{
  "threat_severity" : "Low",
  "public_date" : "2025-06-09T18:16:01Z",
  "bugzilla" : {
    "description" : "brace-expansion: juliangruber brace-expansion index.js expand redos",
    "id" : "2371270",
    "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2371270"
  },
  "cvss3" : {
    "cvss3_base_score" : "3.1",
    "cvss3_scoring_vector" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L",
    "status" : "verified"
  },
  "cwe" : "CWE-1333",
  "details" : [ "A vulnerability was found in juliangruber brace-expansion up to 1.1.11/2.0.1/3.0.0/4.0.0. It has been rated as problematic. Affected by this issue is the function expand of the file index.js. The manipulation leads to inefficient regular expression complexity. The attack may be launched remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. Upgrading to version 1.1.12, 2.0.2, 3.0.1 and 4.0.1 is able to address this issue. The name of the patch is a5b98a4f30d7813266b221435e1eaaf25a1b0ac5. It is recommended to upgrade the affected component.", "A denial-of-service (DoS) vulnerability has been identified in the brace-expansion JavaScript package. This issue occurs due to inefficient regular expression complexity, which can be exploited by an attacker providing specially crafted input. Such input could lead to excessive processing time and resource consumption, rendering applications that utilize this package unresponsive and causing a denial-of-service condition." ],
  "affected_release" : [ {
    "product_name" : "Red Hat Openshift Data Foundation 4.14",
    "release_date" : "2025-12-01T00:00:00Z",
    "advisory" : "RHSA-2025:22420",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.14::el9",
    "package" : "odf4/cephcsi-rhel9:v4.14-1764178221"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.14",
    "release_date" : "2025-12-01T00:00:00Z",
    "advisory" : "RHSA-2025:22420",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.14::el9",
    "package" : "odf4/mcg-cli-rhel9:v4.14-1764178222"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.14",
    "release_date" : "2025-12-01T00:00:00Z",
    "advisory" : "RHSA-2025:22420",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.14::el9",
    "package" : "odf4/mcg-core-rhel9:v4.14-1764178236"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.14",
    "release_date" : "2025-12-01T00:00:00Z",
    "advisory" : "RHSA-2025:22420",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.14::el9",
    "package" : "odf4/mcg-rhel9-operator:v4.14-1764178273"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.14",
    "release_date" : "2025-12-01T00:00:00Z",
    "advisory" : "RHSA-2025:22420",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.14::el9",
    "package" : "odf4/ocs-client-console-rhel9:v4.14-1764178715"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.14",
    "release_date" : "2025-12-01T00:00:00Z",
    "advisory" : "RHSA-2025:22420",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.14::el9",
    "package" : "odf4/ocs-client-rhel9-operator:v4.14-1764178261"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.14",
    "release_date" : "2025-12-01T00:00:00Z",
    "advisory" : "RHSA-2025:22420",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.14::el9",
    "package" : "odf4/ocs-metrics-exporter-rhel9:v4.14-1764178354"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.14",
    "release_date" : "2025-12-01T00:00:00Z",
    "advisory" : "RHSA-2025:22420",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.14::el9",
    "package" : "odf4/ocs-rhel9-operator:v4.14-1764178419"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.14",
    "release_date" : "2025-12-01T00:00:00Z",
    "advisory" : "RHSA-2025:22420",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.14::el9",
    "package" : "odf4/odf-console-rhel9:v4.14-1764178768"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.14",
    "release_date" : "2025-12-01T00:00:00Z",
    "advisory" : "RHSA-2025:22420",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.14::el9",
    "package" : "odf4/odf-cosi-sidecar-rhel9:v4.14-1764178319"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.14",
    "release_date" : "2025-12-01T00:00:00Z",
    "advisory" : "RHSA-2025:22420",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.14::el9",
    "package" : "odf4/odf-csi-addons-rhel9-operator:v4.14-1764178386"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.14",
    "release_date" : "2025-12-01T00:00:00Z",
    "advisory" : "RHSA-2025:22420",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.14::el9",
    "package" : "odf4/odf-csi-addons-sidecar-rhel9:v4.14-1764178406"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.14",
    "release_date" : "2025-12-01T00:00:00Z",
    "advisory" : "RHSA-2025:22420",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.14::el9",
    "package" : "odf4/odf-multicluster-console-rhel9:v4.14-1764178615"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.14",
    "release_date" : "2025-12-01T00:00:00Z",
    "advisory" : "RHSA-2025:22420",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.14::el9",
    "package" : "odf4/odf-multicluster-rhel9-operator:v4.14-1764178379"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.14",
    "release_date" : "2025-12-01T00:00:00Z",
    "advisory" : "RHSA-2025:22420",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.14::el9",
    "package" : "odf4/odf-must-gather-rhel9:v4.14-1764178329"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.14",
    "release_date" : "2025-12-01T00:00:00Z",
    "advisory" : "RHSA-2025:22420",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.14::el9",
    "package" : "odf4/odf-rhel9-operator:v4.14-1764178423"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.14",
    "release_date" : "2025-12-01T00:00:00Z",
    "advisory" : "RHSA-2025:22420",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.14::el9",
    "package" : "odf4/odr-rhel9-operator:v4.14-1764178419"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.14",
    "release_date" : "2025-12-01T00:00:00Z",
    "advisory" : "RHSA-2025:22420",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.14::el9",
    "package" : "odf4/rook-ceph-rhel9-operator:v4.14-1764215448"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.15",
    "release_date" : "2025-12-01T00:00:00Z",
    "advisory" : "RHSA-2025:22418",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.15::el9",
    "package" : "odf4/cephcsi-rhel9:v4.15-1764176261"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.15",
    "release_date" : "2025-12-01T00:00:00Z",
    "advisory" : "RHSA-2025:22418",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.15::el9",
    "package" : "odf4/mcg-core-rhel9:v4.15-1764176342"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.15",
    "release_date" : "2025-12-01T00:00:00Z",
    "advisory" : "RHSA-2025:22418",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.15::el9",
    "package" : "odf4/mcg-rhel9-operator:v4.15-1764176372"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.15",
    "release_date" : "2025-12-01T00:00:00Z",
    "advisory" : "RHSA-2025:22418",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.15::el9",
    "package" : "odf4/ocs-client-console-rhel9:v4.15-1764176892"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.15",
    "release_date" : "2025-12-01T00:00:00Z",
    "advisory" : "RHSA-2025:22418",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.15::el9",
    "package" : "odf4/ocs-client-rhel9-operator:v4.15-1764176485"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.15",
    "release_date" : "2025-12-01T00:00:00Z",
    "advisory" : "RHSA-2025:22418",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.15::el9",
    "package" : "odf4/ocs-metrics-exporter-rhel9:v4.15-1764176698"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.15",
    "release_date" : "2025-12-01T00:00:00Z",
    "advisory" : "RHSA-2025:22418",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.15::el9",
    "package" : "odf4/ocs-rhel9-operator:v4.15-1764176699"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.15",
    "release_date" : "2025-12-01T00:00:00Z",
    "advisory" : "RHSA-2025:22418",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.15::el9",
    "package" : "odf4/odf-cli-rhel9:v4.15-1764176675"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.15",
    "release_date" : "2025-12-01T00:00:00Z",
    "advisory" : "RHSA-2025:22418",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.15::el9",
    "package" : "odf4/odf-console-rhel9:v4.15-1764177101"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.15",
    "release_date" : "2025-12-01T00:00:00Z",
    "advisory" : "RHSA-2025:22418",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.15::el9",
    "package" : "odf4/odf-cosi-sidecar-rhel9:v4.15-1764176690"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.15",
    "release_date" : "2025-12-01T00:00:00Z",
    "advisory" : "RHSA-2025:22418",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.15::el9",
    "package" : "odf4/odf-csi-addons-rhel9-operator:v4.15-1764221806"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.15",
    "release_date" : "2025-12-01T00:00:00Z",
    "advisory" : "RHSA-2025:22418",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.15::el9",
    "package" : "odf4/odf-csi-addons-sidecar-rhel9:v4.15-1764222436"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.15",
    "release_date" : "2025-12-01T00:00:00Z",
    "advisory" : "RHSA-2025:22418",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.15::el9",
    "package" : "odf4/odf-multicluster-console-rhel9:v4.15-1764177174"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.15",
    "release_date" : "2025-12-01T00:00:00Z",
    "advisory" : "RHSA-2025:22418",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.15::el9",
    "package" : "odf4/odf-multicluster-rhel9-operator:v4.15-1764177033"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.15",
    "release_date" : "2025-12-01T00:00:00Z",
    "advisory" : "RHSA-2025:22418",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.15::el9",
    "package" : "odf4/odf-must-gather-rhel9:v4.15-1764176958"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.15",
    "release_date" : "2025-12-01T00:00:00Z",
    "advisory" : "RHSA-2025:22418",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.15::el9",
    "package" : "odf4/odf-rhel9-operator:v4.15-1764177101"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.15",
    "release_date" : "2025-12-01T00:00:00Z",
    "advisory" : "RHSA-2025:22418",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.15::el9",
    "package" : "odf4/odr-rhel9-operator:v4.15-1764177020"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.15",
    "release_date" : "2025-12-01T00:00:00Z",
    "advisory" : "RHSA-2025:22418",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.15::el9",
    "package" : "odf4/rook-ceph-rhel9-operator:v4.15-1764177029"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.16",
    "release_date" : "2025-12-01T00:00:00Z",
    "advisory" : "RHSA-2025:22416",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.16::el9",
    "package" : "odf4/cephcsi-rhel9:v4.16-1764168955"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.16",
    "release_date" : "2025-12-01T00:00:00Z",
    "advisory" : "RHSA-2025:22416",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.16::el9",
    "package" : "odf4/mcg-core-rhel9:v4.16-1764169118"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.16",
    "release_date" : "2025-12-01T00:00:00Z",
    "advisory" : "RHSA-2025:22416",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.16::el9",
    "package" : "odf4/mcg-rhel9-operator:v4.16-1764169242"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.16",
    "release_date" : "2025-12-01T00:00:00Z",
    "advisory" : "RHSA-2025:22416",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.16::el9",
    "package" : "odf4/ocs-client-console-rhel9:v4.16-1764169544"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.16",
    "release_date" : "2025-12-01T00:00:00Z",
    "advisory" : "RHSA-2025:22416",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.16::el9",
    "package" : "odf4/ocs-client-rhel9-operator:v4.16-1764169347"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.16",
    "release_date" : "2025-12-01T00:00:00Z",
    "advisory" : "RHSA-2025:22416",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.16::el9",
    "package" : "odf4/ocs-metrics-exporter-rhel9:v4.16-1764169479"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.16",
    "release_date" : "2025-12-01T00:00:00Z",
    "advisory" : "RHSA-2025:22416",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.16::el9",
    "package" : "odf4/ocs-rhel9-operator:v4.16-1764169526"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.16",
    "release_date" : "2025-12-01T00:00:00Z",
    "advisory" : "RHSA-2025:22416",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.16::el9",
    "package" : "odf4/odf-cli-rhel9:v4.16-1764169464"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.16",
    "release_date" : "2025-12-01T00:00:00Z",
    "advisory" : "RHSA-2025:22416",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.16::el9",
    "package" : "odf4/odf-console-rhel9:v4.16-1764169687"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.16",
    "release_date" : "2025-12-01T00:00:00Z",
    "advisory" : "RHSA-2025:22416",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.16::el9",
    "package" : "odf4/odf-cosi-sidecar-rhel9:v4.16-1764169457"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.16",
    "release_date" : "2025-12-01T00:00:00Z",
    "advisory" : "RHSA-2025:22416",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.16::el9",
    "package" : "odf4/odf-csi-addons-rhel9-operator:v4.16-1764169527"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.16",
    "release_date" : "2025-12-01T00:00:00Z",
    "advisory" : "RHSA-2025:22416",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.16::el9",
    "package" : "odf4/odf-csi-addons-sidecar-rhel9:v4.16-1764169577"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.16",
    "release_date" : "2025-12-01T00:00:00Z",
    "advisory" : "RHSA-2025:22416",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.16::el9",
    "package" : "odf4/odf-multicluster-console-rhel9:v4.16-1764169730"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.16",
    "release_date" : "2025-12-01T00:00:00Z",
    "advisory" : "RHSA-2025:22416",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.16::el9",
    "package" : "odf4/odf-multicluster-rhel9-operator:v4.16-1764169598"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.16",
    "release_date" : "2025-12-01T00:00:00Z",
    "advisory" : "RHSA-2025:22416",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.16::el9",
    "package" : "odf4/odf-must-gather-rhel9:v4.16-1764169623"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.16",
    "release_date" : "2025-12-01T00:00:00Z",
    "advisory" : "RHSA-2025:22416",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.16::el9",
    "package" : "odf4/odf-rhel9-operator:v4.16-1764169710"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.16",
    "release_date" : "2025-12-01T00:00:00Z",
    "advisory" : "RHSA-2025:22416",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.16::el9",
    "package" : "odf4/odr-rhel9-operator:v4.16-1764170019"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.16",
    "release_date" : "2025-12-01T00:00:00Z",
    "advisory" : "RHSA-2025:22416",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.16::el9",
    "package" : "odf4/rook-ceph-rhel9-operator:v4.16-1764170021"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.17",
    "release_date" : "2025-12-01T00:00:00Z",
    "advisory" : "RHSA-2025:22415",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.17::el9",
    "package" : "odf4/cephcsi-rhel9:v4.17-1764167834"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.17",
    "release_date" : "2025-12-01T00:00:00Z",
    "advisory" : "RHSA-2025:22415",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.17::el9",
    "package" : "odf4/cephcsi-rhel9-operator:v4.17-1764167795"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.17",
    "release_date" : "2025-12-01T00:00:00Z",
    "advisory" : "RHSA-2025:22415",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.17::el9",
    "package" : "odf4/mcg-core-rhel9:v4.17-1764167826"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.17",
    "release_date" : "2025-12-01T00:00:00Z",
    "advisory" : "RHSA-2025:22415",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.17::el9",
    "package" : "odf4/mcg-rhel9-operator:v4.17-1764167876"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.17",
    "release_date" : "2025-12-01T00:00:00Z",
    "advisory" : "RHSA-2025:22415",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.17::el9",
    "package" : "odf4/ocs-client-console-rhel9:v4.17-1764168179"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.17",
    "release_date" : "2025-12-01T00:00:00Z",
    "advisory" : "RHSA-2025:22415",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.17::el9",
    "package" : "odf4/ocs-client-rhel9-operator:v4.17-1764167987"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.17",
    "release_date" : "2025-12-01T00:00:00Z",
    "advisory" : "RHSA-2025:22415",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.17::el9",
    "package" : "odf4/ocs-metrics-exporter-rhel9:v4.17-1764168476"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.17",
    "release_date" : "2025-12-01T00:00:00Z",
    "advisory" : "RHSA-2025:22415",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.17::el9",
    "package" : "odf4/ocs-rhel9-operator:v4.17-1764168475"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.17",
    "release_date" : "2025-12-01T00:00:00Z",
    "advisory" : "RHSA-2025:22415",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.17::el9",
    "package" : "odf4/odf-cli-rhel9:v4.17-1764168431"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.17",
    "release_date" : "2025-12-01T00:00:00Z",
    "advisory" : "RHSA-2025:22415",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.17::el9",
    "package" : "odf4/odf-console-rhel9:v4.17-1764168662"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.17",
    "release_date" : "2025-12-01T00:00:00Z",
    "advisory" : "RHSA-2025:22415",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.17::el9",
    "package" : "odf4/odf-cosi-sidecar-rhel9:v4.17-1764168475"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.17",
    "release_date" : "2025-12-01T00:00:00Z",
    "advisory" : "RHSA-2025:22415",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.17::el9",
    "package" : "odf4/odf-csi-addons-rhel9-operator:v4.17-1764168536"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.17",
    "release_date" : "2025-12-01T00:00:00Z",
    "advisory" : "RHSA-2025:22415",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.17::el9",
    "package" : "odf4/odf-csi-addons-sidecar-rhel9:v4.17-1764168609"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.17",
    "release_date" : "2025-12-01T00:00:00Z",
    "advisory" : "RHSA-2025:22415",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.17::el9",
    "package" : "odf4/odf-multicluster-console-rhel9:v4.17-1764168731"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.17",
    "release_date" : "2025-12-01T00:00:00Z",
    "advisory" : "RHSA-2025:22415",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.17::el9",
    "package" : "odf4/odf-multicluster-rhel9-operator:v4.17-1764168699"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.17",
    "release_date" : "2025-12-01T00:00:00Z",
    "advisory" : "RHSA-2025:22415",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.17::el9",
    "package" : "odf4/odf-must-gather-rhel9:v4.17-1764168859"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.17",
    "release_date" : "2025-12-01T00:00:00Z",
    "advisory" : "RHSA-2025:22415",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.17::el9",
    "package" : "odf4/odf-rhel9-operator:v4.17-1764169063"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.17",
    "release_date" : "2025-12-01T00:00:00Z",
    "advisory" : "RHSA-2025:22415",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.17::el9",
    "package" : "odf4/odr-rhel9-operator:v4.17-1764169125"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.17",
    "release_date" : "2025-12-01T00:00:00Z",
    "advisory" : "RHSA-2025:22415",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.17::el9",
    "package" : "odf4/rook-ceph-rhel9-operator:v4.17-1764169222"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.18",
    "release_date" : "2025-11-13T00:00:00Z",
    "advisory" : "RHSA-2025:21368",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.18::el9",
    "package" : "odf4/cephcsi-rhel9:v4.18-1761854289"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.18",
    "release_date" : "2025-11-13T00:00:00Z",
    "advisory" : "RHSA-2025:21368",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.18::el9",
    "package" : "odf4/cephcsi-rhel9-operator:v4.18-1761854280"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.18",
    "release_date" : "2025-11-13T00:00:00Z",
    "advisory" : "RHSA-2025:21368",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.18::el9",
    "package" : "odf4/mcg-core-rhel9:v4.18-1761854280"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.18",
    "release_date" : "2025-11-13T00:00:00Z",
    "advisory" : "RHSA-2025:21368",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.18::el9",
    "package" : "odf4/mcg-rhel9-operator:v4.18-1761854319"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.18",
    "release_date" : "2025-11-13T00:00:00Z",
    "advisory" : "RHSA-2025:21368",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.18::el9",
    "package" : "odf4/ocs-client-console-rhel9:v4.18-1761855549"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.18",
    "release_date" : "2025-11-13T00:00:00Z",
    "advisory" : "RHSA-2025:21368",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.18::el9",
    "package" : "odf4/ocs-client-rhel9-operator:v4.18-1761854321"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.18",
    "release_date" : "2025-11-13T00:00:00Z",
    "advisory" : "RHSA-2025:21368",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.18::el9",
    "package" : "odf4/ocs-metrics-exporter-rhel9:v4.18-1761854422"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.18",
    "release_date" : "2025-11-13T00:00:00Z",
    "advisory" : "RHSA-2025:21368",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.18::el9",
    "package" : "odf4/ocs-rhel9-operator:v4.18-1761854430"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.18",
    "release_date" : "2025-11-13T00:00:00Z",
    "advisory" : "RHSA-2025:21368",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.18::el9",
    "package" : "odf4/odf-cli-rhel9:v4.18-1761854457"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.18",
    "release_date" : "2025-11-13T00:00:00Z",
    "advisory" : "RHSA-2025:21368",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.18::el9",
    "package" : "odf4/odf-console-rhel9:v4.18-1761854484"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.18",
    "release_date" : "2025-11-13T00:00:00Z",
    "advisory" : "RHSA-2025:21368",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.18::el9",
    "package" : "odf4/odf-cosi-sidecar-rhel9:v4.18-1761854398"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.18",
    "release_date" : "2025-11-13T00:00:00Z",
    "advisory" : "RHSA-2025:21368",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.18::el9",
    "package" : "odf4/odf-csi-addons-rhel9-operator:v4.18-1761854494"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.18",
    "release_date" : "2025-11-13T00:00:00Z",
    "advisory" : "RHSA-2025:21368",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.18::el9",
    "package" : "odf4/odf-csi-addons-sidecar-rhel9:v4.18-1761854493"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.18",
    "release_date" : "2025-11-13T00:00:00Z",
    "advisory" : "RHSA-2025:21368",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.18::el9",
    "package" : "odf4/odf-multicluster-console-rhel9:v4.18-1761854504"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.18",
    "release_date" : "2025-11-13T00:00:00Z",
    "advisory" : "RHSA-2025:21368",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.18::el9",
    "package" : "odf4/odf-multicluster-rhel9-operator:v4.18-1761854489"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.18",
    "release_date" : "2025-11-13T00:00:00Z",
    "advisory" : "RHSA-2025:21368",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.18::el9",
    "package" : "odf4/odf-must-gather-rhel9:v4.18-1761855467"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.18",
    "release_date" : "2025-11-13T00:00:00Z",
    "advisory" : "RHSA-2025:21368",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.18::el9",
    "package" : "odf4/odf-rhel9-operator:v4.18-1761854524"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.18",
    "release_date" : "2025-11-13T00:00:00Z",
    "advisory" : "RHSA-2025:21368",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.18::el9",
    "package" : "odf4/odr-rhel9-operator:v4.18-1762335558"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.18",
    "release_date" : "2025-11-13T00:00:00Z",
    "advisory" : "RHSA-2025:21368",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.18::el9",
    "package" : "odf4/rook-ceph-rhel9-operator:v4.18-1761855234"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.19",
    "release_date" : "2025-11-13T00:00:00Z",
    "advisory" : "RHSA-2025:21378",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.19::el9",
    "package" : "odf4/cephcsi-rhel9:v4.19-1761844221"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.19",
    "release_date" : "2025-11-13T00:00:00Z",
    "advisory" : "RHSA-2025:21378",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.19::el9",
    "package" : "odf4/cephcsi-rhel9-operator:v4.19-1761832915"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.19",
    "release_date" : "2025-11-13T00:00:00Z",
    "advisory" : "RHSA-2025:21378",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.19::el9",
    "package" : "odf4/mcg-core-rhel9:v4.19-1761832946"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.19",
    "release_date" : "2025-11-13T00:00:00Z",
    "advisory" : "RHSA-2025:21378",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.19::el9",
    "package" : "odf4/mcg-rhel9-operator:v4.19-1761832992"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.19",
    "release_date" : "2025-11-13T00:00:00Z",
    "advisory" : "RHSA-2025:21378",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.19::el9",
    "package" : "odf4/ocs-client-console-rhel9:v4.19-1761837406"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.19",
    "release_date" : "2025-11-13T00:00:00Z",
    "advisory" : "RHSA-2025:21378",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.19::el9",
    "package" : "odf4/ocs-client-rhel9-operator:v4.19-1761833034"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.19",
    "release_date" : "2025-11-13T00:00:00Z",
    "advisory" : "RHSA-2025:21378",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.19::el9",
    "package" : "odf4/ocs-metrics-exporter-rhel9:v4.19-1761844379"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.19",
    "release_date" : "2025-11-13T00:00:00Z",
    "advisory" : "RHSA-2025:21378",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.19::el9",
    "package" : "odf4/ocs-rhel9-operator:v4.19-1761833105"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.19",
    "release_date" : "2025-11-13T00:00:00Z",
    "advisory" : "RHSA-2025:21378",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.19::el9",
    "package" : "odf4/odf-cli-rhel9:v4.19-1761833162"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.19",
    "release_date" : "2025-11-13T00:00:00Z",
    "advisory" : "RHSA-2025:21378",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.19::el9",
    "package" : "odf4/odf-cloudnative-pg-rhel9-operator:v4.19-1761837265"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.19",
    "release_date" : "2025-11-13T00:00:00Z",
    "advisory" : "RHSA-2025:21378",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.19::el9",
    "package" : "odf4/odf-console-rhel9:v4.19-1761833186"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.19",
    "release_date" : "2025-11-13T00:00:00Z",
    "advisory" : "RHSA-2025:21378",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.19::el9",
    "package" : "odf4/odf-cosi-sidecar-rhel9:v4.19-1761833068"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.19",
    "release_date" : "2025-11-13T00:00:00Z",
    "advisory" : "RHSA-2025:21378",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.19::el9",
    "package" : "odf4/odf-csi-addons-rhel9-operator:v4.19-1761838672"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.19",
    "release_date" : "2025-11-13T00:00:00Z",
    "advisory" : "RHSA-2025:21378",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.19::el9",
    "package" : "odf4/odf-csi-addons-sidecar-rhel9:v4.19-1761833212"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.19",
    "release_date" : "2025-11-13T00:00:00Z",
    "advisory" : "RHSA-2025:21378",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.19::el9",
    "package" : "odf4/odf-multicluster-console-rhel9:v4.19-1761833212"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.19",
    "release_date" : "2025-11-13T00:00:00Z",
    "advisory" : "RHSA-2025:21378",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.19::el9",
    "package" : "odf4/odf-multicluster-rhel9-operator:v4.19-1761833160"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.19",
    "release_date" : "2025-11-13T00:00:00Z",
    "advisory" : "RHSA-2025:21378",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.19::el9",
    "package" : "odf4/odf-must-gather-rhel9:v4.19-1761833085"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.19",
    "release_date" : "2025-11-13T00:00:00Z",
    "advisory" : "RHSA-2025:21378",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.19::el9",
    "package" : "odf4/odf-rhel9-operator:v4.19-1761833203"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.19",
    "release_date" : "2025-11-13T00:00:00Z",
    "advisory" : "RHSA-2025:21378",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.19::el9",
    "package" : "odf4/odr-rhel9-operator:v4.19-1761833202"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.19",
    "release_date" : "2025-11-13T00:00:00Z",
    "advisory" : "RHSA-2025:21378",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.19::el9",
    "package" : "odf4/rook-ceph-rhel9-operator:v4.19-1761844480"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.2",
    "release_date" : "2025-11-18T00:00:00Z",
    "advisory" : "RHSA-2025:21704",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.20::el9",
    "package" : "odf4/cephcsi-rhel9:v4.20-1761848902"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.2",
    "release_date" : "2025-11-18T00:00:00Z",
    "advisory" : "RHSA-2025:21704",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.20::el9",
    "package" : "odf4/cephcsi-rhel9-operator:v4.20-1761728558"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.2",
    "release_date" : "2025-11-18T00:00:00Z",
    "advisory" : "RHSA-2025:21704",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.20::el9",
    "package" : "odf4/mcg-core-rhel9:v4.20-1762191273"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.2",
    "release_date" : "2025-11-18T00:00:00Z",
    "advisory" : "RHSA-2025:21704",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.20::el9",
    "package" : "odf4/mcg-rhel9-operator:v4.20-1761728716"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.2",
    "release_date" : "2025-11-18T00:00:00Z",
    "advisory" : "RHSA-2025:21704",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.20::el9",
    "package" : "odf4/ocs-client-console-rhel9:v4.20-1762867229"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.2",
    "release_date" : "2025-11-18T00:00:00Z",
    "advisory" : "RHSA-2025:21704",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.20::el9",
    "package" : "odf4/ocs-client-rhel9-operator:v4.20-1762191427"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.2",
    "release_date" : "2025-11-18T00:00:00Z",
    "advisory" : "RHSA-2025:21704",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.20::el9",
    "package" : "odf4/ocs-metrics-exporter-rhel9:v4.20-1762858772"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.2",
    "release_date" : "2025-11-18T00:00:00Z",
    "advisory" : "RHSA-2025:21704",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.20::el9",
    "package" : "odf4/ocs-rhel9-operator:v4.20-1762858774"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.2",
    "release_date" : "2025-11-18T00:00:00Z",
    "advisory" : "RHSA-2025:21704",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.20::el9",
    "package" : "odf4/odf-cli-rhel9:v4.20-1761728968"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.2",
    "release_date" : "2025-11-18T00:00:00Z",
    "advisory" : "RHSA-2025:21704",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.20::el9",
    "package" : "odf4/odf-cloudnative-pg-rhel9-operator:v4.20-1761728797"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.2",
    "release_date" : "2025-11-18T00:00:00Z",
    "advisory" : "RHSA-2025:21704",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.20::el9",
    "package" : "odf4/odf-console-rhel9:v4.20-1762859209"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.2",
    "release_date" : "2025-11-18T00:00:00Z",
    "advisory" : "RHSA-2025:21704",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.20::el9",
    "package" : "odf4/odf-cosi-sidecar-rhel9:v4.20-1761728784"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.2",
    "release_date" : "2025-11-18T00:00:00Z",
    "advisory" : "RHSA-2025:21704",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.20::el9",
    "package" : "odf4/odf-csi-addons-rhel9-operator:v4.20-1761728869"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.2",
    "release_date" : "2025-11-18T00:00:00Z",
    "advisory" : "RHSA-2025:21704",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.20::el9",
    "package" : "odf4/odf-csi-addons-sidecar-rhel9:v4.20-1761728854"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.2",
    "release_date" : "2025-11-18T00:00:00Z",
    "advisory" : "RHSA-2025:21704",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.20::el9",
    "package" : "odf4/odf-external-snapshotter-rhel9-operator:v4.20-1762858878"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.2",
    "release_date" : "2025-11-18T00:00:00Z",
    "advisory" : "RHSA-2025:21704",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.20::el9",
    "package" : "odf4/odf-external-snapshotter-sidecar-rhel9:v4.20-1762863414"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.2",
    "release_date" : "2025-11-18T00:00:00Z",
    "advisory" : "RHSA-2025:21704",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.20::el9",
    "package" : "odf4/odf-multicluster-console-rhel9:v4.20-1762874636"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.2",
    "release_date" : "2025-11-18T00:00:00Z",
    "advisory" : "RHSA-2025:21704",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.20::el9",
    "package" : "odf4/odf-multicluster-rhel9-operator:v4.20-1761728880"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.2",
    "release_date" : "2025-11-18T00:00:00Z",
    "advisory" : "RHSA-2025:21704",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.20::el9",
    "package" : "odf4/odf-must-gather-rhel9:v4.20-1761728814"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.2",
    "release_date" : "2025-11-18T00:00:00Z",
    "advisory" : "RHSA-2025:21704",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.20::el9",
    "package" : "odf4/odf-rhel9-operator:v4.20-1761728907"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.2",
    "release_date" : "2025-11-18T00:00:00Z",
    "advisory" : "RHSA-2025:21704",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.20::el9",
    "package" : "odf4/odr-rhel9-operator:v4.20-1761849311"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.2",
    "release_date" : "2025-11-18T00:00:00Z",
    "advisory" : "RHSA-2025:21704",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.20::el9",
    "package" : "odf4/rook-ceph-rhel9-operator:v4.20-1761849444"
  } ],
  "package_state" : [ {
    "product_name" : "Cryostat 4",
    "fix_state" : "Fix deferred",
    "package_name" : "io.cryostat-cryostat",
    "cpe" : "cpe:/a:redhat:cryostat:4"
  }, {
    "product_name" : "Red Hat AMQ Broker 7",
    "fix_state" : "Fix deferred",
    "package_name" : "org.jolokia-jolokia-parent",
    "cpe" : "cpe:/a:redhat:amq_broker:7"
  }, {
    "product_name" : "Red Hat Ansible Automation Platform 2",
    "fix_state" : "Fix deferred",
    "package_name" : "ansible-automation-platform-24/lightspeed-rhel8",
    "cpe" : "cpe:/a:redhat:ansible_automation_platform:2"
  }, {
    "product_name" : "Red Hat Ansible Automation Platform 2",
    "fix_state" : "Fix deferred",
    "package_name" : "ansible-automation-platform-25/lightspeed-rhel8",
    "cpe" : "cpe:/a:redhat:ansible_automation_platform:2"
  }, {
    "product_name" : "Red Hat Ansible Automation Platform 2",
    "fix_state" : "Fix deferred",
    "package_name" : "ansible-automation-platform-26/lightspeed-rhel9",
    "cpe" : "cpe:/a:redhat:ansible_automation_platform:2"
  }, {
    "product_name" : "Red Hat Ansible Automation Platform 2",
    "fix_state" : "Fix deferred",
    "package_name" : "automation-controller",
    "cpe" : "cpe:/a:redhat:ansible_automation_platform:2"
  }, {
    "product_name" : "Red Hat Ansible Automation Platform 2",
    "fix_state" : "Fix deferred",
    "package_name" : "automation-eda-controller",
    "cpe" : "cpe:/a:redhat:ansible_automation_platform:2"
  }, {
    "product_name" : "Red Hat Ansible Automation Platform 2",
    "fix_state" : "Fix deferred",
    "package_name" : "automation-gateway",
    "cpe" : "cpe:/a:redhat:ansible_automation_platform:2"
  }, {
    "product_name" : "Red Hat build of Apache Camel - HawtIO 4",
    "fix_state" : "Fix deferred",
    "package_name" : "io.hawt-project",
    "cpe" : "cpe:/a:redhat:apache_camel_hawtio:4"
  }, {
    "product_name" : "Red Hat build of Apicurio Registry 2",
    "fix_state" : "Fix deferred",
    "package_name" : "io.apicurio-apicurio-registry",
    "cpe" : "cpe:/a:redhat:service_registry:2"
  }, {
    "product_name" : "Red Hat build of OptaPlanner 8",
    "fix_state" : "Fix deferred",
    "package_name" : "org.optaweb.vehiclerouting-optaweb-vehicle-routing",
    "cpe" : "cpe:/a:redhat:optaplanner:::el6"
  }, {
    "product_name" : "Red Hat Ceph Storage 4",
    "fix_state" : "Out of support scope",
    "package_name" : "brace-expansion",
    "cpe" : "cpe:/a:redhat:ceph_storage:4"
  }, {
    "product_name" : "Red Hat Ceph Storage 5",
    "fix_state" : "Out of support scope",
    "package_name" : "brace-expansion",
    "cpe" : "cpe:/a:redhat:ceph_storage:5"
  }, {
    "product_name" : "Red Hat Ceph Storage 6",
    "fix_state" : "Fix deferred",
    "package_name" : "brace-expansion",
    "cpe" : "cpe:/a:redhat:ceph_storage:6"
  }, {
    "product_name" : "Red Hat Ceph Storage 7",
    "fix_state" : "Affected",
    "package_name" : "brace-expansion",
    "cpe" : "cpe:/a:redhat:ceph_storage:7"
  }, {
    "product_name" : "Red Hat Ceph Storage 8",
    "fix_state" : "Affected",
    "package_name" : "brace-expansion",
    "cpe" : "cpe:/a:redhat:ceph_storage:8"
  }, {
    "product_name" : "Red Hat Data Grid 8",
    "fix_state" : "Fix deferred",
    "package_name" : "org.infinispan-infinispan-console",
    "cpe" : "cpe:/a:redhat:jboss_data_grid:8"
  }, {
    "product_name" : "Red Hat Directory Server 11",
    "fix_state" : "Fix deferred",
    "package_name" : "redhat-ds:11/389-ds-base",
    "cpe" : "cpe:/a:redhat:directory_server:11"
  }, {
    "product_name" : "Red Hat Enterprise Linux 10",
    "fix_state" : "Fix deferred",
    "package_name" : "389-ds-base",
    "cpe" : "cpe:/o:redhat:enterprise_linux:10"
  }, {
    "product_name" : "Red Hat Enterprise Linux 10",
    "fix_state" : "Fix deferred",
    "package_name" : "nodejs22",
    "cpe" : "cpe:/o:redhat:enterprise_linux:10"
  }, {
    "product_name" : "Red Hat Enterprise Linux 10",
    "fix_state" : "Fix deferred",
    "package_name" : "nodejs-nodemon",
    "cpe" : "cpe:/o:redhat:enterprise_linux:10"
  }, {
    "product_name" : "Red Hat Enterprise Linux 7",
    "fix_state" : "Fix deferred",
    "package_name" : "firefox",
    "cpe" : "cpe:/o:redhat:enterprise_linux:7"
  }, {
    "product_name" : "Red Hat Enterprise Linux 7",
    "fix_state" : "Fix deferred",
    "package_name" : "thunderbird",
    "cpe" : "cpe:/o:redhat:enterprise_linux:7"
  }, {
    "product_name" : "Red Hat Enterprise Linux 8",
    "fix_state" : "Fix deferred",
    "package_name" : "grafana",
    "cpe" : "cpe:/o:redhat:enterprise_linux:8"
  }, {
    "product_name" : "Red Hat Enterprise Linux 8",
    "fix_state" : "Fix deferred",
    "package_name" : "mozjs60",
    "cpe" : "cpe:/o:redhat:enterprise_linux:8"
  }, {
    "product_name" : "Red Hat Enterprise Linux 8",
    "fix_state" : "Fix deferred",
    "package_name" : "nodejs:20/nodejs",
    "cpe" : "cpe:/o:redhat:enterprise_linux:8"
  }, {
    "product_name" : "Red Hat Enterprise Linux 8",
    "fix_state" : "Fix deferred",
    "package_name" : "nodejs:20/nodejs-nodemon",
    "cpe" : "cpe:/o:redhat:enterprise_linux:8"
  }, {
    "product_name" : "Red Hat Enterprise Linux 8",
    "fix_state" : "Fix deferred",
    "package_name" : "nodejs:22/nodejs",
    "cpe" : "cpe:/o:redhat:enterprise_linux:8"
  }, {
    "product_name" : "Red Hat Enterprise Linux 8",
    "fix_state" : "Fix deferred",
    "package_name" : "nodejs:22/nodejs-nodemon",
    "cpe" : "cpe:/o:redhat:enterprise_linux:8"
  }, {
    "product_name" : "Red Hat Enterprise Linux 8",
    "fix_state" : "Fix deferred",
    "package_name" : "pcs",
    "cpe" : "cpe:/o:redhat:enterprise_linux:8"
  }, {
    "product_name" : "Red Hat Enterprise Linux 9",
    "fix_state" : "Fix deferred",
    "package_name" : "389-ds-base",
    "cpe" : "cpe:/o:redhat:enterprise_linux:9"
  }, {
    "product_name" : "Red Hat Enterprise Linux 9",
    "fix_state" : "Fix deferred",
    "package_name" : "gjs",
    "cpe" : "cpe:/o:redhat:enterprise_linux:9"
  }, {
    "product_name" : "Red Hat Enterprise Linux 9",
    "fix_state" : "Fix deferred",
    "package_name" : "grafana",
    "cpe" : "cpe:/o:redhat:enterprise_linux:9"
  }, {
    "product_name" : "Red Hat Enterprise Linux 9",
    "fix_state" : "Fix deferred",
    "package_name" : "nodejs:20/nodejs",
    "cpe" : "cpe:/o:redhat:enterprise_linux:9"
  }, {
    "product_name" : "Red Hat Enterprise Linux 9",
    "fix_state" : "Fix deferred",
    "package_name" : "nodejs:20/nodejs-nodemon",
    "cpe" : "cpe:/o:redhat:enterprise_linux:9"
  }, {
    "product_name" : "Red Hat Enterprise Linux 9",
    "fix_state" : "Fix deferred",
    "package_name" : "nodejs:22/nodejs",
    "cpe" : "cpe:/o:redhat:enterprise_linux:9"
  }, {
    "product_name" : "Red Hat Enterprise Linux 9",
    "fix_state" : "Fix deferred",
    "package_name" : "nodejs:22/nodejs-nodemon",
    "cpe" : "cpe:/o:redhat:enterprise_linux:9"
  }, {
    "product_name" : "Red Hat Enterprise Linux 9",
    "fix_state" : "Fix deferred",
    "package_name" : "pcs",
    "cpe" : "cpe:/o:redhat:enterprise_linux:9"
  }, {
    "product_name" : "Red Hat Enterprise Linux 9",
    "fix_state" : "Fix deferred",
    "package_name" : "polkit",
    "cpe" : "cpe:/o:redhat:enterprise_linux:9"
  }, {
    "product_name" : "Red Hat Fuse 7",
    "fix_state" : "Fix deferred",
    "package_name" : "io.apicurio-apicurito",
    "cpe" : "cpe:/a:redhat:jboss_fuse:7"
  }, {
    "product_name" : "Red Hat Fuse 7",
    "fix_state" : "Fix deferred",
    "package_name" : "io.hawt-hawtio-online",
    "cpe" : "cpe:/a:redhat:jboss_fuse:7"
  }, {
    "product_name" : "Red Hat Fuse 7",
    "fix_state" : "Fix deferred",
    "package_name" : "io.hawt-project",
    "cpe" : "cpe:/a:redhat:jboss_fuse:7"
  }, {
    "product_name" : "Red Hat Fuse 7",
    "fix_state" : "Fix deferred",
    "package_name" : "io.syndesis-syndesis-parent",
    "cpe" : "cpe:/a:redhat:jboss_fuse:7"
  }, {
    "product_name" : "Red Hat Fuse 7",
    "fix_state" : "Fix deferred",
    "package_name" : "io.syndesis-syndesis-ui",
    "cpe" : "cpe:/a:redhat:jboss_fuse:7"
  }, {
    "product_name" : "Red Hat Integration Camel K 1",
    "fix_state" : "Fix deferred",
    "package_name" : "io.apicurio-apicurio-registry",
    "cpe" : "cpe:/a:redhat:integration:1"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 7",
    "fix_state" : "Fix deferred",
    "package_name" : "io.hawt-project",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:7"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 7",
    "fix_state" : "Fix deferred",
    "package_name" : "org.jboss.hal-hal-parent",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:7"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 8",
    "fix_state" : "Fix deferred",
    "package_name" : "io.hawt-project",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:8"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 8",
    "fix_state" : "Fix deferred",
    "package_name" : "org.jboss.hal-hal-parent",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:8"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 8",
    "fix_state" : "Fix deferred",
    "package_name" : "org.keycloak-keycloak-parent",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:8"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform Expansion Pack",
    "fix_state" : "Fix deferred",
    "package_name" : "io.hawt-project",
    "cpe" : "cpe:/a:redhat:jbosseapxp"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform Expansion Pack",
    "fix_state" : "Fix deferred",
    "package_name" : "org.jboss.hal-hal-parent",
    "cpe" : "cpe:/a:redhat:jbosseapxp"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform Expansion Pack",
    "fix_state" : "Fix deferred",
    "package_name" : "org.keycloak-keycloak-parent",
    "cpe" : "cpe:/a:redhat:jbosseapxp"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4",
    "fix_state" : "Fix deferred",
    "package_name" : "odf4/mcg-core-rhel9",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4",
    "fix_state" : "Fix deferred",
    "package_name" : "odf4/ocs-client-console-rhel9",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4",
    "fix_state" : "Fix deferred",
    "package_name" : "odf4/odf-console-rhel9",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4",
    "fix_state" : "Fix deferred",
    "package_name" : "odf4/odf-multicluster-console-rhel8",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4"
  }, {
    "product_name" : "Red Hat Process Automation 7",
    "fix_state" : "Fix deferred",
    "package_name" : "org.kie-process-migration-service",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_bpms_platform:7"
  }, {
    "product_name" : "Red Hat Process Automation 7",
    "fix_state" : "Fix deferred",
    "package_name" : "org.kie.workbench-kie-wb-common",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_bpms_platform:7"
  }, {
    "product_name" : "Red Hat Process Automation 7",
    "fix_state" : "Fix deferred",
    "package_name" : "org.uberfire-uberfire-parent",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_bpms_platform:7"
  }, {
    "product_name" : "Red Hat Quay 3",
    "fix_state" : "Fix deferred",
    "package_name" : "quay/quay-rhel8",
    "cpe" : "cpe:/a:redhat:quay:3"
  }, {
    "product_name" : "Red Hat Single Sign-On 7",
    "fix_state" : "Fix deferred",
    "package_name" : "org.keycloak-keycloak-parent",
    "cpe" : "cpe:/a:redhat:red_hat_single_sign_on:7"
  }, {
    "product_name" : "streams for Apache Kafka 2",
    "fix_state" : "Fix deferred",
    "package_name" : "com.github.streamshub-console",
    "cpe" : "cpe:/a:redhat:amq_streams:2"
  } ],
  "references" : [ "https://www.cve.org/CVERecord?id=CVE-2025-5889\nhttps://nvd.nist.gov/vuln/detail/CVE-2025-5889\nhttps://gist.github.com/mmmsssttt404/37a40ce7d6e5ca604858fe30814d9466\nhttps://github.com/juliangruber/brace-expansion/pull/65/commits/a5b98a4f30d7813266b221435e1eaaf25a1b0ac5\nhttps://vuldb.com/?ctiid.311660\nhttps://vuldb.com/?id.311660\nhttps://vuldb.com/?submit.585717" ],
  "name" : "CVE-2025-5889",
  "mitigation" : {
    "value" : "Currently, no mitigation is available for this vulnerability.",
    "lang" : "en:us"
  },
  "csaw" : false
}