547" ],
                "unique" : false
              }, {
                "id" : "CVE-2020-9548",
                "title" : "FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to br.com.anteros.dbcp.AnterosDBCPConfig (aka anteros-core).",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2020-9548" ],
                "unique" : false
              }, {
                "id" : "CVE-2019-12086",
                "title" : "A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.x before 2.9.9. When Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint, the service has the mysql-connector-java jar (8.0.14 or earlier) in the classpath, and an attacker can host a crafted MySQL server reachable by the victim, an attacker can send a crafted JSON message that allows them to read arbitrary local files on the server. This occurs because of missing com.mysql.cj.jdbc.admin.MiniAdmin validation.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2019-12086" ],
                "unique" : false
              }, {
                "id" : "CVE-2020-14380",
                "title" : "An account takeover flaw was found in Red Hat Satellite 6.7.2 onward. A potential attacker with proper authentication to the relevant external authentication source (SSO or Open ID) can claim the privileges of already existing local users of Satellite.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2020-14380" ],
                "unique" : false
              }, {
                "id" : "CVE-2020-7238",
                "title" : "Netty 4.1.43.Final allows HTTP Request Smuggling because it mishandles Transfer-Encoding whitespace (such as a [space]Transfer-Encoding:chunked line) and a later Content-Length header. This issue exists because of an incomplete fix for CVE-2019-16869.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2020-7238" ],
                "unique" : false
              }, {
                "id" : "CVE-2020-7943",
                "title" : "Puppet Server and PuppetDB provide useful performance and debugging information via their metrics API endpoints. For PuppetDB this may contain things like hostnames. Puppet Server reports resource names and titles for defined types (which may contain sensitive information) as well as function names and class names. Previously, these endpoints were open to the local network. PE 2018.1.13 & 2019.5.0, Puppet Server 6.9.2 & 5.3.12, and PuppetDB 6.9.1 & 5.2.13 disable trapperkeeper-metrics /v1 metrics API and only allows /v2 access on localhost by default. This affects software versions: Puppet Enterprise 2018.1.x stream prior to 2018.1.13 Puppet Enterprise prior to 2019.5.0 Puppet Server prior to 6.9.2 Puppet Server prior to 5.3.12 PuppetDB prior to 6.9.1 PuppetDB prior to 5.2.13 Resolved in: Puppet Enterprise 2018.1.13 Puppet Enterprise 2019.5.0 Puppet Server 6.9.2 Puppet Server 5.3.12 PuppetDB 6.9.1 PuppetDB 5.2.13",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2020-7943" ],
                "unique" : false
              }, {
                "id" : "CVE-2020-8184",
                "title" : "A reliance on cookies without validation/integrity check security vulnerability exists in rack < 2.2.3, rack < 2.1.4 that makes it is possible for an attacker to forge a secure or host-only cookie prefix.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2020-8184" ],
                "unique" : false
              }, {
                "id" : "CVE-2019-10086",
                "title" : "In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added which allows suppressing the ability for an attacker to access the classloader via the class property available on all Java objects. We, however were not using this by default characteristic of the PropertyUtilsBean.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.3,
                "severity" : "HIGH",
                "cves" : [ "CVE-2019-10086" ],
                "unique" : false
              }, {
                "id" : "CVE-2020-8185",
                "title" : "A denial of service vulnerability exists in Rails <6.0.3.2 that allowed an untrusted user to run any pending migrations on a Rails app running in production.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2020-8185" ],
                "unique" : false
              }, {
                "id" : "CVE-2019-0231",
                "title" : "Apache MINA SSLFilter security Issue",
                "source" : "redhat-csaf",
                "cvssScore" : 6.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2019-0231" ],
                "unique" : false
              }, {
                "id" : "CVE-2019-10219",
                "title" : "A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2019-10219" ],
                "unique" : false
              }, {
                "id" : "CVE-2020-7942",
                "title" : "Previously, Puppet operated on a model that a node with a valid certificate was entitled to all information in the system and that a compromised certificate allowed access to everything in the infrastructure. When a node's catalog falls back to the `default` node, the catalog can be retrieved for a different node by modifying facts for the Puppet run. This issue can be mitigated by setting `strict_hostname_checking = true` in `puppet.conf` on your Puppet master. Puppet 6.13.0 and 5.5.19 changes the default behavior for strict_hostname_checking from false to true. It is recommended that Puppet Open Source and Puppet Enterprise users that are not upgrading still set strict_hostname_checking to true to ensure secure behavior. Affected software versions: Puppet 6.x prior to 6.13.0 Puppet Agent 6.x prior to 6.13.0 Puppet 5.5.x prior to 5.5.19 Puppet Agent 5.5.x prior to 5.5.19 Resolved in: Puppet 6.13.0 Puppet Agent 6.13.0 Puppet 5.5.19 Puppet Agent 5.5.19",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2020-7942" ],
                "unique" : false
              }, {
                "id" : "CVE-2019-16782",
                "title" : "Possible Information Leak / Session Hijack Vulnerability in Rack",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2019-16782" ],
                "unique" : false
              }, {
                "id" : "CVE-2020-8161",
                "title" : "A directory traversal vulnerability exists in rack < 2.2.0 that allows an attacker perform directory traversal vulnerability in the Rack::Directory app that is bundled with Rack which could result in information disclosure.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2020-8161" ],
                "unique" : false
              }, {
                "id" : "CVE-2020-5216",
                "title" : "Limited header injection when using dynamic overrides with user input in RubyGems secure_headers",
                "source" : "redhat-csaf",
                "cvssScore" : 5.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2020-5216" ],
                "unique" : false
              }, {
                "id" : "CVE-2020-5217",
                "title" : "Directive injection when using dynamic overrides with user input in RubyGems secure_headers",
                "source" : "redhat-csaf",
                "cvssScore" : 5.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2020-5217" ],
                "unique" : false
              }, {
                "id" : "CVE-2020-10693",
                "title" : "A flaw was found in Hibernate Validator version 6.1.2.Final. A bug in the message interpolation processor enables invalid EL expressions to be evaluated as if they were valid. This flaw allows attackers to bypass input sanitation (escaping, stripping) controls that developers may have put in place when handling user-controlled data in error messages.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2020-10693" ],
                "unique" : false
              }, {
                "id" : "CVE-2017-17718",
                "title" : "The Net::LDAP (aka net-ldap) gem before 0.16.0 for Ruby has Missing SSL Certificate Validation.",
                "source" : "redhat-csaf",
                "cvssScore" : 4.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2017-17718" ],
                "unique" : false
              }, {
                "id" : "CVE-2019-12781",
                "title" : "An issue was discovered in Django 1.11 before 1.11.22, 2.1 before 2.1.10, and 2.2 before 2.2.3. An HTTP request is not redirected to HTTPS when the SECURE_PROXY_SSL_HEADER and SECURE_SSL_REDIRECT settings are used, and the proxy connects to Django via HTTPS. In other words, django.http.HttpRequest.scheme has incorrect behavior when a client uses HTTP.",
                "source" : "redhat-csaf",
                "cvssScore" : 4.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2019-12781" ],
                "unique" : false
              }, {
                "id" : "CVE-2020-10716",
                "title" : "A flaw was found in Red Hat Satellite's Job Invocation, where the \"User Input\" entry was not properly restricted to the view. This flaw allows a malicious Satellite user to scan through the Job Invocation, with the ability to search for passwords and other sensitive data. This flaw affects tfm-rubygem-foreman_ansible versions before 4.0.3.4.",
                "source" : "redhat-csaf",
                "cvssScore" : 4.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2020-10716" ],
                "unique" : false
              }, {
                "id" : "CVE-2018-1000119",
                "title" : "Sinatra rack-protection versions 1.5.4 and 2.0.0.rc3 and earlier contains a timing attack vulnerability in the CSRF token checking that can result in signatures can be exposed. This attack appear to be exploitable via network connectivity to the ruby application. This vulnerability appears to have been fixed in 1.5.5 and 2.0.0.",
                "source" : "redhat-csaf",
                "cvssScore" : 3.7,
                "severity" : "LOW",
                "cves" : [ "CVE-2018-1000119" ],
                "unique" : false
              }, {
                "id" : "CVE-2018-11751",
                "title" : "Previous versions of Puppet Agent didn't verify the peer in the SSL connection prior to downloading the CRL. This issue is resolved in Puppet Agent 6.4.0.",
                "source" : "redhat-csaf",
                "cvssScore" : 3.7,
                "severity" : "LOW",
                "cves" : [ "CVE-2018-11751" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2018-3258",
                "title" : "Vulnerability in the MySQL Connectors component of Oracle MySQL (subcomponent: Connector/J). Supported versions that are affected are 8.0.12 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Connectors. Successful attacks of this vulnerability can result in takeover of MySQL Connectors. CVSS 3.0 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2018-3258" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/glibc-common@2.28-251.el8_10.31?arch=x86_64&distro=rhel-8.10&upstream=glibc-2.28-251.el8_10.31.src.rpm",
              "issues" : [ {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0861",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-0861" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4911",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-4911" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33599",
                "title" : "nscd: Stack-based buffer overflow in netgroup cache",
                "source" : "redhat-csaf",
                "cvssScore" : 7.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-33599" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-4802",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-4802" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4527",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4527" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4806",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4806" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4813",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4813" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-5702",
                "title" : "The strcmp implementation optimized for the Power10 processor in the GNU C Library version 2.39 and later writes to vector registers v20 to v31 without saving contents from the caller (those registers are defined as non-volatile registers by the powerpc64le ABI), resulting in overwriting of its contents and potentially altering control flow of the caller, or leaking the input strings to the function to other parts of the program.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-5702" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-0395",
                "title" : "When the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-0395" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33600",
                "title" : "nscd: Null pointer crashes after notfound response",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33600" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0915",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-0915" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-8058",
                "source" : "redhat-csaf",
                "cvssScore" : 4.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-8058" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33601",
                "title" : "nscd: netgroup cache may terminate daemon on memory allocation failure",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33601" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33602",
                "title" : "nscd: netgroup cache assumes NSS callback uses in-buffer strings",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33602" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/xz-libs@5.2.4-4.el8_6?arch=x86_64&distro=rhel-8.10&upstream=xz-5.2.4-4.el8_6.src.rpm",
              "issues" : [ {
                "id" : "CVE-2022-1271",
                "title" : "An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is applied on the attacker's chosen file name (for example, a crafted file name), this can overwrite an attacker's content to an arbitrary attacker-selected file. This flaw occurs due to insufficient validation when processing filenames with two or more newlines where selected content and the target file names are embedded in crafted multi-line file names. This flaw allows a remote, low privileged attacker to force zgrep to write arbitrary files on the system.",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-1271" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-31115",
                "title" : "XZ has a heap-use-after-free bug in threaded .xz decoder",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-31115" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2022-1271",
                "title" : "An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is applied on the attacker's chosen file name (for example, a crafted file name), this can overwrite an attacker's content to an arbitrary attacker-selected file. This flaw occurs due to insufficient validation when processing filenames with two or more newlines where selected content and the target file names are embedded in crafted multi-line file names. This flaw allows a remote, low privileged attacker to force zgrep to write arbitrary files on the system.",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-1271" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/python3-libs@3.6.8-75.el8_10?arch=x86_64&distro=rhel-8.10&upstream=python3-3.6.8-75.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2023-40217",
                "source" : "redhat-csaf",
                "cvssScore" : 8.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-40217" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-42919",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-42919" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-6597",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-6597" ],
                "unique" : false
              }, {
                "id" : "CVE-2015-20107",
                "source" : "redhat-csaf",
                "cvssScore" : 7.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2015-20107" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-12718",
                "title" : "Bypass extraction filter to modify file metadata outside extraction directory",
                "source" : "redhat-csaf",
                "cvssScore" : 7.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-12718" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-4517",
                "title" : "Arbitrary writes via tarfile realpath overflow",
                "source" : "redhat-csaf",
                "cvssScore" : 7.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-4517" ],
                "unique" : false
              }, {
                "id" : "CVE-2020-10735",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2020-10735" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-45061",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-45061" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-24329",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-24329" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-6232",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-6232" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-12084",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-12084" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-4138",
                "title" : "Bypassing extraction filter to create symlinks to arbitrary targets outside extraction directory",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-4138" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-4435",
                "title" : "Tarfile extracts filtered members when errorlevel=0",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-4435" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-8194",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-8194" ],
                "unique" : false
              }, {
                "id" : "CVE-2021-28861",
                "source" : "redhat-csaf",
                "cvssScore" : 7.4,
                "severity" : "HIGH",
                "cves" : [ "CVE-2021-28861" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-4330",
                "title" : "Extraction filter bypass for linking outside extraction directory",
                "source" : "redhat-csaf",
                "cvssScore" : 7.3,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-4330" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-15366",
                "source" : "redhat-csaf",
                "cvssScore" : 7.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-15366" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-15367",
                "source" : "redhat-csaf",
                "cvssScore" : 7.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-15367" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-1299",
                "source" : "redhat-csaf",
                "cvssScore" : 7.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-1299" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-4519",
                "title" : "webbrowser.open() allows leading dashes in URLs",
                "source" : "redhat-csaf",
                "cvssScore" : 7.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-4519" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-6923",
                "source" : "redhat-csaf",
                "cvssScore" : 6.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-6923" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-0938",
                "source" : "redhat-csaf",
                "cvssScore" : 6.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-0938" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-13836",
                "source" : "redhat-csaf",
                "cvssScore" : 6.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-13836" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-9287",
                "source" : "redhat-csaf",
                "cvssScore" : 6.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-9287" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-0450",
                "source" : "redhat-csaf",
                "cvssScore" : 6.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-0450" ],
                "unique" : false
              }, {
                "id" : "CVE-2007-4559",
                "title" : "Directory traversal vulnerability in the (1) extract and (2) extractall functions in the tarfile module in Python allows user-assisted remote attackers to overwrite arbitrary files via a .. (dot dot) sequence in filenames in a TAR archive, a related issue to CVE-2001-1267.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2007-4559" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-27043",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-27043" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-8088",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-8088" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-0397",
                "source" : "redhat-csaf",
                "cvssScore" : 5.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-0397" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-7592",
                "source" : "redhat-csaf",
                "cvssScore" : 4.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-7592" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0865",
                "source" : "redhat-csaf",
                "cvssScore" : 4.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-0865" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-6069",
                "title" : "HTMLParser quadratic complexity when processing malformed inputs",
                "source" : "redhat-csaf",
                "cvssScore" : 4.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-6069" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-8291",
                "source" : "redhat-csaf",
                "cvssScore" : 4.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-8291" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-6075",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-6075" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-11168",
                "source" : "redhat-csaf",
                "cvssScore" : 3.7,
                "severity" : "LOW",
                "cves" : [ "CVE-2024-11168" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-4032",
                "source" : "redhat-csaf",
                "cvssScore" : 3.7,
                "severity" : "LOW",
                "cves" : [ "CVE-2024-4032" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-5642",
                "title" : "Buffer overread when using an empty list with SSLContext.set_npn_protocols()",
                "source" : "redhat-csaf",
                "cvssScore" : 2.7,
                "severity" : "LOW",
                "cves" : [ "CVE-2024-5642" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2023-40217",
                "source" : "redhat-csaf",
                "cvssScore" : 8.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-40217" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libksba@1.3.5-9.el8_7?arch=x86_64&distro=rhel-8.10&upstream=libksba-1.3.5-9.el8_7.src.rpm",
              "issues" : [ {
                "id" : "CVE-2022-3515",
                "title" : "A vulnerability was found in the Libksba library due to an integer overflow within the CRL parser. The vulnerability can be exploited remotely for code execution on the target system by passing specially crafted data to the application, for example, a malicious S/MIME attachment.",
                "source" : "redhat-csaf",
                "cvssScore" : 8.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-3515" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-47629",
                "title" : "Libksba before 1.6.3 is prone to an integer overflow vulnerability in the CRL signature parser.",
                "source" : "redhat-csaf",
                "cvssScore" : 8.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-47629" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2022-3515",
                "title" : "A vulnerability was found in the Libksba library due to an integer overflow within the CRL parser. The vulnerability can be exploited remotely for code execution on the target system by passing specially crafted data to the application, for example, a malicious S/MIME attachment.",
                "source" : "redhat-csaf",
                "cvssScore" : 8.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-3515" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/python3-libcomps@0.1.18-1.el8?arch=x86_64&distro=rhel-8.10&upstream=libcomps-0.1.18-1.el8.src.rpm",
              "issues" : [ {
                "id" : "CVE-2026-1312",
                "source" : "redhat-csaf",
                "cvssScore" : 8.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-1312" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0980",
                "title" : "Rubyipmi: red hat satellite: remote code execution in rubyipmi via malicious bmc username",
                "source" : "redhat-csaf",
                "cvssScore" : 8.3,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-0980" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-1207",
                "source" : "redhat-csaf",
                "cvssScore" : 8.3,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-1207" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-1287",
                "source" : "redhat-csaf",
                "cvssScore" : 8.3,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-1287" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-1530",
                "title" : "Fog-kubevirt: fog-kubevirt: man-in-the-middle vulnerability due to disabled certificate validation",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-1530" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-1531",
                "title" : "Foreman-kubevirt: foreman_kubevirt: man-in-the-middle due to insecure default ssl verification",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-1531" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-1961",
                "title" : "Forman: foreman: remote code execution via command injection in websocket proxy",
                "source" : "redhat-csaf",
                "cvssScore" : 8.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-1961" ],
                "unique" : false
              }, {
                "id" : "CVE-2021-46877",
                "title" : "jackson-databind 2.10.x through 2.12.x before 2.12.6 and 2.13.x before 2.13.1 allows attackers to cause a denial of service (2 GB transient heap usage per read) in uncommon situations involving JsonNode JDK serialization.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2021-46877" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-14550",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-14550" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-6176",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-6176" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-1285",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-1285" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-68121",
                "source" : "redhat-csaf",
                "cvssScore" : 7.4,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-68121" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-28863",
                "title" : "node-tar vulnerable to denial of service while parsing a tar file due to lack of folders count validation",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-28863" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-4324",
                "title" : "Rubygem-katello: katello: denial of service and potential information disclosure via sql injection",
                "source" : "redhat-csaf",
                "cvssScore" : 5.4,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-4324" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2026-1312",
                "source" : "redhat-csaf",
                "cvssScore" : 8.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-1312" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libcomps@0.1.18-1.el8?arch=x86_64&distro=rhel-8.10&upstream=libcomps-0.1.18-1.el8.src.rpm",
              "issues" : [ {
                "id" : "CVE-2026-1312",
                "source" : "redhat-csaf",
                "cvssScore" : 8.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-1312" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0980",
                "title" : "Rubyipmi: red hat satellite: remote code execution in rubyipmi via malicious bmc username",
                "source" : "redhat-csaf",
                "cvssScore" : 8.3,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-0980" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-1207",
                "source" : "redhat-csaf",
                "cvssScore" : 8.3,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-1207" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-1287",
                "source" : "redhat-csaf",
                "cvssScore" : 8.3,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-1287" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-1530",
                "title" : "Fog-kubevirt: fog-kubevirt: man-in-the-middle vulnerability due to disabled certificate validation",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-1530" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-1531",
                "title" : "Foreman-kubevirt: foreman_kubevirt: man-in-the-middle due to insecure default ssl verification",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-1531" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-1961",
                "title" : "Forman: foreman: remote code execution via command injection in websocket proxy",
                "source" : "redhat-csaf",
                "cvssScore" : 8.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-1961" ],
                "unique" : false
              }, {
                "id" : "CVE-2021-46877",
                "title" : "jackson-databind 2.10.x through 2.12.x before 2.12.6 and 2.13.x before 2.13.1 allows attackers to cause a denial of service (2 GB transient heap usage per read) in uncommon situations involving JsonNode JDK serialization.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2021-46877" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-14550",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-14550" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-6176",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-6176" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-1285",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-1285" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-68121",
                "source" : "redhat-csaf",
                "cvssScore" : 7.4,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-68121" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-28863",
                "title" : "node-tar vulnerable to denial of service while parsing a tar file due to lack of folders count validation",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-28863" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-4324",
                "title" : "Rubygem-katello: katello: denial of service and potential information disclosure via sql injection",
                "source" : "redhat-csaf",
                "cvssScore" : 5.4,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-4324" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2026-1312",
                "source" : "redhat-csaf",
                "cvssScore" : 8.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-1312" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/gnupg2@2.2.20-4.el8_10?arch=x86_64&distro=rhel-8.10&upstream=gnupg2-2.2.20-4.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2026-24882",
                "source" : "redhat-csaf",
                "cvssScore" : 8.4,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-24882" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-68973",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-68973" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-34903",
                "title" : "GnuPG through 2.3.6, in unusual situations where an attacker possesses any secret-key information from a victim's keyring and other constraints (e.g., use of GPGME) are met, allows signature forgery via injection into the status line.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-34903" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2026-24882",
                "source" : "redhat-csaf",
                "cvssScore" : 8.4,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-24882" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/zlib@1.2.11-25.el8?arch=x86_64&distro=rhel-8.10&upstream=zlib-1.2.11-25.el8.src.rpm",
              "issues" : [ {
                "id" : "CVE-2018-25032",
                "title" : "zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.",
                "source" : "redhat-csaf",
                "cvssScore" : 8.2,
                "severity" : "HIGH",
                "cves" : [ "CVE-2018-25032" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-37434",
                "title" : "zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference).",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-37434" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2018-25032",
                "title" : "zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.",
                "source" : "redhat-csaf",
                "cvssScore" : 8.2,
                "severity" : "HIGH",
                "cves" : [ "CVE-2018-25032" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libssh-config@0.9.6-16.el8_10?arch=noarch&distro=rhel-8.10&upstream=libssh-0.9.6-16.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2025-5318",
                "title" : "Libssh: out-of-bounds read in sftp_handle()",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-5318" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-5987",
                "title" : "Libssh: invalid return code for chacha20 poly1305 with openssl backend",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-5987" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-48795",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-48795" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-2283",
                "source" : "redhat-csaf",
                "cvssScore" : 4.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-2283" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-6004",
                "source" : "redhat-csaf",
                "cvssScore" : 4.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-6004" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-1667",
                "title" : "A NULL pointer dereference was found In libssh during re-keying with algorithm guessing. This issue may allow an authenticated client to cause a denial of service.",
                "source" : "redhat-csaf",
                "cvssScore" : 4.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-1667" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-6918",
                "source" : "redhat-csaf",
                "cvssScore" : 3.7,
                "severity" : "LOW",
                "cves" : [ "CVE-2023-6918" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2025-5318",
                "title" : "Libssh: out-of-bounds read in sftp_handle()",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-5318" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libssh@0.9.6-16.el8_10?arch=x86_64&distro=rhel-8.10&upstream=libssh-0.9.6-16.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2025-5318",
                "title" : "Libssh: out-of-bounds read in sftp_handle()",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-5318" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-5987",
                "title" : "Libssh: invalid return code for chacha20 poly1305 with openssl backend",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-5987" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-48795",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-48795" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-2283",
                "source" : "redhat-csaf",
                "cvssScore" : 4.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-2283" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-6004",
                "source" : "redhat-csaf",
                "cvssScore" : 4.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-6004" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-1667",
                "title" : "A NULL pointer dereference was found In libssh during re-keying with algorithm guessing. This issue may allow an authenticated client to cause a denial of service.",
                "source" : "redhat-csaf",
                "cvssScore" : 4.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-1667" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-6918",
                "source" : "redhat-csaf",
                "cvssScore" : 3.7,
                "severity" : "LOW",
                "cves" : [ "CVE-2023-6918" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2025-5318",
                "title" : "Libssh: out-of-bounds read in sftp_handle()",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-5318" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libcap@2.48-6.el8_9?arch=x86_64&distro=rhel-8.10&upstream=libcap-2.48-6.el8_9.src.rpm",
              "issues" : [ {
                "id" : "CVE-2023-2603",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-2603" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-2602",
                "title" : "A vulnerability was found in the pthread_create() function in libcap. This issue may allow a malicious actor to use cause __real_pthread_create() to return an error, which can exhaust the process memory.",
                "source" : "redhat-csaf",
                "cvssScore" : 3.3,
                "severity" : "LOW",
                "cves" : [ "CVE-2023-2602" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2023-2603",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-2603" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/ncurses-base@6.1-10.20180224.el8?arch=noarch&distro=rhel-8.10&upstream=ncurses-6.1-10.20180224.el8.src.rpm",
              "issues" : [ {
                "id" : "CVE-2023-29491",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-29491" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-69720",
                "title" : "The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-69720" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-29458",
                "title" : "ncurses 6.3 before patch 20220416 has an out-of-bounds read and segmentation violation in convert_strings in tinfo/read_entry.c in the terminfo library.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-29458" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2023-29491",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-29491" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/ncurses-libs@6.1-10.20180224.el8?arch=x86_64&distro=rhel-8.10&upstream=ncurses-6.1-10.20180224.el8.src.rpm",
              "issues" : [ {
                "id" : "CVE-2023-29491",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-29491" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-69720",
                "title" : "The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-69720" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-29458",
                "title" : "ncurses 6.3 before patch 20220416 has an out-of-bounds read and segmentation violation in convert_strings in tinfo/read_entry.c in the terminfo library.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-29458" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2023-29491",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-29491" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libarchive@3.3.3-6.el8_10?arch=x86_64&distro=rhel-8.10&upstream=libarchive-3.3.3-6.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2025-5914",
                "title" : "Libarchive: double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-5914" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-4111",
                "title" : "Libarchive: infinite loop denial of service in rar5 decompression via archive_read_data() in libarchive",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-4111" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-4424",
                "title" : "Libarchive: libarchive: information disclosure via heap out-of-bounds read in rar archive processing",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-4424" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-5121",
                "title" : "Libarchive: libarchive: arbitrary code execution via integer overflow in iso9660 image processing",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-5121" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-26280",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-26280" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-36227",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-36227" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-57970",
                "title" : "libarchive through 3.7.7 has a heap-based buffer over-read in header_gnu_longlink in archive_read_support_format_tar.c via a TAR archive because it mishandles truncation in the middle of a GNU long linkname.",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-57970" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-25724",
                "title" : "list_item_verbose in tar/util.c in libarchive through 3.7.7 does not check an strftime return value, which can lead to a denial of service or unspecified other impact via a crafted TAR archive that is read with a verbose value of 2. For example, the 100-byte buffer may not be sufficient for a custom locale.",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-25724" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2025-5914",
                "title" : "Libarchive: double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-5914" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/glib2@2.56.4-168.el8_10?arch=x86_64&distro=rhel-8.10&upstream=glib2-2.56.4-168.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2025-13601",
                "title" : "Glib: integer overflow in in g_escape_uri_string()",
                "source" : "redhat-csaf",
                "cvssScore" : 7.7,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-13601" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-52533",
                "title" : "gio/gsocks4aproxy.c in GNOME GLib before 2.82.1 has an off-by-one error and resultant buffer overflow because SOCKS4_CONN_MSG_LEN is not sufficient for a trailing '\\0' character.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-52533" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-32611",
                "title" : "G_variant_byteswap() can take a long time with some non-normal inputs",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-32611" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-32665",
                "title" : "Gvariant deserialisation does not match spec for non-normal data",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-32665" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-14512",
                "title" : "Glib: integer overflow in glib gio attribute escaping causes heap buffer overflow",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-14512" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-29499",
                "source" : "redhat-csaf",
                "cvssScore" : 6.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-29499" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-14087",
                "title" : "Glib: glib: buffer underflow in gvariant parser leads to heap corruption",
                "source" : "redhat-csaf",
                "cvssScore" : 5.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-14087" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-4373",
                "source" : "redhat-csaf",
                "cvssScore" : 4.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-4373" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-34397",
                "source" : "redhat-csaf",
                "cvssScore" : 3.8,
                "severity" : "LOW",
                "cves" : [ "CVE-2024-34397" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2025-13601",
                "title" : "Glib: integer overflow in in g_escape_uri_string()",
                "source" : "redhat-csaf",
                "cvssScore" : 7.7,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-13601" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/sqlite-libs@3.26.0-20.el8_10?arch=x86_64&distro=rhel-8.10&upstream=sqlite-3.26.0-20.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2025-6965",
                "title" : "Integer Truncation on SQLite",
                "source" : "redhat-csaf",
                "cvssScore" : 7.7,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-6965" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-7104",
                "source" : "redhat-csaf",
                "cvssScore" : 7.3,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-7104" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-3277",
                "title" : "An integer overflow can be triggered in SQLite’s `concat_ws()` function. The resulting, truncated integer is then used to allocate a buffer. When SQLite then writes the resulting string to the buffer, it uses the original, untruncated size and thus a wild Heap Buffer overflow of size ~4GB can be triggered. This can result in arbitrary code execution.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.3,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-3277" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-35737",
                "title" : "SQLite 1.0.12 through 3.39.x before 3.39.2 sometimes allows an array-bounds overflow if billions of bytes are used in a string argument to a C API.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-35737" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2025-6965",
                "title" : "Integer Truncation on SQLite",
                "source" : "redhat-csaf",
                "cvssScore" : 7.7,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-6965" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/expat@2.5.0-1.el8_10?arch=x86_64&distro=rhel-8.10&upstream=expat-2.5.0-1.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2023-52425",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-52425" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-28757",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-28757" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-45490",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-45490" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-45491",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-45491" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-8176",
                "title" : "Libexpat: expat: improper restriction of xml entity expansion depth in libexpat",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-8176" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-45492",
                "source" : "redhat-csaf",
                "cvssScore" : 6.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-45492" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-50602",
                "title" : "An issue was discovered in libexpat before 2.6.4. There is a crash within the XML_ResumeParser function because XML_StopParser can stop/suspend an unstarted parser.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-50602" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-59375",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-59375" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2023-52425",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-52425" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libsolv@0.7.20-6.el8?arch=x86_64&distro=rhel-8.10&upstream=libsolv-0.7.20-6.el8.src.rpm",
              "issues" : [ {
                "id" : "CVE-2021-33928",
                "title" : "Buffer overflow vulnerability in function pool_installable in src/repo.h in libsolv before 0.7.17 allows attackers to cause a Denial of Service.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2021-33928" ],
                "unique" : false
              }, {
                "id" : "CVE-2021-33929",
                "title" : "Buffer overflow vulnerability in function pool_disabled_solvable in src/repo.h in libsolv before 0.7.17 allows attackers to cause a Denial of Service.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2021-33929" ],
                "unique" : false
              }, {
                "id" : "CVE-2021-33930",
                "title" : "Buffer overflow vulnerability in function pool_installable_whatprovides in src/repo.h in libsolv before 0.7.17 allows attackers to cause a Denial of Service.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2021-33930" ],
                "unique" : false
              }, {
                "id" : "CVE-2021-33938",
                "title" : "Buffer overflow vulnerability in function prune_to_recommended in src/policy.c in libsolv before 0.7.17 allows attackers to cause a Denial of Service.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2021-33938" ],
                "unique" : false
              }, {
                "id" : "CVE-2021-46877",
                "title" : "jackson-databind 2.10.x through 2.12.x before 2.12.6 and 2.13.x before 2.13.1 allows attackers to cause a denial of service (2 GB transient heap usage per read) in uncommon situations involving JsonNode JDK serialization.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2021-46877" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-28863",
                "title" : "node-tar vulnerable to denial of service while parsing a tar file due to lack of folders count validation",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-28863" ],
                "unique" : false
              }, {
                "id" : "CVE-2021-44568",
                "title" : "Two heap-overflow vulnerabilities exist in openSUSE/libsolv libsolv through 13 Dec 2020 in the decisionmap variable via the resolve_dependencies function at src/solver.c (line 1940 & line 1995), which could cause a remote Denial of Service.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2021-44568" ],
                "unique" : false
              }, {
                "id" : "CVE-2021-3200",
                "title" : "Buffer overflow vulnerability in libsolv 2020-12-13 via the Solver * testcase_read(Pool *pool, FILE *fp, const char *testcase, Queue *job, char **resultp, int *resultflagsp function at src/testcase.c: line 2334, which could cause a denial of service",
                "source" : "redhat-csaf",
                "cvssScore" : 3.3,
                "severity" : "LOW",
                "cves" : [ "CVE-2021-3200" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2021-33928",
                "title" : "Buffer overflow vulnerability in function pool_installable in src/repo.h in libsolv before 0.7.17 allows attackers to cause a Denial of Service.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2021-33928" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/brotli@1.0.6-4.el8_10?arch=x86_64&distro=rhel-8.10&upstream=brotli-1.0.6-4.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2025-6176",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-6176" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2025-6176",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-6176" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/gnutls@3.6.16-8.el8_10.5?arch=x86_64&distro=rhel-8.10&upstream=gnutls-3.6.16-8.el8_10.5.src.rpm",
              "issues" : [ {
                "id" : "CVE-2022-2509",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-2509" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-0553",
                "title" : "Gnutls: incomplete fix for cve-2023-5981",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-0553" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-0567",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-0567" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-0361",
                "title" : "A timing side-channel in the handling of RSA ClientKeyExchange messages was discovered in GnuTLS. This side-channel can be sufficient to recover the key encrypted in the RSA ciphertext across a network in a Bleichenbacher style attack. To achieve a successful decryption the attacker would need to send a large amount of specially crafted messages to the vulnerable server. By recovering the secret from the ClientKeyExchange message, the attacker would be able to decrypt the application data exchanged over that connection.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.4,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-0361" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-32988",
                "title" : "Gnutls: vulnerability in gnutls othername san export",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-32988" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-32990",
                "title" : "Gnutls: vulnerability in gnutls certtool template parsing",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-32990" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-6395",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-6395" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-5981",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-5981" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-12243",
                "title" : "Gnutls: gnutls impacted by inefficient der decoding in libtasn1 leading to remote dos",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-12243" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-28834",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-28834" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-14831",
                "title" : "Gnutls: gnutls: denial of service via excessive resource consumption during certificate verification",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-14831" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-32989",
                "title" : "Gnutls: vulnerability in gnutls sct extension parsing",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-32989" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-28835",
                "source" : "redhat-csaf",
                "cvssScore" : 5.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-28835" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-9820",
                "title" : "Gnutls: stack-based buffer overflow in gnutls_pkcs11_token_init() function",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-9820" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2022-2509",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-2509" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libnghttp2@1.33.0-6.el8_10.2?arch=x86_64&distro=rhel-8.10&upstream=nghttp2-1.33.0-6.el8_10.2.src.rpm",
              "issues" : [ {
                "id" : "CVE-2023-44487",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-44487" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-27135",
                "title" : "nghttp2 Denial of service: Assertion failure due to the missing state validation",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-27135" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-28182",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-28182" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2023-44487",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-44487" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libtirpc@1.1.4-12.el8_10?arch=x86_64&distro=rhel-8.10&upstream=libtirpc-1.1.4-12.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2021-46828",
                "title" : "In libtirpc before 1.3.3rc1, remote attackers could exhaust the file descriptors of a process that uses libtirpc because idle TCP connections are mishandled. This can, in turn, lead to an svc_run infinite loop without accepting new connections.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2021-46828" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2021-46828",
                "title" : "In libtirpc before 1.3.3rc1, remote attackers could exhaust the file descriptors of a process that uses libtirpc because idle TCP connections are mishandled. This can, in turn, lead to an svc_run infinite loop without accepting new connections.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2021-46828" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/pcre2@10.32-3.el8_6?arch=x86_64&distro=rhel-8.10&upstream=pcre2-10.32-3.el8_6.src.rpm",
              "issues" : [ {
                "id" : "CVE-2022-1586",
                "title" : "An out-of-bounds read vulnerability was discovered in the PCRE2 library in the compile_xclass_matchingpath() function of the pcre2_jit_compile.c file. This involves a unicode property matching issue in JIT-compiled regular expressions. The issue occurs because the character was not fully read in case-less matching within JIT.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-1586" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-1587",
                "title" : "An out-of-bounds read vulnerability was discovered in the PCRE2 library in the get_recurse_data_length() function of the pcre2_jit_compile.c file. This issue affects recursions in JIT-compiled regular expressions caused by duplicate data transfers.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-1587" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2022-1586",
                "title" : "An out-of-bounds read vulnerability was discovered in the PCRE2 library in the compile_xclass_matchingpath() function of the pcre2_jit_compile.c file. This involves a unicode property matching issue in JIT-compiled regular expressions. The issue occurs because the character was not fully read in case-less matching within JIT.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-1586" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/openldap@2.4.46-21.el8_10?arch=x86_64&distro=rhel-8.10&upstream=openldap-2.4.46-21.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2023-2953",
                "title" : "A vulnerability was found in openldap. This security flaw causes a null pointer dereference in ber_memalloc_x() function.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-2953" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2023-2953",
                "title" : "A vulnerability was found in openldap. This security flaw causes a null pointer dereference in ber_memalloc_x() function.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-2953" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/python3-six@1.11.0-8.el8?arch=noarch&distro=rhel-8.10&upstream=python-six-1.11.0-8.el8.src.rpm",
              "issues" : [ {
                "id" : "CVE-2020-8185",
                "title" : "A denial of service vulnerability exists in Rails <6.0.3.2 that allowed an untrusted user to run any pending migrations on a Rails app running in production.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2020-8185" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-1705",
                "title" : "Improper sanitization of Transfer-Encoding headers in net/http",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-1705" ],
                "unique" : false
              }, {
                "id" : "CVE-2019-16782",
                "title" : "Possible Information Leak / Session Hijack Vulnerability in Rack",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2019-16782" ],
                "unique" : false
              }, {
                "id" : "CVE-2018-1000119",
                "title" : "Sinatra rack-protection versions 1.5.4 and 2.0.0.rc3 and earlier contains a timing attack vulnerability in the CSRF token checking that can result in signatures can be exposed. This attack appear to be exploitable via network connectivity to the ruby application. This vulnerability appears to have been fixed in 1.5.5 and 2.0.0.",
                "source" : "redhat-csaf",
                "cvssScore" : 3.7,
                "severity" : "LOW",
                "cves" : [ "CVE-2018-1000119" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2020-8185",
                "title" : "A denial of service vulnerability exists in Rails <6.0.3.2 that allowed an untrusted user to run any pending migrations on a Rails app running in production.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2020-8185" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/lua-libs@5.3.4-12.el8?arch=x86_64&distro=rhel-8.10&upstream=lua-5.3.4-12.el8.src.rpm",
              "issues" : [ {
                "id" : "CVE-2021-44964",
                "title" : "Use after free in garbage collector and finalizer of lgc.c in Lua interpreter 5.4.0~5.4.3 allows attackers to perform Sandbox Escape via a crafted script file.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2021-44964" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-33099",
                "title" : "An issue in the component luaG_runerror of Lua v5.4.4 and below leads to a heap-buffer overflow when a recursive error occurs.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-33099" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-28805",
                "title" : "singlevar in lparser.c in Lua from (including) 5.4.0 up to (excluding) 5.4.4 lacks a certain luaK_exp2anyregup call, leading to a heap-based buffer over-read that might affect a system that compiles untrusted Lua code.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-28805" ],
                "unique" : false
              }, {
                "id" : "CVE-2021-43519",
                "title" : "Stack overflow in lua_resume of ldo.c in Lua Interpreter 5.1.0~5.4.4 allows attackers to perform a Denial of Service via a crafted script file.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2021-43519" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2021-44964",
                "title" : "Use after free in garbage collector and finalizer of lgc.c in Lua interpreter 5.4.0~5.4.3 allows attackers to perform Sandbox Escape via a crafted script file.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2021-44964" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/bash@4.4.20-6.el8_10?arch=x86_64&distro=rhel-8.10&upstream=bash-4.4.20-6.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2022-3715",
                "source" : "redhat-csaf",
                "cvssScore" : 6.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-3715" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2022-3715",
                "source" : "redhat-csaf",
                "cvssScore" : 6.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-3715" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/rpm-libs@4.14.3-32.el8_10?arch=x86_64&distro=rhel-8.10&upstream=rpm-4.14.3-32.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2021-35938",
                "title" : "A symbolic link issue was found in rpm. It occurs when rpm sets the desired permissions and credentials after installing a file. A local unprivileged user could use this flaw to exchange the original file with a symbolic link to a security-critical file and escalate their privileges on the system. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2021-35938" ],
                "unique" : false
              }, {
                "id" : "CVE-2021-35939",
                "title" : "It was found that the fix for CVE-2017-7500 and CVE-2017-7501 was incomplete: the check was only implemented for the parent directory of the file to be created. A local unprivileged user who owns another ancestor directory could potentially use this flaw to gain root privileges. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2021-35939" ],
                "unique" : false
              }, {
                "id" : "CVE-2021-35937",
                "title" : "A race condition vulnerability was found in rpm. A local unprivileged user could use this flaw to bypass the checks that were introduced in response to CVE-2017-7500 and CVE-2017-7501, potentially gaining root privileges. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2021-35937" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2021-35938",
                "title" : "A symbolic link issue was found in rpm. It occurs when rpm sets the desired permissions and credentials after installing a file. A local unprivileged user could use this flaw to exchange the original file with a symbolic link to a security-critical file and escalate their privileges on the system. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2021-35938" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/dbus-libs@1.12.8-27.el8_10?arch=x86_64&distro=rhel-8.10&epoch=1&upstream=dbus-1.12.8-27.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2022-42010",
                "title" : "An issue was discovered in D-Bus before 1.12.24, 1.13.x and 1.14.x before 1.14.4, and 1.15.x before 1.15.2. An authenticated attacker can cause dbus-daemon and other programs that use libdbus to crash when receiving a message with certain invalid type signatures.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-42010" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-42011",
                "title" : "An issue was discovered in D-Bus before 1.12.24, 1.13.x and 1.14.x before 1.14.4, and 1.15.x before 1.15.2. An authenticated attacker can cause dbus-daemon and other programs that use libdbus to crash when receiving a message where an array length is inconsistent with the size of the element type.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-42011" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-42012",
                "title" : "An issue was discovered in D-Bus before 1.12.24, 1.13.x and 1.14.x before 1.14.4, and 1.15.x before 1.15.2. An authenticated attacker can cause dbus-daemon and other programs that use libdbus to crash by sending a message with attached file descriptors in an unexpected format.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-42012" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-34969",
                "title" : "D-Bus before 1.15.6 sometimes allows unprivileged users to crash dbus-daemon. If a privileged user with control over the dbus-daemon is using the org.freedesktop.DBus.Monitoring interface to monitor message bus traffic, then an unprivileged user with the ability to connect to the same dbus-daemon can cause a dbus-daemon crash under some circumstances via an unreplyable message. When done on the well-known system bus, this is a denial-of-service vulnerability. The fixed versions are 1.12.28, 1.14.8, and 1.15.6.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-34969" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2022-42010",
                "title" : "An issue was discovered in D-Bus before 1.12.24, 1.13.x and 1.14.x before 1.14.4, and 1.15.x before 1.15.2. An authenticated attacker can cause dbus-daemon and other programs that use libdbus to crash when receiving a message with certain invalid type signatures.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-42010" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/python3-rpm@4.14.3-32.el8_10?arch=x86_64&distro=rhel-8.10&upstream=rpm-4.14.3-32.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2021-35938",
                "title" : "A symbolic link issue was found in rpm. It occurs when rpm sets the desired permissions and credentials after installing a file. A local unprivileged user could use this flaw to exchange the original file with a symbolic link to a security-critical file and escalate their privileges on the system. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2021-35938" ],
                "unique" : false
              }, {
                "id" : "CVE-2021-35939",
                "title" : "It was found that the fix for CVE-2017-7500 and CVE-2017-7501 was incomplete: the check was only implemented for the parent directory of the file to be created. A local unprivileged user who owns another ancestor directory could potentially use this flaw to gain root privileges. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2021-35939" ],
                "unique" : false
              }, {
                "id" : "CVE-2021-35937",
                "title" : "A race condition vulnerability was found in rpm. A local unprivileged user could use this flaw to bypass the checks that were introduced in response to CVE-2017-7500 and CVE-2017-7501, potentially gaining root privileges. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2021-35937" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2021-35938",
                "title" : "A symbolic link issue was found in rpm. It occurs when rpm sets the desired permissions and credentials after installing a file. A local unprivileged user could use this flaw to exchange the original file with a symbolic link to a security-critical file and escalate their privileges on the system. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2021-35938" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/rpm-build-libs@4.14.3-32.el8_10?arch=x86_64&distro=rhel-8.10&upstream=rpm-4.14.3-32.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2021-35938",
                "title" : "A symbolic link issue was found in rpm. It occurs when rpm sets the desired permissions and credentials after installing a file. A local unprivileged user could use this flaw to exchange the original file with a symbolic link to a security-critical file and escalate their privileges on the system. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2021-35938" ],
                "unique" : false
              }, {
                "id" : "CVE-2021-35939",
                "title" : "It was found that the fix for CVE-2017-7500 and CVE-2017-7501 was incomplete: the check was only implemented for the parent directory of the file to be created. A local unprivileged user who owns another ancestor directory could potentially use this flaw to gain root privileges. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2021-35939" ],
                "unique" : false
              }, {
                "id" : "CVE-2021-35937",
                "title" : "A race condition vulnerability was found in rpm. A local unprivileged user could use this flaw to bypass the checks that were introduced in response to CVE-2017-7500 and CVE-2017-7501, potentially gaining root privileges. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2021-35937" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2021-35938",
                "title" : "A symbolic link issue was found in rpm. It occurs when rpm sets the desired permissions and credentials after installing a file. A local unprivileged user could use this flaw to exchange the original file with a symbolic link to a security-critical file and escalate their privileges on the system. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2021-35938" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/rpm@4.14.3-32.el8_10?arch=x86_64&distro=rhel-8.10&upstream=rpm-4.14.3-32.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2021-35938",
                "title" : "A symbolic link issue was found in rpm. It occurs when rpm sets the desired permissions and credentials after installing a file. A local unprivileged user could use this flaw to exchange the original file with a symbolic link to a security-critical file and escalate their privileges on the system. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2021-35938" ],
                "unique" : false
              }, {
                "id" : "CVE-2021-35939",
                "title" : "It was found that the fix for CVE-2017-7500 and CVE-2017-7501 was incomplete: the check was only implemented for the parent directory of the file to be created. A local unprivileged user who owns another ancestor directory could potentially use this flaw to gain root privileges. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2021-35939" ],
                "unique" : false
              }, {
                "id" : "CVE-2021-35937",
                "title" : "A race condition vulnerability was found in rpm. A local unprivileged user could use this flaw to bypass the checks that were introduced in response to CVE-2017-7500 and CVE-2017-7501, potentially gaining root privileges. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2021-35937" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2021-35938",
                "title" : "A symbolic link issue was found in rpm. It occurs when rpm sets the desired permissions and credentials after installing a file. A local unprivileged user could use this flaw to exchange the original file with a symbolic link to a security-critical file and escalate their privileges on the system. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2021-35938" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/tpm2-tss@2.3.2-6.el8?arch=x86_64&distro=rhel-8.10&upstream=tpm2-tss-2.3.2-6.el8.src.rpm",
              "issues" : [ {
                "id" : "CVE-2023-22745",
                "source" : "redhat-csaf",
                "cvssScore" : 6.4,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-22745" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2023-22745",
                "source" : "redhat-csaf",
                "cvssScore" : 6.4,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-22745" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/gmp@6.1.2-11.el8?arch=x86_64&distro=rhel-8.10&epoch=1&upstream=gmp-6.1.2-11.el8.src.rpm",
              "issues" : [ {
                "id" : "CVE-2021-43618",
                "title" : "GNU Multiple Precision Arithmetic Library (GMP) through 6.2.1 has an mpz/inp_raw.c integer overflow and resultant buffer overflow via crafted input, leading to a segmentation fault on 32-bit platforms.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2021-43618" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2021-43618",
                "title" : "GNU Multiple Precision Arithmetic Library (GMP) through 6.2.1 has an mpz/inp_raw.c integer overflow and resultant buffer overflow via crafted input, leading to a segmentation fault on 32-bit platforms.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2021-43618" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libsmartcols@2.32.1-48.el8_10?arch=x86_64&distro=rhel-8.10&upstream=util-linux-2.32.1-48.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2025-14104",
                "title" : "Util-linux: util-linux: heap buffer overread in setpwnam() when processing 256-byte usernames",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-14104" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2025-14104",
                "title" : "Util-linux: util-linux: heap buffer overread in setpwnam() when processing 256-byte usernames",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-14104" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libgcc@8.5.0-28.el8_10?arch=x86_64&distro=rhel-8.10&upstream=gcc-8.5.0-28.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2020-11023",
                "title" : "Potential XSS vulnerability in jQuery",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2020-11023" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2020-11023",
                "title" : "Potential XSS vulnerability in jQuery",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2020-11023" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libmount@2.32.1-48.el8_10?arch=x86_64&distro=rhel-8.10&upstream=util-linux-2.32.1-48.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2025-14104",
                "title" : "Util-linux: util-linux: heap buffer overread in setpwnam() when processing 256-byte usernames",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-14104" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2025-14104",
                "title" : "Util-linux: util-linux: heap buffer overread in setpwnam() when processing 256-byte usernames",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-14104" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libuuid@2.32.1-48.el8_10?arch=x86_64&distro=rhel-8.10&upstream=util-linux-2.32.1-48.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2025-14104",
                "title" : "Util-linux: util-linux: heap buffer overread in setpwnam() when processing 256-byte usernames",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-14104" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2025-14104",
                "title" : "Util-linux: util-linux: heap buffer overread in setpwnam() when processing 256-byte usernames",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-14104" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libblkid@2.32.1-48.el8_10?arch=x86_64&distro=rhel-8.10&upstream=util-linux-2.32.1-48.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2025-14104",
                "title" : "Util-linux: util-linux: heap buffer overread in setpwnam() when processing 256-byte usernames",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-14104" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-27456",
                "title" : "util-linux: TOCTOU Race Condition in util-linux mount(8) - Loop Device Setup",
                "source" : "redhat-csaf",
                "cvssScore" : 4.7,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-27456" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2025-14104",
                "title" : "Util-linux: util-linux: heap buffer overread in setpwnam() when processing 256-byte usernames",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-14104" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libstdc%2B%2B@8.5.0-28.el8_10?arch=x86_64&distro=rhel-8.10&upstream=gcc-8.5.0-28.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2020-11023",
                "title" : "Potential XSS vulnerability in jQuery",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2020-11023" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2020-11023",
                "title" : "Potential XSS vulnerability in jQuery",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2020-11023" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libtasn1@4.13-5.el8_10?arch=x86_64&distro=rhel-8.10&upstream=libtasn1-4.13-5.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2021-46848",
                "title" : "GNU Libtasn1 before 4.19.0 has an ETYPE_OK off-by-one array size check that affects asn1_encode_simple_der.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2021-46848" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-12133",
                "title" : "Libtasn1: inefficient der decoding in libtasn1 leading to potential remote dos",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-12133" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2021-46848",
                "title" : "GNU Libtasn1 before 4.19.0 has an ETYPE_OK off-by-one array size check that affects asn1_encode_simple_der.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2021-46848" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libgcrypt@1.8.5-7.el8_6?arch=x86_64&distro=rhel-8.10&upstream=libgcrypt-1.8.5-7.el8_6.src.rpm",
              "issues" : [ {
                "id" : "CVE-2024-2236",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-2236" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2024-2236",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-2236" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/systemd-libs@239-82.el8_10.15?arch=x86_64&distro=rhel-8.10&upstream=systemd-239-82.el8_10.15.src.rpm",
              "issues" : [ {
                "id" : "CVE-2023-7008",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-7008" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-3821",
                "title" : "An off-by-one Error issue was discovered in Systemd in format_timespan() function of time-util.c. An attacker could supply specific values for time and accuracy that leads to buffer overrun in format_timespan(), leading to a Denial of Service.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-3821" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-4415",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-4415" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-45873",
                "title" : "systemd 250 and 251 allows local users to achieve a systemd-coredump deadlock by triggering a crash that has a long backtrace. This occurs in parse_elf_object in shared/elf-util.c. The exploitation methodology is to crash a binary calling the same function recursively, and put it in a deeply nested directory to make its backtrace large enough to cause the deadlock. This must be done 16 times when MaxConnections=16 is set for the systemd/units/systemd-coredump.socket file.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-45873" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-4598",
                "source" : "redhat-csaf",
                "cvssScore" : 4.7,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-4598" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2023-7008",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-7008" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libcom_err@1.45.6-7.el8_10?arch=x86_64&distro=rhel-8.10&upstream=e2fsprogs-1.45.6-7.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2022-1304",
                "title" : "An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a segmentation fault and possibly arbitrary code execution via a specially crafted filesystem.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-1304" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2022-1304",
                "title" : "An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a segmentation fault and possibly arbitrary code execution via a specially crafted filesystem.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-1304" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/python3-pip-wheel@9.0.3-24.el8?arch=noarch&distro=rhel-8.10&upstream=python-pip-9.0.3-24.el8.src.rpm",
              "issues" : [ {
                "id" : "CVE-2007-4559",
                "title" : "Directory traversal vulnerability in the (1) extract and (2) extractall functions in the tarfile module in Python allows user-assisted remote attackers to overwrite arbitrary files via a .. (dot dot) sequence in filenames in a TAR archive, a related issue to CVE-2001-1267.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2007-4559" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2007-4559",
                "title" : "Directory traversal vulnerability in the (1) extract and (2) extractall functions in the tarfile module in Python allows user-assisted remote attackers to overwrite arbitrary files via a .. (dot dot) sequence in filenames in a TAR archive, a related issue to CVE-2001-1267.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2007-4559" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/file-libs@5.33-27.el8_10?arch=x86_64&distro=rhel-8.10&upstream=file-5.33-27.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2022-48554",
                "title" : "File before 5.43 has an stack-based buffer over-read in file_copystr in funcs.c. NOTE: \"File\" is the name of an Open Source project.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-48554" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2022-48554",
                "title" : "File before 5.43 has an stack-based buffer over-read in file_copystr in funcs.c. NOTE: \"File\" is the name of an Open Source project.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-48554" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/shadow-utils@4.6-23.el8_10?arch=x86_64&distro=rhel-8.10&epoch=2&upstream=shadow-utils-4.6-23.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2023-4641",
                "source" : "redhat-csaf",
                "cvssScore" : 4.7,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4641" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-56433",
                "title" : "shadow-utils (aka shadow) 4.4 through 4.17.0 establishes a default /etc/subuid behavior (e.g., uid 100000 through 165535 for the first user account) that can realistically conflict with the uids of users defined on locally administered networks, potentially leading to account takeover, e.g., by leveraging newuidmap for access to an NFS home directory (or same-host resources in the case of remote logins by these local network users). NOTE: it may also be argued that system administrators should not have assigned uids, within local networks, that are within the range that can occur in /etc/subuid.",
                "source" : "redhat-csaf",
                "cvssScore" : 3.6,
                "severity" : "LOW",
                "cves" : [ "CVE-2024-56433" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2023-4641",
                "source" : "redhat-csaf",
                "cvssScore" : 4.7,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4641" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/bzip2-libs@1.0.6-28.el8_10?arch=x86_64&distro=rhel-8.10&upstream=bzip2-1.0.6-28.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2019-12900",
                "title" : "BZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many selectors.",
                "source" : "redhat-csaf",
                "cvssScore" : 4.4,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2019-12900" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2019-12900",
                "title" : "BZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many selectors.",
                "source" : "redhat-csaf",
                "cvssScore" : 4.4,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2019-12900" ],
                "unique" : false
              }
            } ],
            "highestVulnerability" : {
              "id" : "CVE-2025-15467",
              "title" : "Stack buffer overflow in CMS (Auth)EnvelopedData parsing",
              "source" : "redhat-csaf",
              "cvssScore" : 9.8,
              "severity" : "CRITICAL",
              "cves" : [ "CVE-2025-15467" ],
              "unique" : false
            }
          }, {
            "ref" : "pkg:rpm/redhat/crypto-policies-scripts@20230731-1.git3177e06.el8?arch=noarch&distro=rhel-8.10&upstream=crypto-policies-20230731-1.git3177e06.el8.src.rpm",
            "transitive" : [ {
              "ref" : "pkg:rpm/redhat/openssl-libs@1.1.1k-15.el8_6?arch=x86_64&distro=rhel-8.10&epoch=1&upstream=openssl-1.1.1k-15.el8_6.src.rpm",
              "issues" : [ {
                "id" : "CVE-2025-15467",
                "title" : "Stack buffer overflow in CMS (Auth)EnvelopedData parsing",
                "source" : "redhat-csaf",
                "cvssScore" : 9.8,
                "severity" : "CRITICAL",
                "cves" : [ "CVE-2025-15467" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-1473",
                "title" : "Resource leakage when decoding certificates and keys",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-1473" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-3358",
                "title" : "Using a Custom Cipher with NID_undef may lead to NULL encryption",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-3358" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-3602",
                "title" : "X.509 Email Address 4-byte Buffer Overflow",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-3602" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-3786",
                "title" : "X.509 Email Address Variable Length Buffer Overflow",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-3786" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-4450",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-4450" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-0215",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-0215" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-0216",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-0216" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-0217",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-0217" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-0401",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-0401" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-5363",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-5363" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-0286",
                "source" : "redhat-csaf",
                "cvssScore" : 7.4,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-0286" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-12797",
                "title" : "RFC7250 handshakes with unauthenticated servers don't abort as expected",
                "source" : "redhat-csaf",
                "cvssScore" : 7.4,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-12797" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-69419",
                "source" : "redhat-csaf",
                "cvssScore" : 7.4,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-69419" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-1292",
                "source" : "redhat-csaf",
                "cvssScore" : 6.7,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-1292" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-2068",
                "source" : "redhat-csaf",
                "cvssScore" : 6.7,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-2068" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-2650",
                "title" : "Possible DoS translating ASN.1 object identifiers",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-2650" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-6129",
                "title" : "POLY1305 MAC implementation corrupts vector registers on PowerPC",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-6129" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-69421",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-69421" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-11187",
                "title" : "Improper validation of PBMAC1 parameters in PKCS#12 MAC verification",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-11187" ],
                "unique" : false
              }, {
                "id" : "CVE-2020-1971",
                "title" : "EDIPARTYNAME NULL pointer dereference",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2020-1971" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-4304",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-4304" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-0464",
                "title" : "Excessive Resource Usage Verifying X.509 Policy Constraints",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-0464" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-6237",
                "title" : "Excessive time spent checking invalid RSA public keys",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-6237" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-5535",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-5535" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-6119",
                "title" : "Possible denial of service in X.509 name checks",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-6119" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-15468",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-15468" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-66199",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-66199" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-69420",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-69420" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-22796",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-22796" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-4741",
                "source" : "redhat-csaf",
                "cvssScore" : 5.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-4741" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-9230",
                "source" : "redhat-csaf",
                "cvssScore" : 5.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-9230" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-0727",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-0727" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-15469",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-15469" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-22795",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-22795" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-1343",
                "title" : "OCSP_basic_verify may incorrectly verify the response signing certificate",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-1343" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-2097",
                "title" : "AES OCB fails to encrypt some bytes",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-2097" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-0465",
                "title" : "Invalid certificate policies in leaf certificates are silently ignored",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-0465" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-0466",
                "title" : "Certificate policy check not enabled",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-0466" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-2975",
                "title" : "AES-SIV implementation ignores empty associated data entries",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-2975" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-3446",
                "title" : "Excessive time spent checking DH keys and parameters",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-3446" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-3817",
                "title" : "Excessive time spent checking DH q parameter value",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-3817" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-5678",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-5678" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-4603",
                "title" : "Excessive time spent checking DSA keys and parameters",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-4603" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-1255",
                "title" : "Input buffer over-read in AES-XTS implementation on 64 bit ARM",
                "source" : "redhat-csaf",
                "cvssScore" : 5.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-1255" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-4203",
                "source" : "redhat-csaf",
                "cvssScore" : 4.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-4203" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-68160",
                "source" : "redhat-csaf",
                "cvssScore" : 4.7,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-68160" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-69418",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-69418" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-2511",
                "source" : "redhat-csaf",
                "cvssScore" : 3.7,
                "severity" : "LOW",
                "cves" : [ "CVE-2024-2511" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2025-15467",
                "title" : "Stack buffer overflow in CMS (Auth)EnvelopedData parsing",
                "source" : "redhat-csaf",
                "cvssScore" : 9.8,
                "severity" : "CRITICAL",
                "cves" : [ "CVE-2025-15467" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/krb5-libs@1.18.2-32.el8_10?arch=x86_64&distro=rhel-8.10&upstream=krb5-1.18.2-32.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2024-3596",
                "source" : "redhat-csaf",
                "cvssScore" : 9.0,
                "severity" : "CRITICAL",
                "cves" : [ "CVE-2024-3596" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-42898",
                "title" : "PAC parsing in MIT Kerberos 5 (aka krb5) before 1.19.4 and 1.20.x before 1.20.1 has integer overflows that may lead to remote code execution (in KDC, kadmind, or a GSS or Kerberos application server) on 32-bit platforms (which have a resultant heap-based buffer overflow), and cause a denial of service on other platforms. This occurs in krb5_pac_parse in lib/krb5/krb/pac.c. Heimdal before 7.7.1 has \"a similar bug.\"",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-42898" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-39975",
                "title" : "kdc/do_tgs_req.c in MIT Kerberos 5 (aka krb5) 1.21 before 1.21.2 has a double free that is reachable if an authenticated user can trigger an authorization-data handling failure. Incorrect data is copied from one ticket to another.",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-39975" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-26462",
                "title" : "Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/kdc/ndr.c.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-26462" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-37370",
                "title" : "In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can modify the plaintext Extra Count field of a confidential GSS krb5 wrap token, causing the unwrapped token to appear truncated to the application.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-37370" ],
                "unique" : false
              }, {
                "id" : "CVE-2020-17049",
                "title" : "Kerberos KDC Security Feature Bypass Vulnerability",
                "source" : "redhat-csaf",
                "cvssScore" : 7.2,
                "severity" : "HIGH",
                "cves" : [ "CVE-2020-17049" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-36054",
                "title" : "lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) before 1.20.2 and 1.21.x before 1.21.1 frees an uninitialized pointer. A remote authenticated user can trigger a kadmind crash. This occurs because _xdr_kadm5_principal_ent_rec does not validate the relationship between n_key_data and the key_data array count.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-36054" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-37371",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-37371" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-24528",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-24528" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-26458",
                "title" : "Kerberos 5 (aka krb5) 1.21.2 contains a memory leak in /krb5/src/lib/rpc/pmap_rmt.c.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-26458" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-26461",
                "title" : "Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/lib/gssapi/krb5/k5sealv3.c.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-26461" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-3576",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-3576" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2024-3596",
                "source" : "redhat-csaf",
                "cvssScore" : 9.0,
                "severity" : "CRITICAL",
                "cves" : [ "CVE-2024-3596" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/python3-setuptools-wheel@39.2.0-9.el8_10?arch=noarch&distro=rhel-8.10&upstream=python-setuptools-39.2.0-9.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2024-6345",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-6345" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-47273",
                "title" : "setuptools has a path traversal vulnerability in PackageIndex.download that leads to Arbitrary File Write",
                "source" : "redhat-csaf",
                "cvssScore" : 7.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-47273" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-40897",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-40897" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2024-6345",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-6345" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/glibc-minimal-langpack@2.28-251.el8_10.31?arch=x86_64&distro=rhel-8.10&upstream=glibc-2.28-251.el8_10.31.src.rpm",
              "issues" : [ {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0861",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-0861" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4911",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-4911" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33599",
                "title" : "nscd: Stack-based buffer overflow in netgroup cache",
                "source" : "redhat-csaf",
                "cvssScore" : 7.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-33599" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-4802",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-4802" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4527",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4527" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4806",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4806" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4813",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4813" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-5702",
                "title" : "The strcmp implementation optimized for the Power10 processor in the GNU C Library version 2.39 and later writes to vector registers v20 to v31 without saving contents from the caller (those registers are defined as non-volatile registers by the powerpc64le ABI), resulting in overwriting of its contents and potentially altering control flow of the caller, or leaking the input strings to the function to other parts of the program.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-5702" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-0395",
                "title" : "When the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-0395" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33600",
                "title" : "nscd: Null pointer crashes after notfound response",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33600" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0915",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-0915" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-8058",
                "source" : "redhat-csaf",
                "cvssScore" : 4.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-8058" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33601",
                "title" : "nscd: netgroup cache may terminate daemon on memory allocation failure",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33601" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33602",
                "title" : "nscd: netgroup cache assumes NSS callback uses in-buffer strings",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33602" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/glibc@2.28-251.el8_10.31?arch=x86_64&distro=rhel-8.10&upstream=glibc-2.28-251.el8_10.31.src.rpm",
              "issues" : [ {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0861",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-0861" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4911",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-4911" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33599",
                "title" : "nscd: Stack-based buffer overflow in netgroup cache",
                "source" : "redhat-csaf",
                "cvssScore" : 7.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-33599" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-4802",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-4802" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4527",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4527" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4806",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4806" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4813",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4813" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-15281",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-15281" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-5702",
                "title" : "The strcmp implementation optimized for the Power10 processor in the GNU C Library version 2.39 and later writes to vector registers v20 to v31 without saving contents from the caller (those registers are defined as non-volatile registers by the powerpc64le ABI), resulting in overwriting of its contents and potentially altering control flow of the caller, or leaking the input strings to the function to other parts of the program.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-5702" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-0395",
                "title" : "When the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-0395" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33600",
                "title" : "nscd: Null pointer crashes after notfound response",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33600" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0915",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-0915" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-8058",
                "source" : "redhat-csaf",
                "cvssScore" : 4.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-8058" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33601",
                "title" : "nscd: netgroup cache may terminate daemon on memory allocation failure",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33601" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33602",
                "title" : "nscd: netgroup cache assumes NSS callback uses in-buffer strings",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33602" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/glibc-common@2.28-251.el8_10.31?arch=x86_64&distro=rhel-8.10&upstream=glibc-2.28-251.el8_10.31.src.rpm",
              "issues" : [ {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0861",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-0861" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4911",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-4911" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33599",
                "title" : "nscd: Stack-based buffer overflow in netgroup cache",
                "source" : "redhat-csaf",
                "cvssScore" : 7.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-33599" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-4802",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-4802" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4527",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4527" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4806",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4806" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4813",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4813" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-5702",
                "title" : "The strcmp implementation optimized for the Power10 processor in the GNU C Library version 2.39 and later writes to vector registers v20 to v31 without saving contents from the caller (those registers are defined as non-volatile registers by the powerpc64le ABI), resulting in overwriting of its contents and potentially altering control flow of the caller, or leaking the input strings to the function to other parts of the program.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-5702" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-0395",
                "title" : "When the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-0395" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33600",
                "title" : "nscd: Null pointer crashes after notfound response",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33600" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0915",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-0915" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-8058",
                "source" : "redhat-csaf",
                "cvssScore" : 4.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-8058" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33601",
                "title" : "nscd: netgroup cache may terminate daemon on memory allocation failure",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33601" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33602",
                "title" : "nscd: netgroup cache assumes NSS callback uses in-buffer strings",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33602" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/xz-libs@5.2.4-4.el8_6?arch=x86_64&distro=rhel-8.10&upstream=xz-5.2.4-4.el8_6.src.rpm",
              "issues" : [ {
                "id" : "CVE-2022-1271",
                "title" : "An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is applied on the attacker's chosen file name (for example, a crafted file name), this can overwrite an attacker's content to an arbitrary attacker-selected file. This flaw occurs due to insufficient validation when processing filenames with two or more newlines where selected content and the target file names are embedded in crafted multi-line file names. This flaw allows a remote, low privileged attacker to force zgrep to write arbitrary files on the system.",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-1271" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-31115",
                "title" : "XZ has a heap-use-after-free bug in threaded .xz decoder",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-31115" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2022-1271",
                "title" : "An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is applied on the attacker's chosen file name (for example, a crafted file name), this can overwrite an attacker's content to an arbitrary attacker-selected file. This flaw occurs due to insufficient validation when processing filenames with two or more newlines where selected content and the target file names are embedded in crafted multi-line file names. This flaw allows a remote, low privileged attacker to force zgrep to write arbitrary files on the system.",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-1271" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/python3-libs@3.6.8-75.el8_10?arch=x86_64&distro=rhel-8.10&upstream=python3-3.6.8-75.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2023-40217",
                "source" : "redhat-csaf",
                "cvssScore" : 8.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-40217" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-42919",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-42919" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-6597",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-6597" ],
                "unique" : false
              }, {
                "id" : "CVE-2015-20107",
                "source" : "redhat-csaf",
                "cvssScore" : 7.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2015-20107" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-12718",
                "title" : "Bypass extraction filter to modify file metadata outside extraction directory",
                "source" : "redhat-csaf",
                "cvssScore" : 7.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-12718" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-4517",
                "title" : "Arbitrary writes via tarfile realpath overflow",
                "source" : "redhat-csaf",
                "cvssScore" : 7.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-4517" ],
                "unique" : false
              }, {
                "id" : "CVE-2020-10735",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2020-10735" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-45061",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-45061" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-24329",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-24329" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-6232",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-6232" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-12084",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-12084" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-4138",
                "title" : "Bypassing extraction filter to create symlinks to arbitrary targets outside extraction directory",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-4138" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-4435",
                "title" : "Tarfile extracts filtered members when errorlevel=0",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-4435" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-8194",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-8194" ],
                "unique" : false
              }, {
                "id" : "CVE-2021-28861",
                "source" : "redhat-csaf",
                "cvssScore" : 7.4,
                "severity" : "HIGH",
                "cves" : [ "CVE-2021-28861" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-4330",
                "title" : "Extraction filter bypass for linking outside extraction directory",
                "source" : "redhat-csaf",
                "cvssScore" : 7.3,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-4330" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-15366",
                "source" : "redhat-csaf",
                "cvssScore" : 7.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-15366" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-15367",
                "source" : "redhat-csaf",
                "cvssScore" : 7.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-15367" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-1299",
                "source" : "redhat-csaf",
                "cvssScore" : 7.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-1299" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-4519",
                "title" : "webbrowser.open() allows leading dashes in URLs",
                "source" : "redhat-csaf",
                "cvssScore" : 7.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-4519" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-6923",
                "source" : "redhat-csaf",
                "cvssScore" : 6.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-6923" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-0938",
                "source" : "redhat-csaf",
                "cvssScore" : 6.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-0938" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-13836",
                "source" : "redhat-csaf",
                "cvssScore" : 6.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-13836" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-9287",
                "source" : "redhat-csaf",
                "cvssScore" : 6.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-9287" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-0450",
                "source" : "redhat-csaf",
                "cvssScore" : 6.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-0450" ],
                "unique" : false
              }, {
                "id" : "CVE-2007-4559",
                "title" : "Directory traversal vulnerability in the (1) extract and (2) extractall functions in the tarfile module in Python allows user-assisted remote attackers to overwrite arbitrary files via a .. (dot dot) sequence in filenames in a TAR archive, a related issue to CVE-2001-1267.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2007-4559" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-27043",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-27043" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-8088",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-8088" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-0397",
                "source" : "redhat-csaf",
                "cvssScore" : 5.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-0397" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-7592",
                "source" : "redhat-csaf",
                "cvssScore" : 4.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-7592" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0865",
                "source" : "redhat-csaf",
                "cvssScore" : 4.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-0865" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-6069",
                "title" : "HTMLParser quadratic complexity when processing malformed inputs",
                "source" : "redhat-csaf",
                "cvssScore" : 4.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-6069" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-8291",
                "source" : "redhat-csaf",
                "cvssScore" : 4.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-8291" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-6075",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-6075" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-11168",
                "source" : "redhat-csaf",
                "cvssScore" : 3.7,
                "severity" : "LOW",
                "cves" : [ "CVE-2024-11168" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-4032",
                "source" : "redhat-csaf",
                "cvssScore" : 3.7,
                "severity" : "LOW",
                "cves" : [ "CVE-2024-4032" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-5642",
                "title" : "Buffer overread when using an empty list with SSLContext.set_npn_protocols()",
                "source" : "redhat-csaf",
                "cvssScore" : 2.7,
                "severity" : "LOW",
                "cves" : [ "CVE-2024-5642" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2023-40217",
                "source" : "redhat-csaf",
                "cvssScore" : 8.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-40217" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/zlib@1.2.11-25.el8?arch=x86_64&distro=rhel-8.10&upstream=zlib-1.2.11-25.el8.src.rpm",
              "issues" : [ {
                "id" : "CVE-2018-25032",
                "title" : "zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.",
                "source" : "redhat-csaf",
                "cvssScore" : 8.2,
                "severity" : "HIGH",
                "cves" : [ "CVE-2018-25032" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-37434",
                "title" : "zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference).",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-37434" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2018-25032",
                "title" : "zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.",
                "source" : "redhat-csaf",
                "cvssScore" : 8.2,
                "severity" : "HIGH",
                "cves" : [ "CVE-2018-25032" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libcap@2.48-6.el8_9?arch=x86_64&distro=rhel-8.10&upstream=libcap-2.48-6.el8_9.src.rpm",
              "issues" : [ {
                "id" : "CVE-2023-2603",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-2603" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-2602",
                "title" : "A vulnerability was found in the pthread_create() function in libcap. This issue may allow a malicious actor to use cause __real_pthread_create() to return an error, which can exhaust the process memory.",
                "source" : "redhat-csaf",
                "cvssScore" : 3.3,
                "severity" : "LOW",
                "cves" : [ "CVE-2023-2602" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2023-2603",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-2603" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/ncurses-base@6.1-10.20180224.el8?arch=noarch&distro=rhel-8.10&upstream=ncurses-6.1-10.20180224.el8.src.rpm",
              "issues" : [ {
                "id" : "CVE-2023-29491",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-29491" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-69720",
                "title" : "The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-69720" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-29458",
                "title" : "ncurses 6.3 before patch 20220416 has an out-of-bounds read and segmentation violation in convert_strings in tinfo/read_entry.c in the terminfo library.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-29458" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2023-29491",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-29491" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/ncurses-libs@6.1-10.20180224.el8?arch=x86_64&distro=rhel-8.10&upstream=ncurses-6.1-10.20180224.el8.src.rpm",
              "issues" : [ {
                "id" : "CVE-2023-29491",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-29491" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-69720",
                "title" : "The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-69720" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-29458",
                "title" : "ncurses 6.3 before patch 20220416 has an out-of-bounds read and segmentation violation in convert_strings in tinfo/read_entry.c in the terminfo library.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-29458" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2023-29491",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-29491" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/sqlite-libs@3.26.0-20.el8_10?arch=x86_64&distro=rhel-8.10&upstream=sqlite-3.26.0-20.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2025-6965",
                "title" : "Integer Truncation on SQLite",
                "source" : "redhat-csaf",
                "cvssScore" : 7.7,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-6965" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-7104",
                "source" : "redhat-csaf",
                "cvssScore" : 7.3,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-7104" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-3277",
                "title" : "An integer overflow can be triggered in SQLite’s `concat_ws()` function. The resulting, truncated integer is then used to allocate a buffer. When SQLite then writes the resulting string to the buffer, it uses the original, untruncated size and thus a wild Heap Buffer overflow of size ~4GB can be triggered. This can result in arbitrary code execution.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.3,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-3277" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-35737",
                "title" : "SQLite 1.0.12 through 3.39.x before 3.39.2 sometimes allows an array-bounds overflow if billions of bytes are used in a string argument to a C API.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-35737" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2025-6965",
                "title" : "Integer Truncation on SQLite",
                "source" : "redhat-csaf",
                "cvssScore" : 7.7,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-6965" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/expat@2.5.0-1.el8_10?arch=x86_64&distro=rhel-8.10&upstream=expat-2.5.0-1.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2023-52425",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-52425" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-28757",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-28757" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-45490",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-45490" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-45491",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-45491" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-8176",
                "title" : "Libexpat: expat: improper restriction of xml entity expansion depth in libexpat",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-8176" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-45492",
                "source" : "redhat-csaf",
                "cvssScore" : 6.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-45492" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-50602",
                "title" : "An issue was discovered in libexpat before 2.6.4. There is a crash within the XML_ResumeParser function because XML_StopParser can stop/suspend an unstarted parser.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-50602" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-59375",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-59375" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2023-52425",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-52425" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libtirpc@1.1.4-12.el8_10?arch=x86_64&distro=rhel-8.10&upstream=libtirpc-1.1.4-12.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2021-46828",
                "title" : "In libtirpc before 1.3.3rc1, remote attackers could exhaust the file descriptors of a process that uses libtirpc because idle TCP connections are mishandled. This can, in turn, lead to an svc_run infinite loop without accepting new connections.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2021-46828" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2021-46828",
                "title" : "In libtirpc before 1.3.3rc1, remote attackers could exhaust the file descriptors of a process that uses libtirpc because idle TCP connections are mishandled. This can, in turn, lead to an svc_run infinite loop without accepting new connections.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2021-46828" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/pcre2@10.32-3.el8_6?arch=x86_64&distro=rhel-8.10&upstream=pcre2-10.32-3.el8_6.src.rpm",
              "issues" : [ {
                "id" : "CVE-2022-1586",
                "title" : "An out-of-bounds read vulnerability was discovered in the PCRE2 library in the compile_xclass_matchingpath() function of the pcre2_jit_compile.c file. This involves a unicode property matching issue in JIT-compiled regular expressions. The issue occurs because the character was not fully read in case-less matching within JIT.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-1586" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-1587",
                "title" : "An out-of-bounds read vulnerability was discovered in the PCRE2 library in the get_recurse_data_length() function of the pcre2_jit_compile.c file. This issue affects recursions in JIT-compiled regular expressions caused by duplicate data transfers.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-1587" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2022-1586",
                "title" : "An out-of-bounds read vulnerability was discovered in the PCRE2 library in the compile_xclass_matchingpath() function of the pcre2_jit_compile.c file. This involves a unicode property matching issue in JIT-compiled regular expressions. The issue occurs because the character was not fully read in case-less matching within JIT.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-1586" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/bash@4.4.20-6.el8_10?arch=x86_64&distro=rhel-8.10&upstream=bash-4.4.20-6.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2022-3715",
                "source" : "redhat-csaf",
                "cvssScore" : 6.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-3715" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2022-3715",
                "source" : "redhat-csaf",
                "cvssScore" : 6.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-3715" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/gmp@6.1.2-11.el8?arch=x86_64&distro=rhel-8.10&epoch=1&upstream=gmp-6.1.2-11.el8.src.rpm",
              "issues" : [ {
                "id" : "CVE-2021-43618",
                "title" : "GNU Multiple Precision Arithmetic Library (GMP) through 6.2.1 has an mpz/inp_raw.c integer overflow and resultant buffer overflow via crafted input, leading to a segmentation fault on 32-bit platforms.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2021-43618" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2021-43618",
                "title" : "GNU Multiple Precision Arithmetic Library (GMP) through 6.2.1 has an mpz/inp_raw.c integer overflow and resultant buffer overflow via crafted input, leading to a segmentation fault on 32-bit platforms.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2021-43618" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libgcc@8.5.0-28.el8_10?arch=x86_64&distro=rhel-8.10&upstream=gcc-8.5.0-28.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2020-11023",
                "title" : "Potential XSS vulnerability in jQuery",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2020-11023" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2020-11023",
                "title" : "Potential XSS vulnerability in jQuery",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2020-11023" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libtasn1@4.13-5.el8_10?arch=x86_64&distro=rhel-8.10&upstream=libtasn1-4.13-5.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2021-46848",
                "title" : "GNU Libtasn1 before 4.19.0 has an ETYPE_OK off-by-one array size check that affects asn1_encode_simple_der.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2021-46848" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-12133",
                "title" : "Libtasn1: inefficient der decoding in libtasn1 leading to potential remote dos",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-12133" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2021-46848",
                "title" : "GNU Libtasn1 before 4.19.0 has an ETYPE_OK off-by-one array size check that affects asn1_encode_simple_der.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2021-46848" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libcom_err@1.45.6-7.el8_10?arch=x86_64&distro=rhel-8.10&upstream=e2fsprogs-1.45.6-7.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2022-1304",
                "title" : "An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a segmentation fault and possibly arbitrary code execution via a specially crafted filesystem.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-1304" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2022-1304",
                "title" : "An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a segmentation fault and possibly arbitrary code execution via a specially crafted filesystem.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-1304" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/python3-pip-wheel@9.0.3-24.el8?arch=noarch&distro=rhel-8.10&upstream=python-pip-9.0.3-24.el8.src.rpm",
              "issues" : [ {
                "id" : "CVE-2007-4559",
                "title" : "Directory traversal vulnerability in the (1) extract and (2) extractall functions in the tarfile module in Python allows user-assisted remote attackers to overwrite arbitrary files via a .. (dot dot) sequence in filenames in a TAR archive, a related issue to CVE-2001-1267.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2007-4559" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2007-4559",
                "title" : "Directory traversal vulnerability in the (1) extract and (2) extractall functions in the tarfile module in Python allows user-assisted remote attackers to overwrite arbitrary files via a .. (dot dot) sequence in filenames in a TAR archive, a related issue to CVE-2001-1267.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2007-4559" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/bzip2-libs@1.0.6-28.el8_10?arch=x86_64&distro=rhel-8.10&upstream=bzip2-1.0.6-28.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2019-12900",
                "title" : "BZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many selectors.",
                "source" : "redhat-csaf",
                "cvssScore" : 4.4,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2019-12900" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2019-12900",
                "title" : "BZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many selectors.",
                "source" : "redhat-csaf",
                "cvssScore" : 4.4,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2019-12900" ],
                "unique" : false
              }
            } ],
            "highestVulnerability" : {
              "id" : "CVE-2025-15467",
              "title" : "Stack buffer overflow in CMS (Auth)EnvelopedData parsing",
              "source" : "redhat-csaf",
              "cvssScore" : 9.8,
              "severity" : "CRITICAL",
              "cves" : [ "CVE-2025-15467" ],
              "unique" : false
            }
          }, {
            "ref" : "pkg:rpm/redhat/subscription-manager@1.28.44-1.el8_10?arch=x86_64&distro=rhel-8.10&upstream=subscription-manager-1.28.44-1.el8_10.src.rpm",
            "issues" : [ {
              "id" : "CVE-2023-3899",
              "source" : "redhat-csaf",
              "cvssScore" : 7.8,
              "severity" : "HIGH",
              "cves" : [ "CVE-2023-3899" ],
              "unique" : false
            } ],
            "transitive" : [ {
              "ref" : "pkg:rpm/redhat/openssl-libs@1.1.1k-15.el8_6?arch=x86_64&distro=rhel-8.10&epoch=1&upstream=openssl-1.1.1k-15.el8_6.src.rpm",
              "issues" : [ {
                "id" : "CVE-2025-15467",
                "title" : "Stack buffer overflow in CMS (Auth)EnvelopedData parsing",
                "source" : "redhat-csaf",
                "cvssScore" : 9.8,
                "severity" : "CRITICAL",
                "cves" : [ "CVE-2025-15467" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-1473",
                "title" : "Resource leakage when decoding certificates and keys",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-1473" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-3358",
                "title" : "Using a Custom Cipher with NID_undef may lead to NULL encryption",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-3358" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-3602",
                "title" : "X.509 Email Address 4-byte Buffer Overflow",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-3602" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-3786",
                "title" : "X.509 Email Address Variable Length Buffer Overflow",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-3786" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-4450",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-4450" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-0215",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-0215" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-0216",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-0216" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-0217",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-0217" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-0401",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-0401" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-5363",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-5363" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-0286",
                "source" : "redhat-csaf",
                "cvssScore" : 7.4,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-0286" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-12797",
                "title" : "RFC7250 handshakes with unauthenticated servers don't abort as expected",
                "source" : "redhat-csaf",
                "cvssScore" : 7.4,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-12797" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-69419",
                "source" : "redhat-csaf",
                "cvssScore" : 7.4,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-69419" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-1292",
                "source" : "redhat-csaf",
                "cvssScore" : 6.7,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-1292" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-2068",
                "source" : "redhat-csaf",
                "cvssScore" : 6.7,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-2068" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-2650",
                "title" : "Possible DoS translating ASN.1 object identifiers",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-2650" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-6129",
                "title" : "POLY1305 MAC implementation corrupts vector registers on PowerPC",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-6129" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-69421",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-69421" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-11187",
                "title" : "Improper validation of PBMAC1 parameters in PKCS#12 MAC verification",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-11187" ],
                "unique" : false
              }, {
                "id" : "CVE-2020-1971",
                "title" : "EDIPARTYNAME NULL pointer dereference",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2020-1971" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-4304",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-4304" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-0464",
                "title" : "Excessive Resource Usage Verifying X.509 Policy Constraints",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-0464" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-6237",
                "title" : "Excessive time spent checking invalid RSA public keys",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-6237" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-5535",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-5535" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-6119",
                "title" : "Possible denial of service in X.509 name checks",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-6119" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-15468",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-15468" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-66199",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-66199" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-69420",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-69420" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-22796",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-22796" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-4741",
                "source" : "redhat-csaf",
                "cvssScore" : 5.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-4741" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-9230",
                "source" : "redhat-csaf",
                "cvssScore" : 5.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-9230" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-0727",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-0727" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-15469",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-15469" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-22795",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-22795" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-1343",
                "title" : "OCSP_basic_verify may incorrectly verify the response signing certificate",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-1343" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-2097",
                "title" : "AES OCB fails to encrypt some bytes",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-2097" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-0465",
                "title" : "Invalid certificate policies in leaf certificates are silently ignored",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-0465" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-0466",
                "title" : "Certificate policy check not enabled",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-0466" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-2975",
                "title" : "AES-SIV implementation ignores empty associated data entries",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-2975" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-3446",
                "title" : "Excessive time spent checking DH keys and parameters",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-3446" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-3817",
                "title" : "Excessive time spent checking DH q parameter value",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-3817" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-5678",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-5678" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-4603",
                "title" : "Excessive time spent checking DSA keys and parameters",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-4603" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-1255",
                "title" : "Input buffer over-read in AES-XTS implementation on 64 bit ARM",
                "source" : "redhat-csaf",
                "cvssScore" : 5.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-1255" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-4203",
                "source" : "redhat-csaf",
                "cvssScore" : 4.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-4203" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-68160",
                "source" : "redhat-csaf",
                "cvssScore" : 4.7,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-68160" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-69418",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-69418" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-2511",
                "source" : "redhat-csaf",
                "cvssScore" : 3.7,
                "severity" : "LOW",
                "cves" : [ "CVE-2024-2511" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2025-15467",
                "title" : "Stack buffer overflow in CMS (Auth)EnvelopedData parsing",
                "source" : "redhat-csaf",
                "cvssScore" : 9.8,
                "severity" : "CRITICAL",
                "cves" : [ "CVE-2025-15467" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libcurl@7.61.1-34.el8_10.11?arch=x86_64&distro=rhel-8.10&upstream=curl-7.61.1-34.el8_10.11.src.rpm",
              "issues" : [ {
                "id" : "CVE-2022-32207",
                "title" : "When curl < 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes the operation atomic by finalizing the operation with a rename from a temporary name to the final target file name.In that rename operation, it might accidentally *widen* the permissions for the target file, leaving the updated file accessible to more users than intended.",
                "source" : "redhat-csaf",
                "cvssScore" : 9.8,
                "severity" : "CRITICAL",
                "cves" : [ "CVE-2022-32207" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-22576",
                "title" : "An improper authentication vulnerability exists in curl 7.33.0 to and including 7.82.0 which might allow reuse OAUTH2-authenticated connections without properly making sure that the connection was authenticated with the same credentials as set for this transfer. This affects SASL-enabled protocols: SMPTP(S), IMAP(S), POP3(S) and LDAP(S) (openldap only).",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-22576" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-38545",
                "title" : "This flaw makes curl overflow a heap based buffer in the SOCKS5 proxy\nhandshake.\n\nWhen curl is asked to pass along the host name to the SOCKS5 proxy to allow\nthat to resolve the address instead of it getting done by curl itself, the\nmaximum length that host name can be is 255 bytes.\n\nIf the host name is detected to be longer, curl switches to local name\nresolving and instead passes on the resolved address only. Due to this bug,\nthe local variable that means \"let the host resolve the name\" could get the\nwrong value during a slow SOCKS5 handshake, and contrary to the intention,\ncopy the too long host name to the target buffer instead of copying just the\nresolved address there.\n\nThe target buffer being a heap based buffer, and the host name coming from the\nURL that curl has been told to operate with.",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-38545" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-27775",
                "title" : "An information disclosure vulnerability exists in curl 7.65.0 to 7.82.0 are vulnerable that by using an IPv6 address that was in the connection pool but with a different zone id it could reuse a connection instead.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-27775" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-27782",
                "title" : "libcurl would reuse a previously created connection even when a TLS or SSHrelated option had been changed that should have prohibited reuse.libcurl keeps previously used connections in a connection pool for subsequenttransfers to reuse if one of them matches the setup. However, several TLS andSSH settings were left out from the configuration match checks, making themmatch too easily.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-27782" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-2398",
                "title" : "HTTP/2 push headers memory-leak",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2398" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-32206",
                "title" : "curl < 7.84.0 supports \"chained\" HTTP compression algorithms, meaning that a serverresponse can be compressed multiple times and potentially with different algorithms. The number of acceptable \"links\" in this \"decompression chain\" was unbounded, allowing a malicious server to insert a virtually unlimited number of compression steps.The use of such a decompression chain could result in a \"malloc bomb\", makingcurl end up spending enormous amounts of allocated heap memory, or trying toand returning out of memory errors.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-32206" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-23916",
                "title" : "An allocation of resources without limits or throttling vulnerability exists in curl <v7.88.0 based on the \"chained\" HTTP compression algorithms, meaning that a server response can be compressed multiple times and potentially with differentalgorithms. The number of acceptable \"links\" in this \"decompression chain\" wascapped, but the cap was implemented on a per-header basis allowing a maliciousserver to insert a virtually unlimited number of compression steps simply byusing many headers. The use of such a decompression chain could result in a \"malloc bomb\", making curl end up spending enormous amounts of allocated heap memory, or trying to and returning out of memory errors.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-23916" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-43552",
                "title" : "A use after free vulnerability exists in curl <7.87.0. Curl can be asked to *tunnel* virtually all protocols it supports through an HTTP proxy. HTTP proxies can (and often do) deny such tunnel operations. When getting denied to tunnel the specific protocols SMB or TELNET, curl would use a heap-allocated struct after it had been freed, in its transfer shutdown code path.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-43552" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-27535",
                "title" : "An authentication bypass vulnerability exists in libcurl <8.0.0 in the FTP connection reuse feature that can result in wrong credentials being used during subsequent transfers. Previously created connections are kept in a connection pool for reuse if they match the current setup. However, certain FTP settings such as CURLOPT_FTP_ACCOUNT, CURLOPT_FTP_ALTERNATIVE_TO_USER, CURLOPT_FTP_SSL_CCC, and CURLOPT_USE_SSL were not included in the configuration match checks, causing them to match too easily. This could lead to libcurl using the wrong credentials when performing a transfer, potentially allowing unauthorized access to sensitive information.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-27535" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-27536",
                "title" : "An authentication bypass vulnerability exists libcurl <8.0.0 in the connection reuse feature which can reuse previously established connections with incorrect user permissions due to a failure to check for changes in the CURLOPT_GSSAPI_DELEGATION option. This vulnerability affects krb5/kerberos/negotiate/GSSAPI transfers and could potentially result in unauthorized access to sensitive information. The safest option is to not reuse connections if the CURLOPT_GSSAPI_DELEGATION option has been changed.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-27536" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-28321",
                "title" : "An improper certificate validation vulnerability exists in curl <v8.1.0 in the way it supports matching of wildcard patterns when listed as \"Subject Alternative Name\" in TLS server certificates. curl can be built to use its own name matching function for TLS rather than one provided by a TLS library. This private wildcard matching function would match IDN (International Domain Name) hosts incorrectly and could as a result accept patterns that otherwise should mismatch. IDN hostnames are converted to puny code before used for certificate checks. Puny coded names always start with `xn--` and should not be allowed to pattern match, but the wildcard check in curl could still check for `x*`, which would match even though the IDN name most likely contained nothing even resembling an `x`.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-28321" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-27538",
                "title" : "An authentication bypass vulnerability exists in libcurl prior to v8.0.0 where it reuses a previously established SSH connection despite the fact that an SSH option was modified, which should have prevented reuse. libcurl maintains a pool of previously used connections to reuse them for subsequent transfers if the configurations match. However, two SSH settings were omitted from the configuration check, allowing them to match easily, potentially leading to the reuse of an inappropriate connection.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-27538" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-32208",
                "title" : "When curl < 7.84.0 does FTP transfers secured by krb5, it handles message verification failures wrongly. This flaw makes it possible for a Man-In-The-Middle attack to go unnoticed and even allows it to inject data to the client.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-32208" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-46218",
                "title" : "This flaw allows a malicious HTTP server to set \"super cookies\" in curl that\nare then passed back to more origins than what is otherwise allowed or\npossible. This allows a site to set cookies that then would get sent to\ndifferent and unrelated sites and domains.\n\nIt could do this by exploiting a mixed case flaw in curl's function that\nverifies a given cookie domain against the Public Suffix List (PSL). For\nexample a cookie could be set with `domain=co.UK` when the URL used a lower\ncase hostname `curl.co.uk`, even though `co.uk` is listed as a PSL domain.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-46218" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-9086",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-9086" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-27774",
                "title" : "An insufficiently protected credentials vulnerability exists in curl 4.9 to and include curl 7.82.0 are affected that could allow an attacker to extract credentials when follows HTTP(S) redirects is used with authentication could leak credentials to other services that exist on different protocols or port numbers.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-27774" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-32221",
                "title" : "When doing HTTP(S) transfers, libcurl might erroneously use the read callback (`CURLOPT_READFUNCTION`) to ask for data to send, even when the `CURLOPT_POSTFIELDS` option has been set, if the same handle previously was used to issue a `PUT` request which used that callback. This flaw may surprise the application and cause it to misbehave and either send off the wrong data or use memory after free or similar in the subsequent `POST` request. The problem exists in the logic for a reused handle when it is changed from a PUT to a POST.",
                "source" : "redhat-csaf",
                "cvssScore" : 4.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-32221" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-27776",
                "title" : "A insufficiently protected credentials vulnerability in fixed in curl 7.83.0 might leak authentication or cookie header data on HTTP redirects to the same host but another port number.",
                "source" : "redhat-csaf",
                "cvssScore" : 4.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-27776" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-27533",
                "title" : "A vulnerability in input validation exists in curl <8.0 during communication using the TELNET protocol may allow an attacker to pass on maliciously crafted user name and \"telnet options\" during server negotiation. The lack of proper input scrubbing allows an attacker to send content or perform option negotiation without the application's intent. This vulnerability could be exploited if an application allows user input, thereby enabling attackers to execute arbitrary code on the system.",
                "source" : "redhat-csaf",
                "cvssScore" : 4.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-27533" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-27534",
                "title" : "A path traversal vulnerability exists in curl <8.0.0 SFTP implementation causes the tilde (~) character to be wrongly replaced when used as a prefix in the first path element, in addition to its intended use as the first element to indicate a path relative to the user's home directory. Attackers can exploit this flaw to bypass filtering or execute arbitrary code by crafting a path like /~2/foo while accessing a server with a specific user.",
                "source" : "redhat-csaf",
                "cvssScore" : 3.7,
                "severity" : "LOW",
                "cves" : [ "CVE-2023-27534" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-28322",
                "title" : "An information disclosure vulnerability exists in curl <v8.1.0 when doing HTTP(S) transfers, libcurl might erroneously use the read callback (`CURLOPT_READFUNCTION`) to ask for data to send, even when the `CURLOPT_POSTFIELDS` option has been set, if the same handle previously wasused to issue a `PUT` request which used that callback. This flaw may surprise the application and cause it to misbehave and either send off the wrong data or use memory after free or similar in the second transfer. The problem exists in the logic for a reused handle when it is (expected to be) changed from a PUT to a POST.",
                "source" : "redhat-csaf",
                "cvssScore" : 3.7,
                "severity" : "LOW",
                "cves" : [ "CVE-2023-28322" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-38546",
                "source" : "redhat-csaf",
                "cvssScore" : 3.7,
                "severity" : "LOW",
                "cves" : [ "CVE-2023-38546" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-35252",
                "title" : "When curl is used to retrieve and parse cookies from a HTTP(S) server, itaccepts cookies using control codes that when later are sent back to a HTTPserver might make the server return 400 responses. Effectively allowing a\"sister site\" to deny service to all siblings.",
                "source" : "redhat-csaf",
                "cvssScore" : 3.1,
                "severity" : "LOW",
                "cves" : [ "CVE-2022-35252" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2022-32207",
                "title" : "When curl < 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes the operation atomic by finalizing the operation with a rename from a temporary name to the final target file name.In that rename operation, it might accidentally *widen* the permissions for the target file, leaving the updated file accessible to more users than intended.",
                "source" : "redhat-csaf",
                "cvssScore" : 9.8,
                "severity" : "CRITICAL",
                "cves" : [ "CVE-2022-32207" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/curl@7.61.1-34.el8_10.11?arch=x86_64&distro=rhel-8.10&upstream=curl-7.61.1-34.el8_10.11.src.rpm",
              "issues" : [ {
                "id" : "CVE-2022-32207",
                "title" : "When curl < 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes the operation atomic by finalizing the operation with a rename from a temporary name to the final target file name.In that rename operation, it might accidentally *widen* the permissions for the target file, leaving the updated file accessible to more users than intended.",
                "source" : "redhat-csaf",
                "cvssScore" : 9.8,
                "severity" : "CRITICAL",
                "cves" : [ "CVE-2022-32207" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-22576",
                "title" : "An improper authentication vulnerability exists in curl 7.33.0 to and including 7.82.0 which might allow reuse OAUTH2-authenticated connections without properly making sure that the connection was authenticated with the same credentials as set for this transfer. This affects SASL-enabled protocols: SMPTP(S), IMAP(S), POP3(S) and LDAP(S) (openldap only).",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-22576" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-38545",
                "title" : "This flaw makes curl overflow a heap based buffer in the SOCKS5 proxy\nhandshake.\n\nWhen curl is asked to pass along the host name to the SOCKS5 proxy to allow\nthat to resolve the address instead of it getting done by curl itself, the\nmaximum length that host name can be is 255 bytes.\n\nIf the host name is detected to be longer, curl switches to local name\nresolving and instead passes on the resolved address only. Due to this bug,\nthe local variable that means \"let the host resolve the name\" could get the\nwrong value during a slow SOCKS5 handshake, and contrary to the intention,\ncopy the too long host name to the target buffer instead of copying just the\nresolved address there.\n\nThe target buffer being a heap based buffer, and the host name coming from the\nURL that curl has been told to operate with.",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-38545" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-15079",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-15079" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-27775",
                "title" : "An information disclosure vulnerability exists in curl 7.65.0 to 7.82.0 are vulnerable that by using an IPv6 address that was in the connection pool but with a different zone id it could reuse a connection instead.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-27775" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-27782",
                "title" : "libcurl would reuse a previously created connection even when a TLS or SSHrelated option had been changed that should have prohibited reuse.libcurl keeps previously used connections in a connection pool for subsequenttransfers to reuse if one of them matches the setup. However, several TLS andSSH settings were left out from the configuration match checks, making themmatch too easily.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-27782" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-2398",
                "title" : "HTTP/2 push headers memory-leak",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2398" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-13034",
                "source" : "redhat-csaf",
                "cvssScore" : 6.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-13034" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-14819",
                "source" : "redhat-csaf",
                "cvssScore" : 6.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-14819" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-1965",
                "source" : "redhat-csaf",
                "cvssScore" : 6.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-1965" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-32206",
                "title" : "curl < 7.84.0 supports \"chained\" HTTP compression algorithms, meaning that a serverresponse can be compressed multiple times and potentially with different algorithms. The number of acceptable \"links\" in this \"decompression chain\" was unbounded, allowing a malicious server to insert a virtually unlimited number of compression steps.The use of such a decompression chain could result in a \"malloc bomb\", makingcurl end up spending enormous amounts of allocated heap memory, or trying toand returning out of memory errors.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-32206" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-23916",
                "title" : "An allocation of resources without limits or throttling vulnerability exists in curl <v7.88.0 based on the \"chained\" HTTP compression algorithms, meaning that a server response can be compressed multiple times and potentially with differentalgorithms. The number of acceptable \"links\" in this \"decompression chain\" wascapped, but the cap was implemented on a per-header basis allowing a maliciousserver to insert a virtually unlimited number of compression steps simply byusing many headers. The use of such a decompression chain could result in a \"malloc bomb\", making curl end up spending enormous amounts of allocated heap memory, or trying to and returning out of memory errors.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-23916" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-14524",
                "title" : "bearer token leak on cross-protocol redirect",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-14524" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-3784",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-3784" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-3805",
                "source" : "redhat-csaf",
                "cvssScore" : 6.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-3805" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-43552",
                "title" : "A use after free vulnerability exists in curl <7.87.0. Curl can be asked to *tunnel* virtually all protocols it supports through an HTTP proxy. HTTP proxies can (and often do) deny such tunnel operations. When getting denied to tunnel the specific protocols SMB or TELNET, curl would use a heap-allocated struct after it had been freed, in its transfer shutdown code path.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-43552" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-27535",
                "title" : "An authentication bypass vulnerability exists in libcurl <8.0.0 in the FTP connection reuse feature that can result in wrong credentials being used during subsequent transfers. Previously created connections are kept in a connection pool for reuse if they match the current setup. However, certain FTP settings such as CURLOPT_FTP_ACCOUNT, CURLOPT_FTP_ALTERNATIVE_TO_USER, CURLOPT_FTP_SSL_CCC, and CURLOPT_USE_SSL were not included in the configuration match checks, causing them to match too easily. This could lead to libcurl using the wrong credentials when performing a transfer, potentially allowing unauthorized access to sensitive information.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-27535" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-27536",
                "title" : "An authentication bypass vulnerability exists libcurl <8.0.0 in the connection reuse feature which can reuse previously established connections with incorrect user permissions due to a failure to check for changes in the CURLOPT_GSSAPI_DELEGATION option. This vulnerability affects krb5/kerberos/negotiate/GSSAPI transfers and could potentially result in unauthorized access to sensitive information. The safest option is to not reuse connections if the CURLOPT_GSSAPI_DELEGATION option has been changed.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-27536" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-28321",
                "title" : "An improper certificate validation vulnerability exists in curl <v8.1.0 in the way it supports matching of wildcard patterns when listed as \"Subject Alternative Name\" in TLS server certificates. curl can be built to use its own name matching function for TLS rather than one provided by a TLS library. This private wildcard matching function would match IDN (International Domain Name) hosts incorrectly and could as a result accept patterns that otherwise should mismatch. IDN hostnames are converted to puny code before used for certificate checks. Puny coded names always start with `xn--` and should not be allowed to pattern match, but the wildcard check in curl could still check for `x*`, which would match even though the IDN name most likely contained nothing even resembling an `x`.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-28321" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-10966",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-10966" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-3783",
                "source" : "redhat-csaf",
                "cvssScore" : 5.7,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-3783" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-27538",
                "title" : "An authentication bypass vulnerability exists in libcurl prior to v8.0.0 where it reuses a previously established SSH connection despite the fact that an SSH option was modified, which should have prevented reuse. libcurl maintains a pool of previously used connections to reuse them for subsequent transfers if the configurations match. However, two SSH settings were omitted from the configuration check, allowing them to match easily, potentially leading to the reuse of an inappropriate connection.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-27538" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-32208",
                "title" : "When curl < 7.84.0 does FTP transfers secured by krb5, it handles message verification failures wrongly. This flaw makes it possible for a Man-In-The-Middle attack to go unnoticed and even allows it to inject data to the client.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-32208" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-46218",
                "title" : "This flaw allows a malicious HTTP server to set \"super cookies\" in curl that\nare then passed back to more origins than what is otherwise allowed or\npossible. This allows a site to set cookies that then would get sent to\ndifferent and unrelated sites and domains.\n\nIt could do this by exploiting a mixed case flaw in curl's function that\nverifies a given cookie domain against the Public Suffix List (PSL). For\nexample a cookie could be set with `domain=co.UK` when the URL used a lower\ncase hostname `curl.co.uk`, even though `co.uk` is listed as a PSL domain.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-46218" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-9086",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-9086" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-27774",
                "title" : "An insufficiently protected credentials vulnerability exists in curl 4.9 to and include curl 7.82.0 are affected that could allow an attacker to extract credentials when follows HTTP(S) redirects is used with authentication could leak credentials to other services that exist on different protocols or port numbers.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-27774" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-32221",
                "title" : "When doing HTTP(S) transfers, libcurl might erroneously use the read callback (`CURLOPT_READFUNCTION`) to ask for data to send, even when the `CURLOPT_POSTFIELDS` option has been set, if the same handle previously was used to issue a `PUT` request which used that callback. This flaw may surprise the application and cause it to misbehave and either send off the wrong data or use memory after free or similar in the subsequent `POST` request. The problem exists in the logic for a reused handle when it is changed from a PUT to a POST.",
                "source" : "redhat-csaf",
                "cvssScore" : 4.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-32221" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-10148",
                "source" : "redhat-csaf",
                "cvssScore" : 4.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-10148" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-14017",
                "source" : "redhat-csaf",
                "cvssScore" : 4.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-14017" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-15224",
                "source" : "redhat-csaf",
                "cvssScore" : 4.7,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-15224" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-27776",
                "title" : "A insufficiently protected credentials vulnerability in fixed in curl 7.83.0 might leak authentication or cookie header data on HTTP redirects to the same host but another port number.",
                "source" : "redhat-csaf",
                "cvssScore" : 4.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-27776" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-27533",
                "title" : "A vulnerability in input validation exists in curl <8.0 during communication using the TELNET protocol may allow an attacker to pass on maliciously crafted user name and \"telnet options\" during server negotiation. The lack of proper input scrubbing allows an attacker to send content or perform option negotiation without the application's intent. This vulnerability could be exploited if an application allows user input, thereby enabling attackers to execute arbitrary code on the system.",
                "source" : "redhat-csaf",
                "cvssScore" : 4.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-27533" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-27534",
                "title" : "A path traversal vulnerability exists in curl <8.0.0 SFTP implementation causes the tilde (~) character to be wrongly replaced when used as a prefix in the first path element, in addition to its intended use as the first element to indicate a path relative to the user's home directory. Attackers can exploit this flaw to bypass filtering or execute arbitrary code by crafting a path like /~2/foo while accessing a server with a specific user.",
                "source" : "redhat-csaf",
                "cvssScore" : 3.7,
                "severity" : "LOW",
                "cves" : [ "CVE-2023-27534" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-28322",
                "title" : "An information disclosure vulnerability exists in curl <v8.1.0 when doing HTTP(S) transfers, libcurl might erroneously use the read callback (`CURLOPT_READFUNCTION`) to ask for data to send, even when the `CURLOPT_POSTFIELDS` option has been set, if the same handle previously wasused to issue a `PUT` request which used that callback. This flaw may surprise the application and cause it to misbehave and either send off the wrong data or use memory after free or similar in the second transfer. The problem exists in the logic for a reused handle when it is (expected to be) changed from a PUT to a POST.",
                "source" : "redhat-csaf",
                "cvssScore" : 3.7,
                "severity" : "LOW",
                "cves" : [ "CVE-2023-28322" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-38546",
                "source" : "redhat-csaf",
                "cvssScore" : 3.7,
                "severity" : "LOW",
                "cves" : [ "CVE-2023-38546" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-35252",
                "title" : "When curl is used to retrieve and parse cookies from a HTTP(S) server, itaccepts cookies using control codes that when later are sent back to a HTTPserver might make the server return 400 responses. Effectively allowing a\"sister site\" to deny service to all siblings.",
                "source" : "redhat-csaf",
                "cvssScore" : 3.1,
                "severity" : "LOW",
                "cves" : [ "CVE-2022-35252" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2022-32207",
                "title" : "When curl < 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes the operation atomic by finalizing the operation with a rename from a temporary name to the final target file name.In that rename operation, it might accidentally *widen* the permissions for the target file, leaving the updated file accessible to more users than intended.",
                "source" : "redhat-csaf",
                "cvssScore" : 9.8,
                "severity" : "CRITICAL",
                "cves" : [ "CVE-2022-32207" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libxml2@2.9.7-21.el8_10.3?arch=x86_64&distro=rhel-8.10&upstream=libxml2-2.9.7-21.el8_10.3.src.rpm",
              "issues" : [ {
                "id" : "CVE-2024-40896",
                "title" : "In libxml2 2.11 before 2.11.9, 2.12 before 2.12.9, and 2.13 before 2.13.3, the SAX parser can produce events for external entities even if custom SAX handlers try to override entity content (by setting \"checked\"). This makes classic XXE attacks possible.",
                "source" : "redhat-csaf",
                "cvssScore" : 9.1,
                "severity" : "CRITICAL",
                "cves" : [ "CVE-2024-40896" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-49794",
                "title" : "Libxml: heap use after free (uaf) leads to denial of service (dos)",
                "source" : "redhat-csaf",
                "cvssScore" : 9.1,
                "severity" : "CRITICAL",
                "cves" : [ "CVE-2025-49794" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-49796",
                "title" : "Libxml: type confusion leads to denial of service (dos)",
                "source" : "redhat-csaf",
                "cvssScore" : 9.1,
                "severity" : "CRITICAL",
                "cves" : [ "CVE-2025-49796" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-56171",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-56171" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-40304",
                "title" : "An issue was discovered in libxml2 before 2.10.3. Certain invalid XML entity definitions can corrupt a hash table key, potentially leading to subsequent logic errors. In one case, a double-free can be provoked.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-40304" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-24928",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-24928" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-7425",
                "title" : "Libxslt: heap use-after-free in libxslt caused by atype corruption in xmlattrptr",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-7425" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-40303",
                "title" : "An issue was discovered in libxml2 before 2.10.3. When parsing a multi-gigabyte XML document with the XML_PARSE_HUGE parser option enabled, several integer counters can overflow. This results in an attempt to access an array at a negative 2GB offset, typically leading to a segmentation fault.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-40303" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-25062",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-25062" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-32415",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-32415" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-49795",
                "title" : "Libxml: null pointer dereference leads to denial of service (dos)",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-49795" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-6021",
                "title" : "Libxml2: integer overflow in xmlbuildqname() leads to stack buffer overflow in libxml2",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-6021" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-7424",
                "title" : "Libxslt: type confusion in xmlnode.psvi between stylesheet and source nodes",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-7424" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-29824",
                "title" : "In libxml2 before 2.9.14, several buffer handling functions in buf.c (xmlBuf*) and tree.c (xmlBuffer*) don't check for integer overflows. This can result in out-of-bounds memory writes. Exploitation requires a victim to open a crafted, multi-gigabyte XML file. Other software using libxml2's buffer functions, for example libxslt through 1.1.35, is affected as well.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.4,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-29824" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-39615",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-39615" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-9714",
                "source" : "redhat-csaf",
                "cvssScore" : 6.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-9714" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-49043",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-49043" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-28484",
                "title" : "In libxml2 before 2.10.4, parsing of certain invalid XSD schemas can lead to a NULL pointer dereference and subsequently a segfault. This occurs in xmlSchemaFixupComplexType in xmlschemas.c.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-28484" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-29469",
                "title" : "An issue was discovered in libxml2 before 2.10.4. When hashing empty dict strings in a crafted XML document, xmlDictComputeFastKey in dict.c can produce non-deterministic values, leading to various logic and memory errors, such as a double free. This behavior occurs because there is an attempt to use the first byte of an empty string, and any value is possible (not solely the '\\0' value).",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-29469" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-32414",
                "source" : "redhat-csaf",
                "cvssScore" : 5.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-32414" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-6170",
                "title" : "Libxml2: stack buffer overflow in xmllint interactive shell command handling",
                "source" : "redhat-csaf",
                "cvssScore" : 2.5,
                "severity" : "LOW",
                "cves" : [ "CVE-2025-6170" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2024-40896",
                "title" : "In libxml2 2.11 before 2.11.9, 2.12 before 2.12.9, and 2.13 before 2.13.3, the SAX parser can produce events for external entities even if custom SAX handlers try to override entity content (by setting \"checked\"). This makes classic XXE attacks possible.",
                "source" : "redhat-csaf",
                "cvssScore" : 9.1,
                "severity" : "CRITICAL",
                "cves" : [ "CVE-2024-40896" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/krb5-libs@1.18.2-32.el8_10?arch=x86_64&distro=rhel-8.10&upstream=krb5-1.18.2-32.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2024-3596",
                "source" : "redhat-csaf",
                "cvssScore" : 9.0,
                "severity" : "CRITICAL",
                "cves" : [ "CVE-2024-3596" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-42898",
                "title" : "PAC parsing in MIT Kerberos 5 (aka krb5) before 1.19.4 and 1.20.x before 1.20.1 has integer overflows that may lead to remote code execution (in KDC, kadmind, or a GSS or Kerberos application server) on 32-bit platforms (which have a resultant heap-based buffer overflow), and cause a denial of service on other platforms. This occurs in krb5_pac_parse in lib/krb5/krb/pac.c. Heimdal before 7.7.1 has \"a similar bug.\"",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-42898" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-39975",
                "title" : "kdc/do_tgs_req.c in MIT Kerberos 5 (aka krb5) 1.21 before 1.21.2 has a double free that is reachable if an authenticated user can trigger an authorization-data handling failure. Incorrect data is copied from one ticket to another.",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-39975" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-26462",
                "title" : "Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/kdc/ndr.c.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-26462" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-37370",
                "title" : "In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can modify the plaintext Extra Count field of a confidential GSS krb5 wrap token, causing the unwrapped token to appear truncated to the application.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-37370" ],
                "unique" : false
              }, {
                "id" : "CVE-2020-17049",
                "title" : "Kerberos KDC Security Feature Bypass Vulnerability",
                "source" : "redhat-csaf",
                "cvssScore" : 7.2,
                "severity" : "HIGH",
                "cves" : [ "CVE-2020-17049" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-36054",
                "title" : "lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) before 1.20.2 and 1.21.x before 1.21.1 frees an uninitialized pointer. A remote authenticated user can trigger a kadmind crash. This occurs because _xdr_kadm5_principal_ent_rec does not validate the relationship between n_key_data and the key_data array count.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-36054" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-37371",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-37371" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-24528",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-24528" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-26458",
                "title" : "Kerberos 5 (aka krb5) 1.21.2 contains a memory leak in /krb5/src/lib/rpc/pmap_rmt.c.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-26458" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-26461",
                "title" : "Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/lib/gssapi/krb5/k5sealv3.c.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-26461" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-3576",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-3576" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2024-3596",
                "source" : "redhat-csaf",
                "cvssScore" : 9.0,
                "severity" : "CRITICAL",
                "cves" : [ "CVE-2024-3596" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/python3-setuptools-wheel@39.2.0-9.el8_10?arch=noarch&distro=rhel-8.10&upstream=python-setuptools-39.2.0-9.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2024-6345",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-6345" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-47273",
                "title" : "setuptools has a path traversal vulnerability in PackageIndex.download that leads to Arbitrary File Write",
                "source" : "redhat-csaf",
                "cvssScore" : 7.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-47273" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-40897",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-40897" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2024-6345",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-6345" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/glibc-minimal-langpack@2.28-251.el8_10.31?arch=x86_64&distro=rhel-8.10&upstream=glibc-2.28-251.el8_10.31.src.rpm",
              "issues" : [ {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0861",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-0861" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4911",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-4911" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33599",
                "title" : "nscd: Stack-based buffer overflow in netgroup cache",
                "source" : "redhat-csaf",
                "cvssScore" : 7.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-33599" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-4802",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-4802" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4527",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4527" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4806",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4806" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4813",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4813" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-5702",
                "title" : "The strcmp implementation optimized for the Power10 processor in the GNU C Library version 2.39 and later writes to vector registers v20 to v31 without saving contents from the caller (those registers are defined as non-volatile registers by the powerpc64le ABI), resulting in overwriting of its contents and potentially altering control flow of the caller, or leaking the input strings to the function to other parts of the program.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-5702" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-0395",
                "title" : "When the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-0395" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33600",
                "title" : "nscd: Null pointer crashes after notfound response",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33600" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0915",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-0915" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-8058",
                "source" : "redhat-csaf",
                "cvssScore" : 4.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-8058" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33601",
                "title" : "nscd: netgroup cache may terminate daemon on memory allocation failure",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33601" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33602",
                "title" : "nscd: netgroup cache assumes NSS callback uses in-buffer strings",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33602" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/glibc@2.28-251.el8_10.31?arch=x86_64&distro=rhel-8.10&upstream=glibc-2.28-251.el8_10.31.src.rpm",
              "issues" : [ {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0861",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-0861" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4911",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-4911" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33599",
                "title" : "nscd: Stack-based buffer overflow in netgroup cache",
                "source" : "redhat-csaf",
                "cvssScore" : 7.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-33599" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-4802",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-4802" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4527",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4527" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4806",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4806" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4813",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4813" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-15281",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-15281" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-5702",
                "title" : "The strcmp implementation optimized for the Power10 processor in the GNU C Library version 2.39 and later writes to vector registers v20 to v31 without saving contents from the caller (those registers are defined as non-volatile registers by the powerpc64le ABI), resulting in overwriting of its contents and potentially altering control flow of the caller, or leaking the input strings to the function to other parts of the program.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-5702" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-0395",
                "title" : "When the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-0395" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33600",
                "title" : "nscd: Null pointer crashes after notfound response",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33600" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0915",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-0915" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-8058",
                "source" : "redhat-csaf",
                "cvssScore" : 4.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-8058" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33601",
                "title" : "nscd: netgroup cache may terminate daemon on memory allocation failure",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33601" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33602",
                "title" : "nscd: netgroup cache assumes NSS callback uses in-buffer strings",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33602" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/python3-chardet@3.0.4-7.el8?arch=noarch&distro=rhel-8.10&upstream=python-chardet-3.0.4-7.el8.src.rpm",
              "issues" : [ {
                "id" : "CVE-2018-3258",
                "title" : "Vulnerability in the MySQL Connectors component of Oracle MySQL (subcomponent: Connector/J). Supported versions that are affected are 8.0.12 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Connectors. Successful attacks of this vulnerability can result in takeover of MySQL Connectors. CVSS 3.0 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2018-3258" ],
                "unique" : false
              }, {
                "id" : "CVE-2020-10968",
                "title" : "FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.aoju.bus.proxy.provider.remoting.RmiProvider (aka bus-proxy).",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2020-10968" ],
                "unique" : false
              }, {
                "id" : "CVE-2020-14334",
                "title" : "A flaw was found in Red Hat Satellite 6 which allows privileged attacker to read cache files. These cache credentials could help attacker to gain complete control of the Satellite instance.",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2020-14334" ],
                "unique" : false
              }, {
                "id" : "CVE-2020-10969",
                "title" : "FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to javax.swing.JEditorPane.",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2020-10969" ],
                "unique" : false
              }, {
                "id" : "CVE-2020-11619",
                "title" : "FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.springframework.aop.config.MethodLocatingFactoryBean (aka spring-aop).",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2020-11619" ],
                "unique" : false
              }, {
                "id" : "CVE-2020-14061",
                "title" : "FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction between serialization gadgets and typing, related to oracle.jms.AQjmsQueueConnectionFactory, oracle.jms.AQjmsXATopicConnectionFactory, oracle.jms.AQjmsTopicConnectionFactory, oracle.jms.AQjmsXAQueueConnectionFactory, and oracle.jms.AQjmsXAConnectionFactory (aka weblogic/oracle-aqjms).",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2020-14061" ],
                "unique" : false
              }, {
                "id" : "CVE-2020-14062",
                "title" : "FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction between serialization gadgets and typing, related to com.sun.org.apache.xalan.internal.lib.sql.JNDIConnectionPool (aka xalan2).",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2020-14062" ],
                "unique" : false
              }, {
                "id" : "CVE-2020-14195",
                "title" : "FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction between serialization gadgets and typing, related to org.jsecurity.realm.jndi.JndiRealmFactory (aka org.jsecurity).",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2020-14195" ],
                "unique" : false
              }, {
                "id" : "CVE-2020-8840",
                "title" : "FasterXML jackson-databind 2.0.0 through 2.9.10.2 lacks certain xbean-reflect/JNDI blocking, as demonstrated by org.apache.xbean.propertyeditor.JndiConverter.",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2020-8840" ],
                "unique" : false
              }, {
                "id" : "CVE-2020-9546",
                "title" : "FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.hadoop.shaded.com.zaxxer.hikari.HikariConfig (aka shaded hikari-config).",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2020-9546" ],
                "unique" : false
              }, {
                "id" : "CVE-2020-9547",
                "title" : "FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to com.ibatis.sqlmap.engine.transaction.jta.JtaTransactionConfig (aka ibatis-sqlmap).",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2020-9547" ],
                "unique" : false
              }, {
                "id" : "CVE-2020-9548",
                "title" : "FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to br.com.anteros.dbcp.AnterosDBCPConfig (aka anteros-core).",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2020-9548" ],
                "unique" : false
              }, {
                "id" : "CVE-2019-12086",
                "title" : "A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.x before 2.9.9. When Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint, the service has the mysql-connector-java jar (8.0.14 or earlier) in the classpath, and an attacker can host a crafted MySQL server reachable by the victim, an attacker can send a crafted JSON message that allows them to read arbitrary local files on the server. This occurs because of missing com.mysql.cj.jdbc.admin.MiniAdmin validation.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2019-12086" ],
                "unique" : false
              }, {
                "id" : "CVE-2020-14380",
                "title" : "An account takeover flaw was found in Red Hat Satellite 6.7.2 onward. A potential attacker with proper authentication to the relevant external authentication source (SSO or Open ID) can claim the privileges of already existing local users of Satellite.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2020-14380" ],
                "unique" : false
              }, {
                "id" : "CVE-2020-7238",
                "title" : "Netty 4.1.43.Final allows HTTP Request Smuggling because it mishandles Transfer-Encoding whitespace (such as a [space]Transfer-Encoding:chunked line) and a later Content-Length header. This issue exists because of an incomplete fix for CVE-2019-16869.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2020-7238" ],
                "unique" : false
              }, {
                "id" : "CVE-2020-7943",
                "title" : "Puppet Server and PuppetDB provide useful performance and debugging information via their metrics API endpoints. For PuppetDB this may contain things like hostnames. Puppet Server reports resource names and titles for defined types (which may contain sensitive information) as well as function names and class names. Previously, these endpoints were open to the local network. PE 2018.1.13 & 2019.5.0, Puppet Server 6.9.2 & 5.3.12, and PuppetDB 6.9.1 & 5.2.13 disable trapperkeeper-metrics /v1 metrics API and only allows /v2 access on localhost by default. This affects software versions: Puppet Enterprise 2018.1.x stream prior to 2018.1.13 Puppet Enterprise prior to 2019.5.0 Puppet Server prior to 6.9.2 Puppet Server prior to 5.3.12 PuppetDB prior to 6.9.1 PuppetDB prior to 5.2.13 Resolved in: Puppet Enterprise 2018.1.13 Puppet Enterprise 2019.5.0 Puppet Server 6.9.2 Puppet Server 5.3.12 PuppetDB 6.9.1 PuppetDB 5.2.13",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2020-7943" ],
                "unique" : false
              }, {
                "id" : "CVE-2020-8184",
                "title" : "A reliance on cookies without validation/integrity check security vulnerability exists in rack < 2.2.3, rack < 2.1.4 that makes it is possible for an attacker to forge a secure or host-only cookie prefix.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2020-8184" ],
                "unique" : false
              }, {
                "id" : "CVE-2019-10086",
                "title" : "In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added which allows suppressing the ability for an attacker to access the classloader via the class property available on all Java objects. We, however were not using this by default characteristic of the PropertyUtilsBean.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.3,
                "severity" : "HIGH",
                "cves" : [ "CVE-2019-10086" ],
                "unique" : false
              }, {
                "id" : "CVE-2020-8185",
                "title" : "A denial of service vulnerability exists in Rails <6.0.3.2 that allowed an untrusted user to run any pending migrations on a Rails app running in production.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2020-8185" ],
                "unique" : false
              }, {
                "id" : "CVE-2019-0231",
                "title" : "Apache MINA SSLFilter security Issue",
                "source" : "redhat-csaf",
                "cvssScore" : 6.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2019-0231" ],
                "unique" : false
              }, {
                "id" : "CVE-2019-10219",
                "title" : "A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2019-10219" ],
                "unique" : false
              }, {
                "id" : "CVE-2020-7942",
                "title" : "Previously, Puppet operated on a model that a node with a valid certificate was entitled to all information in the system and that a compromised certificate allowed access to everything in the infrastructure. When a node's catalog falls back to the `default` node, the catalog can be retrieved for a different node by modifying facts for the Puppet run. This issue can be mitigated by setting `strict_hostname_checking = true` in `puppet.conf` on your Puppet master. Puppet 6.13.0 and 5.5.19 changes the default behavior for strict_hostname_checking from false to true. It is recommended that Puppet Open Source and Puppet Enterprise users that are not upgrading still set strict_hostname_checking to true to ensure secure behavior. Affected software versions: Puppet 6.x prior to 6.13.0 Puppet Agent 6.x prior to 6.13.0 Puppet 5.5.x prior to 5.5.19 Puppet Agent 5.5.x prior to 5.5.19 Resolved in: Puppet 6.13.0 Puppet Agent 6.13.0 Puppet 5.5.19 Puppet Agent 5.5.19",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2020-7942" ],
                "unique" : false
              }, {
                "id" : "CVE-2019-16782",
                "title" : "Possible Information Leak / Session Hijack Vulnerability in Rack",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2019-16782" ],
                "unique" : false
              }, {
                "id" : "CVE-2020-8161",
                "title" : "A directory traversal vulnerability exists in rack < 2.2.0 that allows an attacker perform directory traversal vulnerability in the Rack::Directory app that is bundled with Rack which could result in information disclosure.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2020-8161" ],
                "unique" : false
              }, {
                "id" : "CVE-2020-5216",
                "title" : "Limited header injection when using dynamic overrides with user input in RubyGems secure_headers",
                "source" : "redhat-csaf",
                "cvssScore" : 5.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2020-5216" ],
                "unique" : false
              }, {
                "id" : "CVE-2020-5217",
                "title" : "Directive injection when using dynamic overrides with user input in RubyGems secure_headers",
                "source" : "redhat-csaf",
                "cvssScore" : 5.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2020-5217" ],
                "unique" : false
              }, {
                "id" : "CVE-2020-10693",
                "title" : "A flaw was found in Hibernate Validator version 6.1.2.Final. A bug in the message interpolation processor enables invalid EL expressions to be evaluated as if they were valid. This flaw allows attackers to bypass input sanitation (escaping, stripping) controls that developers may have put in place when handling user-controlled data in error messages.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2020-10693" ],
                "unique" : false
              }, {
                "id" : "CVE-2017-17718",
                "title" : "The Net::LDAP (aka net-ldap) gem before 0.16.0 for Ruby has Missing SSL Certificate Validation.",
                "source" : "redhat-csaf",
                "cvssScore" : 4.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2017-17718" ],
                "unique" : false
              }, {
                "id" : "CVE-2019-12781",
                "title" : "An issue was discovered in Django 1.11 before 1.11.22, 2.1 before 2.1.10, and 2.2 before 2.2.3. An HTTP request is not redirected to HTTPS when the SECURE_PROXY_SSL_HEADER and SECURE_SSL_REDIRECT settings are used, and the proxy connects to Django via HTTPS. In other words, django.http.HttpRequest.scheme has incorrect behavior when a client uses HTTP.",
                "source" : "redhat-csaf",
                "cvssScore" : 4.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2019-12781" ],
                "unique" : false
              }, {
                "id" : "CVE-2020-10716",
                "title" : "A flaw was found in Red Hat Satellite's Job Invocation, where the \"User Input\" entry was not properly restricted to the view. This flaw allows a malicious Satellite user to scan through the Job Invocation, with the ability to search for passwords and other sensitive data. This flaw affects tfm-rubygem-foreman_ansible versions before 4.0.3.4.",
                "source" : "redhat-csaf",
                "cvssScore" : 4.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2020-10716" ],
                "unique" : false
              }, {
                "id" : "CVE-2018-1000119",
                "title" : "Sinatra rack-protection versions 1.5.4 and 2.0.0.rc3 and earlier contains a timing attack vulnerability in the CSRF token checking that can result in signatures can be exposed. This attack appear to be exploitable via network connectivity to the ruby application. This vulnerability appears to have been fixed in 1.5.5 and 2.0.0.",
                "source" : "redhat-csaf",
                "cvssScore" : 3.7,
                "severity" : "LOW",
                "cves" : [ "CVE-2018-1000119" ],
                "unique" : false
              }, {
                "id" : "CVE-2018-11751",
                "title" : "Previous versions of Puppet Agent didn't verify the peer in the SSL connection prior to downloading the CRL. This issue is resolved in Puppet Agent 6.4.0.",
                "source" : "redhat-csaf",
                "cvssScore" : 3.7,
                "severity" : "LOW",
                "cves" : [ "CVE-2018-11751" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2018-3258",
                "title" : "Vulnerability in the MySQL Connectors component of Oracle MySQL (subcomponent: Connector/J). Supported versions that are affected are 8.0.12 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Connectors. Successful attacks of this vulnerability can result in takeover of MySQL Connectors. CVSS 3.0 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2018-3258" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/gzip@1.9-13.el8_5?arch=x86_64&distro=rhel-8.10&upstream=gzip-1.9-13.el8_5.src.rpm",
              "issues" : [ {
                "id" : "CVE-2022-1271",
                "title" : "An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is applied on the attacker's chosen file name (for example, a crafted file name), this can overwrite an attacker's content to an arbitrary attacker-selected file. This flaw occurs due to insufficient validation when processing filenames with two or more newlines where selected content and the target file names are embedded in crafted multi-line file names. This flaw allows a remote, low privileged attacker to force zgrep to write arbitrary files on the system.",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-1271" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2022-1271",
                "title" : "An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is applied on the attacker's chosen file name (for example, a crafted file name), this can overwrite an attacker's content to an arbitrary attacker-selected file. This flaw occurs due to insufficient validation when processing filenames with two or more newlines where selected content and the target file names are embedded in crafted multi-line file names. This flaw allows a remote, low privileged attacker to force zgrep to write arbitrary files on the system.",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-1271" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/python3-dateutil@2.6.1-6.el8?arch=noarch&distro=rhel-8.10&epoch=1&upstream=python-dateutil-2.6.1-6.el8.src.rpm",
              "issues" : [ {
                "id" : "CVE-2018-3258",
                "title" : "Vulnerability in the MySQL Connectors component of Oracle MySQL (subcomponent: Connector/J). Supported versions that are affected are 8.0.12 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Connectors. Successful attacks of this vulnerability can result in takeover of MySQL Connectors. CVSS 3.0 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2018-3258" ],
                "unique" : false
              }, {
                "id" : "CVE-2020-10968",
                "title" : "FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.aoju.bus.proxy.provider.remoting.RmiProvider (aka bus-proxy).",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2020-10968" ],
                "unique" : false
              }, {
                "id" : "CVE-2020-14334",
                "title" : "A flaw was found in Red Hat Satellite 6 which allows privileged attacker to read cache files. These cache credentials could help attacker to gain complete control of the Satellite instance.",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2020-14334" ],
                "unique" : false
              }, {
                "id" : "CVE-2020-10969",
                "title" : "FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to javax.swing.JEditorPane.",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2020-10969" ],
                "unique" : false
              }, {
                "id" : "CVE-2020-11619",
                "title" : "FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.springframework.aop.config.MethodLocatingFactoryBean (aka spring-aop).",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2020-11619" ],
                "unique" : false
              }, {
                "id" : "CVE-2020-14061",
                "title" : "FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction between serialization gadgets and typing, related to oracle.jms.AQjmsQueueConnectionFactory, oracle.jms.AQjmsXATopicConnectionFactory, oracle.jms.AQjmsTopicConnectionFactory, oracle.jms.AQjmsXAQueueConnectionFactory, and oracle.jms.AQjmsXAConnectionFactory (aka weblogic/oracle-aqjms).",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2020-14061" ],
                "unique" : false
              }, {
                "id" : "CVE-2020-14062",
                "title" : "FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction between serialization gadgets and typing, related to com.sun.org.apache.xalan.internal.lib.sql.JNDIConnectionPool (aka xalan2).",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2020-14062" ],
                "unique" : false
              }, {
                "id" : "CVE-2020-14195",
                "title" : "FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction between serialization gadgets and typing, related to org.jsecurity.realm.jndi.JndiRealmFactory (aka org.jsecurity).",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2020-14195" ],
                "unique" : false
              }, {
                "id" : "CVE-2020-8840",
                "title" : "FasterXML jackson-databind 2.0.0 through 2.9.10.2 lacks certain xbean-reflect/JNDI blocking, as demonstrated by org.apache.xbean.propertyeditor.JndiConverter.",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2020-8840" ],
                "unique" : false
              }, {
                "id" : "CVE-2020-9546",
                "title" : "FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.hadoop.shaded.com.zaxxer.hikari.HikariConfig (aka shaded hikari-config).",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2020-9546" ],
                "unique" : false
              }, {
                "id" : "CVE-2020-9547",
                "title" : "FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to com.ibatis.sqlmap.engine.transaction.jta.JtaTransactionConfig (aka ibatis-sqlmap).",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2020-9547" ],
                "unique" : false
              }, {
                "id" : "CVE-2020-9548",
                "title" : "FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to br.com.anteros.dbcp.AnterosDBCPConfig (aka anteros-core).",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2020-9548" ],
                "unique" : false
              }, {
                "id" : "CVE-2019-12086",
                "title" : "A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.x before 2.9.9. When Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint, the service has the mysql-connector-java jar (8.0.14 or earlier) in the classpath, and an attacker can host a crafted MySQL server reachable by the victim, an attacker can send a crafted JSON message that allows them to read arbitrary local files on the server. This occurs because of missing com.mysql.cj.jdbc.admin.MiniAdmin validation.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2019-12086" ],
                "unique" : false
              }, {
                "id" : "CVE-2020-14380",
                "title" : "An account takeover flaw was found in Red Hat Satellite 6.7.2 onward. A potential attacker with proper authentication to the relevant external authentication source (SSO or Open ID) can claim the privileges of already existing local users of Satellite.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2020-14380" ],
                "unique" : false
              }, {
                "id" : "CVE-2020-7238",
                "title" : "Netty 4.1.43.Final allows HTTP Request Smuggling because it mishandles Transfer-Encoding whitespace (such as a [space]Transfer-Encoding:chunked line) and a later Content-Length header. This issue exists because of an incomplete fix for CVE-2019-16869.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2020-7238" ],
                "unique" : false
              }, {
                "id" : "CVE-2020-7943",
                "title" : "Puppet Server and PuppetDB provide useful performance and debugging information via their metrics API endpoints. For PuppetDB this may contain things like hostnames. Puppet Server reports resource names and titles for defined types (which may contain sensitive information) as well as function names and class names. Previously, these endpoints were open to the local network. PE 2018.1.13 & 2019.5.0, Puppet Server 6.9.2 & 5.3.12, and PuppetDB 6.9.1 & 5.2.13 disable trapperkeeper-metrics /v1 metrics API and only allows /v2 access on localhost by default. This affects software versions: Puppet Enterprise 2018.1.x stream prior to 2018.1.13 Puppet Enterprise prior to 2019.5.0 Puppet Server prior to 6.9.2 Puppet Server prior to 5.3.12 PuppetDB prior to 6.9.1 PuppetDB prior to 5.2.13 Resolved in: Puppet Enterprise 2018.1.13 Puppet Enterprise 2019.5.0 Puppet Server 6.9.2 Puppet Server 5.3.12 PuppetDB 6.9.1 PuppetDB 5.2.13",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2020-7943" ],
                "unique" : false
              }, {
                "id" : "CVE-2020-8184",
                "title" : "A reliance on cookies without validation/integrity check security vulnerability exists in rack < 2.2.3, rack < 2.1.4 that makes it is possible for an attacker to forge a secure or host-only cookie prefix.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2020-8184" ],
                "unique" : false
              }, {
                "id" : "CVE-2019-10086",
                "title" : "In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added which allows suppressing the ability for an attacker to access the classloader via the class property available on all Java objects. We, however were not using this by default characteristic of the PropertyUtilsBean.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.3,
                "severity" : "HIGH",
                "cves" : [ "CVE-2019-10086" ],
                "unique" : false
              }, {
                "id" : "CVE-2020-8185",
                "title" : "A denial of service vulnerability exists in Rails <6.0.3.2 that allowed an untrusted user to run any pending migrations on a Rails app running in production.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2020-8185" ],
                "unique" : false
              }, {
                "id" : "CVE-2019-0231",
                "title" : "Apache MINA SSLFilter security Issue",
                "source" : "redhat-csaf",
                "cvssScore" : 6.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2019-0231" ],
                "unique" : false
              }, {
                "id" : "CVE-2019-10219",
                "title" : "A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2019-10219" ],
                "unique" : false
              }, {
                "id" : "CVE-2020-7942",
                "title" : "Previously, Puppet operated on a model that a node with a valid certificate was entitled to all information in the system and that a compromised certificate allowed access to everything in the infrastructure. When a node's catalog falls back to the `default` node, the catalog can be retrieved for a different node by modifying facts for the Puppet run. This issue can be mitigated by setting `strict_hostname_checking = true` in `puppet.conf` on your Puppet master. Puppet 6.13.0 and 5.5.19 changes the default behavior for strict_hostname_checking from false to true. It is recommended that Puppet Open Source and Puppet Enterprise users that are not upgrading still set strict_hostname_checking to true to ensure secure behavior. Affected software versions: Puppet 6.x prior to 6.13.0 Puppet Agent 6.x prior to 6.13.0 Puppet 5.5.x prior to 5.5.19 Puppet Agent 5.5.x prior to 5.5.19 Resolved in: Puppet 6.13.0 Puppet Agent 6.13.0 Puppet 5.5.19 Puppet Agent 5.5.19",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2020-7942" ],
                "unique" : false
              }, {
                "id" : "CVE-2019-16782",
                "title" : "Possible Information Leak / Session Hijack Vulnerability in Rack",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2019-16782" ],
                "unique" : false
              }, {
                "id" : "CVE-2020-8161",
                "title" : "A directory traversal vulnerability exists in rack < 2.2.0 that allows an attacker perform directory traversal vulnerability in the Rack::Directory app that is bundled with Rack which could result in information disclosure.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2020-8161" ],
                "unique" : false
              }, {
                "id" : "CVE-2020-5216",
                "title" : "Limited header injection when using dynamic overrides with user input in RubyGems secure_headers",
                "source" : "redhat-csaf",
                "cvssScore" : 5.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2020-5216" ],
                "unique" : false
              }, {
                "id" : "CVE-2020-5217",
                "title" : "Directive injection when using dynamic overrides with user input in RubyGems secure_headers",
                "source" : "redhat-csaf",
                "cvssScore" : 5.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2020-5217" ],
                "unique" : false
              }, {
                "id" : "CVE-2020-10693",
                "title" : "A flaw was found in Hibernate Validator version 6.1.2.Final. A bug in the message interpolation processor enables invalid EL expressions to be evaluated as if they were valid. This flaw allows attackers to bypass input sanitation (escaping, stripping) controls that developers may have put in place when handling user-controlled data in error messages.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2020-10693" ],
                "unique" : false
              }, {
                "id" : "CVE-2017-17718",
                "title" : "The Net::LDAP (aka net-ldap) gem before 0.16.0 for Ruby has Missing SSL Certificate Validation.",
                "source" : "redhat-csaf",
                "cvssScore" : 4.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2017-17718" ],
                "unique" : false
              }, {
                "id" : "CVE-2019-12781",
                "title" : "An issue was discovered in Django 1.11 before 1.11.22, 2.1 before 2.1.10, and 2.2 before 2.2.3. An HTTP request is not redirected to HTTPS when the SECURE_PROXY_SSL_HEADER and SECURE_SSL_REDIRECT settings are used, and the proxy connects to Django via HTTPS. In other words, django.http.HttpRequest.scheme has incorrect behavior when a client uses HTTP.",
                "source" : "redhat-csaf",
                "cvssScore" : 4.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2019-12781" ],
                "unique" : false
              }, {
                "id" : "CVE-2020-10716",
                "title" : "A flaw was found in Red Hat Satellite's Job Invocation, where the \"User Input\" entry was not properly restricted to the view. This flaw allows a malicious Satellite user to scan through the Job Invocation, with the ability to search for passwords and other sensitive data. This flaw affects tfm-rubygem-foreman_ansible versions before 4.0.3.4.",
                "source" : "redhat-csaf",
                "cvssScore" : 4.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2020-10716" ],
                "unique" : false
              }, {
                "id" : "CVE-2018-1000119",
                "title" : "Sinatra rack-protection versions 1.5.4 and 2.0.0.rc3 and earlier contains a timing attack vulnerability in the CSRF token checking that can result in signatures can be exposed. This attack appear to be exploitable via network connectivity to the ruby application. This vulnerability appears to have been fixed in 1.5.5 and 2.0.0.",
                "source" : "redhat-csaf",
                "cvssScore" : 3.7,
                "severity" : "LOW",
                "cves" : [ "CVE-2018-1000119" ],
                "unique" : false
              }, {
                "id" : "CVE-2018-11751",
                "title" : "Previous versions of Puppet Agent didn't verify the peer in the SSL connection prior to downloading the CRL. This issue is resolved in Puppet Agent 6.4.0.",
                "source" : "redhat-csaf",
                "cvssScore" : 3.7,
                "severity" : "LOW",
                "cves" : [ "CVE-2018-11751" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2018-3258",
                "title" : "Vulnerability in the MySQL Connectors component of Oracle MySQL (subcomponent: Connector/J). Supported versions that are affected are 8.0.12 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Connectors. Successful attacks of this vulnerability can result in takeover of MySQL Connectors. CVSS 3.0 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2018-3258" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/glibc-common@2.28-251.el8_10.31?arch=x86_64&distro=rhel-8.10&upstream=glibc-2.28-251.el8_10.31.src.rpm",
              "issues" : [ {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0861",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-0861" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4911",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-4911" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33599",
                "title" : "nscd: Stack-based buffer overflow in netgroup cache",
                "source" : "redhat-csaf",
                "cvssScore" : 7.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-33599" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-4802",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-4802" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4527",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4527" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4806",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4806" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4813",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4813" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-5702",
                "title" : "The strcmp implementation optimized for the Power10 processor in the GNU C Library version 2.39 and later writes to vector registers v20 to v31 without saving contents from the caller (those registers are defined as non-volatile registers by the powerpc64le ABI), resulting in overwriting of its contents and potentially altering control flow of the caller, or leaking the input strings to the function to other parts of the program.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-5702" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-0395",
                "title" : "When the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-0395" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33600",
                "title" : "nscd: Null pointer crashes after notfound response",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33600" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0915",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-0915" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-8058",
                "source" : "redhat-csaf",
                "cvssScore" : 4.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-8058" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33601",
                "title" : "nscd: netgroup cache may terminate daemon on memory allocation failure",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33601" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33602",
                "title" : "nscd: netgroup cache assumes NSS callback uses in-buffer strings",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33602" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/xz-libs@5.2.4-4.el8_6?arch=x86_64&distro=rhel-8.10&upstream=xz-5.2.4-4.el8_6.src.rpm",
              "issues" : [ {
                "id" : "CVE-2022-1271",
                "title" : "An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is applied on the attacker's chosen file name (for example, a crafted file name), this can overwrite an attacker's content to an arbitrary attacker-selected file. This flaw occurs due to insufficient validation when processing filenames with two or more newlines where selected content and the target file names are embedded in crafted multi-line file names. This flaw allows a remote, low privileged attacker to force zgrep to write arbitrary files on the system.",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-1271" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-31115",
                "title" : "XZ has a heap-use-after-free bug in threaded .xz decoder",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-31115" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2022-1271",
                "title" : "An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is applied on the attacker's chosen file name (for example, a crafted file name), this can overwrite an attacker's content to an arbitrary attacker-selected file. This flaw occurs due to insufficient validation when processing filenames with two or more newlines where selected content and the target file names are embedded in crafted multi-line file names. This flaw allows a remote, low privileged attacker to force zgrep to write arbitrary files on the system.",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-1271" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/python3-libs@3.6.8-75.el8_10?arch=x86_64&distro=rhel-8.10&upstream=python3-3.6.8-75.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2023-40217",
                "source" : "redhat-csaf",
                "cvssScore" : 8.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-40217" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-42919",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-42919" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-6597",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-6597" ],
                "unique" : false
              }, {
                "id" : "CVE-2015-20107",
                "source" : "redhat-csaf",
                "cvssScore" : 7.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2015-20107" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-12718",
                "title" : "Bypass extraction filter to modify file metadata outside extraction directory",
                "source" : "redhat-csaf",
                "cvssScore" : 7.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-12718" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-4517",
                "title" : "Arbitrary writes via tarfile realpath overflow",
                "source" : "redhat-csaf",
                "cvssScore" : 7.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-4517" ],
                "unique" : false
              }, {
                "id" : "CVE-2020-10735",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2020-10735" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-45061",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-45061" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-24329",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-24329" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-6232",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-6232" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-12084",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-12084" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-4138",
                "title" : "Bypassing extraction filter to create symlinks to arbitrary targets outside extraction directory",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-4138" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-4435",
                "title" : "Tarfile extracts filtered members when errorlevel=0",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-4435" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-8194",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-8194" ],
                "unique" : false
              }, {
                "id" : "CVE-2021-28861",
                "source" : "redhat-csaf",
                "cvssScore" : 7.4,
                "severity" : "HIGH",
                "cves" : [ "CVE-2021-28861" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-4330",
                "title" : "Extraction filter bypass for linking outside extraction directory",
                "source" : "redhat-csaf",
                "cvssScore" : 7.3,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-4330" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-15366",
                "source" : "redhat-csaf",
                "cvssScore" : 7.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-15366" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-15367",
                "source" : "redhat-csaf",
                "cvssScore" : 7.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-15367" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-1299",
                "source" : "redhat-csaf",
                "cvssScore" : 7.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-1299" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-4519",
                "title" : "webbrowser.open() allows leading dashes in URLs",
                "source" : "redhat-csaf",
                "cvssScore" : 7.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-4519" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-6923",
                "source" : "redhat-csaf",
                "cvssScore" : 6.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-6923" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-0938",
                "source" : "redhat-csaf",
                "cvssScore" : 6.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-0938" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-13836",
                "source" : "redhat-csaf",
                "cvssScore" : 6.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-13836" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-9287",
                "source" : "redhat-csaf",
                "cvssScore" : 6.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-9287" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-0450",
                "source" : "redhat-csaf",
                "cvssScore" : 6.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-0450" ],
                "unique" : false
              }, {
                "id" : "CVE-2007-4559",
                "title" : "Directory traversal vulnerability in the (1) extract and (2) extractall functions in the tarfile module in Python allows user-assisted remote attackers to overwrite arbitrary files via a .. (dot dot) sequence in filenames in a TAR archive, a related issue to CVE-2001-1267.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2007-4559" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-27043",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-27043" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-8088",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-8088" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-0397",
                "source" : "redhat-csaf",
                "cvssScore" : 5.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-0397" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-7592",
                "source" : "redhat-csaf",
                "cvssScore" : 4.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-7592" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0865",
                "source" : "redhat-csaf",
                "cvssScore" : 4.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-0865" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-6069",
                "title" : "HTMLParser quadratic complexity when processing malformed inputs",
                "source" : "redhat-csaf",
                "cvssScore" : 4.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-6069" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-8291",
                "source" : "redhat-csaf",
                "cvssScore" : 4.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-8291" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-6075",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-6075" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-11168",
                "source" : "redhat-csaf",
                "cvssScore" : 3.7,
                "severity" : "LOW",
                "cves" : [ "CVE-2024-11168" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-4032",
                "source" : "redhat-csaf",
                "cvssScore" : 3.7,
                "severity" : "LOW",
                "cves" : [ "CVE-2024-4032" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-5642",
                "title" : "Buffer overread when using an empty list with SSLContext.set_npn_protocols()",
                "source" : "redhat-csaf",
                "cvssScore" : 2.7,
                "severity" : "LOW",
                "cves" : [ "CVE-2024-5642" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2023-40217",
                "source" : "redhat-csaf",
                "cvssScore" : 8.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-40217" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libksba@1.3.5-9.el8_7?arch=x86_64&distro=rhel-8.10&upstream=libksba-1.3.5-9.el8_7.src.rpm",
              "issues" : [ {
                "id" : "CVE-2022-3515",
                "title" : "A vulnerability was found in the Libksba library due to an integer overflow within the CRL parser. The vulnerability can be exploited remotely for code execution on the target system by passing specially crafted data to the application, for example, a malicious S/MIME attachment.",
                "source" : "redhat-csaf",
                "cvssScore" : 8.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-3515" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-47629",
                "title" : "Libksba before 1.6.3 is prone to an integer overflow vulnerability in the CRL signature parser.",
                "source" : "redhat-csaf",
                "cvssScore" : 8.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-47629" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2022-3515",
                "title" : "A vulnerability was found in the Libksba library due to an integer overflow within the CRL parser. The vulnerability can be exploited remotely for code execution on the target system by passing specially crafted data to the application, for example, a malicious S/MIME attachment.",
                "source" : "redhat-csaf",
                "cvssScore" : 8.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-3515" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/python3-libcomps@0.1.18-1.el8?arch=x86_64&distro=rhel-8.10&upstream=libcomps-0.1.18-1.el8.src.rpm",
              "issues" : [ {
                "id" : "CVE-2026-1312",
                "source" : "redhat-csaf",
                "cvssScore" : 8.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-1312" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0980",
                "title" : "Rubyipmi: red hat satellite: remote code execution in rubyipmi via malicious bmc username",
                "source" : "redhat-csaf",
                "cvssScore" : 8.3,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-0980" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-1207",
                "source" : "redhat-csaf",
                "cvssScore" : 8.3,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-1207" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-1287",
                "source" : "redhat-csaf",
                "cvssScore" : 8.3,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-1287" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-1530",
                "title" : "Fog-kubevirt: fog-kubevirt: man-in-the-middle vulnerability due to disabled certificate validation",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-1530" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-1531",
                "title" : "Foreman-kubevirt: foreman_kubevirt: man-in-the-middle due to insecure default ssl verification",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-1531" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-1961",
                "title" : "Forman: foreman: remote code execution via command injection in websocket proxy",
                "source" : "redhat-csaf",
                "cvssScore" : 8.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-1961" ],
                "unique" : false
              }, {
                "id" : "CVE-2021-46877",
                "title" : "jackson-databind 2.10.x through 2.12.x before 2.12.6 and 2.13.x before 2.13.1 allows attackers to cause a denial of service (2 GB transient heap usage per read) in uncommon situations involving JsonNode JDK serialization.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2021-46877" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-14550",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-14550" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-6176",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-6176" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-1285",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-1285" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-68121",
                "source" : "redhat-csaf",
                "cvssScore" : 7.4,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-68121" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-28863",
                "title" : "node-tar vulnerable to denial of service while parsing a tar file due to lack of folders count validation",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-28863" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-4324",
                "title" : "Rubygem-katello: katello: denial of service and potential information disclosure via sql injection",
                "source" : "redhat-csaf",
                "cvssScore" : 5.4,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-4324" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2026-1312",
                "source" : "redhat-csaf",
                "cvssScore" : 8.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-1312" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libcomps@0.1.18-1.el8?arch=x86_64&distro=rhel-8.10&upstream=libcomps-0.1.18-1.el8.src.rpm",
              "issues" : [ {
                "id" : "CVE-2026-1312",
                "source" : "redhat-csaf",
                "cvssScore" : 8.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-1312" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0980",
                "title" : "Rubyipmi: red hat satellite: remote code execution in rubyipmi via malicious bmc username",
                "source" : "redhat-csaf",
                "cvssScore" : 8.3,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-0980" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-1207",
                "source" : "redhat-csaf",
                "cvssScore" : 8.3,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-1207" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-1287",
                "source" : "redhat-csaf",
                "cvssScore" : 8.3,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-1287" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-1530",
                "title" : "Fog-kubevirt: fog-kubevirt: man-in-the-middle vulnerability due to disabled certificate validation",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-1530" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-1531",
                "title" : "Foreman-kubevirt: foreman_kubevirt: man-in-the-middle due to insecure default ssl verification",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-1531" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-1961",
                "title" : "Forman: foreman: remote code execution via command injection in websocket proxy",
                "source" : "redhat-csaf",
                "cvssScore" : 8.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-1961" ],
                "unique" : false
              }, {
                "id" : "CVE-2021-46877",
                "title" : "jackson-databind 2.10.x through 2.12.x before 2.12.6 and 2.13.x before 2.13.1 allows attackers to cause a denial of service (2 GB transient heap usage per read) in uncommon situations involving JsonNode JDK serialization.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2021-46877" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-14550",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-14550" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-6176",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-6176" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-1285",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-1285" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-68121",
                "source" : "redhat-csaf",
                "cvssScore" : 7.4,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-68121" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-28863",
                "title" : "node-tar vulnerable to denial of service while parsing a tar file due to lack of folders count validation",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-28863" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-4324",
                "title" : "Rubygem-katello: katello: denial of service and potential information disclosure via sql injection",
                "source" : "redhat-csaf",
                "cvssScore" : 5.4,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-4324" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2026-1312",
                "source" : "redhat-csaf",
                "cvssScore" : 8.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-1312" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/gnupg2@2.2.20-4.el8_10?arch=x86_64&distro=rhel-8.10&upstream=gnupg2-2.2.20-4.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2026-24882",
                "source" : "redhat-csaf",
                "cvssScore" : 8.4,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-24882" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-68973",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-68973" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-34903",
                "title" : "GnuPG through 2.3.6, in unusual situations where an attacker possesses any secret-key information from a victim's keyring and other constraints (e.g., use of GPGME) are met, allows signature forgery via injection into the status line.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-34903" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2026-24882",
                "source" : "redhat-csaf",
                "cvssScore" : 8.4,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-24882" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/zlib@1.2.11-25.el8?arch=x86_64&distro=rhel-8.10&upstream=zlib-1.2.11-25.el8.src.rpm",
              "issues" : [ {
                "id" : "CVE-2018-25032",
                "title" : "zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.",
                "source" : "redhat-csaf",
                "cvssScore" : 8.2,
                "severity" : "HIGH",
                "cves" : [ "CVE-2018-25032" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-37434",
                "title" : "zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference).",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-37434" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2018-25032",
                "title" : "zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.",
                "source" : "redhat-csaf",
                "cvssScore" : 8.2,
                "severity" : "HIGH",
                "cves" : [ "CVE-2018-25032" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libssh-config@0.9.6-16.el8_10?arch=noarch&distro=rhel-8.10&upstream=libssh-0.9.6-16.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2025-5318",
                "title" : "Libssh: out-of-bounds read in sftp_handle()",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-5318" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-5987",
                "title" : "Libssh: invalid return code for chacha20 poly1305 with openssl backend",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-5987" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-48795",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-48795" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-2283",
                "source" : "redhat-csaf",
                "cvssScore" : 4.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-2283" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-6004",
                "source" : "redhat-csaf",
                "cvssScore" : 4.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-6004" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-1667",
                "title" : "A NULL pointer dereference was found In libssh during re-keying with algorithm guessing. This issue may allow an authenticated client to cause a denial of service.",
                "source" : "redhat-csaf",
                "cvssScore" : 4.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-1667" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-6918",
                "source" : "redhat-csaf",
                "cvssScore" : 3.7,
                "severity" : "LOW",
                "cves" : [ "CVE-2023-6918" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2025-5318",
                "title" : "Libssh: out-of-bounds read in sftp_handle()",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-5318" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libssh@0.9.6-16.el8_10?arch=x86_64&distro=rhel-8.10&upstream=libssh-0.9.6-16.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2025-5318",
                "title" : "Libssh: out-of-bounds read in sftp_handle()",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-5318" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-5987",
                "title" : "Libssh: invalid return code for chacha20 poly1305 with openssl backend",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-5987" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-48795",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-48795" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-2283",
                "source" : "redhat-csaf",
                "cvssScore" : 4.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-2283" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-6004",
                "source" : "redhat-csaf",
                "cvssScore" : 4.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-6004" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-1667",
                "title" : "A NULL pointer dereference was found In libssh during re-keying with algorithm guessing. This issue may allow an authenticated client to cause a denial of service.",
                "source" : "redhat-csaf",
                "cvssScore" : 4.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-1667" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-6918",
                "source" : "redhat-csaf",
                "cvssScore" : 3.7,
                "severity" : "LOW",
                "cves" : [ "CVE-2023-6918" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2025-5318",
                "title" : "Libssh: out-of-bounds read in sftp_handle()",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-5318" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/python3-cloud-what@1.28.44-1.el8_10?arch=x86_64&distro=rhel-8.10&upstream=subscription-manager-1.28.44-1.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2023-3899",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-3899" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2023-3899",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-3899" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libcap@2.48-6.el8_9?arch=x86_64&distro=rhel-8.10&upstream=libcap-2.48-6.el8_9.src.rpm",
              "issues" : [ {
                "id" : "CVE-2023-2603",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-2603" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-2602",
                "title" : "A vulnerability was found in the pthread_create() function in libcap. This issue may allow a malicious actor to use cause __real_pthread_create() to return an error, which can exhaust the process memory.",
                "source" : "redhat-csaf",
                "cvssScore" : 3.3,
                "severity" : "LOW",
                "cves" : [ "CVE-2023-2602" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2023-2603",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-2603" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/ncurses-base@6.1-10.20180224.el8?arch=noarch&distro=rhel-8.10&upstream=ncurses-6.1-10.20180224.el8.src.rpm",
              "issues" : [ {
                "id" : "CVE-2023-29491",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-29491" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-69720",
                "title" : "The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-69720" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-29458",
                "title" : "ncurses 6.3 before patch 20220416 has an out-of-bounds read and segmentation violation in convert_strings in tinfo/read_entry.c in the terminfo library.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-29458" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2023-29491",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-29491" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/ncurses-libs@6.1-10.20180224.el8?arch=x86_64&distro=rhel-8.10&upstream=ncurses-6.1-10.20180224.el8.src.rpm",
              "issues" : [ {
                "id" : "CVE-2023-29491",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-29491" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-69720",
                "title" : "The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-69720" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-29458",
                "title" : "ncurses 6.3 before patch 20220416 has an out-of-bounds read and segmentation violation in convert_strings in tinfo/read_entry.c in the terminfo library.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-29458" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2023-29491",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-29491" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/python3-subscription-manager-rhsm@1.28.44-1.el8_10?arch=x86_64&distro=rhel-8.10&upstream=subscription-manager-1.28.44-1.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2023-3899",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-3899" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2023-3899",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-3899" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libarchive@3.3.3-6.el8_10?arch=x86_64&distro=rhel-8.10&upstream=libarchive-3.3.3-6.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2025-5914",
                "title" : "Libarchive: double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-5914" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-4111",
                "title" : "Libarchive: infinite loop denial of service in rar5 decompression via archive_read_data() in libarchive",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-4111" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-4424",
                "title" : "Libarchive: libarchive: information disclosure via heap out-of-bounds read in rar archive processing",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-4424" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-5121",
                "title" : "Libarchive: libarchive: arbitrary code execution via integer overflow in iso9660 image processing",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-5121" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-26280",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-26280" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-36227",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-36227" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-57970",
                "title" : "libarchive through 3.7.7 has a heap-based buffer over-read in header_gnu_longlink in archive_read_support_format_tar.c via a TAR archive because it mishandles truncation in the middle of a GNU long linkname.",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-57970" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-25724",
                "title" : "list_item_verbose in tar/util.c in libarchive through 3.7.7 does not check an strftime return value, which can lead to a denial of service or unspecified other impact via a crafted TAR archive that is read with a verbose value of 2. For example, the 100-byte buffer may not be sufficient for a custom locale.",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-25724" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2025-5914",
                "title" : "Libarchive: double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-5914" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/systemd@239-82.el8_10.15?arch=x86_64&distro=rhel-8.10&upstream=systemd-239-82.el8_10.15.src.rpm",
              "issues" : [ {
                "id" : "CVE-2026-29111",
                "title" : "systemd: Local unprivileged user can trigger an assert",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-29111" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-40224",
                "title" : "In systemd 259 before 260, there is local privilege escalation in systemd-machined because varlink can be used to reach the root namespace.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.7,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-40224" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-40225",
                "title" : "In udev in systemd before 260, local root execution can occur via malicious hardware devices and unsanitized kernel output.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.4,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-40225" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-40226",
                "title" : "In nspawn in systemd 233 through 259 before 260, an escape-to-host action can occur via a crafted optional config file.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.4,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-40226" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-7008",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-7008" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-3821",
                "title" : "An off-by-one Error issue was discovered in Systemd in format_timespan() function of time-util.c. An attacker could supply specific values for time and accuracy that leads to buffer overrun in format_timespan(), leading to a Denial of Service.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-3821" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-4415",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-4415" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-45873",
                "title" : "systemd 250 and 251 allows local users to achieve a systemd-coredump deadlock by triggering a crash that has a long backtrace. This occurs in parse_elf_object in shared/elf-util.c. The exploitation methodology is to crash a binary calling the same function recursively, and put it in a deeply nested directory to make its backtrace large enough to cause the deadlock. This must be done 16 times when MaxConnections=16 is set for the systemd/units/systemd-coredump.socket file.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-45873" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-4598",
                "source" : "redhat-csaf",
                "cvssScore" : 4.7,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-4598" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-40223",
                "title" : "In systemd 258 before 260, a local unprivileged user can trigger an assert when a Delegate=yes and User=<unset> unit exists and is running.",
                "source" : "redhat-csaf",
                "cvssScore" : 4.7,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-40223" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-40228",
                "title" : "In systemd 259, systemd-journald can send ANSI escape sequences to the terminals of arbitrary users when a \"logger -p emerg\" command is executed, if ForwardToWall=yes is set.",
                "source" : "redhat-csaf",
                "cvssScore" : 2.9,
                "severity" : "LOW",
                "cves" : [ "CVE-2026-40228" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2026-29111",
                "title" : "systemd: Local unprivileged user can trigger an assert",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-29111" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/pam@1.3.1-39.el8_10?arch=x86_64&distro=rhel-8.10&upstream=pam-1.3.1-39.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2025-6020",
                "title" : "Linux-pam: linux-pam directory traversal",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-6020" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-8941",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-8941" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-10963",
                "title" : "Pam: improper hostname interpretation in pam_access leads to access control bypass",
                "source" : "redhat-csaf",
                "cvssScore" : 7.4,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-10963" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-22365",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-22365" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-10041",
                "source" : "redhat-csaf",
                "cvssScore" : 4.7,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-10041" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2025-6020",
                "title" : "Linux-pam: linux-pam directory traversal",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-6020" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/glib2@2.56.4-168.el8_10?arch=x86_64&distro=rhel-8.10&upstream=glib2-2.56.4-168.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2025-13601",
                "title" : "Glib: integer overflow in in g_escape_uri_string()",
                "source" : "redhat-csaf",
                "cvssScore" : 7.7,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-13601" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-52533",
                "title" : "gio/gsocks4aproxy.c in GNOME GLib before 2.82.1 has an off-by-one error and resultant buffer overflow because SOCKS4_CONN_MSG_LEN is not sufficient for a trailing '\\0' character.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-52533" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-32611",
                "title" : "G_variant_byteswap() can take a long time with some non-normal inputs",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-32611" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-32665",
                "title" : "Gvariant deserialisation does not match spec for non-normal data",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-32665" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-14512",
                "title" : "Glib: integer overflow in glib gio attribute escaping causes heap buffer overflow",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-14512" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-29499",
                "source" : "redhat-csaf",
                "cvssScore" : 6.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-29499" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-14087",
                "title" : "Glib: glib: buffer underflow in gvariant parser leads to heap corruption",
                "source" : "redhat-csaf",
                "cvssScore" : 5.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-14087" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-4373",
                "source" : "redhat-csaf",
                "cvssScore" : 4.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-4373" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-34397",
                "source" : "redhat-csaf",
                "cvssScore" : 3.8,
                "severity" : "LOW",
                "cves" : [ "CVE-2024-34397" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2025-13601",
                "title" : "Glib: integer overflow in in g_escape_uri_string()",
                "source" : "redhat-csaf",
                "cvssScore" : 7.7,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-13601" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/sqlite-libs@3.26.0-20.el8_10?arch=x86_64&distro=rhel-8.10&upstream=sqlite-3.26.0-20.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2025-6965",
                "title" : "Integer Truncation on SQLite",
                "source" : "redhat-csaf",
                "cvssScore" : 7.7,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-6965" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-7104",
                "source" : "redhat-csaf",
                "cvssScore" : 7.3,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-7104" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-3277",
                "title" : "An integer overflow can be triggered in SQLite’s `concat_ws()` function. The resulting, truncated integer is then used to allocate a buffer. When SQLite then writes the resulting string to the buffer, it uses the original, untruncated size and thus a wild Heap Buffer overflow of size ~4GB can be triggered. This can result in arbitrary code execution.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.3,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-3277" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-35737",
                "title" : "SQLite 1.0.12 through 3.39.x before 3.39.2 sometimes allows an array-bounds overflow if billions of bytes are used in a string argument to a C API.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-35737" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2025-6965",
                "title" : "Integer Truncation on SQLite",
                "source" : "redhat-csaf",
                "cvssScore" : 7.7,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-6965" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/expat@2.5.0-1.el8_10?arch=x86_64&distro=rhel-8.10&upstream=expat-2.5.0-1.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2023-52425",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-52425" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-28757",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-28757" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-45490",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-45490" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-45491",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-45491" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-8176",
                "title" : "Libexpat: expat: improper restriction of xml entity expansion depth in libexpat",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-8176" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-45492",
                "source" : "redhat-csaf",
                "cvssScore" : 6.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-45492" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-50602",
                "title" : "An issue was discovered in libexpat before 2.6.4. There is a crash within the XML_ResumeParser function because XML_StopParser can stop/suspend an unstarted parser.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-50602" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-59375",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-59375" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2023-52425",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-52425" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libsolv@0.7.20-6.el8?arch=x86_64&distro=rhel-8.10&upstream=libsolv-0.7.20-6.el8.src.rpm",
              "issues" : [ {
                "id" : "CVE-2021-33928",
                "title" : "Buffer overflow vulnerability in function pool_installable in src/repo.h in libsolv before 0.7.17 allows attackers to cause a Denial of Service.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2021-33928" ],
                "unique" : false
              }, {
                "id" : "CVE-2021-33929",
                "title" : "Buffer overflow vulnerability in function pool_disabled_solvable in src/repo.h in libsolv before 0.7.17 allows attackers to cause a Denial of Service.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2021-33929" ],
                "unique" : false
              }, {
                "id" : "CVE-2021-33930",
                "title" : "Buffer overflow vulnerability in function pool_installable_whatprovides in src/repo.h in libsolv before 0.7.17 allows attackers to cause a Denial of Service.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2021-33930" ],
                "unique" : false
              }, {
                "id" : "CVE-2021-33938",
                "title" : "Buffer overflow vulnerability in function prune_to_recommended in src/policy.c in libsolv before 0.7.17 allows attackers to cause a Denial of Service.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2021-33938" ],
                "unique" : false
              }, {
                "id" : "CVE-2021-46877",
                "title" : "jackson-databind 2.10.x through 2.12.x before 2.12.6 and 2.13.x before 2.13.1 allows attackers to cause a denial of service (2 GB transient heap usage per read) in uncommon situations involving JsonNode JDK serialization.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2021-46877" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-28863",
                "title" : "node-tar vulnerable to denial of service while parsing a tar file due to lack of folders count validation",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-28863" ],
                "unique" : false
              }, {
                "id" : "CVE-2021-44568",
                "title" : "Two heap-overflow vulnerabilities exist in openSUSE/libsolv libsolv through 13 Dec 2020 in the decisionmap variable via the resolve_dependencies function at src/solver.c (line 1940 & line 1995), which could cause a remote Denial of Service.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2021-44568" ],
                "unique" : false
              }, {
                "id" : "CVE-2021-3200",
                "title" : "Buffer overflow vulnerability in libsolv 2020-12-13 via the Solver * testcase_read(Pool *pool, FILE *fp, const char *testcase, Queue *job, char **resultp, int *resultflagsp function at src/testcase.c: line 2334, which could cause a denial of service",
                "source" : "redhat-csaf",
                "cvssScore" : 3.3,
                "severity" : "LOW",
                "cves" : [ "CVE-2021-3200" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2021-33928",
                "title" : "Buffer overflow vulnerability in function pool_installable in src/repo.h in libsolv before 0.7.17 allows attackers to cause a Denial of Service.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2021-33928" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/brotli@1.0.6-4.el8_10?arch=x86_64&distro=rhel-8.10&upstream=brotli-1.0.6-4.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2025-6176",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-6176" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2025-6176",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-6176" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/gnutls@3.6.16-8.el8_10.5?arch=x86_64&distro=rhel-8.10&upstream=gnutls-3.6.16-8.el8_10.5.src.rpm",
              "issues" : [ {
                "id" : "CVE-2022-2509",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-2509" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-0553",
                "title" : "Gnutls: incomplete fix for cve-2023-5981",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-0553" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-0567",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-0567" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-0361",
                "title" : "A timing side-channel in the handling of RSA ClientKeyExchange messages was discovered in GnuTLS. This side-channel can be sufficient to recover the key encrypted in the RSA ciphertext across a network in a Bleichenbacher style attack. To achieve a successful decryption the attacker would need to send a large amount of specially crafted messages to the vulnerable server. By recovering the secret from the ClientKeyExchange message, the attacker would be able to decrypt the application data exchanged over that connection.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.4,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-0361" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-32988",
                "title" : "Gnutls: vulnerability in gnutls othername san export",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-32988" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-32990",
                "title" : "Gnutls: vulnerability in gnutls certtool template parsing",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-32990" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-6395",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-6395" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-5981",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-5981" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-12243",
                "title" : "Gnutls: gnutls impacted by inefficient der decoding in libtasn1 leading to remote dos",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-12243" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-28834",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-28834" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-14831",
                "title" : "Gnutls: gnutls: denial of service via excessive resource consumption during certificate verification",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-14831" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-32989",
                "title" : "Gnutls: vulnerability in gnutls sct extension parsing",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-32989" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-28835",
                "source" : "redhat-csaf",
                "cvssScore" : 5.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-28835" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-9820",
                "title" : "Gnutls: stack-based buffer overflow in gnutls_pkcs11_token_init() function",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-9820" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2022-2509",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-2509" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libnghttp2@1.33.0-6.el8_10.2?arch=x86_64&distro=rhel-8.10&upstream=nghttp2-1.33.0-6.el8_10.2.src.rpm",
              "issues" : [ {
                "id" : "CVE-2023-44487",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-44487" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-27135",
                "title" : "nghttp2 Denial of service: Assertion failure due to the missing state validation",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-27135" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-28182",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-28182" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2023-44487",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-44487" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libtirpc@1.1.4-12.el8_10?arch=x86_64&distro=rhel-8.10&upstream=libtirpc-1.1.4-12.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2021-46828",
                "title" : "In libtirpc before 1.3.3rc1, remote attackers could exhaust the file descriptors of a process that uses libtirpc because idle TCP connections are mishandled. This can, in turn, lead to an svc_run infinite loop without accepting new connections.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2021-46828" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2021-46828",
                "title" : "In libtirpc before 1.3.3rc1, remote attackers could exhaust the file descriptors of a process that uses libtirpc because idle TCP connections are mishandled. This can, in turn, lead to an svc_run infinite loop without accepting new connections.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2021-46828" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/pcre2@10.32-3.el8_6?arch=x86_64&distro=rhel-8.10&upstream=pcre2-10.32-3.el8_6.src.rpm",
              "issues" : [ {
                "id" : "CVE-2022-1586",
                "title" : "An out-of-bounds read vulnerability was discovered in the PCRE2 library in the compile_xclass_matchingpath() function of the pcre2_jit_compile.c file. This involves a unicode property matching issue in JIT-compiled regular expressions. The issue occurs because the character was not fully read in case-less matching within JIT.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-1586" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-1587",
                "title" : "An out-of-bounds read vulnerability was discovered in the PCRE2 library in the get_recurse_data_length() function of the pcre2_jit_compile.c file. This issue affects recursions in JIT-compiled regular expressions caused by duplicate data transfers.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-1587" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2022-1586",
                "title" : "An out-of-bounds read vulnerability was discovered in the PCRE2 library in the compile_xclass_matchingpath() function of the pcre2_jit_compile.c file. This involves a unicode property matching issue in JIT-compiled regular expressions. The issue occurs because the character was not fully read in case-less matching within JIT.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-1586" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/python3-urllib3@1.24.2-9.el8_10?arch=noarch&distro=rhel-8.10&upstream=python-urllib3-1.24.2-9.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2021-33503",
                "title" : "An issue was discovered in urllib3 before 1.26.5. When provided with a URL containing many @ characters in the authority component, the authority regular expression exhibits catastrophic backtracking, causing a denial of service if a URL were passed as a parameter or redirected to via an HTTP redirect.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2021-33503" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-66418",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-66418" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-66471",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-66471" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-21441",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-21441" ],
                "unique" : false
              }, {
                "id" : "CVE-2020-8185",
                "title" : "A denial of service vulnerability exists in Rails <6.0.3.2 that allowed an untrusted user to run any pending migrations on a Rails app running in production.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2020-8185" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-7143",
                "title" : "Pulpcore: rbac permissions incorrectly assigned in tasks that create objects",
                "source" : "redhat-csaf",
                "cvssScore" : 6.7,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-7143" ],
                "unique" : false
              }, {
                "id" : "CVE-2019-16782",
                "title" : "Possible Information Leak / Session Hijack Vulnerability in Rack",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2019-16782" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-43804",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-43804" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-37891",
                "source" : "redhat-csaf",
                "cvssScore" : 4.4,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-37891" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-45803",
                "source" : "redhat-csaf",
                "cvssScore" : 4.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-45803" ],
                "unique" : false
              }, {
                "id" : "CVE-2018-1000119",
                "title" : "Sinatra rack-protection versions 1.5.4 and 2.0.0.rc3 and earlier contains a timing attack vulnerability in the CSRF token checking that can result in signatures can be exposed. This attack appear to be exploitable via network connectivity to the ruby application. This vulnerability appears to have been fixed in 1.5.5 and 2.0.0.",
                "source" : "redhat-csaf",
                "cvssScore" : 3.7,
                "severity" : "LOW",
                "cves" : [ "CVE-2018-1000119" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2021-33503",
                "title" : "An issue was discovered in urllib3 before 1.26.5. When provided with a URL containing many @ characters in the authority component, the authority regular expression exhibits catastrophic backtracking, causing a denial of service if a URL were passed as a parameter or redirected to via an HTTP redirect.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2021-33503" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/python3-decorator@4.2.1-2.el8?arch=noarch&distro=rhel-8.10&upstream=python-decorator-4.2.1-2.el8.src.rpm",
              "issues" : [ {
                "id" : "CVE-2022-2996",
                "title" : "A flaw was found in the python-scciclient when making an HTTPS connection to a server where the server's certificate would not be verified. This issue opens up the connection to possible Man-in-the-middle (MITM) attacks.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.4,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-2996" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-1705",
                "title" : "Improper sanitization of Transfer-Encoding headers in net/http",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-1705" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-2727",
                "title" : "Bypassing policies imposed by the ImagePolicyWebhook admission plugin",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-2727" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-2728",
                "title" : "Bypassing enforce mountable secrets policy imposed by the ServiceAccount admission plugin",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-2728" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2022-2996",
                "title" : "A flaw was found in the python-scciclient when making an HTTPS connection to a server where the server's certificate would not be verified. This issue opens up the connection to possible Man-in-the-middle (MITM) attacks.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.4,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-2996" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/openldap@2.4.46-21.el8_10?arch=x86_64&distro=rhel-8.10&upstream=openldap-2.4.46-21.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2023-2953",
                "title" : "A vulnerability was found in openldap. This security flaw causes a null pointer dereference in ber_memalloc_x() function.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-2953" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2023-2953",
                "title" : "A vulnerability was found in openldap. This security flaw causes a null pointer dereference in ber_memalloc_x() function.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-2953" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/python3-iniparse@0.4-31.el8?arch=noarch&distro=rhel-8.10&upstream=python-iniparse-0.4-31.el8.src.rpm",
              "issues" : [ {
                "id" : "CVE-2020-8185",
                "title" : "A denial of service vulnerability exists in Rails <6.0.3.2 that allowed an untrusted user to run any pending migrations on a Rails app running in production.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2020-8185" ],
                "unique" : false
              }, {
                "id" : "CVE-2019-16782",
                "title" : "Possible Information Leak / Session Hijack Vulnerability in Rack",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2019-16782" ],
                "unique" : false
              }, {
                "id" : "CVE-2018-1000119",
                "title" : "Sinatra rack-protection versions 1.5.4 and 2.0.0.rc3 and earlier contains a timing attack vulnerability in the CSRF token checking that can result in signatures can be exposed. This attack appear to be exploitable via network connectivity to the ruby application. This vulnerability appears to have been fixed in 1.5.5 and 2.0.0.",
                "source" : "redhat-csaf",
                "cvssScore" : 3.7,
                "severity" : "LOW",
                "cves" : [ "CVE-2018-1000119" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2020-8185",
                "title" : "A denial of service vulnerability exists in Rails <6.0.3.2 that allowed an untrusted user to run any pending migrations on a Rails app running in production.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2020-8185" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/python3-idna@2.5-7.el8_10?arch=noarch&distro=rhel-8.10&upstream=python-idna-2.5-7.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2020-8185",
                "title" : "A denial of service vulnerability exists in Rails <6.0.3.2 that allowed an untrusted user to run any pending migrations on a Rails app running in production.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2020-8185" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-3651",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-3651" ],
                "unique" : false
              }, {
                "id" : "CVE-2019-16782",
                "title" : "Possible Information Leak / Session Hijack Vulnerability in Rack",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2019-16782" ],
                "unique" : false
              }, {
                "id" : "CVE-2018-1000119",
                "title" : "Sinatra rack-protection versions 1.5.4 and 2.0.0.rc3 and earlier contains a timing attack vulnerability in the CSRF token checking that can result in signatures can be exposed. This attack appear to be exploitable via network connectivity to the ruby application. This vulnerability appears to have been fixed in 1.5.5 and 2.0.0.",
                "source" : "redhat-csaf",
                "cvssScore" : 3.7,
                "severity" : "LOW",
                "cves" : [ "CVE-2018-1000119" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2020-8185",
                "title" : "A denial of service vulnerability exists in Rails <6.0.3.2 that allowed an untrusted user to run any pending migrations on a Rails app running in production.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2020-8185" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/python3-requests@2.20.0-6.el8_10?arch=noarch&distro=rhel-8.10&upstream=python-requests-2.20.0-6.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2020-8185",
                "title" : "A denial of service vulnerability exists in Rails <6.0.3.2 that allowed an untrusted user to run any pending migrations on a Rails app running in production.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2020-8185" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-32681",
                "title" : "Unintended leak of Proxy-Authorization header in requests",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-32681" ],
                "unique" : false
              }, {
                "id" : "CVE-2019-16782",
                "title" : "Possible Information Leak / Session Hijack Vulnerability in Rack",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2019-16782" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-35195",
                "title" : "Requests `Session` object does not verify requests after making first request with verify=False",
                "source" : "redhat-csaf",
                "cvssScore" : 5.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-35195" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-47081",
                "title" : "Requests vulnerable to .netrc credentials leak via malicious URLs",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-47081" ],
                "unique" : false
              }, {
                "id" : "CVE-2018-1000119",
                "title" : "Sinatra rack-protection versions 1.5.4 and 2.0.0.rc3 and earlier contains a timing attack vulnerability in the CSRF token checking that can result in signatures can be exposed. This attack appear to be exploitable via network connectivity to the ruby application. This vulnerability appears to have been fixed in 1.5.5 and 2.0.0.",
                "source" : "redhat-csaf",
                "cvssScore" : 3.7,
                "severity" : "LOW",
                "cves" : [ "CVE-2018-1000119" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2020-8185",
                "title" : "A denial of service vulnerability exists in Rails <6.0.3.2 that allowed an untrusted user to run any pending migrations on a Rails app running in production.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2020-8185" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/python3-six@1.11.0-8.el8?arch=noarch&distro=rhel-8.10&upstream=python-six-1.11.0-8.el8.src.rpm",
              "issues" : [ {
                "id" : "CVE-2020-8185",
                "title" : "A denial of service vulnerability exists in Rails <6.0.3.2 that allowed an untrusted user to run any pending migrations on a Rails app running in production.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2020-8185" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-1705",
                "title" : "Improper sanitization of Transfer-Encoding headers in net/http",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-1705" ],
                "unique" : false
              }, {
                "id" : "CVE-2019-16782",
                "title" : "Possible Information Leak / Session Hijack Vulnerability in Rack",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2019-16782" ],
                "unique" : false
              }, {
                "id" : "CVE-2018-1000119",
                "title" : "Sinatra rack-protection versions 1.5.4 and 2.0.0.rc3 and earlier contains a timing attack vulnerability in the CSRF token checking that can result in signatures can be exposed. This attack appear to be exploitable via network connectivity to the ruby application. This vulnerability appears to have been fixed in 1.5.5 and 2.0.0.",
                "source" : "redhat-csaf",
                "cvssScore" : 3.7,
                "severity" : "LOW",
                "cves" : [ "CVE-2018-1000119" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2020-8185",
                "title" : "A denial of service vulnerability exists in Rails <6.0.3.2 that allowed an untrusted user to run any pending migrations on a Rails app running in production.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2020-8185" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/lua-libs@5.3.4-12.el8?arch=x86_64&distro=rhel-8.10&upstream=lua-5.3.4-12.el8.src.rpm",
              "issues" : [ {
                "id" : "CVE-2021-44964",
                "title" : "Use after free in garbage collector and finalizer of lgc.c in Lua interpreter 5.4.0~5.4.3 allows attackers to perform Sandbox Escape via a crafted script file.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2021-44964" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-33099",
                "title" : "An issue in the component luaG_runerror of Lua v5.4.4 and below leads to a heap-buffer overflow when a recursive error occurs.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-33099" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-28805",
                "title" : "singlevar in lparser.c in Lua from (including) 5.4.0 up to (excluding) 5.4.4 lacks a certain luaK_exp2anyregup call, leading to a heap-based buffer over-read that might affect a system that compiles untrusted Lua code.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-28805" ],
                "unique" : false
              }, {
                "id" : "CVE-2021-43519",
                "title" : "Stack overflow in lua_resume of ldo.c in Lua Interpreter 5.1.0~5.4.4 allows attackers to perform a Denial of Service via a crafted script file.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2021-43519" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2021-44964",
                "title" : "Use after free in garbage collector and finalizer of lgc.c in Lua interpreter 5.4.0~5.4.3 allows attackers to perform Sandbox Escape via a crafted script file.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2021-44964" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/bash@4.4.20-6.el8_10?arch=x86_64&distro=rhel-8.10&upstream=bash-4.4.20-6.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2022-3715",
                "source" : "redhat-csaf",
                "cvssScore" : 6.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-3715" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2022-3715",
                "source" : "redhat-csaf",
                "cvssScore" : 6.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-3715" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/rpm-libs@4.14.3-32.el8_10?arch=x86_64&distro=rhel-8.10&upstream=rpm-4.14.3-32.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2021-35938",
                "title" : "A symbolic link issue was found in rpm. It occurs when rpm sets the desired permissions and credentials after installing a file. A local unprivileged user could use this flaw to exchange the original file with a symbolic link to a security-critical file and escalate their privileges on the system. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2021-35938" ],
                "unique" : false
              }, {
                "id" : "CVE-2021-35939",
                "title" : "It was found that the fix for CVE-2017-7500 and CVE-2017-7501 was incomplete: the check was only implemented for the parent directory of the file to be created. A local unprivileged user who owns another ancestor directory could potentially use this flaw to gain root privileges. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2021-35939" ],
                "unique" : false
              }, {
                "id" : "CVE-2021-35937",
                "title" : "A race condition vulnerability was found in rpm. A local unprivileged user could use this flaw to bypass the checks that were introduced in response to CVE-2017-7500 and CVE-2017-7501, potentially gaining root privileges. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2021-35937" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2021-35938",
                "title" : "A symbolic link issue was found in rpm. It occurs when rpm sets the desired permissions and credentials after installing a file. A local unprivileged user could use this flaw to exchange the original file with a symbolic link to a security-critical file and escalate their privileges on the system. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2021-35938" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/dbus-tools@1.12.8-27.el8_10?arch=x86_64&distro=rhel-8.10&epoch=1&upstream=dbus-1.12.8-27.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2022-42010",
                "title" : "An issue was discovered in D-Bus before 1.12.24, 1.13.x and 1.14.x before 1.14.4, and 1.15.x before 1.15.2. An authenticated attacker can cause dbus-daemon and other programs that use libdbus to crash when receiving a message with certain invalid type signatures.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-42010" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-42011",
                "title" : "An issue was discovered in D-Bus before 1.12.24, 1.13.x and 1.14.x before 1.14.4, and 1.15.x before 1.15.2. An authenticated attacker can cause dbus-daemon and other programs that use libdbus to crash when receiving a message where an array length is inconsistent with the size of the element type.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-42011" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-42012",
                "title" : "An issue was discovered in D-Bus before 1.12.24, 1.13.x and 1.14.x before 1.14.4, and 1.15.x before 1.15.2. An authenticated attacker can cause dbus-daemon and other programs that use libdbus to crash by sending a message with attached file descriptors in an unexpected format.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-42012" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-34969",
                "title" : "D-Bus before 1.15.6 sometimes allows unprivileged users to crash dbus-daemon. If a privileged user with control over the dbus-daemon is using the org.freedesktop.DBus.Monitoring interface to monitor message bus traffic, then an unprivileged user with the ability to connect to the same dbus-daemon can cause a dbus-daemon crash under some circumstances via an unreplyable message. When done on the well-known system bus, this is a denial-of-service vulnerability. The fixed versions are 1.12.28, 1.14.8, and 1.15.6.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-34969" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2022-42010",
                "title" : "An issue was discovered in D-Bus before 1.12.24, 1.13.x and 1.14.x before 1.14.4, and 1.15.x before 1.15.2. An authenticated attacker can cause dbus-daemon and other programs that use libdbus to crash when receiving a message with certain invalid type signatures.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-42010" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/dbus-libs@1.12.8-27.el8_10?arch=x86_64&distro=rhel-8.10&epoch=1&upstream=dbus-1.12.8-27.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2022-42010",
                "title" : "An issue was discovered in D-Bus before 1.12.24, 1.13.x and 1.14.x before 1.14.4, and 1.15.x before 1.15.2. An authenticated attacker can cause dbus-daemon and other programs that use libdbus to crash when receiving a message with certain invalid type signatures.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-42010" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-42011",
                "title" : "An issue was discovered in D-Bus before 1.12.24, 1.13.x and 1.14.x before 1.14.4, and 1.15.x before 1.15.2. An authenticated attacker can cause dbus-daemon and other programs that use libdbus to crash when receiving a message where an array length is inconsistent with the size of the element type.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-42011" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-42012",
                "title" : "An issue was discovered in D-Bus before 1.12.24, 1.13.x and 1.14.x before 1.14.4, and 1.15.x before 1.15.2. An authenticated attacker can cause dbus-daemon and other programs that use libdbus to crash by sending a message with attached file descriptors in an unexpected format.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-42012" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-34969",
                "title" : "D-Bus before 1.15.6 sometimes allows unprivileged users to crash dbus-daemon. If a privileged user with control over the dbus-daemon is using the org.freedesktop.DBus.Monitoring interface to monitor message bus traffic, then an unprivileged user with the ability to connect to the same dbus-daemon can cause a dbus-daemon crash under some circumstances via an unreplyable message. When done on the well-known system bus, this is a denial-of-service vulnerability. The fixed versions are 1.12.28, 1.14.8, and 1.15.6.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-34969" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2022-42010",
                "title" : "An issue was discovered in D-Bus before 1.12.24, 1.13.x and 1.14.x before 1.14.4, and 1.15.x before 1.15.2. An authenticated attacker can cause dbus-daemon and other programs that use libdbus to crash when receiving a message with certain invalid type signatures.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-42010" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/dbus-common@1.12.8-27.el8_10?arch=noarch&distro=rhel-8.10&epoch=1&upstream=dbus-1.12.8-27.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2022-42010",
                "title" : "An issue was discovered in D-Bus before 1.12.24, 1.13.x and 1.14.x before 1.14.4, and 1.15.x before 1.15.2. An authenticated attacker can cause dbus-daemon and other programs that use libdbus to crash when receiving a message with certain invalid type signatures.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-42010" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-42011",
                "title" : "An issue was discovered in D-Bus before 1.12.24, 1.13.x and 1.14.x before 1.14.4, and 1.15.x before 1.15.2. An authenticated attacker can cause dbus-daemon and other programs that use libdbus to crash when receiving a message where an array length is inconsistent with the size of the element type.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-42011" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-42012",
                "title" : "An issue was discovered in D-Bus before 1.12.24, 1.13.x and 1.14.x before 1.14.4, and 1.15.x before 1.15.2. An authenticated attacker can cause dbus-daemon and other programs that use libdbus to crash by sending a message with attached file descriptors in an unexpected format.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-42012" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-34969",
                "title" : "D-Bus before 1.15.6 sometimes allows unprivileged users to crash dbus-daemon. If a privileged user with control over the dbus-daemon is using the org.freedesktop.DBus.Monitoring interface to monitor message bus traffic, then an unprivileged user with the ability to connect to the same dbus-daemon can cause a dbus-daemon crash under some circumstances via an unreplyable message. When done on the well-known system bus, this is a denial-of-service vulnerability. The fixed versions are 1.12.28, 1.14.8, and 1.15.6.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-34969" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2022-42010",
                "title" : "An issue was discovered in D-Bus before 1.12.24, 1.13.x and 1.14.x before 1.14.4, and 1.15.x before 1.15.2. An authenticated attacker can cause dbus-daemon and other programs that use libdbus to crash when receiving a message with certain invalid type signatures.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-42010" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/python3-rpm@4.14.3-32.el8_10?arch=x86_64&distro=rhel-8.10&upstream=rpm-4.14.3-32.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2021-35938",
                "title" : "A symbolic link issue was found in rpm. It occurs when rpm sets the desired permissions and credentials after installing a file. A local unprivileged user could use this flaw to exchange the original file with a symbolic link to a security-critical file and escalate their privileges on the system. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2021-35938" ],
                "unique" : false
              }, {
                "id" : "CVE-2021-35939",
                "title" : "It was found that the fix for CVE-2017-7500 and CVE-2017-7501 was incomplete: the check was only implemented for the parent directory of the file to be created. A local unprivileged user who owns another ancestor directory could potentially use this flaw to gain root privileges. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2021-35939" ],
                "unique" : false
              }, {
                "id" : "CVE-2021-35937",
                "title" : "A race condition vulnerability was found in rpm. A local unprivileged user could use this flaw to bypass the checks that were introduced in response to CVE-2017-7500 and CVE-2017-7501, potentially gaining root privileges. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2021-35937" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2021-35938",
                "title" : "A symbolic link issue was found in rpm. It occurs when rpm sets the desired permissions and credentials after installing a file. A local unprivileged user could use this flaw to exchange the original file with a symbolic link to a security-critical file and escalate their privileges on the system. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2021-35938" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/rpm-build-libs@4.14.3-32.el8_10?arch=x86_64&distro=rhel-8.10&upstream=rpm-4.14.3-32.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2021-35938",
                "title" : "A symbolic link issue was found in rpm. It occurs when rpm sets the desired permissions and credentials after installing a file. A local unprivileged user could use this flaw to exchange the original file with a symbolic link to a security-critical file and escalate their privileges on the system. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2021-35938" ],
                "unique" : false
              }, {
                "id" : "CVE-2021-35939",
                "title" : "It was found that the fix for CVE-2017-7500 and CVE-2017-7501 was incomplete: the check was only implemented for the parent directory of the file to be created. A local unprivileged user who owns another ancestor directory could potentially use this flaw to gain root privileges. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2021-35939" ],
                "unique" : false
              }, {
                "id" : "CVE-2021-35937",
                "title" : "A race condition vulnerability was found in rpm. A local unprivileged user could use this flaw to bypass the checks that were introduced in response to CVE-2017-7500 and CVE-2017-7501, potentially gaining root privileges. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2021-35937" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2021-35938",
                "title" : "A symbolic link issue was found in rpm. It occurs when rpm sets the desired permissions and credentials after installing a file. A local unprivileged user could use this flaw to exchange the original file with a symbolic link to a security-critical file and escalate their privileges on the system. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2021-35938" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/rpm@4.14.3-32.el8_10?arch=x86_64&distro=rhel-8.10&upstream=rpm-4.14.3-32.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2021-35938",
                "title" : "A symbolic link issue was found in rpm. It occurs when rpm sets the desired permissions and credentials after installing a file. A local unprivileged user could use this flaw to exchange the original file with a symbolic link to a security-critical file and escalate their privileges on the system. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2021-35938" ],
                "unique" : false
              }, {
                "id" : "CVE-2021-35939",
                "title" : "It was found that the fix for CVE-2017-7500 and CVE-2017-7501 was incomplete: the check was only implemented for the parent directory of the file to be created. A local unprivileged user who owns another ancestor directory could potentially use this flaw to gain root privileges. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2021-35939" ],
                "unique" : false
              }, {
                "id" : "CVE-2021-35937",
                "title" : "A race condition vulnerability was found in rpm. A local unprivileged user could use this flaw to bypass the checks that were introduced in response to CVE-2017-7500 and CVE-2017-7501, potentially gaining root privileges. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2021-35937" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2021-35938",
                "title" : "A symbolic link issue was found in rpm. It occurs when rpm sets the desired permissions and credentials after installing a file. A local unprivileged user could use this flaw to exchange the original file with a symbolic link to a security-critical file and escalate their privileges on the system. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2021-35938" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/dbus-daemon@1.12.8-27.el8_10?arch=x86_64&distro=rhel-8.10&epoch=1&upstream=dbus-1.12.8-27.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2022-42010",
                "title" : "An issue was discovered in D-Bus before 1.12.24, 1.13.x and 1.14.x before 1.14.4, and 1.15.x before 1.15.2. An authenticated attacker can cause dbus-daemon and other programs that use libdbus to crash when receiving a message with certain invalid type signatures.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-42010" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-42011",
                "title" : "An issue was discovered in D-Bus before 1.12.24, 1.13.x and 1.14.x before 1.14.4, and 1.15.x before 1.15.2. An authenticated attacker can cause dbus-daemon and other programs that use libdbus to crash when receiving a message where an array length is inconsistent with the size of the element type.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-42011" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-42012",
                "title" : "An issue was discovered in D-Bus before 1.12.24, 1.13.x and 1.14.x before 1.14.4, and 1.15.x before 1.15.2. An authenticated attacker can cause dbus-daemon and other programs that use libdbus to crash by sending a message with attached file descriptors in an unexpected format.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-42012" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-34969",
                "title" : "D-Bus before 1.15.6 sometimes allows unprivileged users to crash dbus-daemon. If a privileged user with control over the dbus-daemon is using the org.freedesktop.DBus.Monitoring interface to monitor message bus traffic, then an unprivileged user with the ability to connect to the same dbus-daemon can cause a dbus-daemon crash under some circumstances via an unreplyable message. When done on the well-known system bus, this is a denial-of-service vulnerability. The fixed versions are 1.12.28, 1.14.8, and 1.15.6.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-34969" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2022-42010",
                "title" : "An issue was discovered in D-Bus before 1.12.24, 1.13.x and 1.14.x before 1.14.4, and 1.15.x before 1.15.2. An authenticated attacker can cause dbus-daemon and other programs that use libdbus to crash when receiving a message with certain invalid type signatures.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-42010" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/dbus@1.12.8-27.el8_10?arch=x86_64&distro=rhel-8.10&epoch=1&upstream=dbus-1.12.8-27.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2022-42010",
                "title" : "An issue was discovered in D-Bus before 1.12.24, 1.13.x and 1.14.x before 1.14.4, and 1.15.x before 1.15.2. An authenticated attacker can cause dbus-daemon and other programs that use libdbus to crash when receiving a message with certain invalid type signatures.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-42010" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-42011",
                "title" : "An issue was discovered in D-Bus before 1.12.24, 1.13.x and 1.14.x before 1.14.4, and 1.15.x before 1.15.2. An authenticated attacker can cause dbus-daemon and other programs that use libdbus to crash when receiving a message where an array length is inconsistent with the size of the element type.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-42011" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-42012",
                "title" : "An issue was discovered in D-Bus before 1.12.24, 1.13.x and 1.14.x before 1.14.4, and 1.15.x before 1.15.2. An authenticated attacker can cause dbus-daemon and other programs that use libdbus to crash by sending a message with attached file descriptors in an unexpected format.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-42012" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-34969",
                "title" : "D-Bus before 1.15.6 sometimes allows unprivileged users to crash dbus-daemon. If a privileged user with control over the dbus-daemon is using the org.freedesktop.DBus.Monitoring interface to monitor message bus traffic, then an unprivileged user with the ability to connect to the same dbus-daemon can cause a dbus-daemon crash under some circumstances via an unreplyable message. When done on the well-known system bus, this is a denial-of-service vulnerability. The fixed versions are 1.12.28, 1.14.8, and 1.15.6.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-34969" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2022-42010",
                "title" : "An issue was discovered in D-Bus before 1.12.24, 1.13.x and 1.14.x before 1.14.4, and 1.15.x before 1.15.2. An authenticated attacker can cause dbus-daemon and other programs that use libdbus to crash when receiving a message with certain invalid type signatures.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-42010" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/tpm2-tss@2.3.2-6.el8?arch=x86_64&distro=rhel-8.10&upstream=tpm2-tss-2.3.2-6.el8.src.rpm",
              "issues" : [ {
                "id" : "CVE-2023-22745",
                "source" : "redhat-csaf",
                "cvssScore" : 6.4,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-22745" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2023-22745",
                "source" : "redhat-csaf",
                "cvssScore" : 6.4,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-22745" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/gmp@6.1.2-11.el8?arch=x86_64&distro=rhel-8.10&epoch=1&upstream=gmp-6.1.2-11.el8.src.rpm",
              "issues" : [ {
                "id" : "CVE-2021-43618",
                "title" : "GNU Multiple Precision Arithmetic Library (GMP) through 6.2.1 has an mpz/inp_raw.c integer overflow and resultant buffer overflow via crafted input, leading to a segmentation fault on 32-bit platforms.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2021-43618" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2021-43618",
                "title" : "GNU Multiple Precision Arithmetic Library (GMP) through 6.2.1 has an mpz/inp_raw.c integer overflow and resultant buffer overflow via crafted input, leading to a segmentation fault on 32-bit platforms.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2021-43618" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libsmartcols@2.32.1-48.el8_10?arch=x86_64&distro=rhel-8.10&upstream=util-linux-2.32.1-48.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2025-14104",
                "title" : "Util-linux: util-linux: heap buffer overread in setpwnam() when processing 256-byte usernames",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-14104" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2025-14104",
                "title" : "Util-linux: util-linux: heap buffer overread in setpwnam() when processing 256-byte usernames",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-14104" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libfdisk@2.32.1-48.el8_10?arch=x86_64&distro=rhel-8.10&upstream=util-linux-2.32.1-48.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2025-14104",
                "title" : "Util-linux: util-linux: heap buffer overread in setpwnam() when processing 256-byte usernames",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-14104" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2025-14104",
                "title" : "Util-linux: util-linux: heap buffer overread in setpwnam() when processing 256-byte usernames",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-14104" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libgcc@8.5.0-28.el8_10?arch=x86_64&distro=rhel-8.10&upstream=gcc-8.5.0-28.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2020-11023",
                "title" : "Potential XSS vulnerability in jQuery",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2020-11023" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2020-11023",
                "title" : "Potential XSS vulnerability in jQuery",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2020-11023" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libmount@2.32.1-48.el8_10?arch=x86_64&distro=rhel-8.10&upstream=util-linux-2.32.1-48.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2025-14104",
                "title" : "Util-linux: util-linux: heap buffer overread in setpwnam() when processing 256-byte usernames",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-14104" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2025-14104",
                "title" : "Util-linux: util-linux: heap buffer overread in setpwnam() when processing 256-byte usernames",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-14104" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libuuid@2.32.1-48.el8_10?arch=x86_64&distro=rhel-8.10&upstream=util-linux-2.32.1-48.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2025-14104",
                "title" : "Util-linux: util-linux: heap buffer overread in setpwnam() when processing 256-byte usernames",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-14104" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2025-14104",
                "title" : "Util-linux: util-linux: heap buffer overread in setpwnam() when processing 256-byte usernames",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-14104" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libblkid@2.32.1-48.el8_10?arch=x86_64&distro=rhel-8.10&upstream=util-linux-2.32.1-48.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2025-14104",
                "title" : "Util-linux: util-linux: heap buffer overread in setpwnam() when processing 256-byte usernames",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-14104" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-27456",
                "title" : "util-linux: TOCTOU Race Condition in util-linux mount(8) - Loop Device Setup",
                "source" : "redhat-csaf",
                "cvssScore" : 4.7,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-27456" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2025-14104",
                "title" : "Util-linux: util-linux: heap buffer overread in setpwnam() when processing 256-byte usernames",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-14104" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libstdc%2B%2B@8.5.0-28.el8_10?arch=x86_64&distro=rhel-8.10&upstream=gcc-8.5.0-28.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2020-11023",
                "title" : "Potential XSS vulnerability in jQuery",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2020-11023" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2020-11023",
                "title" : "Potential XSS vulnerability in jQuery",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2020-11023" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/util-linux@2.32.1-48.el8_10?arch=x86_64&distro=rhel-8.10&upstream=util-linux-2.32.1-48.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2025-14104",
                "title" : "Util-linux: util-linux: heap buffer overread in setpwnam() when processing 256-byte usernames",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-14104" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-27456",
                "title" : "util-linux: TOCTOU Race Condition in util-linux mount(8) - Loop Device Setup",
                "source" : "redhat-csaf",
                "cvssScore" : 4.7,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-27456" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2025-14104",
                "title" : "Util-linux: util-linux: heap buffer overread in setpwnam() when processing 256-byte usernames",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-14104" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libtasn1@4.13-5.el8_10?arch=x86_64&distro=rhel-8.10&upstream=libtasn1-4.13-5.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2021-46848",
                "title" : "GNU Libtasn1 before 4.19.0 has an ETYPE_OK off-by-one array size check that affects asn1_encode_simple_der.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2021-46848" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-12133",
                "title" : "Libtasn1: inefficient der decoding in libtasn1 leading to potential remote dos",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-12133" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2021-46848",
                "title" : "GNU Libtasn1 before 4.19.0 has an ETYPE_OK off-by-one array size check that affects asn1_encode_simple_der.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2021-46848" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libgcrypt@1.8.5-7.el8_6?arch=x86_64&distro=rhel-8.10&upstream=libgcrypt-1.8.5-7.el8_6.src.rpm",
              "issues" : [ {
                "id" : "CVE-2024-2236",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-2236" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2024-2236",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-2236" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/systemd-pam@239-82.el8_10.15?arch=x86_64&distro=rhel-8.10&upstream=systemd-239-82.el8_10.15.src.rpm",
              "issues" : [ {
                "id" : "CVE-2023-7008",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-7008" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-3821",
                "title" : "An off-by-one Error issue was discovered in Systemd in format_timespan() function of time-util.c. An attacker could supply specific values for time and accuracy that leads to buffer overrun in format_timespan(), leading to a Denial of Service.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-3821" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-4415",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-4415" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-45873",
                "title" : "systemd 250 and 251 allows local users to achieve a systemd-coredump deadlock by triggering a crash that has a long backtrace. This occurs in parse_elf_object in shared/elf-util.c. The exploitation methodology is to crash a binary calling the same function recursively, and put it in a deeply nested directory to make its backtrace large enough to cause the deadlock. This must be done 16 times when MaxConnections=16 is set for the systemd/units/systemd-coredump.socket file.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-45873" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-4598",
                "source" : "redhat-csaf",
                "cvssScore" : 4.7,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-4598" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2023-7008",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-7008" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/systemd-libs@239-82.el8_10.15?arch=x86_64&distro=rhel-8.10&upstream=systemd-239-82.el8_10.15.src.rpm",
              "issues" : [ {
                "id" : "CVE-2023-7008",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-7008" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-3821",
                "title" : "An off-by-one Error issue was discovered in Systemd in format_timespan() function of time-util.c. An attacker could supply specific values for time and accuracy that leads to buffer overrun in format_timespan(), leading to a Denial of Service.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-3821" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-4415",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-4415" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-45873",
                "title" : "systemd 250 and 251 allows local users to achieve a systemd-coredump deadlock by triggering a crash that has a long backtrace. This occurs in parse_elf_object in shared/elf-util.c. The exploitation methodology is to crash a binary calling the same function recursively, and put it in a deeply nested directory to make its backtrace large enough to cause the deadlock. This must be done 16 times when MaxConnections=16 is set for the systemd/units/systemd-coredump.socket file.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-45873" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-4598",
                "source" : "redhat-csaf",
                "cvssScore" : 4.7,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-4598" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2023-7008",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-7008" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libcom_err@1.45.6-7.el8_10?arch=x86_64&distro=rhel-8.10&upstream=e2fsprogs-1.45.6-7.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2022-1304",
                "title" : "An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a segmentation fault and possibly arbitrary code execution via a specially crafted filesystem.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-1304" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2022-1304",
                "title" : "An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a segmentation fault and possibly arbitrary code execution via a specially crafted filesystem.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.8,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-1304" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/python3-pip-wheel@9.0.3-24.el8?arch=noarch&distro=rhel-8.10&upstream=python-pip-9.0.3-24.el8.src.rpm",
              "issues" : [ {
                "id" : "CVE-2007-4559",
                "title" : "Directory traversal vulnerability in the (1) extract and (2) extractall functions in the tarfile module in Python allows user-assisted remote attackers to overwrite arbitrary files via a .. (dot dot) sequence in filenames in a TAR archive, a related issue to CVE-2001-1267.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2007-4559" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2007-4559",
                "title" : "Directory traversal vulnerability in the (1) extract and (2) extractall functions in the tarfile module in Python allows user-assisted remote attackers to overwrite arbitrary files via a .. (dot dot) sequence in filenames in a TAR archive, a related issue to CVE-2001-1267.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2007-4559" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/file-libs@5.33-27.el8_10?arch=x86_64&distro=rhel-8.10&upstream=file-5.33-27.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2022-48554",
                "title" : "File before 5.43 has an stack-based buffer over-read in file_copystr in funcs.c. NOTE: \"File\" is the name of an Open Source project.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-48554" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2022-48554",
                "title" : "File before 5.43 has an stack-based buffer over-read in file_copystr in funcs.c. NOTE: \"File\" is the name of an Open Source project.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-48554" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/shadow-utils@4.6-23.el8_10?arch=x86_64&distro=rhel-8.10&epoch=2&upstream=shadow-utils-4.6-23.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2023-4641",
                "source" : "redhat-csaf",
                "cvssScore" : 4.7,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4641" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-56433",
                "title" : "shadow-utils (aka shadow) 4.4 through 4.17.0 establishes a default /etc/subuid behavior (e.g., uid 100000 through 165535 for the first user account) that can realistically conflict with the uids of users defined on locally administered networks, potentially leading to account takeover, e.g., by leveraging newuidmap for access to an NFS home directory (or same-host resources in the case of remote logins by these local network users). NOTE: it may also be argued that system administrators should not have assigned uids, within local networks, that are within the range that can occur in /etc/subuid.",
                "source" : "redhat-csaf",
                "cvssScore" : 3.6,
                "severity" : "LOW",
                "cves" : [ "CVE-2024-56433" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2023-4641",
                "source" : "redhat-csaf",
                "cvssScore" : 4.7,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4641" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/bzip2-libs@1.0.6-28.el8_10?arch=x86_64&distro=rhel-8.10&upstream=bzip2-1.0.6-28.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2019-12900",
                "title" : "BZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many selectors.",
                "source" : "redhat-csaf",
                "cvssScore" : 4.4,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2019-12900" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2019-12900",
                "title" : "BZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many selectors.",
                "source" : "redhat-csaf",
                "cvssScore" : 4.4,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2019-12900" ],
                "unique" : false
              }
            } ],
            "highestVulnerability" : {
              "id" : "CVE-2025-15467",
              "title" : "Stack buffer overflow in CMS (Auth)EnvelopedData parsing",
              "source" : "redhat-csaf",
              "cvssScore" : 9.8,
              "severity" : "CRITICAL",
              "cves" : [ "CVE-2025-15467" ],
              "unique" : false
            }
          }, {
            "ref" : "pkg:rpm/redhat/lz4-libs@1.8.3-5.el8_10?arch=x86_64&distro=rhel-8.10&upstream=lz4-1.8.3-5.el8_10.src.rpm",
            "transitive" : [ {
              "ref" : "pkg:rpm/redhat/glibc-minimal-langpack@2.28-251.el8_10.31?arch=x86_64&distro=rhel-8.10&upstream=glibc-2.28-251.el8_10.31.src.rpm",
              "issues" : [ {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0861",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-0861" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4911",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-4911" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33599",
                "title" : "nscd: Stack-based buffer overflow in netgroup cache",
                "source" : "redhat-csaf",
                "cvssScore" : 7.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-33599" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-4802",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-4802" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4527",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4527" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4806",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4806" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4813",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4813" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-5702",
                "title" : "The strcmp implementation optimized for the Power10 processor in the GNU C Library version 2.39 and later writes to vector registers v20 to v31 without saving contents from the caller (those registers are defined as non-volatile registers by the powerpc64le ABI), resulting in overwriting of its contents and potentially altering control flow of the caller, or leaking the input strings to the function to other parts of the program.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-5702" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-0395",
                "title" : "When the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-0395" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33600",
                "title" : "nscd: Null pointer crashes after notfound response",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33600" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0915",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-0915" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-8058",
                "source" : "redhat-csaf",
                "cvssScore" : 4.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-8058" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33601",
                "title" : "nscd: netgroup cache may terminate daemon on memory allocation failure",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33601" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33602",
                "title" : "nscd: netgroup cache assumes NSS callback uses in-buffer strings",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33602" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/glibc@2.28-251.el8_10.31?arch=x86_64&distro=rhel-8.10&upstream=glibc-2.28-251.el8_10.31.src.rpm",
              "issues" : [ {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0861",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-0861" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4911",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-4911" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33599",
                "title" : "nscd: Stack-based buffer overflow in netgroup cache",
                "source" : "redhat-csaf",
                "cvssScore" : 7.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-33599" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-4802",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-4802" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4527",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4527" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4806",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4806" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4813",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4813" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-15281",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-15281" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-5702",
                "title" : "The strcmp implementation optimized for the Power10 processor in the GNU C Library version 2.39 and later writes to vector registers v20 to v31 without saving contents from the caller (those registers are defined as non-volatile registers by the powerpc64le ABI), resulting in overwriting of its contents and potentially altering control flow of the caller, or leaking the input strings to the function to other parts of the program.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-5702" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-0395",
                "title" : "When the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-0395" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33600",
                "title" : "nscd: Null pointer crashes after notfound response",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33600" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0915",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-0915" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-8058",
                "source" : "redhat-csaf",
                "cvssScore" : 4.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-8058" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33601",
                "title" : "nscd: netgroup cache may terminate daemon on memory allocation failure",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33601" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33602",
                "title" : "nscd: netgroup cache assumes NSS callback uses in-buffer strings",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33602" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/glibc-common@2.28-251.el8_10.31?arch=x86_64&distro=rhel-8.10&upstream=glibc-2.28-251.el8_10.31.src.rpm",
              "issues" : [ {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0861",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-0861" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4911",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-4911" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33599",
                "title" : "nscd: Stack-based buffer overflow in netgroup cache",
                "source" : "redhat-csaf",
                "cvssScore" : 7.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-33599" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-4802",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-4802" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4527",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4527" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4806",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4806" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4813",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4813" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-5702",
                "title" : "The strcmp implementation optimized for the Power10 processor in the GNU C Library version 2.39 and later writes to vector registers v20 to v31 without saving contents from the caller (those registers are defined as non-volatile registers by the powerpc64le ABI), resulting in overwriting of its contents and potentially altering control flow of the caller, or leaking the input strings to the function to other parts of the program.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-5702" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-0395",
                "title" : "When the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-0395" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33600",
                "title" : "nscd: Null pointer crashes after notfound response",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33600" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0915",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-0915" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-8058",
                "source" : "redhat-csaf",
                "cvssScore" : 4.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-8058" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33601",
                "title" : "nscd: netgroup cache may terminate daemon on memory allocation failure",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33601" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33602",
                "title" : "nscd: netgroup cache assumes NSS callback uses in-buffer strings",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33602" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/ncurses-base@6.1-10.20180224.el8?arch=noarch&distro=rhel-8.10&upstream=ncurses-6.1-10.20180224.el8.src.rpm",
              "issues" : [ {
                "id" : "CVE-2023-29491",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-29491" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-69720",
                "title" : "The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-69720" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-29458",
                "title" : "ncurses 6.3 before patch 20220416 has an out-of-bounds read and segmentation violation in convert_strings in tinfo/read_entry.c in the terminfo library.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-29458" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2023-29491",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-29491" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/ncurses-libs@6.1-10.20180224.el8?arch=x86_64&distro=rhel-8.10&upstream=ncurses-6.1-10.20180224.el8.src.rpm",
              "issues" : [ {
                "id" : "CVE-2023-29491",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-29491" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-69720",
                "title" : "The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-69720" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-29458",
                "title" : "ncurses 6.3 before patch 20220416 has an out-of-bounds read and segmentation violation in convert_strings in tinfo/read_entry.c in the terminfo library.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-29458" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2023-29491",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-29491" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/pcre2@10.32-3.el8_6?arch=x86_64&distro=rhel-8.10&upstream=pcre2-10.32-3.el8_6.src.rpm",
              "issues" : [ {
                "id" : "CVE-2022-1586",
                "title" : "An out-of-bounds read vulnerability was discovered in the PCRE2 library in the compile_xclass_matchingpath() function of the pcre2_jit_compile.c file. This involves a unicode property matching issue in JIT-compiled regular expressions. The issue occurs because the character was not fully read in case-less matching within JIT.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-1586" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-1587",
                "title" : "An out-of-bounds read vulnerability was discovered in the PCRE2 library in the get_recurse_data_length() function of the pcre2_jit_compile.c file. This issue affects recursions in JIT-compiled regular expressions caused by duplicate data transfers.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-1587" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2022-1586",
                "title" : "An out-of-bounds read vulnerability was discovered in the PCRE2 library in the compile_xclass_matchingpath() function of the pcre2_jit_compile.c file. This involves a unicode property matching issue in JIT-compiled regular expressions. The issue occurs because the character was not fully read in case-less matching within JIT.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-1586" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/bash@4.4.20-6.el8_10?arch=x86_64&distro=rhel-8.10&upstream=bash-4.4.20-6.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2022-3715",
                "source" : "redhat-csaf",
                "cvssScore" : 6.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-3715" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2022-3715",
                "source" : "redhat-csaf",
                "cvssScore" : 6.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-3715" ],
                "unique" : false
              }
            } ],
            "highestVulnerability" : {
              "id" : "CVE-2024-2961",
              "source" : "redhat-csaf",
              "cvssScore" : 8.8,
              "severity" : "HIGH",
              "cves" : [ "CVE-2024-2961" ],
              "unique" : false
            }
          }, {
            "ref" : "pkg:rpm/redhat/nettle@3.4.1-7.el8?arch=x86_64&distro=rhel-8.10&upstream=nettle-3.4.1-7.el8.src.rpm",
            "transitive" : [ {
              "ref" : "pkg:rpm/redhat/glibc-minimal-langpack@2.28-251.el8_10.31?arch=x86_64&distro=rhel-8.10&upstream=glibc-2.28-251.el8_10.31.src.rpm",
              "issues" : [ {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0861",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-0861" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4911",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-4911" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33599",
                "title" : "nscd: Stack-based buffer overflow in netgroup cache",
                "source" : "redhat-csaf",
                "cvssScore" : 7.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-33599" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-4802",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-4802" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4527",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4527" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4806",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4806" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4813",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4813" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-5702",
                "title" : "The strcmp implementation optimized for the Power10 processor in the GNU C Library version 2.39 and later writes to vector registers v20 to v31 without saving contents from the caller (those registers are defined as non-volatile registers by the powerpc64le ABI), resulting in overwriting of its contents and potentially altering control flow of the caller, or leaking the input strings to the function to other parts of the program.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-5702" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-0395",
                "title" : "When the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-0395" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33600",
                "title" : "nscd: Null pointer crashes after notfound response",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33600" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0915",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-0915" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-8058",
                "source" : "redhat-csaf",
                "cvssScore" : 4.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-8058" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33601",
                "title" : "nscd: netgroup cache may terminate daemon on memory allocation failure",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33601" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33602",
                "title" : "nscd: netgroup cache assumes NSS callback uses in-buffer strings",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33602" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/glibc@2.28-251.el8_10.31?arch=x86_64&distro=rhel-8.10&upstream=glibc-2.28-251.el8_10.31.src.rpm",
              "issues" : [ {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0861",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-0861" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4911",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-4911" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33599",
                "title" : "nscd: Stack-based buffer overflow in netgroup cache",
                "source" : "redhat-csaf",
                "cvssScore" : 7.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-33599" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-4802",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-4802" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4527",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4527" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4806",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4806" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4813",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4813" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-15281",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-15281" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-5702",
                "title" : "The strcmp implementation optimized for the Power10 processor in the GNU C Library version 2.39 and later writes to vector registers v20 to v31 without saving contents from the caller (those registers are defined as non-volatile registers by the powerpc64le ABI), resulting in overwriting of its contents and potentially altering control flow of the caller, or leaking the input strings to the function to other parts of the program.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-5702" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-0395",
                "title" : "When the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-0395" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33600",
                "title" : "nscd: Null pointer crashes after notfound response",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33600" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0915",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-0915" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-8058",
                "source" : "redhat-csaf",
                "cvssScore" : 4.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-8058" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33601",
                "title" : "nscd: netgroup cache may terminate daemon on memory allocation failure",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33601" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33602",
                "title" : "nscd: netgroup cache assumes NSS callback uses in-buffer strings",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33602" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/glibc-common@2.28-251.el8_10.31?arch=x86_64&distro=rhel-8.10&upstream=glibc-2.28-251.el8_10.31.src.rpm",
              "issues" : [ {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0861",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-0861" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4911",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-4911" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33599",
                "title" : "nscd: Stack-based buffer overflow in netgroup cache",
                "source" : "redhat-csaf",
                "cvssScore" : 7.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-33599" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-4802",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-4802" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4527",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4527" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4806",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4806" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4813",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4813" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-5702",
                "title" : "The strcmp implementation optimized for the Power10 processor in the GNU C Library version 2.39 and later writes to vector registers v20 to v31 without saving contents from the caller (those registers are defined as non-volatile registers by the powerpc64le ABI), resulting in overwriting of its contents and potentially altering control flow of the caller, or leaking the input strings to the function to other parts of the program.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-5702" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-0395",
                "title" : "When the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-0395" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33600",
                "title" : "nscd: Null pointer crashes after notfound response",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33600" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0915",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-0915" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-8058",
                "source" : "redhat-csaf",
                "cvssScore" : 4.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-8058" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33601",
                "title" : "nscd: netgroup cache may terminate daemon on memory allocation failure",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33601" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33602",
                "title" : "nscd: netgroup cache assumes NSS callback uses in-buffer strings",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33602" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/zlib@1.2.11-25.el8?arch=x86_64&distro=rhel-8.10&upstream=zlib-1.2.11-25.el8.src.rpm",
              "issues" : [ {
                "id" : "CVE-2018-25032",
                "title" : "zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.",
                "source" : "redhat-csaf",
                "cvssScore" : 8.2,
                "severity" : "HIGH",
                "cves" : [ "CVE-2018-25032" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-37434",
                "title" : "zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference).",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-37434" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2018-25032",
                "title" : "zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.",
                "source" : "redhat-csaf",
                "cvssScore" : 8.2,
                "severity" : "HIGH",
                "cves" : [ "CVE-2018-25032" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/ncurses-base@6.1-10.20180224.el8?arch=noarch&distro=rhel-8.10&upstream=ncurses-6.1-10.20180224.el8.src.rpm",
              "issues" : [ {
                "id" : "CVE-2023-29491",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-29491" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-69720",
                "title" : "The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-69720" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-29458",
                "title" : "ncurses 6.3 before patch 20220416 has an out-of-bounds read and segmentation violation in convert_strings in tinfo/read_entry.c in the terminfo library.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-29458" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2023-29491",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-29491" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/ncurses-libs@6.1-10.20180224.el8?arch=x86_64&distro=rhel-8.10&upstream=ncurses-6.1-10.20180224.el8.src.rpm",
              "issues" : [ {
                "id" : "CVE-2023-29491",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-29491" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-69720",
                "title" : "The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-69720" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-29458",
                "title" : "ncurses 6.3 before patch 20220416 has an out-of-bounds read and segmentation violation in convert_strings in tinfo/read_entry.c in the terminfo library.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-29458" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2023-29491",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-29491" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/pcre2@10.32-3.el8_6?arch=x86_64&distro=rhel-8.10&upstream=pcre2-10.32-3.el8_6.src.rpm",
              "issues" : [ {
                "id" : "CVE-2022-1586",
                "title" : "An out-of-bounds read vulnerability was discovered in the PCRE2 library in the compile_xclass_matchingpath() function of the pcre2_jit_compile.c file. This involves a unicode property matching issue in JIT-compiled regular expressions. The issue occurs because the character was not fully read in case-less matching within JIT.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-1586" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-1587",
                "title" : "An out-of-bounds read vulnerability was discovered in the PCRE2 library in the get_recurse_data_length() function of the pcre2_jit_compile.c file. This issue affects recursions in JIT-compiled regular expressions caused by duplicate data transfers.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-1587" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2022-1586",
                "title" : "An out-of-bounds read vulnerability was discovered in the PCRE2 library in the compile_xclass_matchingpath() function of the pcre2_jit_compile.c file. This involves a unicode property matching issue in JIT-compiled regular expressions. The issue occurs because the character was not fully read in case-less matching within JIT.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-1586" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/bash@4.4.20-6.el8_10?arch=x86_64&distro=rhel-8.10&upstream=bash-4.4.20-6.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2022-3715",
                "source" : "redhat-csaf",
                "cvssScore" : 6.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-3715" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2022-3715",
                "source" : "redhat-csaf",
                "cvssScore" : 6.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-3715" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/gmp@6.1.2-11.el8?arch=x86_64&distro=rhel-8.10&epoch=1&upstream=gmp-6.1.2-11.el8.src.rpm",
              "issues" : [ {
                "id" : "CVE-2021-43618",
                "title" : "GNU Multiple Precision Arithmetic Library (GMP) through 6.2.1 has an mpz/inp_raw.c integer overflow and resultant buffer overflow via crafted input, leading to a segmentation fault on 32-bit platforms.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2021-43618" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2021-43618",
                "title" : "GNU Multiple Precision Arithmetic Library (GMP) through 6.2.1 has an mpz/inp_raw.c integer overflow and resultant buffer overflow via crafted input, leading to a segmentation fault on 32-bit platforms.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2021-43618" ],
                "unique" : false
              }
            } ],
            "highestVulnerability" : {
              "id" : "CVE-2024-2961",
              "source" : "redhat-csaf",
              "cvssScore" : 8.8,
              "severity" : "HIGH",
              "cves" : [ "CVE-2024-2961" ],
              "unique" : false
            }
          }, {
            "ref" : "pkg:rpm/redhat/libsmartcols@2.32.1-48.el8_10?arch=x86_64&distro=rhel-8.10&upstream=util-linux-2.32.1-48.el8_10.src.rpm",
            "issues" : [ {
              "id" : "CVE-2025-14104",
              "title" : "Util-linux: util-linux: heap buffer overread in setpwnam() when processing 256-byte usernames",
              "source" : "redhat-csaf",
              "cvssScore" : 6.1,
              "severity" : "MEDIUM",
              "cves" : [ "CVE-2025-14104" ],
              "unique" : false
            } ],
            "transitive" : [ {
              "ref" : "pkg:rpm/redhat/glibc-minimal-langpack@2.28-251.el8_10.31?arch=x86_64&distro=rhel-8.10&upstream=glibc-2.28-251.el8_10.31.src.rpm",
              "issues" : [ {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0861",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-0861" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4911",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-4911" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33599",
                "title" : "nscd: Stack-based buffer overflow in netgroup cache",
                "source" : "redhat-csaf",
                "cvssScore" : 7.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-33599" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-4802",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-4802" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4527",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4527" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4806",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4806" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4813",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4813" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-5702",
                "title" : "The strcmp implementation optimized for the Power10 processor in the GNU C Library version 2.39 and later writes to vector registers v20 to v31 without saving contents from the caller (those registers are defined as non-volatile registers by the powerpc64le ABI), resulting in overwriting of its contents and potentially altering control flow of the caller, or leaking the input strings to the function to other parts of the program.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-5702" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-0395",
                "title" : "When the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-0395" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33600",
                "title" : "nscd: Null pointer crashes after notfound response",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33600" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0915",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-0915" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-8058",
                "source" : "redhat-csaf",
                "cvssScore" : 4.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-8058" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33601",
                "title" : "nscd: netgroup cache may terminate daemon on memory allocation failure",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33601" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33602",
                "title" : "nscd: netgroup cache assumes NSS callback uses in-buffer strings",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33602" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/glibc@2.28-251.el8_10.31?arch=x86_64&distro=rhel-8.10&upstream=glibc-2.28-251.el8_10.31.src.rpm",
              "issues" : [ {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0861",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-0861" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4911",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-4911" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33599",
                "title" : "nscd: Stack-based buffer overflow in netgroup cache",
                "source" : "redhat-csaf",
                "cvssScore" : 7.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-33599" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-4802",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-4802" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4527",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4527" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4806",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4806" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4813",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4813" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-15281",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-15281" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-5702",
                "title" : "The strcmp implementation optimized for the Power10 processor in the GNU C Library version 2.39 and later writes to vector registers v20 to v31 without saving contents from the caller (those registers are defined as non-volatile registers by the powerpc64le ABI), resulting in overwriting of its contents and potentially altering control flow of the caller, or leaking the input strings to the function to other parts of the program.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-5702" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-0395",
                "title" : "When the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-0395" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33600",
                "title" : "nscd: Null pointer crashes after notfound response",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33600" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0915",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-0915" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-8058",
                "source" : "redhat-csaf",
                "cvssScore" : 4.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-8058" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33601",
                "title" : "nscd: netgroup cache may terminate daemon on memory allocation failure",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33601" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33602",
                "title" : "nscd: netgroup cache assumes NSS callback uses in-buffer strings",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33602" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/glibc-common@2.28-251.el8_10.31?arch=x86_64&distro=rhel-8.10&upstream=glibc-2.28-251.el8_10.31.src.rpm",
              "issues" : [ {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0861",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-0861" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4911",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-4911" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33599",
                "title" : "nscd: Stack-based buffer overflow in netgroup cache",
                "source" : "redhat-csaf",
                "cvssScore" : 7.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-33599" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-4802",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-4802" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4527",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4527" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4806",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4806" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4813",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4813" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-5702",
                "title" : "The strcmp implementation optimized for the Power10 processor in the GNU C Library version 2.39 and later writes to vector registers v20 to v31 without saving contents from the caller (those registers are defined as non-volatile registers by the powerpc64le ABI), resulting in overwriting of its contents and potentially altering control flow of the caller, or leaking the input strings to the function to other parts of the program.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-5702" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-0395",
                "title" : "When the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-0395" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33600",
                "title" : "nscd: Null pointer crashes after notfound response",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33600" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0915",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-0915" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-8058",
                "source" : "redhat-csaf",
                "cvssScore" : 4.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-8058" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33601",
                "title" : "nscd: netgroup cache may terminate daemon on memory allocation failure",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33601" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33602",
                "title" : "nscd: netgroup cache assumes NSS callback uses in-buffer strings",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33602" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/ncurses-base@6.1-10.20180224.el8?arch=noarch&distro=rhel-8.10&upstream=ncurses-6.1-10.20180224.el8.src.rpm",
              "issues" : [ {
                "id" : "CVE-2023-29491",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-29491" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-69720",
                "title" : "The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-69720" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-29458",
                "title" : "ncurses 6.3 before patch 20220416 has an out-of-bounds read and segmentation violation in convert_strings in tinfo/read_entry.c in the terminfo library.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-29458" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2023-29491",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-29491" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/ncurses-libs@6.1-10.20180224.el8?arch=x86_64&distro=rhel-8.10&upstream=ncurses-6.1-10.20180224.el8.src.rpm",
              "issues" : [ {
                "id" : "CVE-2023-29491",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-29491" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-69720",
                "title" : "The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-69720" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-29458",
                "title" : "ncurses 6.3 before patch 20220416 has an out-of-bounds read and segmentation violation in convert_strings in tinfo/read_entry.c in the terminfo library.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-29458" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2023-29491",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-29491" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/pcre2@10.32-3.el8_6?arch=x86_64&distro=rhel-8.10&upstream=pcre2-10.32-3.el8_6.src.rpm",
              "issues" : [ {
                "id" : "CVE-2022-1586",
                "title" : "An out-of-bounds read vulnerability was discovered in the PCRE2 library in the compile_xclass_matchingpath() function of the pcre2_jit_compile.c file. This involves a unicode property matching issue in JIT-compiled regular expressions. The issue occurs because the character was not fully read in case-less matching within JIT.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-1586" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-1587",
                "title" : "An out-of-bounds read vulnerability was discovered in the PCRE2 library in the get_recurse_data_length() function of the pcre2_jit_compile.c file. This issue affects recursions in JIT-compiled regular expressions caused by duplicate data transfers.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-1587" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2022-1586",
                "title" : "An out-of-bounds read vulnerability was discovered in the PCRE2 library in the compile_xclass_matchingpath() function of the pcre2_jit_compile.c file. This involves a unicode property matching issue in JIT-compiled regular expressions. The issue occurs because the character was not fully read in case-less matching within JIT.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-1586" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/bash@4.4.20-6.el8_10?arch=x86_64&distro=rhel-8.10&upstream=bash-4.4.20-6.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2022-3715",
                "source" : "redhat-csaf",
                "cvssScore" : 6.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-3715" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2022-3715",
                "source" : "redhat-csaf",
                "cvssScore" : 6.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-3715" ],
                "unique" : false
              }
            } ],
            "highestVulnerability" : {
              "id" : "CVE-2024-2961",
              "source" : "redhat-csaf",
              "cvssScore" : 8.8,
              "severity" : "HIGH",
              "cves" : [ "CVE-2024-2961" ],
              "unique" : false
            }
          }, {
            "ref" : "pkg:rpm/redhat/libfdisk@2.32.1-48.el8_10?arch=x86_64&distro=rhel-8.10&upstream=util-linux-2.32.1-48.el8_10.src.rpm",
            "issues" : [ {
              "id" : "CVE-2025-14104",
              "title" : "Util-linux: util-linux: heap buffer overread in setpwnam() when processing 256-byte usernames",
              "source" : "redhat-csaf",
              "cvssScore" : 6.1,
              "severity" : "MEDIUM",
              "cves" : [ "CVE-2025-14104" ],
              "unique" : false
            } ],
            "transitive" : [ {
              "ref" : "pkg:rpm/redhat/glibc-minimal-langpack@2.28-251.el8_10.31?arch=x86_64&distro=rhel-8.10&upstream=glibc-2.28-251.el8_10.31.src.rpm",
              "issues" : [ {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0861",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-0861" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4911",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-4911" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33599",
                "title" : "nscd: Stack-based buffer overflow in netgroup cache",
                "source" : "redhat-csaf",
                "cvssScore" : 7.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-33599" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-4802",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-4802" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4527",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4527" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4806",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4806" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4813",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4813" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-5702",
                "title" : "The strcmp implementation optimized for the Power10 processor in the GNU C Library version 2.39 and later writes to vector registers v20 to v31 without saving contents from the caller (those registers are defined as non-volatile registers by the powerpc64le ABI), resulting in overwriting of its contents and potentially altering control flow of the caller, or leaking the input strings to the function to other parts of the program.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-5702" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-0395",
                "title" : "When the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-0395" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33600",
                "title" : "nscd: Null pointer crashes after notfound response",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33600" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0915",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-0915" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-8058",
                "source" : "redhat-csaf",
                "cvssScore" : 4.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-8058" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33601",
                "title" : "nscd: netgroup cache may terminate daemon on memory allocation failure",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33601" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33602",
                "title" : "nscd: netgroup cache assumes NSS callback uses in-buffer strings",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33602" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/glibc@2.28-251.el8_10.31?arch=x86_64&distro=rhel-8.10&upstream=glibc-2.28-251.el8_10.31.src.rpm",
              "issues" : [ {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0861",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-0861" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4911",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-4911" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33599",
                "title" : "nscd: Stack-based buffer overflow in netgroup cache",
                "source" : "redhat-csaf",
                "cvssScore" : 7.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-33599" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-4802",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-4802" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4527",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4527" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4806",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4806" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4813",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4813" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-15281",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-15281" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-5702",
                "title" : "The strcmp implementation optimized for the Power10 processor in the GNU C Library version 2.39 and later writes to vector registers v20 to v31 without saving contents from the caller (those registers are defined as non-volatile registers by the powerpc64le ABI), resulting in overwriting of its contents and potentially altering control flow of the caller, or leaking the input strings to the function to other parts of the program.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-5702" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-0395",
                "title" : "When the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-0395" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33600",
                "title" : "nscd: Null pointer crashes after notfound response",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33600" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0915",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-0915" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-8058",
                "source" : "redhat-csaf",
                "cvssScore" : 4.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-8058" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33601",
                "title" : "nscd: netgroup cache may terminate daemon on memory allocation failure",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33601" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33602",
                "title" : "nscd: netgroup cache assumes NSS callback uses in-buffer strings",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33602" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/glibc-common@2.28-251.el8_10.31?arch=x86_64&distro=rhel-8.10&upstream=glibc-2.28-251.el8_10.31.src.rpm",
              "issues" : [ {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0861",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-0861" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4911",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-4911" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33599",
                "title" : "nscd: Stack-based buffer overflow in netgroup cache",
                "source" : "redhat-csaf",
                "cvssScore" : 7.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-33599" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-4802",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-4802" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4527",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4527" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4806",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4806" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4813",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4813" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-5702",
                "title" : "The strcmp implementation optimized for the Power10 processor in the GNU C Library version 2.39 and later writes to vector registers v20 to v31 without saving contents from the caller (those registers are defined as non-volatile registers by the powerpc64le ABI), resulting in overwriting of its contents and potentially altering control flow of the caller, or leaking the input strings to the function to other parts of the program.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-5702" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-0395",
                "title" : "When the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-0395" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33600",
                "title" : "nscd: Null pointer crashes after notfound response",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33600" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0915",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-0915" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-8058",
                "source" : "redhat-csaf",
                "cvssScore" : 4.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-8058" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33601",
                "title" : "nscd: netgroup cache may terminate daemon on memory allocation failure",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33601" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33602",
                "title" : "nscd: netgroup cache assumes NSS callback uses in-buffer strings",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33602" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/ncurses-base@6.1-10.20180224.el8?arch=noarch&distro=rhel-8.10&upstream=ncurses-6.1-10.20180224.el8.src.rpm",
              "issues" : [ {
                "id" : "CVE-2023-29491",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-29491" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-69720",
                "title" : "The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-69720" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-29458",
                "title" : "ncurses 6.3 before patch 20220416 has an out-of-bounds read and segmentation violation in convert_strings in tinfo/read_entry.c in the terminfo library.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-29458" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2023-29491",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-29491" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libcap@2.48-6.el8_9?arch=x86_64&distro=rhel-8.10&upstream=libcap-2.48-6.el8_9.src.rpm",
              "issues" : [ {
                "id" : "CVE-2023-2603",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-2603" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-2602",
                "title" : "A vulnerability was found in the pthread_create() function in libcap. This issue may allow a malicious actor to use cause __real_pthread_create() to return an error, which can exhaust the process memory.",
                "source" : "redhat-csaf",
                "cvssScore" : 3.3,
                "severity" : "LOW",
                "cves" : [ "CVE-2023-2602" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2023-2603",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-2603" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/ncurses-libs@6.1-10.20180224.el8?arch=x86_64&distro=rhel-8.10&upstream=ncurses-6.1-10.20180224.el8.src.rpm",
              "issues" : [ {
                "id" : "CVE-2023-29491",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-29491" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-69720",
                "title" : "The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-69720" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-29458",
                "title" : "ncurses 6.3 before patch 20220416 has an out-of-bounds read and segmentation violation in convert_strings in tinfo/read_entry.c in the terminfo library.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-29458" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2023-29491",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-29491" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/pcre2@10.32-3.el8_6?arch=x86_64&distro=rhel-8.10&upstream=pcre2-10.32-3.el8_6.src.rpm",
              "issues" : [ {
                "id" : "CVE-2022-1586",
                "title" : "An out-of-bounds read vulnerability was discovered in the PCRE2 library in the compile_xclass_matchingpath() function of the pcre2_jit_compile.c file. This involves a unicode property matching issue in JIT-compiled regular expressions. The issue occurs because the character was not fully read in case-less matching within JIT.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-1586" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-1587",
                "title" : "An out-of-bounds read vulnerability was discovered in the PCRE2 library in the get_recurse_data_length() function of the pcre2_jit_compile.c file. This issue affects recursions in JIT-compiled regular expressions caused by duplicate data transfers.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-1587" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2022-1586",
                "title" : "An out-of-bounds read vulnerability was discovered in the PCRE2 library in the compile_xclass_matchingpath() function of the pcre2_jit_compile.c file. This involves a unicode property matching issue in JIT-compiled regular expressions. The issue occurs because the character was not fully read in case-less matching within JIT.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-1586" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/bash@4.4.20-6.el8_10?arch=x86_64&distro=rhel-8.10&upstream=bash-4.4.20-6.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2022-3715",
                "source" : "redhat-csaf",
                "cvssScore" : 6.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-3715" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2022-3715",
                "source" : "redhat-csaf",
                "cvssScore" : 6.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-3715" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libgcc@8.5.0-28.el8_10?arch=x86_64&distro=rhel-8.10&upstream=gcc-8.5.0-28.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2020-11023",
                "title" : "Potential XSS vulnerability in jQuery",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2020-11023" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2020-11023",
                "title" : "Potential XSS vulnerability in jQuery",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2020-11023" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libblkid@2.32.1-48.el8_10?arch=x86_64&distro=rhel-8.10&upstream=util-linux-2.32.1-48.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2025-14104",
                "title" : "Util-linux: util-linux: heap buffer overread in setpwnam() when processing 256-byte usernames",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-14104" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-27456",
                "title" : "util-linux: TOCTOU Race Condition in util-linux mount(8) - Loop Device Setup",
                "source" : "redhat-csaf",
                "cvssScore" : 4.7,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-27456" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2025-14104",
                "title" : "Util-linux: util-linux: heap buffer overread in setpwnam() when processing 256-byte usernames",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-14104" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libuuid@2.32.1-48.el8_10?arch=x86_64&distro=rhel-8.10&upstream=util-linux-2.32.1-48.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2025-14104",
                "title" : "Util-linux: util-linux: heap buffer overread in setpwnam() when processing 256-byte usernames",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-14104" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2025-14104",
                "title" : "Util-linux: util-linux: heap buffer overread in setpwnam() when processing 256-byte usernames",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-14104" ],
                "unique" : false
              }
            } ],
            "highestVulnerability" : {
              "id" : "CVE-2024-2961",
              "source" : "redhat-csaf",
              "cvssScore" : 8.8,
              "severity" : "HIGH",
              "cves" : [ "CVE-2024-2961" ],
              "unique" : false
            }
          }, {
            "ref" : "pkg:rpm/redhat/findutils@4.6.0-24.el8_10?arch=x86_64&distro=rhel-8.10&epoch=1&upstream=findutils-4.6.0-24.el8_10.src.rpm",
            "transitive" : [ {
              "ref" : "pkg:rpm/redhat/glibc-minimal-langpack@2.28-251.el8_10.31?arch=x86_64&distro=rhel-8.10&upstream=glibc-2.28-251.el8_10.31.src.rpm",
              "issues" : [ {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0861",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-0861" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4911",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-4911" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33599",
                "title" : "nscd: Stack-based buffer overflow in netgroup cache",
                "source" : "redhat-csaf",
                "cvssScore" : 7.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-33599" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-4802",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-4802" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4527",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4527" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4806",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4806" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4813",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4813" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-5702",
                "title" : "The strcmp implementation optimized for the Power10 processor in the GNU C Library version 2.39 and later writes to vector registers v20 to v31 without saving contents from the caller (those registers are defined as non-volatile registers by the powerpc64le ABI), resulting in overwriting of its contents and potentially altering control flow of the caller, or leaking the input strings to the function to other parts of the program.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-5702" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-0395",
                "title" : "When the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-0395" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33600",
                "title" : "nscd: Null pointer crashes after notfound response",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33600" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0915",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-0915" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-8058",
                "source" : "redhat-csaf",
                "cvssScore" : 4.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-8058" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33601",
                "title" : "nscd: netgroup cache may terminate daemon on memory allocation failure",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33601" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33602",
                "title" : "nscd: netgroup cache assumes NSS callback uses in-buffer strings",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33602" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/glibc@2.28-251.el8_10.31?arch=x86_64&distro=rhel-8.10&upstream=glibc-2.28-251.el8_10.31.src.rpm",
              "issues" : [ {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0861",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-0861" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4911",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-4911" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33599",
                "title" : "nscd: Stack-based buffer overflow in netgroup cache",
                "source" : "redhat-csaf",
                "cvssScore" : 7.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-33599" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-4802",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-4802" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4527",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4527" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4806",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4806" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4813",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4813" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-15281",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-15281" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-5702",
                "title" : "The strcmp implementation optimized for the Power10 processor in the GNU C Library version 2.39 and later writes to vector registers v20 to v31 without saving contents from the caller (those registers are defined as non-volatile registers by the powerpc64le ABI), resulting in overwriting of its contents and potentially altering control flow of the caller, or leaking the input strings to the function to other parts of the program.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-5702" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-0395",
                "title" : "When the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-0395" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33600",
                "title" : "nscd: Null pointer crashes after notfound response",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33600" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0915",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-0915" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-8058",
                "source" : "redhat-csaf",
                "cvssScore" : 4.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-8058" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33601",
                "title" : "nscd: netgroup cache may terminate daemon on memory allocation failure",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33601" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33602",
                "title" : "nscd: netgroup cache assumes NSS callback uses in-buffer strings",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33602" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/glibc-common@2.28-251.el8_10.31?arch=x86_64&distro=rhel-8.10&upstream=glibc-2.28-251.el8_10.31.src.rpm",
              "issues" : [ {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0861",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-0861" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4911",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-4911" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33599",
                "title" : "nscd: Stack-based buffer overflow in netgroup cache",
                "source" : "redhat-csaf",
                "cvssScore" : 7.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-33599" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-4802",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-4802" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4527",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4527" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4806",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4806" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4813",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4813" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-5702",
                "title" : "The strcmp implementation optimized for the Power10 processor in the GNU C Library version 2.39 and later writes to vector registers v20 to v31 without saving contents from the caller (those registers are defined as non-volatile registers by the powerpc64le ABI), resulting in overwriting of its contents and potentially altering control flow of the caller, or leaking the input strings to the function to other parts of the program.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-5702" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-0395",
                "title" : "When the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-0395" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33600",
                "title" : "nscd: Null pointer crashes after notfound response",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33600" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0915",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-0915" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-8058",
                "source" : "redhat-csaf",
                "cvssScore" : 4.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-8058" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33601",
                "title" : "nscd: netgroup cache may terminate daemon on memory allocation failure",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33601" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33602",
                "title" : "nscd: netgroup cache assumes NSS callback uses in-buffer strings",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33602" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/zlib@1.2.11-25.el8?arch=x86_64&distro=rhel-8.10&upstream=zlib-1.2.11-25.el8.src.rpm",
              "issues" : [ {
                "id" : "CVE-2018-25032",
                "title" : "zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.",
                "source" : "redhat-csaf",
                "cvssScore" : 8.2,
                "severity" : "HIGH",
                "cves" : [ "CVE-2018-25032" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-37434",
                "title" : "zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference).",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-37434" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2018-25032",
                "title" : "zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.",
                "source" : "redhat-csaf",
                "cvssScore" : 8.2,
                "severity" : "HIGH",
                "cves" : [ "CVE-2018-25032" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/ncurses-base@6.1-10.20180224.el8?arch=noarch&distro=rhel-8.10&upstream=ncurses-6.1-10.20180224.el8.src.rpm",
              "issues" : [ {
                "id" : "CVE-2023-29491",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-29491" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-69720",
                "title" : "The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-69720" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-29458",
                "title" : "ncurses 6.3 before patch 20220416 has an out-of-bounds read and segmentation violation in convert_strings in tinfo/read_entry.c in the terminfo library.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-29458" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2023-29491",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-29491" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/ncurses-libs@6.1-10.20180224.el8?arch=x86_64&distro=rhel-8.10&upstream=ncurses-6.1-10.20180224.el8.src.rpm",
              "issues" : [ {
                "id" : "CVE-2023-29491",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-29491" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-69720",
                "title" : "The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-69720" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-29458",
                "title" : "ncurses 6.3 before patch 20220416 has an out-of-bounds read and segmentation violation in convert_strings in tinfo/read_entry.c in the terminfo library.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-29458" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2023-29491",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-29491" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/pcre2@10.32-3.el8_6?arch=x86_64&distro=rhel-8.10&upstream=pcre2-10.32-3.el8_6.src.rpm",
              "issues" : [ {
                "id" : "CVE-2022-1586",
                "title" : "An out-of-bounds read vulnerability was discovered in the PCRE2 library in the compile_xclass_matchingpath() function of the pcre2_jit_compile.c file. This involves a unicode property matching issue in JIT-compiled regular expressions. The issue occurs because the character was not fully read in case-less matching within JIT.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-1586" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-1587",
                "title" : "An out-of-bounds read vulnerability was discovered in the PCRE2 library in the get_recurse_data_length() function of the pcre2_jit_compile.c file. This issue affects recursions in JIT-compiled regular expressions caused by duplicate data transfers.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-1587" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2022-1586",
                "title" : "An out-of-bounds read vulnerability was discovered in the PCRE2 library in the compile_xclass_matchingpath() function of the pcre2_jit_compile.c file. This involves a unicode property matching issue in JIT-compiled regular expressions. The issue occurs because the character was not fully read in case-less matching within JIT.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-1586" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/bash@4.4.20-6.el8_10?arch=x86_64&distro=rhel-8.10&upstream=bash-4.4.20-6.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2022-3715",
                "source" : "redhat-csaf",
                "cvssScore" : 6.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-3715" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2022-3715",
                "source" : "redhat-csaf",
                "cvssScore" : 6.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-3715" ],
                "unique" : false
              }
            } ],
            "highestVulnerability" : {
              "id" : "CVE-2024-2961",
              "source" : "redhat-csaf",
              "cvssScore" : 8.8,
              "severity" : "HIGH",
              "cves" : [ "CVE-2024-2961" ],
              "unique" : false
            }
          }, {
            "ref" : "pkg:rpm/redhat/dbus-tools@1.12.8-27.el8_10?arch=x86_64&distro=rhel-8.10&epoch=1&upstream=dbus-1.12.8-27.el8_10.src.rpm",
            "issues" : [ {
              "id" : "CVE-2022-42010",
              "title" : "An issue was discovered in D-Bus before 1.12.24, 1.13.x and 1.14.x before 1.14.4, and 1.15.x before 1.15.2. An authenticated attacker can cause dbus-daemon and other programs that use libdbus to crash when receiving a message with certain invalid type signatures.",
              "source" : "redhat-csaf",
              "cvssScore" : 6.5,
              "severity" : "MEDIUM",
              "cves" : [ "CVE-2022-42010" ],
              "unique" : false
            }, {
              "id" : "CVE-2022-42011",
              "title" : "An issue was discovered in D-Bus before 1.12.24, 1.13.x and 1.14.x before 1.14.4, and 1.15.x before 1.15.2. An authenticated attacker can cause dbus-daemon and other programs that use libdbus to crash when receiving a message where an array length is inconsistent with the size of the element type.",
              "source" : "redhat-csaf",
              "cvssScore" : 6.5,
              "severity" : "MEDIUM",
              "cves" : [ "CVE-2022-42011" ],
              "unique" : false
            }, {
              "id" : "CVE-2022-42012",
              "title" : "An issue was discovered in D-Bus before 1.12.24, 1.13.x and 1.14.x before 1.14.4, and 1.15.x before 1.15.2. An authenticated attacker can cause dbus-daemon and other programs that use libdbus to crash by sending a message with attached file descriptors in an unexpected format.",
              "source" : "redhat-csaf",
              "cvssScore" : 6.5,
              "severity" : "MEDIUM",
              "cves" : [ "CVE-2022-42012" ],
              "unique" : false
            }, {
              "id" : "CVE-2023-34969",
              "title" : "D-Bus before 1.15.6 sometimes allows unprivileged users to crash dbus-daemon. If a privileged user with control over the dbus-daemon is using the org.freedesktop.DBus.Monitoring interface to monitor message bus traffic, then an unprivileged user with the ability to connect to the same dbus-daemon can cause a dbus-daemon crash under some circumstances via an unreplyable message. When done on the well-known system bus, this is a denial-of-service vulnerability. The fixed versions are 1.12.28, 1.14.8, and 1.15.6.",
              "source" : "redhat-csaf",
              "cvssScore" : 6.2,
              "severity" : "MEDIUM",
              "cves" : [ "CVE-2023-34969" ],
              "unique" : false
            } ],
            "transitive" : [ {
              "ref" : "pkg:rpm/redhat/glibc-minimal-langpack@2.28-251.el8_10.31?arch=x86_64&distro=rhel-8.10&upstream=glibc-2.28-251.el8_10.31.src.rpm",
              "issues" : [ {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0861",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-0861" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4911",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-4911" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33599",
                "title" : "nscd: Stack-based buffer overflow in netgroup cache",
                "source" : "redhat-csaf",
                "cvssScore" : 7.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-33599" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-4802",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-4802" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4527",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4527" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4806",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4806" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4813",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4813" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-5702",
                "title" : "The strcmp implementation optimized for the Power10 processor in the GNU C Library version 2.39 and later writes to vector registers v20 to v31 without saving contents from the caller (those registers are defined as non-volatile registers by the powerpc64le ABI), resulting in overwriting of its contents and potentially altering control flow of the caller, or leaking the input strings to the function to other parts of the program.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-5702" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-0395",
                "title" : "When the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-0395" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33600",
                "title" : "nscd: Null pointer crashes after notfound response",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33600" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0915",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-0915" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-8058",
                "source" : "redhat-csaf",
                "cvssScore" : 4.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-8058" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33601",
                "title" : "nscd: netgroup cache may terminate daemon on memory allocation failure",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33601" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33602",
                "title" : "nscd: netgroup cache assumes NSS callback uses in-buffer strings",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33602" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/glibc@2.28-251.el8_10.31?arch=x86_64&distro=rhel-8.10&upstream=glibc-2.28-251.el8_10.31.src.rpm",
              "issues" : [ {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0861",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-0861" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4911",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-4911" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33599",
                "title" : "nscd: Stack-based buffer overflow in netgroup cache",
                "source" : "redhat-csaf",
                "cvssScore" : 7.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-33599" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-4802",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-4802" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4527",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4527" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4806",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4806" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4813",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4813" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-15281",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-15281" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-5702",
                "title" : "The strcmp implementation optimized for the Power10 processor in the GNU C Library version 2.39 and later writes to vector registers v20 to v31 without saving contents from the caller (those registers are defined as non-volatile registers by the powerpc64le ABI), resulting in overwriting of its contents and potentially altering control flow of the caller, or leaking the input strings to the function to other parts of the program.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-5702" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-0395",
                "title" : "When the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-0395" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33600",
                "title" : "nscd: Null pointer crashes after notfound response",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33600" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0915",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-0915" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-8058",
                "source" : "redhat-csaf",
                "cvssScore" : 4.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-8058" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33601",
                "title" : "nscd: netgroup cache may terminate daemon on memory allocation failure",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33601" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33602",
                "title" : "nscd: netgroup cache assumes NSS callback uses in-buffer strings",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33602" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/glibc-common@2.28-251.el8_10.31?arch=x86_64&distro=rhel-8.10&upstream=glibc-2.28-251.el8_10.31.src.rpm",
              "issues" : [ {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0861",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-0861" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4911",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-4911" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33599",
                "title" : "nscd: Stack-based buffer overflow in netgroup cache",
                "source" : "redhat-csaf",
                "cvssScore" : 7.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-33599" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-4802",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-4802" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4527",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4527" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4806",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4806" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4813",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4813" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-5702",
                "title" : "The strcmp implementation optimized for the Power10 processor in the GNU C Library version 2.39 and later writes to vector registers v20 to v31 without saving contents from the caller (those registers are defined as non-volatile registers by the powerpc64le ABI), resulting in overwriting of its contents and potentially altering control flow of the caller, or leaking the input strings to the function to other parts of the program.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-5702" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-0395",
                "title" : "When the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-0395" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33600",
                "title" : "nscd: Null pointer crashes after notfound response",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33600" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0915",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-0915" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-8058",
                "source" : "redhat-csaf",
                "cvssScore" : 4.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-8058" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33601",
                "title" : "nscd: netgroup cache may terminate daemon on memory allocation failure",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33601" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33602",
                "title" : "nscd: netgroup cache assumes NSS callback uses in-buffer strings",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33602" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/xz-libs@5.2.4-4.el8_6?arch=x86_64&distro=rhel-8.10&upstream=xz-5.2.4-4.el8_6.src.rpm",
              "issues" : [ {
                "id" : "CVE-2022-1271",
                "title" : "An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is applied on the attacker's chosen file name (for example, a crafted file name), this can overwrite an attacker's content to an arbitrary attacker-selected file. This flaw occurs due to insufficient validation when processing filenames with two or more newlines where selected content and the target file names are embedded in crafted multi-line file names. This flaw allows a remote, low privileged attacker to force zgrep to write arbitrary files on the system.",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-1271" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-31115",
                "title" : "XZ has a heap-use-after-free bug in threaded .xz decoder",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-31115" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2022-1271",
                "title" : "An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is applied on the attacker's chosen file name (for example, a crafted file name), this can overwrite an attacker's content to an arbitrary attacker-selected file. This flaw occurs due to insufficient validation when processing filenames with two or more newlines where selected content and the target file names are embedded in crafted multi-line file names. This flaw allows a remote, low privileged attacker to force zgrep to write arbitrary files on the system.",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-1271" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/zlib@1.2.11-25.el8?arch=x86_64&distro=rhel-8.10&upstream=zlib-1.2.11-25.el8.src.rpm",
              "issues" : [ {
                "id" : "CVE-2018-25032",
                "title" : "zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.",
                "source" : "redhat-csaf",
                "cvssScore" : 8.2,
                "severity" : "HIGH",
                "cves" : [ "CVE-2018-25032" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-37434",
                "title" : "zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference).",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-37434" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2018-25032",
                "title" : "zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.",
                "source" : "redhat-csaf",
                "cvssScore" : 8.2,
                "severity" : "HIGH",
                "cves" : [ "CVE-2018-25032" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libcap@2.48-6.el8_9?arch=x86_64&distro=rhel-8.10&upstream=libcap-2.48-6.el8_9.src.rpm",
              "issues" : [ {
                "id" : "CVE-2023-2603",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-2603" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-2602",
                "title" : "A vulnerability was found in the pthread_create() function in libcap. This issue may allow a malicious actor to use cause __real_pthread_create() to return an error, which can exhaust the process memory.",
                "source" : "redhat-csaf",
                "cvssScore" : 3.3,
                "severity" : "LOW",
                "cves" : [ "CVE-2023-2602" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2023-2603",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-2603" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/ncurses-base@6.1-10.20180224.el8?arch=noarch&distro=rhel-8.10&upstream=ncurses-6.1-10.20180224.el8.src.rpm",
              "issues" : [ {
                "id" : "CVE-2023-29491",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-29491" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-69720",
                "title" : "The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-69720" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-29458",
                "title" : "ncurses 6.3 before patch 20220416 has an out-of-bounds read and segmentation violation in convert_strings in tinfo/read_entry.c in the terminfo library.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-29458" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2023-29491",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-29491" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/ncurses-libs@6.1-10.20180224.el8?arch=x86_64&distro=rhel-8.10&upstream=ncurses-6.1-10.20180224.el8.src.rpm",
              "issues" : [ {
                "id" : "CVE-2023-29491",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-29491" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-69720",
                "title" : "The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-69720" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-29458",
                "title" : "ncurses 6.3 before patch 20220416 has an out-of-bounds read and segmentation violation in convert_strings in tinfo/read_entry.c in the terminfo library.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-29458" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2023-29491",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-29491" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/pcre2@10.32-3.el8_6?arch=x86_64&distro=rhel-8.10&upstream=pcre2-10.32-3.el8_6.src.rpm",
              "issues" : [ {
                "id" : "CVE-2022-1586",
                "title" : "An out-of-bounds read vulnerability was discovered in the PCRE2 library in the compile_xclass_matchingpath() function of the pcre2_jit_compile.c file. This involves a unicode property matching issue in JIT-compiled regular expressions. The issue occurs because the character was not fully read in case-less matching within JIT.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-1586" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-1587",
                "title" : "An out-of-bounds read vulnerability was discovered in the PCRE2 library in the get_recurse_data_length() function of the pcre2_jit_compile.c file. This issue affects recursions in JIT-compiled regular expressions caused by duplicate data transfers.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-1587" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2022-1586",
                "title" : "An out-of-bounds read vulnerability was discovered in the PCRE2 library in the compile_xclass_matchingpath() function of the pcre2_jit_compile.c file. This involves a unicode property matching issue in JIT-compiled regular expressions. The issue occurs because the character was not fully read in case-less matching within JIT.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-1586" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/bash@4.4.20-6.el8_10?arch=x86_64&distro=rhel-8.10&upstream=bash-4.4.20-6.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2022-3715",
                "source" : "redhat-csaf",
                "cvssScore" : 6.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-3715" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2022-3715",
                "source" : "redhat-csaf",
                "cvssScore" : 6.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-3715" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/dbus-libs@1.12.8-27.el8_10?arch=x86_64&distro=rhel-8.10&epoch=1&upstream=dbus-1.12.8-27.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2022-42010",
                "title" : "An issue was discovered in D-Bus before 1.12.24, 1.13.x and 1.14.x before 1.14.4, and 1.15.x before 1.15.2. An authenticated attacker can cause dbus-daemon and other programs that use libdbus to crash when receiving a message with certain invalid type signatures.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-42010" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-42011",
                "title" : "An issue was discovered in D-Bus before 1.12.24, 1.13.x and 1.14.x before 1.14.4, and 1.15.x before 1.15.2. An authenticated attacker can cause dbus-daemon and other programs that use libdbus to crash when receiving a message where an array length is inconsistent with the size of the element type.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-42011" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-42012",
                "title" : "An issue was discovered in D-Bus before 1.12.24, 1.13.x and 1.14.x before 1.14.4, and 1.15.x before 1.15.2. An authenticated attacker can cause dbus-daemon and other programs that use libdbus to crash by sending a message with attached file descriptors in an unexpected format.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-42012" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-34969",
                "title" : "D-Bus before 1.15.6 sometimes allows unprivileged users to crash dbus-daemon. If a privileged user with control over the dbus-daemon is using the org.freedesktop.DBus.Monitoring interface to monitor message bus traffic, then an unprivileged user with the ability to connect to the same dbus-daemon can cause a dbus-daemon crash under some circumstances via an unreplyable message. When done on the well-known system bus, this is a denial-of-service vulnerability. The fixed versions are 1.12.28, 1.14.8, and 1.15.6.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-34969" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2022-42010",
                "title" : "An issue was discovered in D-Bus before 1.12.24, 1.13.x and 1.14.x before 1.14.4, and 1.15.x before 1.15.2. An authenticated attacker can cause dbus-daemon and other programs that use libdbus to crash when receiving a message with certain invalid type signatures.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-42010" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libuuid@2.32.1-48.el8_10?arch=x86_64&distro=rhel-8.10&upstream=util-linux-2.32.1-48.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2025-14104",
                "title" : "Util-linux: util-linux: heap buffer overread in setpwnam() when processing 256-byte usernames",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-14104" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2025-14104",
                "title" : "Util-linux: util-linux: heap buffer overread in setpwnam() when processing 256-byte usernames",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-14104" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libgcc@8.5.0-28.el8_10?arch=x86_64&distro=rhel-8.10&upstream=gcc-8.5.0-28.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2020-11023",
                "title" : "Potential XSS vulnerability in jQuery",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2020-11023" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2020-11023",
                "title" : "Potential XSS vulnerability in jQuery",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2020-11023" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libmount@2.32.1-48.el8_10?arch=x86_64&distro=rhel-8.10&upstream=util-linux-2.32.1-48.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2025-14104",
                "title" : "Util-linux: util-linux: heap buffer overread in setpwnam() when processing 256-byte usernames",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-14104" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2025-14104",
                "title" : "Util-linux: util-linux: heap buffer overread in setpwnam() when processing 256-byte usernames",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-14104" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libblkid@2.32.1-48.el8_10?arch=x86_64&distro=rhel-8.10&upstream=util-linux-2.32.1-48.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2025-14104",
                "title" : "Util-linux: util-linux: heap buffer overread in setpwnam() when processing 256-byte usernames",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-14104" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-27456",
                "title" : "util-linux: TOCTOU Race Condition in util-linux mount(8) - Loop Device Setup",
                "source" : "redhat-csaf",
                "cvssScore" : 4.7,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-27456" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2025-14104",
                "title" : "Util-linux: util-linux: heap buffer overread in setpwnam() when processing 256-byte usernames",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-14104" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/systemd-libs@239-82.el8_10.15?arch=x86_64&distro=rhel-8.10&upstream=systemd-239-82.el8_10.15.src.rpm",
              "issues" : [ {
                "id" : "CVE-2023-7008",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-7008" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-3821",
                "title" : "An off-by-one Error issue was discovered in Systemd in format_timespan() function of time-util.c. An attacker could supply specific values for time and accuracy that leads to buffer overrun in format_timespan(), leading to a Denial of Service.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-3821" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-4415",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-4415" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-45873",
                "title" : "systemd 250 and 251 allows local users to achieve a systemd-coredump deadlock by triggering a crash that has a long backtrace. This occurs in parse_elf_object in shared/elf-util.c. The exploitation methodology is to crash a binary calling the same function recursively, and put it in a deeply nested directory to make its backtrace large enough to cause the deadlock. This must be done 16 times when MaxConnections=16 is set for the systemd/units/systemd-coredump.socket file.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-45873" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-4598",
                "source" : "redhat-csaf",
                "cvssScore" : 4.7,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-4598" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2023-7008",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-7008" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libgcrypt@1.8.5-7.el8_6?arch=x86_64&distro=rhel-8.10&upstream=libgcrypt-1.8.5-7.el8_6.src.rpm",
              "issues" : [ {
                "id" : "CVE-2024-2236",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-2236" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2024-2236",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-2236" ],
                "unique" : false
              }
            } ],
            "highestVulnerability" : {
              "id" : "CVE-2024-2961",
              "source" : "redhat-csaf",
              "cvssScore" : 8.8,
              "severity" : "HIGH",
              "cves" : [ "CVE-2024-2961" ],
              "unique" : false
            }
          }, {
            "ref" : "pkg:rpm/redhat/cracklib-dicts@2.9.6-15.el8?arch=x86_64&distro=rhel-8.10&upstream=cracklib-2.9.6-15.el8.src.rpm",
            "transitive" : [ {
              "ref" : "pkg:rpm/redhat/glibc-minimal-langpack@2.28-251.el8_10.31?arch=x86_64&distro=rhel-8.10&upstream=glibc-2.28-251.el8_10.31.src.rpm",
              "issues" : [ {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0861",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-0861" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4911",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-4911" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33599",
                "title" : "nscd: Stack-based buffer overflow in netgroup cache",
                "source" : "redhat-csaf",
                "cvssScore" : 7.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-33599" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-4802",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-4802" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4527",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4527" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4806",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4806" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4813",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4813" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-5702",
                "title" : "The strcmp implementation optimized for the Power10 processor in the GNU C Library version 2.39 and later writes to vector registers v20 to v31 without saving contents from the caller (those registers are defined as non-volatile registers by the powerpc64le ABI), resulting in overwriting of its contents and potentially altering control flow of the caller, or leaking the input strings to the function to other parts of the program.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-5702" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-0395",
                "title" : "When the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-0395" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33600",
                "title" : "nscd: Null pointer crashes after notfound response",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33600" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0915",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-0915" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-8058",
                "source" : "redhat-csaf",
                "cvssScore" : 4.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-8058" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33601",
                "title" : "nscd: netgroup cache may terminate daemon on memory allocation failure",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33601" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33602",
                "title" : "nscd: netgroup cache assumes NSS callback uses in-buffer strings",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33602" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/glibc@2.28-251.el8_10.31?arch=x86_64&distro=rhel-8.10&upstream=glibc-2.28-251.el8_10.31.src.rpm",
              "issues" : [ {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0861",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-0861" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4911",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-4911" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33599",
                "title" : "nscd: Stack-based buffer overflow in netgroup cache",
                "source" : "redhat-csaf",
                "cvssScore" : 7.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-33599" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-4802",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-4802" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4527",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4527" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4806",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4806" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4813",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4813" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-15281",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-15281" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-5702",
                "title" : "The strcmp implementation optimized for the Power10 processor in the GNU C Library version 2.39 and later writes to vector registers v20 to v31 without saving contents from the caller (those registers are defined as non-volatile registers by the powerpc64le ABI), resulting in overwriting of its contents and potentially altering control flow of the caller, or leaking the input strings to the function to other parts of the program.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-5702" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-0395",
                "title" : "When the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-0395" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33600",
                "title" : "nscd: Null pointer crashes after notfound response",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33600" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0915",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-0915" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-8058",
                "source" : "redhat-csaf",
                "cvssScore" : 4.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-8058" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33601",
                "title" : "nscd: netgroup cache may terminate daemon on memory allocation failure",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33601" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33602",
                "title" : "nscd: netgroup cache assumes NSS callback uses in-buffer strings",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33602" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/glibc-common@2.28-251.el8_10.31?arch=x86_64&distro=rhel-8.10&upstream=glibc-2.28-251.el8_10.31.src.rpm",
              "issues" : [ {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0861",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-0861" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4911",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-4911" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33599",
                "title" : "nscd: Stack-based buffer overflow in netgroup cache",
                "source" : "redhat-csaf",
                "cvssScore" : 7.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-33599" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-4802",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-4802" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4527",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4527" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4806",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4806" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4813",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4813" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-5702",
                "title" : "The strcmp implementation optimized for the Power10 processor in the GNU C Library version 2.39 and later writes to vector registers v20 to v31 without saving contents from the caller (those registers are defined as non-volatile registers by the powerpc64le ABI), resulting in overwriting of its contents and potentially altering control flow of the caller, or leaking the input strings to the function to other parts of the program.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-5702" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-0395",
                "title" : "When the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-0395" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33600",
                "title" : "nscd: Null pointer crashes after notfound response",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33600" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0915",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-0915" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-8058",
                "source" : "redhat-csaf",
                "cvssScore" : 4.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-8058" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33601",
                "title" : "nscd: netgroup cache may terminate daemon on memory allocation failure",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33601" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33602",
                "title" : "nscd: netgroup cache assumes NSS callback uses in-buffer strings",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33602" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/gzip@1.9-13.el8_5?arch=x86_64&distro=rhel-8.10&upstream=gzip-1.9-13.el8_5.src.rpm",
              "issues" : [ {
                "id" : "CVE-2022-1271",
                "title" : "An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is applied on the attacker's chosen file name (for example, a crafted file name), this can overwrite an attacker's content to an arbitrary attacker-selected file. This flaw occurs due to insufficient validation when processing filenames with two or more newlines where selected content and the target file names are embedded in crafted multi-line file names. This flaw allows a remote, low privileged attacker to force zgrep to write arbitrary files on the system.",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-1271" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2022-1271",
                "title" : "An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is applied on the attacker's chosen file name (for example, a crafted file name), this can overwrite an attacker's content to an arbitrary attacker-selected file. This flaw occurs due to insufficient validation when processing filenames with two or more newlines where selected content and the target file names are embedded in crafted multi-line file names. This flaw allows a remote, low privileged attacker to force zgrep to write arbitrary files on the system.",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-1271" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/zlib@1.2.11-25.el8?arch=x86_64&distro=rhel-8.10&upstream=zlib-1.2.11-25.el8.src.rpm",
              "issues" : [ {
                "id" : "CVE-2018-25032",
                "title" : "zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.",
                "source" : "redhat-csaf",
                "cvssScore" : 8.2,
                "severity" : "HIGH",
                "cves" : [ "CVE-2018-25032" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-37434",
                "title" : "zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference).",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-37434" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2018-25032",
                "title" : "zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.",
                "source" : "redhat-csaf",
                "cvssScore" : 8.2,
                "severity" : "HIGH",
                "cves" : [ "CVE-2018-25032" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libcap@2.48-6.el8_9?arch=x86_64&distro=rhel-8.10&upstream=libcap-2.48-6.el8_9.src.rpm",
              "issues" : [ {
                "id" : "CVE-2023-2603",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-2603" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-2602",
                "title" : "A vulnerability was found in the pthread_create() function in libcap. This issue may allow a malicious actor to use cause __real_pthread_create() to return an error, which can exhaust the process memory.",
                "source" : "redhat-csaf",
                "cvssScore" : 3.3,
                "severity" : "LOW",
                "cves" : [ "CVE-2023-2602" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2023-2603",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-2603" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/ncurses-base@6.1-10.20180224.el8?arch=noarch&distro=rhel-8.10&upstream=ncurses-6.1-10.20180224.el8.src.rpm",
              "issues" : [ {
                "id" : "CVE-2023-29491",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-29491" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-69720",
                "title" : "The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-69720" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-29458",
                "title" : "ncurses 6.3 before patch 20220416 has an out-of-bounds read and segmentation violation in convert_strings in tinfo/read_entry.c in the terminfo library.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-29458" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2023-29491",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-29491" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/ncurses-libs@6.1-10.20180224.el8?arch=x86_64&distro=rhel-8.10&upstream=ncurses-6.1-10.20180224.el8.src.rpm",
              "issues" : [ {
                "id" : "CVE-2023-29491",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-29491" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-69720",
                "title" : "The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-69720" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-29458",
                "title" : "ncurses 6.3 before patch 20220416 has an out-of-bounds read and segmentation violation in convert_strings in tinfo/read_entry.c in the terminfo library.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-29458" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2023-29491",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-29491" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/pcre2@10.32-3.el8_6?arch=x86_64&distro=rhel-8.10&upstream=pcre2-10.32-3.el8_6.src.rpm",
              "issues" : [ {
                "id" : "CVE-2022-1586",
                "title" : "An out-of-bounds read vulnerability was discovered in the PCRE2 library in the compile_xclass_matchingpath() function of the pcre2_jit_compile.c file. This involves a unicode property matching issue in JIT-compiled regular expressions. The issue occurs because the character was not fully read in case-less matching within JIT.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-1586" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-1587",
                "title" : "An out-of-bounds read vulnerability was discovered in the PCRE2 library in the get_recurse_data_length() function of the pcre2_jit_compile.c file. This issue affects recursions in JIT-compiled regular expressions caused by duplicate data transfers.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-1587" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2022-1586",
                "title" : "An out-of-bounds read vulnerability was discovered in the PCRE2 library in the compile_xclass_matchingpath() function of the pcre2_jit_compile.c file. This involves a unicode property matching issue in JIT-compiled regular expressions. The issue occurs because the character was not fully read in case-less matching within JIT.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-1586" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/bash@4.4.20-6.el8_10?arch=x86_64&distro=rhel-8.10&upstream=bash-4.4.20-6.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2022-3715",
                "source" : "redhat-csaf",
                "cvssScore" : 6.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-3715" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2022-3715",
                "source" : "redhat-csaf",
                "cvssScore" : 6.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-3715" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libgcc@8.5.0-28.el8_10?arch=x86_64&distro=rhel-8.10&upstream=gcc-8.5.0-28.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2020-11023",
                "title" : "Potential XSS vulnerability in jQuery",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2020-11023" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2020-11023",
                "title" : "Potential XSS vulnerability in jQuery",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2020-11023" ],
                "unique" : false
              }
            } ],
            "highestVulnerability" : {
              "id" : "CVE-2024-2961",
              "source" : "redhat-csaf",
              "cvssScore" : 8.8,
              "severity" : "HIGH",
              "cves" : [ "CVE-2024-2961" ],
              "unique" : false
            }
          }, {
            "ref" : "pkg:rpm/redhat/tar@1.30-11.el8_10?arch=x86_64&distro=rhel-8.10&epoch=2&upstream=tar-1.30-11.el8_10.src.rpm",
            "issues" : [ {
              "id" : "CVE-2025-45582",
              "source" : "redhat-csaf",
              "cvssScore" : 5.6,
              "severity" : "MEDIUM",
              "cves" : [ "CVE-2025-45582" ],
              "unique" : false
            }, {
              "id" : "CVE-2022-48303",
              "title" : "GNU Tar through 1.34 has a one-byte out-of-bounds read that results in use of uninitialized memory for a conditional jump. Exploitation to change the flow of control has not been demonstrated. The issue occurs in from_header in list.c via a V7 archive in which mtime has approximately 11 whitespace characters.",
              "source" : "redhat-csaf",
              "cvssScore" : 5.5,
              "severity" : "MEDIUM",
              "cves" : [ "CVE-2022-48303" ],
              "unique" : false
            } ],
            "transitive" : [ {
              "ref" : "pkg:rpm/redhat/glibc-minimal-langpack@2.28-251.el8_10.31?arch=x86_64&distro=rhel-8.10&upstream=glibc-2.28-251.el8_10.31.src.rpm",
              "issues" : [ {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0861",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-0861" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4911",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-4911" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33599",
                "title" : "nscd: Stack-based buffer overflow in netgroup cache",
                "source" : "redhat-csaf",
                "cvssScore" : 7.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-33599" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-4802",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-4802" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4527",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4527" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4806",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4806" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4813",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4813" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-5702",
                "title" : "The strcmp implementation optimized for the Power10 processor in the GNU C Library version 2.39 and later writes to vector registers v20 to v31 without saving contents from the caller (those registers are defined as non-volatile registers by the powerpc64le ABI), resulting in overwriting of its contents and potentially altering control flow of the caller, or leaking the input strings to the function to other parts of the program.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-5702" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-0395",
                "title" : "When the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-0395" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33600",
                "title" : "nscd: Null pointer crashes after notfound response",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33600" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0915",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-0915" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-8058",
                "source" : "redhat-csaf",
                "cvssScore" : 4.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-8058" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33601",
                "title" : "nscd: netgroup cache may terminate daemon on memory allocation failure",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33601" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33602",
                "title" : "nscd: netgroup cache assumes NSS callback uses in-buffer strings",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33602" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/glibc@2.28-251.el8_10.31?arch=x86_64&distro=rhel-8.10&upstream=glibc-2.28-251.el8_10.31.src.rpm",
              "issues" : [ {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0861",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-0861" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4911",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-4911" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33599",
                "title" : "nscd: Stack-based buffer overflow in netgroup cache",
                "source" : "redhat-csaf",
                "cvssScore" : 7.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-33599" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-4802",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-4802" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4527",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4527" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4806",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4806" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4813",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4813" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-15281",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-15281" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-5702",
                "title" : "The strcmp implementation optimized for the Power10 processor in the GNU C Library version 2.39 and later writes to vector registers v20 to v31 without saving contents from the caller (those registers are defined as non-volatile registers by the powerpc64le ABI), resulting in overwriting of its contents and potentially altering control flow of the caller, or leaking the input strings to the function to other parts of the program.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-5702" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-0395",
                "title" : "When the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-0395" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33600",
                "title" : "nscd: Null pointer crashes after notfound response",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33600" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0915",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-0915" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-8058",
                "source" : "redhat-csaf",
                "cvssScore" : 4.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-8058" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33601",
                "title" : "nscd: netgroup cache may terminate daemon on memory allocation failure",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33601" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33602",
                "title" : "nscd: netgroup cache assumes NSS callback uses in-buffer strings",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33602" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/glibc-common@2.28-251.el8_10.31?arch=x86_64&distro=rhel-8.10&upstream=glibc-2.28-251.el8_10.31.src.rpm",
              "issues" : [ {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0861",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-0861" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4911",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-4911" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33599",
                "title" : "nscd: Stack-based buffer overflow in netgroup cache",
                "source" : "redhat-csaf",
                "cvssScore" : 7.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-33599" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-4802",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-4802" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4527",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4527" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4806",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4806" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4813",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4813" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-5702",
                "title" : "The strcmp implementation optimized for the Power10 processor in the GNU C Library version 2.39 and later writes to vector registers v20 to v31 without saving contents from the caller (those registers are defined as non-volatile registers by the powerpc64le ABI), resulting in overwriting of its contents and potentially altering control flow of the caller, or leaking the input strings to the function to other parts of the program.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-5702" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-0395",
                "title" : "When the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-0395" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33600",
                "title" : "nscd: Null pointer crashes after notfound response",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33600" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0915",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-0915" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-8058",
                "source" : "redhat-csaf",
                "cvssScore" : 4.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-8058" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33601",
                "title" : "nscd: netgroup cache may terminate daemon on memory allocation failure",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33601" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33602",
                "title" : "nscd: netgroup cache assumes NSS callback uses in-buffer strings",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33602" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/zlib@1.2.11-25.el8?arch=x86_64&distro=rhel-8.10&upstream=zlib-1.2.11-25.el8.src.rpm",
              "issues" : [ {
                "id" : "CVE-2018-25032",
                "title" : "zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.",
                "source" : "redhat-csaf",
                "cvssScore" : 8.2,
                "severity" : "HIGH",
                "cves" : [ "CVE-2018-25032" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-37434",
                "title" : "zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference).",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-37434" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2018-25032",
                "title" : "zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.",
                "source" : "redhat-csaf",
                "cvssScore" : 8.2,
                "severity" : "HIGH",
                "cves" : [ "CVE-2018-25032" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/ncurses-base@6.1-10.20180224.el8?arch=noarch&distro=rhel-8.10&upstream=ncurses-6.1-10.20180224.el8.src.rpm",
              "issues" : [ {
                "id" : "CVE-2023-29491",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-29491" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-69720",
                "title" : "The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-69720" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-29458",
                "title" : "ncurses 6.3 before patch 20220416 has an out-of-bounds read and segmentation violation in convert_strings in tinfo/read_entry.c in the terminfo library.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-29458" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2023-29491",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-29491" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/ncurses-libs@6.1-10.20180224.el8?arch=x86_64&distro=rhel-8.10&upstream=ncurses-6.1-10.20180224.el8.src.rpm",
              "issues" : [ {
                "id" : "CVE-2023-29491",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-29491" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-69720",
                "title" : "The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-69720" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-29458",
                "title" : "ncurses 6.3 before patch 20220416 has an out-of-bounds read and segmentation violation in convert_strings in tinfo/read_entry.c in the terminfo library.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-29458" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2023-29491",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-29491" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/pcre2@10.32-3.el8_6?arch=x86_64&distro=rhel-8.10&upstream=pcre2-10.32-3.el8_6.src.rpm",
              "issues" : [ {
                "id" : "CVE-2022-1586",
                "title" : "An out-of-bounds read vulnerability was discovered in the PCRE2 library in the compile_xclass_matchingpath() function of the pcre2_jit_compile.c file. This involves a unicode property matching issue in JIT-compiled regular expressions. The issue occurs because the character was not fully read in case-less matching within JIT.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-1586" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-1587",
                "title" : "An out-of-bounds read vulnerability was discovered in the PCRE2 library in the get_recurse_data_length() function of the pcre2_jit_compile.c file. This issue affects recursions in JIT-compiled regular expressions caused by duplicate data transfers.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-1587" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2022-1586",
                "title" : "An out-of-bounds read vulnerability was discovered in the PCRE2 library in the compile_xclass_matchingpath() function of the pcre2_jit_compile.c file. This involves a unicode property matching issue in JIT-compiled regular expressions. The issue occurs because the character was not fully read in case-less matching within JIT.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-1586" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/bash@4.4.20-6.el8_10?arch=x86_64&distro=rhel-8.10&upstream=bash-4.4.20-6.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2022-3715",
                "source" : "redhat-csaf",
                "cvssScore" : 6.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-3715" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2022-3715",
                "source" : "redhat-csaf",
                "cvssScore" : 6.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-3715" ],
                "unique" : false
              }
            } ],
            "highestVulnerability" : {
              "id" : "CVE-2024-2961",
              "source" : "redhat-csaf",
              "cvssScore" : 8.8,
              "severity" : "HIGH",
              "cves" : [ "CVE-2024-2961" ],
              "unique" : false
            }
          }, {
            "ref" : "pkg:rpm/redhat/libutempter@1.1.6-14.el8?arch=x86_64&distro=rhel-8.10&upstream=libutempter-1.1.6-14.el8.src.rpm",
            "transitive" : [ {
              "ref" : "pkg:rpm/redhat/glibc-minimal-langpack@2.28-251.el8_10.31?arch=x86_64&distro=rhel-8.10&upstream=glibc-2.28-251.el8_10.31.src.rpm",
              "issues" : [ {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0861",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-0861" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4911",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-4911" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33599",
                "title" : "nscd: Stack-based buffer overflow in netgroup cache",
                "source" : "redhat-csaf",
                "cvssScore" : 7.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-33599" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-4802",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-4802" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4527",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4527" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4806",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4806" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4813",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4813" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-5702",
                "title" : "The strcmp implementation optimized for the Power10 processor in the GNU C Library version 2.39 and later writes to vector registers v20 to v31 without saving contents from the caller (those registers are defined as non-volatile registers by the powerpc64le ABI), resulting in overwriting of its contents and potentially altering control flow of the caller, or leaking the input strings to the function to other parts of the program.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-5702" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-0395",
                "title" : "When the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-0395" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33600",
                "title" : "nscd: Null pointer crashes after notfound response",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33600" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0915",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-0915" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-8058",
                "source" : "redhat-csaf",
                "cvssScore" : 4.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-8058" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33601",
                "title" : "nscd: netgroup cache may terminate daemon on memory allocation failure",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33601" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33602",
                "title" : "nscd: netgroup cache assumes NSS callback uses in-buffer strings",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33602" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/glibc@2.28-251.el8_10.31?arch=x86_64&distro=rhel-8.10&upstream=glibc-2.28-251.el8_10.31.src.rpm",
              "issues" : [ {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0861",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-0861" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4911",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-4911" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33599",
                "title" : "nscd: Stack-based buffer overflow in netgroup cache",
                "source" : "redhat-csaf",
                "cvssScore" : 7.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-33599" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-4802",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-4802" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4527",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4527" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4806",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4806" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4813",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4813" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-15281",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-15281" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-5702",
                "title" : "The strcmp implementation optimized for the Power10 processor in the GNU C Library version 2.39 and later writes to vector registers v20 to v31 without saving contents from the caller (those registers are defined as non-volatile registers by the powerpc64le ABI), resulting in overwriting of its contents and potentially altering control flow of the caller, or leaking the input strings to the function to other parts of the program.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-5702" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-0395",
                "title" : "When the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-0395" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33600",
                "title" : "nscd: Null pointer crashes after notfound response",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33600" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0915",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-0915" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-8058",
                "source" : "redhat-csaf",
                "cvssScore" : 4.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-8058" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33601",
                "title" : "nscd: netgroup cache may terminate daemon on memory allocation failure",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33601" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33602",
                "title" : "nscd: netgroup cache assumes NSS callback uses in-buffer strings",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33602" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/glibc-common@2.28-251.el8_10.31?arch=x86_64&distro=rhel-8.10&upstream=glibc-2.28-251.el8_10.31.src.rpm",
              "issues" : [ {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0861",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-0861" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4911",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-4911" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33599",
                "title" : "nscd: Stack-based buffer overflow in netgroup cache",
                "source" : "redhat-csaf",
                "cvssScore" : 7.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-33599" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-4802",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-4802" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4527",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4527" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4806",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4806" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4813",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4813" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-5702",
                "title" : "The strcmp implementation optimized for the Power10 processor in the GNU C Library version 2.39 and later writes to vector registers v20 to v31 without saving contents from the caller (those registers are defined as non-volatile registers by the powerpc64le ABI), resulting in overwriting of its contents and potentially altering control flow of the caller, or leaking the input strings to the function to other parts of the program.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-5702" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-0395",
                "title" : "When the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-0395" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33600",
                "title" : "nscd: Null pointer crashes after notfound response",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33600" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0915",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-0915" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-8058",
                "source" : "redhat-csaf",
                "cvssScore" : 4.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-8058" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33601",
                "title" : "nscd: netgroup cache may terminate daemon on memory allocation failure",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33601" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33602",
                "title" : "nscd: netgroup cache assumes NSS callback uses in-buffer strings",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33602" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libcap@2.48-6.el8_9?arch=x86_64&distro=rhel-8.10&upstream=libcap-2.48-6.el8_9.src.rpm",
              "issues" : [ {
                "id" : "CVE-2023-2603",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-2603" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-2602",
                "title" : "A vulnerability was found in the pthread_create() function in libcap. This issue may allow a malicious actor to use cause __real_pthread_create() to return an error, which can exhaust the process memory.",
                "source" : "redhat-csaf",
                "cvssScore" : 3.3,
                "severity" : "LOW",
                "cves" : [ "CVE-2023-2602" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2023-2603",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-2603" ],
                
100 2677k    0 2089k  100  588k  2418k   680k --:--:-- --:--:-- --:--:-- 3095k
"unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/ncurses-base@6.1-10.20180224.el8?arch=noarch&distro=rhel-8.10&upstream=ncurses-6.1-10.20180224.el8.src.rpm",
              "issues" : [ {
                "id" : "CVE-2023-29491",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-29491" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-69720",
                "title" : "The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-69720" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-29458",
                "title" : "ncurses 6.3 before patch 20220416 has an out-of-bounds read and segmentation violation in convert_strings in tinfo/read_entry.c in the terminfo library.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-29458" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2023-29491",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-29491" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/ncurses-libs@6.1-10.20180224.el8?arch=x86_64&distro=rhel-8.10&upstream=ncurses-6.1-10.20180224.el8.src.rpm",
              "issues" : [ {
                "id" : "CVE-2023-29491",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-29491" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-69720",
                "title" : "The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-69720" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-29458",
                "title" : "ncurses 6.3 before patch 20220416 has an out-of-bounds read and segmentation violation in convert_strings in tinfo/read_entry.c in the terminfo library.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-29458" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2023-29491",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-29491" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/pcre2@10.32-3.el8_6?arch=x86_64&distro=rhel-8.10&upstream=pcre2-10.32-3.el8_6.src.rpm",
              "issues" : [ {
                "id" : "CVE-2022-1586",
                "title" : "An out-of-bounds read vulnerability was discovered in the PCRE2 library in the compile_xclass_matchingpath() function of the pcre2_jit_compile.c file. This involves a unicode property matching issue in JIT-compiled regular expressions. The issue occurs because the character was not fully read in case-less matching within JIT.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-1586" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-1587",
                "title" : "An out-of-bounds read vulnerability was discovered in the PCRE2 library in the get_recurse_data_length() function of the pcre2_jit_compile.c file. This issue affects recursions in JIT-compiled regular expressions caused by duplicate data transfers.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-1587" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2022-1586",
                "title" : "An out-of-bounds read vulnerability was discovered in the PCRE2 library in the compile_xclass_matchingpath() function of the pcre2_jit_compile.c file. This involves a unicode property matching issue in JIT-compiled regular expressions. The issue occurs because the character was not fully read in case-less matching within JIT.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-1586" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/bash@4.4.20-6.el8_10?arch=x86_64&distro=rhel-8.10&upstream=bash-4.4.20-6.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2022-3715",
                "source" : "redhat-csaf",
                "cvssScore" : 6.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-3715" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2022-3715",
                "source" : "redhat-csaf",
                "cvssScore" : 6.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-3715" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libgcc@8.5.0-28.el8_10?arch=x86_64&distro=rhel-8.10&upstream=gcc-8.5.0-28.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2020-11023",
                "title" : "Potential XSS vulnerability in jQuery",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2020-11023" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2020-11023",
                "title" : "Potential XSS vulnerability in jQuery",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2020-11023" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/shadow-utils@4.6-23.el8_10?arch=x86_64&distro=rhel-8.10&epoch=2&upstream=shadow-utils-4.6-23.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2023-4641",
                "source" : "redhat-csaf",
                "cvssScore" : 4.7,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4641" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-56433",
                "title" : "shadow-utils (aka shadow) 4.4 through 4.17.0 establishes a default /etc/subuid behavior (e.g., uid 100000 through 165535 for the first user account) that can realistically conflict with the uids of users defined on locally administered networks, potentially leading to account takeover, e.g., by leveraging newuidmap for access to an NFS home directory (or same-host resources in the case of remote logins by these local network users). NOTE: it may also be argued that system administrators should not have assigned uids, within local networks, that are within the range that can occur in /etc/subuid.",
                "source" : "redhat-csaf",
                "cvssScore" : 3.6,
                "severity" : "LOW",
                "cves" : [ "CVE-2024-56433" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2023-4641",
                "source" : "redhat-csaf",
                "cvssScore" : 4.7,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4641" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/bzip2-libs@1.0.6-28.el8_10?arch=x86_64&distro=rhel-8.10&upstream=bzip2-1.0.6-28.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2019-12900",
                "title" : "BZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many selectors.",
                "source" : "redhat-csaf",
                "cvssScore" : 4.4,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2019-12900" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2019-12900",
                "title" : "BZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many selectors.",
                "source" : "redhat-csaf",
                "cvssScore" : 4.4,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2019-12900" ],
                "unique" : false
              }
            } ],
            "highestVulnerability" : {
              "id" : "CVE-2024-2961",
              "source" : "redhat-csaf",
              "cvssScore" : 8.8,
              "severity" : "HIGH",
              "cves" : [ "CVE-2024-2961" ],
              "unique" : false
            }
          }, {
            "ref" : "pkg:rpm/redhat/vim-minimal@8.0.1763-22.el8_10.1?arch=x86_64&distro=rhel-8.10&epoch=2&upstream=vim-8.0.1763-22.el8_10.1.src.rpm",
            "issues" : [ {
              "id" : "CVE-2022-0554",
              "title" : "Use of Out-of-range Pointer Offset in vim/vim",
              "source" : "redhat-csaf",
              "cvssScore" : 7.8,
              "severity" : "HIGH",
              "cves" : [ "CVE-2022-0554" ],
              "unique" : false
            }, {
              "id" : "CVE-2022-0943",
              "title" : "Heap-based Buffer Overflow occurs in vim in vim/vim",
              "source" : "redhat-csaf",
              "cvssScore" : 7.8,
              "severity" : "HIGH",
              "cves" : [ "CVE-2022-0943" ],
              "unique" : false
            }, {
              "id" : "CVE-2022-1154",
              "title" : "Use after free in utf_ptr2char in vim/vim",
              "source" : "redhat-csaf",
              "cvssScore" : 7.8,
              "severity" : "HIGH",
              "cves" : [ "CVE-2022-1154" ],
              "unique" : false
            }, {
              "id" : "CVE-2022-1629",
              "title" : "Buffer Over-read in function find_next_quote in vim/vim",
              "source" : "redhat-csaf",
              "cvssScore" : 7.8,
              "severity" : "HIGH",
              "cves" : [ "CVE-2022-1629" ],
              "unique" : false
            }, {
              "id" : "CVE-2022-1897",
              "source" : "redhat-csaf",
              "cvssScore" : 7.8,
              "severity" : "HIGH",
              "cves" : [ "CVE-2022-1897" ],
              "unique" : false
            }, {
              "id" : "CVE-2022-1927",
              "title" : "Buffer Over-read in vim/vim",
              "source" : "redhat-csaf",
              "cvssScore" : 7.8,
              "severity" : "HIGH",
              "cves" : [ "CVE-2022-1927" ],
              "unique" : false
            }, {
              "id" : "CVE-2022-47024",
              "title" : "A null pointer dereference issue was discovered in function gui_x11_create_blank_mouse in gui_x11.c in vim 8.1.2269 thru 9.0.0339 allows attackers to cause denial of service or other unspecified impacts.",
              "source" : "redhat-csaf",
              "cvssScore" : 7.8,
              "severity" : "HIGH",
              "cves" : [ "CVE-2022-47024" ],
              "unique" : false
            }, {
              "id" : "CVE-2022-0413",
              "title" : "Use After Free in vim/vim",
              "source" : "redhat-csaf",
              "cvssScore" : 7.3,
              "severity" : "HIGH",
              "cves" : [ "CVE-2022-0413" ],
              "unique" : false
            }, {
              "id" : "CVE-2022-1621",
              "title" : "Heap buffer overflow in vim_strncpy find_word in vim/vim",
              "source" : "redhat-csaf",
              "cvssScore" : 7.3,
              "severity" : "HIGH",
              "cves" : [ "CVE-2022-1621" ],
              "unique" : false
            }, {
              "id" : "CVE-2022-1785",
              "source" : "redhat-csaf",
              "cvssScore" : 7.3,
              "severity" : "HIGH",
              "cves" : [ "CVE-2022-1785" ],
              "unique" : false
            }, {
              "id" : "CVE-2026-25749",
              "source" : "redhat-csaf",
              "cvssScore" : 7.3,
              "severity" : "HIGH",
              "cves" : [ "CVE-2026-25749" ],
              "unique" : false
            }, {
              "id" : "CVE-2026-33412",
              "title" : "Vim affected by Command injection via newline in glob()",
              "source" : "redhat-csaf",
              "cvssScore" : 7.3,
              "severity" : "HIGH",
              "cves" : [ "CVE-2026-33412" ],
              "unique" : false
            }, {
              "id" : "CVE-2023-4752",
              "source" : "redhat-csaf",
              "cvssScore" : 7.0,
              "severity" : "HIGH",
              "cves" : [ "CVE-2023-4752" ],
              "unique" : false
            }, {
              "id" : "CVE-2022-1420",
              "title" : "Use of Out-of-range Pointer Offset in vim/vim",
              "source" : "redhat-csaf",
              "cvssScore" : 6.1,
              "severity" : "MEDIUM",
              "cves" : [ "CVE-2022-1420" ],
              "unique" : false
            }, {
              "id" : "CVE-2021-3903",
              "title" : "Heap-based Buffer Overflow in vim/vim",
              "source" : "redhat-csaf",
              "cvssScore" : 5.5,
              "severity" : "MEDIUM",
              "cves" : [ "CVE-2021-3903" ],
              "unique" : false
            }, {
              "id" : "CVE-2026-28421",
              "source" : "redhat-csaf",
              "cvssScore" : 5.3,
              "severity" : "MEDIUM",
              "cves" : [ "CVE-2026-28421" ],
              "unique" : false
            }, {
              "id" : "CVE-2026-28417",
              "source" : "redhat-csaf",
              "cvssScore" : 4.4,
              "severity" : "MEDIUM",
              "cves" : [ "CVE-2026-28417" ],
              "unique" : false
            }, {
              "id" : "CVE-2025-53905",
              "source" : "redhat-csaf",
              "cvssScore" : 4.1,
              "severity" : "MEDIUM",
              "cves" : [ "CVE-2025-53905" ],
              "unique" : false
            }, {
              "id" : "CVE-2025-53906",
              "title" : "Vim has path traversal issue with zip.vim and special crafted zip archives",
              "source" : "redhat-csaf",
              "cvssScore" : 4.1,
              "severity" : "MEDIUM",
              "cves" : [ "CVE-2025-53906" ],
              "unique" : false
            } ],
            "transitive" : [ {
              "ref" : "pkg:rpm/redhat/glibc-minimal-langpack@2.28-251.el8_10.31?arch=x86_64&distro=rhel-8.10&upstream=glibc-2.28-251.el8_10.31.src.rpm",
              "issues" : [ {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0861",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-0861" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4911",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-4911" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33599",
                "title" : "nscd: Stack-based buffer overflow in netgroup cache",
                "source" : "redhat-csaf",
                "cvssScore" : 7.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-33599" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-4802",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-4802" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4527",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4527" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4806",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4806" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4813",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4813" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-5702",
                "title" : "The strcmp implementation optimized for the Power10 processor in the GNU C Library version 2.39 and later writes to vector registers v20 to v31 without saving contents from the caller (those registers are defined as non-volatile registers by the powerpc64le ABI), resulting in overwriting of its contents and potentially altering control flow of the caller, or leaking the input strings to the function to other parts of the program.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-5702" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-0395",
                "title" : "When the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-0395" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33600",
                "title" : "nscd: Null pointer crashes after notfound response",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33600" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0915",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-0915" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-8058",
                "source" : "redhat-csaf",
                "cvssScore" : 4.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-8058" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33601",
                "title" : "nscd: netgroup cache may terminate daemon on memory allocation failure",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33601" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33602",
                "title" : "nscd: netgroup cache assumes NSS callback uses in-buffer strings",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33602" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/glibc@2.28-251.el8_10.31?arch=x86_64&distro=rhel-8.10&upstream=glibc-2.28-251.el8_10.31.src.rpm",
              "issues" : [ {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0861",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-0861" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4911",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-4911" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33599",
                "title" : "nscd: Stack-based buffer overflow in netgroup cache",
                "source" : "redhat-csaf",
                "cvssScore" : 7.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-33599" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-4802",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-4802" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4527",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4527" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4806",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4806" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4813",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4813" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-15281",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-15281" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-5702",
                "title" : "The strcmp implementation optimized for the Power10 processor in the GNU C Library version 2.39 and later writes to vector registers v20 to v31 without saving contents from the caller (those registers are defined as non-volatile registers by the powerpc64le ABI), resulting in overwriting of its contents and potentially altering control flow of the caller, or leaking the input strings to the function to other parts of the program.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-5702" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-0395",
                "title" : "When the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-0395" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33600",
                "title" : "nscd: Null pointer crashes after notfound response",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33600" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0915",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-0915" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-8058",
                "source" : "redhat-csaf",
                "cvssScore" : 4.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-8058" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33601",
                "title" : "nscd: netgroup cache may terminate daemon on memory allocation failure",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33601" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33602",
                "title" : "nscd: netgroup cache assumes NSS callback uses in-buffer strings",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33602" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/glibc-common@2.28-251.el8_10.31?arch=x86_64&distro=rhel-8.10&upstream=glibc-2.28-251.el8_10.31.src.rpm",
              "issues" : [ {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0861",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-0861" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4911",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-4911" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33599",
                "title" : "nscd: Stack-based buffer overflow in netgroup cache",
                "source" : "redhat-csaf",
                "cvssScore" : 7.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-33599" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-4802",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-4802" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4527",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4527" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4806",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4806" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4813",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4813" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-5702",
                "title" : "The strcmp implementation optimized for the Power10 processor in the GNU C Library version 2.39 and later writes to vector registers v20 to v31 without saving contents from the caller (those registers are defined as non-volatile registers by the powerpc64le ABI), resulting in overwriting of its contents and potentially altering control flow of the caller, or leaking the input strings to the function to other parts of the program.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-5702" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-0395",
                "title" : "When the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-0395" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33600",
                "title" : "nscd: Null pointer crashes after notfound response",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33600" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0915",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-0915" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-8058",
                "source" : "redhat-csaf",
                "cvssScore" : 4.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-8058" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33601",
                "title" : "nscd: netgroup cache may terminate daemon on memory allocation failure",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33601" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33602",
                "title" : "nscd: netgroup cache assumes NSS callback uses in-buffer strings",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33602" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/ncurses-base@6.1-10.20180224.el8?arch=noarch&distro=rhel-8.10&upstream=ncurses-6.1-10.20180224.el8.src.rpm",
              "issues" : [ {
                "id" : "CVE-2023-29491",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-29491" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-69720",
                "title" : "The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-69720" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-29458",
                "title" : "ncurses 6.3 before patch 20220416 has an out-of-bounds read and segmentation violation in convert_strings in tinfo/read_entry.c in the terminfo library.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-29458" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2023-29491",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-29491" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/ncurses-libs@6.1-10.20180224.el8?arch=x86_64&distro=rhel-8.10&upstream=ncurses-6.1-10.20180224.el8.src.rpm",
              "issues" : [ {
                "id" : "CVE-2023-29491",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-29491" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-69720",
                "title" : "The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-69720" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-29458",
                "title" : "ncurses 6.3 before patch 20220416 has an out-of-bounds read and segmentation violation in convert_strings in tinfo/read_entry.c in the terminfo library.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-29458" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2023-29491",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-29491" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/pcre2@10.32-3.el8_6?arch=x86_64&distro=rhel-8.10&upstream=pcre2-10.32-3.el8_6.src.rpm",
              "issues" : [ {
                "id" : "CVE-2022-1586",
                "title" : "An out-of-bounds read vulnerability was discovered in the PCRE2 library in the compile_xclass_matchingpath() function of the pcre2_jit_compile.c file. This involves a unicode property matching issue in JIT-compiled regular expressions. The issue occurs because the character was not fully read in case-less matching within JIT.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-1586" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-1587",
                "title" : "An out-of-bounds read vulnerability was discovered in the PCRE2 library in the get_recurse_data_length() function of the pcre2_jit_compile.c file. This issue affects recursions in JIT-compiled regular expressions caused by duplicate data transfers.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-1587" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2022-1586",
                "title" : "An out-of-bounds read vulnerability was discovered in the PCRE2 library in the compile_xclass_matchingpath() function of the pcre2_jit_compile.c file. This involves a unicode property matching issue in JIT-compiled regular expressions. The issue occurs because the character was not fully read in case-less matching within JIT.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-1586" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/bash@4.4.20-6.el8_10?arch=x86_64&distro=rhel-8.10&upstream=bash-4.4.20-6.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2022-3715",
                "source" : "redhat-csaf",
                "cvssScore" : 6.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-3715" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2022-3715",
                "source" : "redhat-csaf",
                "cvssScore" : 6.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-3715" ],
                "unique" : false
              }
            } ],
            "highestVulnerability" : {
              "id" : "CVE-2024-2961",
              "source" : "redhat-csaf",
              "cvssScore" : 8.8,
              "severity" : "HIGH",
              "cves" : [ "CVE-2024-2961" ],
              "unique" : false
            }
          }, {
            "ref" : "pkg:rpm/redhat/rootfiles@8.1-22.el8?arch=noarch&distro=rhel-8.10&upstream=rootfiles-8.1-22.el8.src.rpm",
            "transitive" : [ {
              "ref" : "pkg:rpm/redhat/glibc-minimal-langpack@2.28-251.el8_10.31?arch=x86_64&distro=rhel-8.10&upstream=glibc-2.28-251.el8_10.31.src.rpm",
              "issues" : [ {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0861",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-0861" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4911",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-4911" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33599",
                "title" : "nscd: Stack-based buffer overflow in netgroup cache",
                "source" : "redhat-csaf",
                "cvssScore" : 7.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-33599" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-4802",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-4802" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4527",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4527" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4806",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4806" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4813",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4813" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-5702",
                "title" : "The strcmp implementation optimized for the Power10 processor in the GNU C Library version 2.39 and later writes to vector registers v20 to v31 without saving contents from the caller (those registers are defined as non-volatile registers by the powerpc64le ABI), resulting in overwriting of its contents and potentially altering control flow of the caller, or leaking the input strings to the function to other parts of the program.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-5702" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-0395",
                "title" : "When the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-0395" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33600",
                "title" : "nscd: Null pointer crashes after notfound response",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33600" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0915",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-0915" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-8058",
                "source" : "redhat-csaf",
                "cvssScore" : 4.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-8058" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33601",
                "title" : "nscd: netgroup cache may terminate daemon on memory allocation failure",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33601" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33602",
                "title" : "nscd: netgroup cache assumes NSS callback uses in-buffer strings",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33602" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/glibc@2.28-251.el8_10.31?arch=x86_64&distro=rhel-8.10&upstream=glibc-2.28-251.el8_10.31.src.rpm",
              "issues" : [ {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0861",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-0861" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4911",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-4911" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33599",
                "title" : "nscd: Stack-based buffer overflow in netgroup cache",
                "source" : "redhat-csaf",
                "cvssScore" : 7.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-33599" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-4802",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-4802" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4527",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4527" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4806",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4806" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4813",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4813" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-15281",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-15281" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-5702",
                "title" : "The strcmp implementation optimized for the Power10 processor in the GNU C Library version 2.39 and later writes to vector registers v20 to v31 without saving contents from the caller (those registers are defined as non-volatile registers by the powerpc64le ABI), resulting in overwriting of its contents and potentially altering control flow of the caller, or leaking the input strings to the function to other parts of the program.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-5702" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-0395",
                "title" : "When the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-0395" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33600",
                "title" : "nscd: Null pointer crashes after notfound response",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33600" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0915",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-0915" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-8058",
                "source" : "redhat-csaf",
                "cvssScore" : 4.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-8058" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33601",
                "title" : "nscd: netgroup cache may terminate daemon on memory allocation failure",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33601" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33602",
                "title" : "nscd: netgroup cache assumes NSS callback uses in-buffer strings",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33602" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/glibc-common@2.28-251.el8_10.31?arch=x86_64&distro=rhel-8.10&upstream=glibc-2.28-251.el8_10.31.src.rpm",
              "issues" : [ {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0861",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-0861" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4911",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-4911" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33599",
                "title" : "nscd: Stack-based buffer overflow in netgroup cache",
                "source" : "redhat-csaf",
                "cvssScore" : 7.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-33599" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-4802",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-4802" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4527",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4527" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4806",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4806" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4813",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4813" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-5702",
                "title" : "The strcmp implementation optimized for the Power10 processor in the GNU C Library version 2.39 and later writes to vector registers v20 to v31 without saving contents from the caller (those registers are defined as non-volatile registers by the powerpc64le ABI), resulting in overwriting of its contents and potentially altering control flow of the caller, or leaking the input strings to the function to other parts of the program.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-5702" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-0395",
                "title" : "When the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-0395" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33600",
                "title" : "nscd: Null pointer crashes after notfound response",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33600" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0915",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-0915" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-8058",
                "source" : "redhat-csaf",
                "cvssScore" : 4.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-8058" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33601",
                "title" : "nscd: netgroup cache may terminate daemon on memory allocation failure",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33601" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33602",
                "title" : "nscd: netgroup cache assumes NSS callback uses in-buffer strings",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33602" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/ncurses-base@6.1-10.20180224.el8?arch=noarch&distro=rhel-8.10&upstream=ncurses-6.1-10.20180224.el8.src.rpm",
              "issues" : [ {
                "id" : "CVE-2023-29491",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-29491" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-69720",
                "title" : "The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-69720" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-29458",
                "title" : "ncurses 6.3 before patch 20220416 has an out-of-bounds read and segmentation violation in convert_strings in tinfo/read_entry.c in the terminfo library.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-29458" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2023-29491",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-29491" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/ncurses-libs@6.1-10.20180224.el8?arch=x86_64&distro=rhel-8.10&upstream=ncurses-6.1-10.20180224.el8.src.rpm",
              "issues" : [ {
                "id" : "CVE-2023-29491",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-29491" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-69720",
                "title" : "The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-69720" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-29458",
                "title" : "ncurses 6.3 before patch 20220416 has an out-of-bounds read and segmentation violation in convert_strings in tinfo/read_entry.c in the terminfo library.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-29458" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2023-29491",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-29491" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/pcre2@10.32-3.el8_6?arch=x86_64&distro=rhel-8.10&upstream=pcre2-10.32-3.el8_6.src.rpm",
              "issues" : [ {
                "id" : "CVE-2022-1586",
                "title" : "An out-of-bounds read vulnerability was discovered in the PCRE2 library in the compile_xclass_matchingpath() function of the pcre2_jit_compile.c file. This involves a unicode property matching issue in JIT-compiled regular expressions. The issue occurs because the character was not fully read in case-less matching within JIT.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-1586" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-1587",
                "title" : "An out-of-bounds read vulnerability was discovered in the PCRE2 library in the get_recurse_data_length() function of the pcre2_jit_compile.c file. This issue affects recursions in JIT-compiled regular expressions caused by duplicate data transfers.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-1587" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2022-1586",
                "title" : "An out-of-bounds read vulnerability was discovered in the PCRE2 library in the compile_xclass_matchingpath() function of the pcre2_jit_compile.c file. This involves a unicode property matching issue in JIT-compiled regular expressions. The issue occurs because the character was not fully read in case-less matching within JIT.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-1586" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/bash@4.4.20-6.el8_10?arch=x86_64&distro=rhel-8.10&upstream=bash-4.4.20-6.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2022-3715",
                "source" : "redhat-csaf",
                "cvssScore" : 6.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-3715" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2022-3715",
                "source" : "redhat-csaf",
                "cvssScore" : 6.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-3715" ],
                "unique" : false
              }
            } ],
            "highestVulnerability" : {
              "id" : "CVE-2024-2961",
              "source" : "redhat-csaf",
              "cvssScore" : 8.8,
              "severity" : "HIGH",
              "cves" : [ "CVE-2024-2961" ],
              "unique" : false
            }
          }, {
            "ref" : "pkg:rpm/redhat/gdb-gdbserver@8.2-20.el8?arch=x86_64&distro=rhel-8.10&upstream=gdb-8.2-20.el8.src.rpm",
            "issues" : [ {
              "id" : "CVE-2021-3826",
              "title" : "Heap/stack buffer overflow in the dlang_lname function in d-demangle.c in libiberty allows attackers to potentially cause a denial of service (segmentation fault and crash) via a crafted mangled symbol.",
              "source" : "redhat-csaf",
              "cvssScore" : 6.5,
              "severity" : "MEDIUM",
              "cves" : [ "CVE-2021-3826" ],
              "unique" : false
            } ],
            "transitive" : [ {
              "ref" : "pkg:rpm/redhat/glibc-minimal-langpack@2.28-251.el8_10.31?arch=x86_64&distro=rhel-8.10&upstream=glibc-2.28-251.el8_10.31.src.rpm",
              "issues" : [ {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0861",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-0861" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4911",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-4911" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33599",
                "title" : "nscd: Stack-based buffer overflow in netgroup cache",
                "source" : "redhat-csaf",
                "cvssScore" : 7.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-33599" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-4802",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-4802" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4527",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4527" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4806",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4806" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4813",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4813" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-5702",
                "title" : "The strcmp implementation optimized for the Power10 processor in the GNU C Library version 2.39 and later writes to vector registers v20 to v31 without saving contents from the caller (those registers are defined as non-volatile registers by the powerpc64le ABI), resulting in overwriting of its contents and potentially altering control flow of the caller, or leaking the input strings to the function to other parts of the program.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-5702" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-0395",
                "title" : "When the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-0395" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33600",
                "title" : "nscd: Null pointer crashes after notfound response",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33600" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0915",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-0915" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-8058",
                "source" : "redhat-csaf",
                "cvssScore" : 4.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-8058" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33601",
                "title" : "nscd: netgroup cache may terminate daemon on memory allocation failure",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33601" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33602",
                "title" : "nscd: netgroup cache assumes NSS callback uses in-buffer strings",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33602" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/glibc@2.28-251.el8_10.31?arch=x86_64&distro=rhel-8.10&upstream=glibc-2.28-251.el8_10.31.src.rpm",
              "issues" : [ {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0861",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-0861" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4911",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-4911" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33599",
                "title" : "nscd: Stack-based buffer overflow in netgroup cache",
                "source" : "redhat-csaf",
                "cvssScore" : 7.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-33599" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-4802",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-4802" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4527",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4527" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4806",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4806" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4813",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4813" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-15281",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-15281" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-5702",
                "title" : "The strcmp implementation optimized for the Power10 processor in the GNU C Library version 2.39 and later writes to vector registers v20 to v31 without saving contents from the caller (those registers are defined as non-volatile registers by the powerpc64le ABI), resulting in overwriting of its contents and potentially altering control flow of the caller, or leaking the input strings to the function to other parts of the program.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-5702" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-0395",
                "title" : "When the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-0395" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33600",
                "title" : "nscd: Null pointer crashes after notfound response",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33600" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0915",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-0915" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-8058",
                "source" : "redhat-csaf",
                "cvssScore" : 4.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-8058" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33601",
                "title" : "nscd: netgroup cache may terminate daemon on memory allocation failure",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33601" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33602",
                "title" : "nscd: netgroup cache assumes NSS callback uses in-buffer strings",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33602" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/glibc-common@2.28-251.el8_10.31?arch=x86_64&distro=rhel-8.10&upstream=glibc-2.28-251.el8_10.31.src.rpm",
              "issues" : [ {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0861",
                "source" : "redhat-csaf",
                "cvssScore" : 8.1,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-0861" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4911",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-4911" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33599",
                "title" : "nscd: Stack-based buffer overflow in netgroup cache",
                "source" : "redhat-csaf",
                "cvssScore" : 7.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-33599" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-4802",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-4802" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4527",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4527" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4806",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4806" ],
                "unique" : false
              }, {
                "id" : "CVE-2023-4813",
                "source" : "redhat-csaf",
                "cvssScore" : 5.9,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2023-4813" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-5702",
                "title" : "The strcmp implementation optimized for the Power10 processor in the GNU C Library version 2.39 and later writes to vector registers v20 to v31 without saving contents from the caller (those registers are defined as non-volatile registers by the powerpc64le ABI), resulting in overwriting of its contents and potentially altering control flow of the caller, or leaking the input strings to the function to other parts of the program.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-5702" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-0395",
                "title" : "When the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-0395" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33600",
                "title" : "nscd: Null pointer crashes after notfound response",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33600" ],
                "unique" : false
              }, {
                "id" : "CVE-2026-0915",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-0915" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-8058",
                "source" : "redhat-csaf",
                "cvssScore" : 4.2,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2025-8058" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33601",
                "title" : "nscd: netgroup cache may terminate daemon on memory allocation failure",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33601" ],
                "unique" : false
              }, {
                "id" : "CVE-2024-33602",
                "title" : "nscd: netgroup cache assumes NSS callback uses in-buffer strings",
                "source" : "redhat-csaf",
                "cvssScore" : 4.0,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2024-33602" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2024-2961",
                "source" : "redhat-csaf",
                "cvssScore" : 8.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2024-2961" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/ncurses-base@6.1-10.20180224.el8?arch=noarch&distro=rhel-8.10&upstream=ncurses-6.1-10.20180224.el8.src.rpm",
              "issues" : [ {
                "id" : "CVE-2023-29491",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-29491" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-69720",
                "title" : "The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-69720" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-29458",
                "title" : "ncurses 6.3 before patch 20220416 has an out-of-bounds read and segmentation violation in convert_strings in tinfo/read_entry.c in the terminfo library.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-29458" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2023-29491",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-29491" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/ncurses-libs@6.1-10.20180224.el8?arch=x86_64&distro=rhel-8.10&upstream=ncurses-6.1-10.20180224.el8.src.rpm",
              "issues" : [ {
                "id" : "CVE-2023-29491",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-29491" ],
                "unique" : false
              }, {
                "id" : "CVE-2025-69720",
                "title" : "The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2025-69720" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-29458",
                "title" : "ncurses 6.3 before patch 20220416 has an out-of-bounds read and segmentation violation in convert_strings in tinfo/read_entry.c in the terminfo library.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-29458" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2023-29491",
                "source" : "redhat-csaf",
                "cvssScore" : 7.8,
                "severity" : "HIGH",
                "cves" : [ "CVE-2023-29491" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/pcre2@10.32-3.el8_6?arch=x86_64&distro=rhel-8.10&upstream=pcre2-10.32-3.el8_6.src.rpm",
              "issues" : [ {
                "id" : "CVE-2022-1586",
                "title" : "An out-of-bounds read vulnerability was discovered in the PCRE2 library in the compile_xclass_matchingpath() function of the pcre2_jit_compile.c file. This involves a unicode property matching issue in JIT-compiled regular expressions. The issue occurs because the character was not fully read in case-less matching within JIT.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-1586" ],
                "unique" : false
              }, {
                "id" : "CVE-2022-1587",
                "title" : "An out-of-bounds read vulnerability was discovered in the PCRE2 library in the get_recurse_data_length() function of the pcre2_jit_compile.c file. This issue affects recursions in JIT-compiled regular expressions caused by duplicate data transfers.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-1587" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2022-1586",
                "title" : "An out-of-bounds read vulnerability was discovered in the PCRE2 library in the compile_xclass_matchingpath() function of the pcre2_jit_compile.c file. This involves a unicode property matching issue in JIT-compiled regular expressions. The issue occurs because the character was not fully read in case-less matching within JIT.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.5,
                "severity" : "HIGH",
                "cves" : [ "CVE-2022-1586" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/bash@4.4.20-6.el8_10?arch=x86_64&distro=rhel-8.10&upstream=bash-4.4.20-6.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2022-3715",
                "source" : "redhat-csaf",
                "cvssScore" : 6.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-3715" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2022-3715",
                "source" : "redhat-csaf",
                "cvssScore" : 6.6,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2022-3715" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libgcc@8.5.0-28.el8_10?arch=x86_64&distro=rhel-8.10&upstream=gcc-8.5.0-28.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2020-11023",
                "title" : "Potential XSS vulnerability in jQuery",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2020-11023" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2020-11023",
                "title" : "Potential XSS vulnerability in jQuery",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2020-11023" ],
                "unique" : false
              }
            }, {
              "ref" : "pkg:rpm/redhat/libstdc%2B%2B@8.5.0-28.el8_10?arch=x86_64&distro=rhel-8.10&upstream=gcc-8.5.0-28.el8_10.src.rpm",
              "issues" : [ {
                "id" : "CVE-2020-11023",
                "title" : "Potential XSS vulnerability in jQuery",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2020-11023" ],
                "unique" : false
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2020-11023",
                "title" : "Potential XSS vulnerability in jQuery",
                "source" : "redhat-csaf",
                "cvssScore" : 6.1,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2020-11023" ],
                "unique" : false
              }
            } ],
            "highestVulnerability" : {
              "id" : "CVE-2024-2961",
              "source" : "redhat-csaf",
              "cvssScore" : 8.8,
              "severity" : "HIGH",
              "cves" : [ "CVE-2024-2961" ],
              "unique" : false
            }
          } ]
        }
      }
    }
  },
  "licenses" : [ {
    "status" : {
      "ok" : true,
      "name" : "deps.dev",
      "code" : 200,
      "message" : "OK",
      "warnings" : { }
    },
    "summary" : {
      "total" : 14,
      "concluded" : 208,
      "permissive" : 6,
      "weakCopyleft" : 0,
      "strongCopyleft" : 1,
      "unknown" : 7,
      "deprecated" : 1,
      "osiApproved" : 7,
      "fsfLibre" : 7
    },
    "packages" : {
      "pkg:rpm/redhat/libnghttp2@1.33.0-6.el8_10.2?arch=x86_64&distro=rhel-8.10&upstream=nghttp2-1.33.0-6.el8_10.2.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/libxcrypt@4.1.1-6.el8?arch=x86_64&distro=rhel-8.10&upstream=libxcrypt-4.1.1-6.el8.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/ncurses-base@6.1-10.20180224.el8?arch=noarch&distro=rhel-8.10&upstream=ncurses-6.1-10.20180224.el8.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/libverto@0.3.2-2.el8?arch=x86_64&distro=rhel-8.10&upstream=libverto-0.3.2-2.el8.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/python3-gobject-base@3.28.3-2.el8?arch=x86_64&distro=rhel-8.10&upstream=pygobject3-3.28.3-2.el8.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/gpg-pubkey@fd431d51-4ae0493b?distro=rhel-8.10" : {
        "evidence" : [ ]
      },
      "pkg:pypi/urllib3@1.24.2" : {
        "concluded" : {
          "identifiers" : [ {
            "id" : "MIT",
            "name" : "MIT License",
            "isDeprecated" : false,
            "isOsiApproved" : true,
            "isFsfLibre" : true,
            "category" : "PERMISSIVE"
          } ],
          "expression" : "MIT",
          "name" : "MIT License",
          "category" : "PERMISSIVE",
          "source" : "deps.dev",
          "sourceUrl" : "https://api.deps.dev"
        },
        "evidence" : [ {
          "identifiers" : [ {
            "id" : "MIT",
            "name" : "MIT License",
            "isDeprecated" : false,
            "isOsiApproved" : true,
            "isFsfLibre" : true,
            "category" : "PERMISSIVE"
          } ],
          "expression" : "MIT",
          "name" : "MIT License",
          "category" : "PERMISSIVE",
          "source" : "deps.dev",
          "sourceUrl" : "https://api.deps.dev"
        } ]
      },
      "pkg:rpm/redhat/gdbm-libs@1.18-2.el8?arch=x86_64&distro=rhel-8.10&epoch=1&upstream=gdbm-1.18-2.el8.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/xz-libs@5.2.4-4.el8_6?arch=x86_64&distro=rhel-8.10&upstream=xz-5.2.4-4.el8_6.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/dmidecode@3.5-1.el8?arch=x86_64&distro=rhel-8.10&epoch=1&upstream=dmidecode-3.5-1.el8.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/libunistring@0.9.9-3.el8?arch=x86_64&distro=rhel-8.10&upstream=libunistring-0.9.9-3.el8.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/device-mapper-libs@1.02.181-15.el8_10.3?arch=x86_64&distro=rhel-8.10&epoch=8&upstream=lvm2-2.03.14-15.el8_10.3.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/dbus-daemon@1.12.8-27.el8_10?arch=x86_64&distro=rhel-8.10&epoch=1&upstream=dbus-1.12.8-27.el8_10.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/lua-libs@5.3.4-12.el8?arch=x86_64&distro=rhel-8.10&upstream=lua-5.3.4-12.el8.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/libyaml@0.1.7-5.el8?arch=x86_64&distro=rhel-8.10&upstream=libyaml-0.1.7-5.el8.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/libmount@2.32.1-48.el8_10?arch=x86_64&distro=rhel-8.10&upstream=util-linux-2.32.1-48.el8_10.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/libksba@1.3.5-9.el8_7?arch=x86_64&distro=rhel-8.10&upstream=libksba-1.3.5-9.el8_7.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/krb5-libs@1.18.2-32.el8_10?arch=x86_64&distro=rhel-8.10&upstream=krb5-1.18.2-32.el8_10.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/file-libs@5.33-27.el8_10?arch=x86_64&distro=rhel-8.10&upstream=file-5.33-27.el8_10.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/libacl@2.2.53-3.el8?arch=x86_64&distro=rhel-8.10&upstream=acl-2.2.53-3.el8.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/python3-libcomps@0.1.18-1.el8?arch=x86_64&distro=rhel-8.10&upstream=libcomps-0.1.18-1.el8.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/systemd@239-82.el8_10.15?arch=x86_64&distro=rhel-8.10&upstream=systemd-239-82.el8_10.15.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/libcurl@7.61.1-34.el8_10.11?arch=x86_64&distro=rhel-8.10&upstream=curl-7.61.1-34.el8_10.11.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/dnf-data@4.7.0-21.el8_10?arch=noarch&distro=rhel-8.10&upstream=dnf-4.7.0-21.el8_10.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/p11-kit-trust@0.23.22-2.el8?arch=x86_64&distro=rhel-8.10&upstream=p11-kit-0.23.22-2.el8.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/gobject-introspection@1.56.1-1.el8" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/gzip@1.9-13.el8_5?arch=x86_64&distro=rhel-8.10&upstream=gzip-1.9-13.el8_5.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/bzip2-libs@1.0.6-28.el8_10?arch=x86_64&distro=rhel-8.10&upstream=bzip2-1.0.6-28.el8_10.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/gnutls@3.6.16-8.el8_10.5?arch=x86_64&distro=rhel-8.10&upstream=gnutls-3.6.16-8.el8_10.5.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:pypi/libcomps@0.1.18" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/npth@1.5-4.el8?arch=x86_64&distro=rhel-8.10&upstream=npth-1.5-4.el8.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/libssh@0.9.6-16.el8_10?arch=x86_64&distro=rhel-8.10&upstream=libssh-0.9.6-16.el8_10.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/systemd-pam@239-82.el8_10.15?arch=x86_64&distro=rhel-8.10&upstream=systemd-239-82.el8_10.15.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/glibc-common@2.28-251.el8_10.31?arch=x86_64&distro=rhel-8.10&upstream=glibc-2.28-251.el8_10.31.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/dbus-libs@1.12.8-27.el8_10?arch=x86_64&distro=rhel-8.10&epoch=1&upstream=dbus-1.12.8-27.el8_10.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/python3-pysocks@1.6.8-3.el8?arch=noarch&distro=rhel-8.10&upstream=python-pysocks-1.6.8-3.el8.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/platform-python@3.6.8-75.el8_10" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/tar@1.30-11.el8_10?arch=x86_64&distro=rhel-8.10&epoch=2&upstream=tar-1.30-11.el8_10.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/libdb@5.3.28-42.el8_4?arch=x86_64&distro=rhel-8.10&upstream=libdb-5.3.28-42.el8_4.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/libssh-config@0.9.6-16.el8_10?arch=noarch&distro=rhel-8.10&upstream=libssh-0.9.6-16.el8_10.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/platform-python-setuptools@39.2.0-9.el8_10?arch=noarch&distro=rhel-8.10&upstream=python-setuptools-39.2.0-9.el8_10.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/libnl3@3.7.0-1.el8?arch=x86_64&distro=rhel-8.10&upstream=libnl3-3.7.0-1.el8.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/librhsm@0.0.3-5.el8?arch=x86_64&distro=rhel-8.10&upstream=librhsm-0.0.3-5.el8.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/yum@4.7.0-21.el8_10?arch=noarch&distro=rhel-8.10&upstream=dnf-4.7.0-21.el8_10.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/python3-decorator@4.2.1-2.el8?arch=noarch&distro=rhel-8.10&upstream=python-decorator-4.2.1-2.el8.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/libutempter@1.1.6-14.el8?arch=x86_64&distro=rhel-8.10&upstream=libutempter-1.1.6-14.el8.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:pypi/rpm@4.14.3" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/shadow-utils@4.6-23.el8_10" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/readline@7.0-10.el8?arch=x86_64&distro=rhel-8.10&upstream=readline-7.0-10.el8.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/python3-dnf-plugins-core@4.0.21-25.el8?arch=noarch&distro=rhel-8.10&upstream=dnf-plugins-core-4.0.21-25.el8.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/dbus@1.12.8-27.el8_10" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/libdnf@0.63.0-21.el8_10?arch=x86_64&distro=rhel-8.10&upstream=libdnf-0.63.0-21.el8_10.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:pypi/subscription-manager@1.28.44" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/libusbx@1.0.23-4.el8?arch=x86_64&distro=rhel-8.10&upstream=libusbx-1.0.23-4.el8.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/python3-ethtool@0.14-5.el8?arch=x86_64&distro=rhel-8.10&upstream=python-ethtool-0.14-5.el8.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/libcom_err@1.45.6-7.el8_10?arch=x86_64&distro=rhel-8.10&upstream=e2fsprogs-1.45.6-7.el8_10.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/passwd@0.80-4.el8?arch=x86_64&distro=rhel-8.10&upstream=passwd-0.80-4.el8.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/device-mapper@1.02.181-15.el8_10.3?arch=x86_64&distro=rhel-8.10&epoch=8&upstream=lvm2-2.03.14-15.el8_10.3.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/python3-idna@2.5-7.el8_10?arch=noarch&distro=rhel-8.10&upstream=python-idna-2.5-7.el8_10.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/libnsl2@1.2.0-2.20180605git4a062cf.el8?arch=x86_64&distro=rhel-8.10&upstream=libnsl2-1.2.0-2.20180605git4a062cf.el8.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/usermode@1.113-2.el8?arch=x86_64&distro=rhel-8.10&upstream=usermode-1.113-2.el8.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/libsmartcols@2.32.1-48.el8_10?arch=x86_64&distro=rhel-8.10&upstream=util-linux-2.32.1-48.el8_10.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/basesystem@11-5.el8?arch=noarch&distro=rhel-8.10&upstream=basesystem-11-5.el8.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/rpm-build-libs@4.14.3-32.el8_10?arch=x86_64&distro=rhel-8.10&upstream=rpm-4.14.3-32.el8_10.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/popt@1.18-1.el8?arch=x86_64&distro=rhel-8.10&upstream=popt-1.18-1.el8.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/libidn2@2.2.0-1.el8?arch=x86_64&distro=rhel-8.10&upstream=libidn2-2.2.0-1.el8.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/python3-syspurpose@1.28.44-1.el8_10?arch=x86_64&distro=rhel-8.10&upstream=subscription-manager-1.28.44-1.el8_10.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/grep@3.1-6.el8?arch=x86_64&distro=rhel-8.10&upstream=grep-3.1-6.el8.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/glibc-minimal-langpack@2.28-251.el8_10.31?arch=x86_64&distro=rhel-8.10&upstream=glibc-2.28-251.el8_10.31.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/ima-evm-utils@1.3.2-12.el8?arch=x86_64&distro=rhel-8.10&upstream=ima-evm-utils-1.3.2-12.el8.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/libassuan@2.5.1-3.el8?arch=x86_64&distro=rhel-8.10&upstream=libassuan-2.5.1-3.el8.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/acl@2.2.53-3.el8?arch=x86_64&distro=rhel-8.10&upstream=acl-2.2.53-3.el8.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:pypi/pygobject@3.28.3" : {
        "concluded" : {
          "identifiers" : [ {
            "id" : "non-standard",
            "name" : "non-standard",
            "category" : "UNKNOWN"
          } ],
          "expression" : "non-standard",
          "name" : "non-standard",
          "category" : "UNKNOWN",
          "source" : "deps.dev",
          "sourceUrl" : "https://api.deps.dev"
        },
        "evidence" : [ {
          "identifiers" : [ {
            "id" : "non-standard",
            "name" : "non-standard",
            "category" : "UNKNOWN"
          } ],
          "expression" : "non-standard",
          "name" : "non-standard",
          "category" : "UNKNOWN",
          "source" : "deps.dev",
          "sourceUrl" : "https://api.deps.dev"
        } ]
      },
      "pkg:rpm/redhat/libgcrypt@1.8.5-7.el8_6?arch=x86_64&distro=rhel-8.10&upstream=libgcrypt-1.8.5-7.el8_6.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:pypi/requests@2.20.0" : {
        "concluded" : {
          "identifiers" : [ {
            "id" : "Apache-2.0",
            "name" : "Apache License 2.0",
            "isDeprecated" : false,
            "isOsiApproved" : true,
            "isFsfLibre" : true,
            "category" : "PERMISSIVE"
          } ],
          "expression" : "Apache-2.0",
          "name" : "Apache License 2.0",
          "category" : "PERMISSIVE",
          "source" : "deps.dev",
          "sourceUrl" : "https://api.deps.dev"
        },
        "evidence" : [ {
          "identifiers" : [ {
            "id" : "Apache-2.0",
            "name" : "Apache License 2.0",
            "isDeprecated" : false,
            "isOsiApproved" : true,
            "isFsfLibre" : true,
            "category" : "PERMISSIVE"
          } ],
          "expression" : "Apache-2.0",
          "name" : "Apache License 2.0",
          "category" : "PERMISSIVE",
          "source" : "deps.dev",
          "sourceUrl" : "https://api.deps.dev"
        } ]
      },
      "pkg:rpm/redhat/python3-chardet@3.0.4-7.el8?arch=noarch&distro=rhel-8.10&upstream=python-chardet-3.0.4-7.el8.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/gnupg2@2.2.20-4.el8_10?arch=x86_64&distro=rhel-8.10&upstream=gnupg2-2.2.20-4.el8_10.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/gmp@6.1.2-11.el8?arch=x86_64&distro=rhel-8.10&epoch=1&upstream=gmp-6.1.2-11.el8.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:github/actions/checkout@v4" : {
        "evidence" : [ ]
      },
      "pkg:oci/ubi@sha256%3Ab36f428a59959b1e7f7dc2df55a4c2308be445d61a3854c6b817e114f719b81f?repository_url=registry.access.redhat.com%2Fubi8%2Fubi" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/libgpg-error@1.31-1.el8?arch=x86_64&distro=rhel-8.10&upstream=libgpg-error-1.31-1.el8.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:pypi/python-dateutil@2.6.1" : {
        "concluded" : {
          "identifiers" : [ {
            "id" : "non-standard",
            "name" : "non-standard",
            "category" : "UNKNOWN"
          } ],
          "expression" : "non-standard",
          "name" : "non-standard",
          "category" : "UNKNOWN",
          "source" : "deps.dev",
          "sourceUrl" : "https://api.deps.dev"
        },
        "evidence" : [ {
          "identifiers" : [ {
            "id" : "non-standard",
            "name" : "non-standard",
            "category" : "UNKNOWN"
          } ],
          "expression" : "non-standard",
          "name" : "non-standard",
          "category" : "UNKNOWN",
          "source" : "deps.dev",
          "sourceUrl" : "https://api.deps.dev"
        } ]
      },
      "pkg:rpm/redhat/python3-six@1.11.0-8.el8?arch=noarch&distro=rhel-8.10&upstream=python-six-1.11.0-8.el8.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/python3-librepo@1.14.2-5.el8?arch=x86_64&distro=rhel-8.10&upstream=librepo-1.14.2-5.el8.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/dbus-tools@1.12.8-27.el8_10?arch=x86_64&distro=rhel-8.10&epoch=1&upstream=dbus-1.12.8-27.el8_10.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/info@6.5-7.el8?arch=x86_64&distro=rhel-8.10&upstream=texinfo-6.5-7.el8.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/libdb-utils@5.3.28-42.el8_4?arch=x86_64&distro=rhel-8.10&upstream=libdb-5.3.28-42.el8_4.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/subscription-manager-rhsm-certificates@20220623-1.el8?arch=noarch&distro=rhel-8.10&upstream=subscription-manager-rhsm-certificates-20220623-1.el8.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/dbus-glib@0.110-2.el8?arch=x86_64&distro=rhel-8.10&upstream=dbus-glib-0.110-2.el8.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/python3-inotify@0.9.6-13.el8?arch=noarch&distro=rhel-8.10&upstream=python-inotify-0.9.6-13.el8.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/rpm@4.14.3-32.el8_10?arch=x86_64&distro=rhel-8.10&upstream=rpm-4.14.3-32.el8_10.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/cyrus-sasl-lib@2.1.27-6.el8_5?arch=x86_64&distro=rhel-8.10&upstream=cyrus-sasl-2.1.27-6.el8_5.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/python3-hawkey@0.63.0-21.el8_10?arch=x86_64&distro=rhel-8.10&upstream=libdnf-0.63.0-21.el8_10.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/elfutils-default-yama-scope@0.190-2.el8?arch=noarch&distro=rhel-8.10&upstream=elfutils-0.190-2.el8.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:oci/tsf-demo-comp@sha256%3A408b0c6b78351825acf8cff33d216f36866790db769bafcc8f90a800a55c4c2e" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/libffi@3.1-24.el8?arch=x86_64&distro=rhel-8.10&upstream=libffi-3.1-24.el8.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/gdbm@1.18-2.el8?arch=x86_64&distro=rhel-8.10&epoch=1&upstream=gdbm-1.18-2.el8.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/audit-libs@3.1.2-1.el8_10.1?arch=x86_64&distro=rhel-8.10&upstream=audit-3.1.2-1.el8_10.1.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/lz4-libs@1.8.3-5.el8_10?arch=x86_64&distro=rhel-8.10&upstream=lz4-1.8.3-5.el8_10.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:pypi/systemd-python@234" : {
        "concluded" : {
          "identifiers" : [ {
            "id" : "non-standard",
            "name" : "non-standard",
            "category" : "UNKNOWN"
          } ],
          "expression" : "non-standard",
          "name" : "non-standard",
          "category" : "UNKNOWN",
          "source" : "deps.dev",
          "sourceUrl" : "https://api.deps.dev"
        },
        "evidence" : [ {
          "identifiers" : [ {
            "id" : "non-standard",
            "name" : "non-standard",
            "category" : "UNKNOWN"
          } ],
          "expression" : "non-standard",
          "name" : "non-standard",
          "category" : "UNKNOWN",
          "source" : "deps.dev",
          "sourceUrl" : "https://api.deps.dev"
        } ]
      },
      "pkg:rpm/redhat/libarchive@3.3.3-6.el8_10?arch=x86_64&distro=rhel-8.10&upstream=libarchive-3.3.3-6.el8_10.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/python3-cloud-what@1.28.44-1.el8_10?arch=x86_64&distro=rhel-8.10&upstream=subscription-manager-1.28.44-1.el8_10.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/expat@2.5.0-1.el8_10?arch=x86_64&distro=rhel-8.10&upstream=expat-2.5.0-1.el8_10.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/libuuid@2.32.1-48.el8_10?arch=x86_64&distro=rhel-8.10&upstream=util-linux-2.32.1-48.el8_10.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/zlib@1.2.11-25.el8?arch=x86_64&distro=rhel-8.10&upstream=zlib-1.2.11-25.el8.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/p11-kit@0.23.22-2.el8?arch=x86_64&distro=rhel-8.10&upstream=p11-kit-0.23.22-2.el8.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/sed@4.5-5.el8_10?arch=x86_64&distro=rhel-8.10&upstream=sed-4.5-5.el8_10.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/filesystem@3.8-6.el8?arch=x86_64&distro=rhel-8.10&upstream=filesystem-3.8-6.el8.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/kmod-libs@25-20.el8?arch=x86_64&distro=rhel-8.10&upstream=kmod-25-20.el8.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/libsemanage@2.9-12.el8_10?arch=x86_64&distro=rhel-8.10&upstream=libsemanage-2.9-12.el8_10.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/libsolv@0.7.20-6.el8?arch=x86_64&distro=rhel-8.10&upstream=libsolv-0.7.20-6.el8.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/python3-subscription-manager-rhsm@1.28.44-1.el8_10?arch=x86_64&distro=rhel-8.10&upstream=subscription-manager-1.28.44-1.el8_10.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/nettle@3.4.1-7.el8?arch=x86_64&distro=rhel-8.10&upstream=nettle-3.4.1-7.el8.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:pypi/six@1.11.0" : {
        "concluded" : {
          "identifiers" : [ {
            "id" : "MIT",
            "name" : "MIT License",
            "isDeprecated" : false,
            "isOsiApproved" : true,
            "isFsfLibre" : true,
            "category" : "PERMISSIVE"
          } ],
          "expression" : "MIT",
          "name" : "MIT License",
          "category" : "PERMISSIVE",
          "source" : "deps.dev",
          "sourceUrl" : "https://api.deps.dev"
        },
        "evidence" : [ {
          "identifiers" : [ {
            "id" : "MIT",
            "name" : "MIT License",
            "isDeprecated" : false,
            "isOsiApproved" : true,
            "isFsfLibre" : true,
            "category" : "PERMISSIVE"
          } ],
          "expression" : "MIT",
          "name" : "MIT License",
          "category" : "PERMISSIVE",
          "source" : "deps.dev",
          "sourceUrl" : "https://api.deps.dev"
        } ]
      },
      "pkg:rpm/redhat/libseccomp@2.5.2-1.el8?arch=x86_64&distro=rhel-8.10&upstream=libseccomp-2.5.2-1.el8.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/python3-dnf@4.7.0-21.el8_10?arch=noarch&distro=rhel-8.10&upstream=dnf-4.7.0-21.el8_10.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/openssl-libs@1.1.1k-15.el8_6?arch=x86_64&distro=rhel-8.10&epoch=1&upstream=openssl-1.1.1k-15.el8_6.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/subscription-manager@1.28.44-1.el8_10?arch=x86_64&distro=rhel-8.10&upstream=subscription-manager-1.28.44-1.el8_10.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/dbus-common@1.12.8-27.el8_10?arch=noarch&distro=rhel-8.10&epoch=1&upstream=dbus-1.12.8-27.el8_10.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/publicsuffix-list-dafsa@20180723-1.el8" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/json-c@0.13.1-3.el8?arch=x86_64&distro=rhel-8.10&upstream=json-c-0.13.1-3.el8.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/libtasn1@4.13-5.el8_10?arch=x86_64&distro=rhel-8.10&upstream=libtasn1-4.13-5.el8_10.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/libuser@0.62-26.el8_10?arch=x86_64&distro=rhel-8.10&upstream=libuser-0.62-26.el8_10.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:pypi/pyinotify@0.9.6" : {
        "concluded" : {
          "identifiers" : [ {
            "id" : "MIT",
            "name" : "MIT License",
            "isDeprecated" : false,
            "isOsiApproved" : true,
            "isFsfLibre" : true,
            "category" : "PERMISSIVE"
          } ],
          "expression" : "MIT",
          "name" : "MIT License",
          "category" : "PERMISSIVE",
          "source" : "deps.dev",
          "sourceUrl" : "https://api.deps.dev"
        },
        "evidence" : [ {
          "identifiers" : [ {
            "id" : "MIT",
            "name" : "MIT License",
            "isDeprecated" : false,
            "isOsiApproved" : true,
            "isFsfLibre" : true,
            "category" : "PERMISSIVE"
          } ],
          "expression" : "MIT",
          "name" : "MIT License",
          "category" : "PERMISSIVE",
          "source" : "deps.dev",
          "sourceUrl" : "https://api.deps.dev"
        } ]
      },
      "pkg:rpm/redhat/gpgme@1.13.1-12.el8?arch=x86_64&distro=rhel-8.10&upstream=gpgme-1.13.1-12.el8.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/which@2.21-21.el8_10?arch=x86_64&distro=rhel-8.10&upstream=which-2.21-21.el8_10.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/libpwquality@1.4.4-6.el8?arch=x86_64&distro=rhel-8.10&upstream=libpwquality-1.4.4-6.el8.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:pypi/dbus-python@1.2.4" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/libmodulemd@2.13.0-1.el8?arch=x86_64&distro=rhel-8.10&upstream=libmodulemd-2.13.0-1.el8.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/python3-systemd@234-8.el8?arch=x86_64&distro=rhel-8.10&upstream=python-systemd-234-8.el8.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/python3-rpm@4.14.3-32.el8_10?arch=x86_64&distro=rhel-8.10&upstream=rpm-4.14.3-32.el8_10.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/python3-iniparse@0.4-31.el8?arch=noarch&distro=rhel-8.10&upstream=python-iniparse-0.4-31.el8.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/libzstd@1.4.4-1.el8?arch=x86_64&distro=rhel-8.10&upstream=zstd-1.4.4-1.el8.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/cracklib-dicts@2.9.6-15.el8?arch=x86_64&distro=rhel-8.10&upstream=cracklib-2.9.6-15.el8.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/libcap@2.48-6.el8_9?arch=x86_64&distro=rhel-8.10&upstream=libcap-2.48-6.el8_9.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/virt-what@1.25-4.el8?arch=x86_64&distro=rhel-8.10&upstream=virt-what-1.25-4.el8.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/libtirpc@1.1.4-12.el8_10?arch=x86_64&distro=rhel-8.10&upstream=libtirpc-1.1.4-12.el8_10.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/python3-pip-wheel@9.0.3-24.el8?arch=noarch&distro=rhel-8.10&upstream=python-pip-9.0.3-24.el8.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/pcre2@10.32-3.el8_6?arch=x86_64&distro=rhel-8.10&upstream=pcre2-10.32-3.el8_6.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/langpacks-en@1.0-12.el8?arch=noarch&distro=rhel-8.10&upstream=langpacks-1.0-12.el8.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/keyutils-libs@1.5.10-9.el8?arch=x86_64&distro=rhel-8.10&upstream=keyutils-1.5.10-9.el8.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/findutils@4.6.0-24.el8_10?arch=x86_64&distro=rhel-8.10&epoch=1&upstream=findutils-4.6.0-24.el8_10.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/libattr@2.4.48-3.el8?arch=x86_64&distro=rhel-8.10&upstream=attr-2.4.48-3.el8.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/librepo@1.14.2-5.el8?arch=x86_64&distro=rhel-8.10&upstream=librepo-1.14.2-5.el8.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/libreport-filesystem@2.9.5-15.el8?arch=x86_64&distro=rhel-8.10&upstream=libreport-2.9.5-15.el8.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/glib2@2.56.4-168.el8_10?arch=x86_64&distro=rhel-8.10&upstream=glib2-2.56.4-168.el8_10.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/chkconfig@1.19.2-1.el8?arch=x86_64&distro=rhel-8.10&upstream=chkconfig-1.19.2-1.el8.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/libgcc@8.5.0-28.el8_10?arch=x86_64&distro=rhel-8.10&upstream=gcc-8.5.0-28.el8_10.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:pypi/chardet@3.0.4" : {
        "concluded" : {
          "identifiers" : [ {
            "id" : "non-standard",
            "name" : "non-standard",
            "category" : "UNKNOWN"
          } ],
          "expression" : "non-standard",
          "name" : "non-standard",
          "category" : "UNKNOWN",
          "source" : "deps.dev",
          "sourceUrl" : "https://api.deps.dev"
        },
        "evidence" : [ {
          "identifiers" : [ {
            "id" : "non-standard",
            "name" : "non-standard",
            "category" : "UNKNOWN"
          } ],
          "expression" : "non-standard",
          "name" : "non-standard",
          "category" : "UNKNOWN",
          "source" : "deps.dev",
          "sourceUrl" : "https://api.deps.dev"
        } ]
      },
      "pkg:pypi/gpg@1.13.1" : {
        "evidence" : [ ]
      },
      "pkg:pypi/syspurpose@1.28.44" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/gdb-gdbserver@8.2-20.el8?arch=x86_64&distro=rhel-8.10&upstream=gdb-8.2-20.el8.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:pypi/decorator@4.2.1" : {
        "concluded" : {
          "identifiers" : [ {
            "id" : "non-standard",
            "name" : "non-standard",
            "category" : "UNKNOWN"
          } ],
          "expression" : "non-standard",
          "name" : "non-standard",
          "category" : "UNKNOWN",
          "source" : "deps.dev",
          "sourceUrl" : "https://api.deps.dev"
        },
        "evidence" : [ {
          "identifiers" : [ {
            "id" : "non-standard",
            "name" : "non-standard",
            "category" : "UNKNOWN"
          } ],
          "expression" : "non-standard",
          "name" : "non-standard",
          "category" : "UNKNOWN",
          "source" : "deps.dev",
          "sourceUrl" : "https://api.deps.dev"
        } ]
      },
      "pkg:rpm/redhat/python3-dateutil@2.6.1-6.el8?arch=noarch&distro=rhel-8.10&epoch=1&upstream=python-dateutil-2.6.1-6.el8.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/libcomps@0.1.18-1.el8?arch=x86_64&distro=rhel-8.10&upstream=libcomps-0.1.18-1.el8.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/libselinux@2.9-11.el8_10" : {
        "evidence" : [ ]
      },
      "pkg:pypi/pysocks@1.6.8" : {
        "concluded" : {
          "identifiers" : [ {
            "id" : "non-standard",
            "name" : "non-standard",
            "category" : "UNKNOWN"
          } ],
          "expression" : "non-standard",
          "name" : "non-standard",
          "category" : "UNKNOWN",
          "source" : "deps.dev",
          "sourceUrl" : "https://api.deps.dev"
        },
        "evidence" : [ {
          "identifiers" : [ {
            "id" : "non-standard",
            "name" : "non-standard",
            "category" : "UNKNOWN"
          } ],
          "expression" : "non-standard",
          "name" : "non-standard",
          "category" : "UNKNOWN",
          "source" : "deps.dev",
          "sourceUrl" : "https://api.deps.dev"
        } ]
      },
      "pkg:rpm/redhat/python3-urllib3@1.24.2-9.el8_10" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/python3-setuptools-wheel@39.2.0-9.el8_10?arch=noarch&distro=rhel-8.10&upstream=python-setuptools-39.2.0-9.el8_10.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/rpm-libs@4.14.3-32.el8_10?arch=x86_64&distro=rhel-8.10&upstream=rpm-4.14.3-32.el8_10.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:pypi/idna@2.5" : {
        "concluded" : {
          "identifiers" : [ {
            "id" : "non-standard",
            "name" : "non-standard",
            "category" : "UNKNOWN"
          } ],
          "expression" : "non-standard",
          "name" : "non-standard",
          "category" : "UNKNOWN",
          "source" : "deps.dev",
          "sourceUrl" : "https://api.deps.dev"
        },
        "evidence" : [ {
          "identifiers" : [ {
            "id" : "non-standard",
            "name" : "non-standard",
            "category" : "UNKNOWN"
          } ],
          "expression" : "non-standard",
          "name" : "non-standard",
          "category" : "UNKNOWN",
          "source" : "deps.dev",
          "sourceUrl" : "https://api.deps.dev"
        } ]
      },
      "pkg:rpm/redhat/libsigsegv@2.11-5.el8?arch=x86_64&distro=rhel-8.10&upstream=libsigsegv-2.11-5.el8.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/libfdisk@2.32.1-48.el8_10?arch=x86_64&distro=rhel-8.10&upstream=util-linux-2.32.1-48.el8_10.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/python3-libs@3.6.8-75.el8_10?arch=x86_64&distro=rhel-8.10&upstream=python3-3.6.8-75.el8_10.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:pypi/ethtool@0.14" : {
        "concluded" : {
          "identifiers" : [ {
            "id" : "GPL-2.0",
            "name" : "GNU General Public License v2.0 only",
            "isDeprecated" : true,
            "isOsiApproved" : true,
            "isFsfLibre" : true,
            "category" : "STRONG_COPYLEFT"
          } ],
          "expression" : "GPL-2.0",
          "name" : "GNU General Public License v2.0 only",
          "category" : "STRONG_COPYLEFT",
          "source" : "deps.dev",
          "sourceUrl" : "https://api.deps.dev"
        },
        "evidence" : [ {
          "identifiers" : [ {
            "id" : "GPL-2.0",
            "name" : "GNU General Public License v2.0 only",
            "isDeprecated" : true,
            "isOsiApproved" : true,
            "isFsfLibre" : true,
            "category" : "STRONG_COPYLEFT"
          } ],
          "expression" : "GPL-2.0",
          "name" : "GNU General Public License v2.0 only",
          "category" : "STRONG_COPYLEFT",
          "source" : "deps.dev",
          "sourceUrl" : "https://api.deps.dev"
        } ]
      },
      "pkg:rpm/redhat/cryptsetup-libs@2.3.7-7.el8?arch=x86_64&distro=rhel-8.10&upstream=cryptsetup-2.3.7-7.el8.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/ca-certificates@2025.2.80_v9.0.304-80.2.el8_10?arch=noarch&distro=rhel-8.10&upstream=ca-certificates-2025.2.80_v9.0.304-80.2.el8_10.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/gawk@4.2.1-4.el8?arch=x86_64&distro=rhel-8.10&upstream=gawk-4.2.1-4.el8.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/cracklib@2.9.6-15.el8?arch=x86_64&distro=rhel-8.10&upstream=cracklib-2.9.6-15.el8.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/pam@1.3.1-39.el8_10?arch=x86_64&distro=rhel-8.10&upstream=pam-1.3.1-39.el8_10.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/ncurses-libs@6.1-10.20180224.el8?arch=x86_64&distro=rhel-8.10&upstream=ncurses-6.1-10.20180224.el8.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/tpm2-tss@2.3.2-6.el8?arch=x86_64&distro=rhel-8.10&upstream=tpm2-tss-2.3.2-6.el8.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/brotli@1.0.6-4.el8_10?arch=x86_64&distro=rhel-8.10&upstream=brotli-1.0.6-4.el8_10.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/crypto-policies-scripts@20230731-1.git3177e06.el8?arch=noarch&distro=rhel-8.10&upstream=crypto-policies-20230731-1.git3177e06.el8.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/python3-libdnf@0.63.0-21.el8_10?arch=x86_64&distro=rhel-8.10&upstream=libdnf-0.63.0-21.el8_10.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/setup@2.12.2-9.el8?arch=noarch&distro=rhel-8.10&upstream=setup-2.12.2-9.el8.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/tzdata@2026a-1.el8?arch=noarch&distro=rhel-8.10&upstream=tzdata-2026a-1.el8.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/systemd-libs@239-82.el8_10.15?arch=x86_64&distro=rhel-8.10&upstream=systemd-239-82.el8_10.15.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/libxml2@2.9.7-21.el8_10.3?arch=x86_64&distro=rhel-8.10&upstream=libxml2-2.9.7-21.el8_10.3.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/mpfr@3.1.6-1.el8?arch=x86_64&distro=rhel-8.10&upstream=mpfr-3.1.6-1.el8.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/util-linux@2.32.1-48.el8_10?arch=x86_64&distro=rhel-8.10&upstream=util-linux-2.32.1-48.el8_10.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/sqlite-libs@3.26.0-20.el8_10?arch=x86_64&distro=rhel-8.10&upstream=sqlite-3.26.0-20.el8_10.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/redhat-release@8.10-0.3.el8?arch=x86_64&distro=rhel-8.10&upstream=redhat-release-8.10-0.3.el8.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/bash@4.4.20-6.el8_10?arch=x86_64&distro=rhel-8.10&upstream=bash-4.4.20-6.el8_10.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/python3-dbus@1.2.4-15.el8?arch=x86_64&distro=rhel-8.10&upstream=dbus-python-1.2.4-15.el8.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/dnf-plugin-subscription-manager@1.28.44-1.el8_10?arch=x86_64&distro=rhel-8.10&upstream=subscription-manager-1.28.44-1.el8_10.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/elfutils-libelf@0.190-2.el8?arch=x86_64&distro=rhel-8.10&upstream=elfutils-0.190-2.el8.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/elfutils-libs@0.190-2.el8?arch=x86_64&distro=rhel-8.10&upstream=elfutils-0.190-2.el8.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/json-glib@1.4.4-1.el8?arch=x86_64&distro=rhel-8.10&upstream=json-glib-1.4.4-1.el8.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/glibc@2.28-251.el8_10.31?arch=x86_64&distro=rhel-8.10&upstream=glibc-2.28-251.el8_10.31.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/libstdc%2B%2B@8.5.0-28.el8_10?arch=x86_64&distro=rhel-8.10&upstream=gcc-8.5.0-28.el8_10.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/python3-gpg@1.13.1-12.el8?arch=x86_64&distro=rhel-8.10&upstream=gpgme-1.13.1-12.el8.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/libsepol@2.9-3.el8?arch=x86_64&distro=rhel-8.10&upstream=libsepol-2.9-3.el8.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/dnf@4.7.0-21.el8_10?arch=noarch&distro=rhel-8.10&upstream=dnf-4.7.0-21.el8_10.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/rootfiles@8.1-22.el8?arch=noarch&distro=rhel-8.10&upstream=rootfiles-8.1-22.el8.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/gpg-pubkey@d4082792-5b32db75" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/openldap@2.4.46-21.el8_10?arch=x86_64&distro=rhel-8.10&upstream=openldap-2.4.46-21.el8_10.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/curl@7.61.1-34.el8_10.11?arch=x86_64&distro=rhel-8.10&upstream=curl-7.61.1-34.el8_10.11.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/libpsl@0.20.2-6.el8?arch=x86_64&distro=rhel-8.10&upstream=libpsl-0.20.2-6.el8.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:pypi/iniparse@0.4" : {
        "concluded" : {
          "identifiers" : [ {
            "id" : "MIT",
            "name" : "MIT License",
            "isDeprecated" : false,
            "isOsiApproved" : true,
            "isFsfLibre" : true,
            "category" : "PERMISSIVE"
          } ],
          "expression" : "MIT",
          "name" : "MIT License",
          "category" : "PERMISSIVE",
          "source" : "deps.dev",
          "sourceUrl" : "https://api.deps.dev"
        },
        "evidence" : [ {
          "identifiers" : [ {
            "id" : "MIT",
            "name" : "MIT License",
            "isDeprecated" : false,
            "isOsiApproved" : true,
            "isFsfLibre" : true,
            "category" : "PERMISSIVE"
          } ],
          "expression" : "MIT",
          "name" : "MIT License",
          "category" : "PERMISSIVE",
          "source" : "deps.dev",
          "sourceUrl" : "https://api.deps.dev"
        } ]
      },
      "pkg:rpm/redhat/coreutils-single@8.30-17.el8_10?arch=x86_64&distro=rhel-8.10&upstream=coreutils-8.30-17.el8_10.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/libcap-ng@0.7.11-1.el8?arch=x86_64&distro=rhel-8.10&upstream=libcap-ng-0.7.11-1.el8.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/vim-minimal@8.0.1763-22.el8_10.1?arch=x86_64&distro=rhel-8.10&epoch=2&upstream=vim-8.0.1763-22.el8_10.1.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/crypto-policies@20230731-1.git3177e06.el8?arch=noarch&distro=rhel-8.10&upstream=crypto-policies-20230731-1.git3177e06.el8.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/pcre@8.42-6.el8?arch=x86_64&distro=rhel-8.10&upstream=pcre-8.42-6.el8.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:pypi/setuptools@39.2.0" : {
        "concluded" : {
          "identifiers" : [ {
            "id" : "MIT",
            "name" : "MIT License",
            "isDeprecated" : false,
            "isOsiApproved" : true,
            "isFsfLibre" : true,
            "category" : "PERMISSIVE"
          } ],
          "expression" : "MIT",
          "name" : "MIT License",
          "category" : "PERMISSIVE",
          "source" : "deps.dev",
          "sourceUrl" : "https://api.deps.dev"
        },
        "evidence" : [ {
          "identifiers" : [ {
            "id" : "MIT",
            "name" : "MIT License",
            "isDeprecated" : false,
            "isOsiApproved" : true,
            "isFsfLibre" : true,
            "category" : "PERMISSIVE"
          } ],
          "expression" : "MIT",
          "name" : "MIT License",
          "category" : "PERMISSIVE",
          "source" : "deps.dev",
          "sourceUrl" : "https://api.deps.dev"
        } ]
      },
      "pkg:rpm/redhat/python3-requests@2.20.0-6.el8_10?arch=noarch&distro=rhel-8.10&upstream=python-requests-2.20.0-6.el8_10.src.rpm" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/libblkid@2.32.1-48.el8_10?arch=x86_64&distro=rhel-8.10&upstream=util-linux-2.32.1-48.el8_10.src.rpm" : {
        "evidence" : [ ]
      }
    }
  } ]
}